
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/37B043860635643A07D4415D3C8C4959A51F0B69.mft
File: 37B043860635643A07D4415D3C8C4959A51F0B69.mft (raw, json)
Hash identifier: ICAFAPivAhJkQXvnabMQBYNM5XfKqTAnY3DsvFhbMgw=
Subject key identifier: 35:86:14:3F:76:09:35:76:26:CF:AB:84:FE:8B:05:74:3A:82:E0:3D
Authority key identifier: 37:B0:43:86:06:35:64:3A:07:D4:41:5D:3C:8C:49:59:A5:1F:0B:69
Certificate issuer: /CN=37B043860635643A07D4415D3C8C4959A51F0B69
Certificate serial: 01F7F87C5F7047559C27D348930843E842A66051
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37B043860635643A07D4415D3C8C4959A51F0B69.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/37B043860635643A07D4415D3C8C4959A51F0B69.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 16:31:05 +0000
Manifest this update: Tue 12 May 2026 16:26:05 +0000
Manifest next update: Wed 13 May 2026 19:15:05 +0000
Files and hashes: 1: 37B043860635643A07D4415D3C8C4959A51F0B69.crl (hash: /H2aI3AIifz6BANUj241StXEEq2WY8KkPEUcAyzvDWA=)
2: 3130332e3136392e34302e302f32332d3233203d3e20313432333332.roa (hash: 8ork7TaYxje1H50vqdK8v7A0WuTweiRWILiO2ZZPRvI=)
3: 3130332e3136392e34312e302f32342d3234203d3e20313432333332.roa (hash: A3dxGP2PxS97Lp2Vu736TLE9a7nlQtJcScv1U2W/tIo=)
4: 3130332e3136392e34302e302f32342d3234203d3e20313432333332.roa (hash: tjpf/AYVS8VtbIjx4X/JSsd7T5PpSDR5QfD/ek24bNQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/37B043860635643A07D4415D3C8C4959A51F0B69.crl
rsync://rpki-rsync.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/37B043860635643A07D4415D3C8C4959A51F0B69.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37B043860635643A07D4415D3C8C4959A51F0B69.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 19:15:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:f7:f8:7c:5f:70:47:55:9c:27:d3:48:93:08:43:e8:42:a6:60:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37B043860635643A07D4415D3C8C4959A51F0B69
Validity
Not Before: May 12 16:26:05 2026 GMT
Not After : May 13 19:15:05 2026 GMT
Subject: CN=3586143F7609357626CFAB84FE8B05743A82E03D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:83:70:7f:56:54:ba:99:23:1d:1b:59:36:82:
23:06:ef:3e:1c:76:e3:68:6e:80:cc:3b:b9:ab:a5:
c8:59:80:1a:46:81:b6:a6:45:1b:f5:bf:e0:e9:56:
93:ff:b0:ee:65:da:df:9d:92:3d:22:89:58:ff:2f:
6c:59:fb:9e:65:b8:0a:64:3c:9e:88:80:0f:3b:69:
5b:42:90:51:1c:a0:2e:77:89:77:a1:b8:91:bb:63:
1d:17:88:c5:f4:1d:71:f4:fe:4f:bb:5a:61:1a:16:
23:52:52:b4:71:dd:06:b2:ab:7c:fc:e6:c9:90:97:
00:99:3b:78:c5:0a:ac:6f:df:18:a8:34:bb:15:2b:
0e:24:c6:24:d2:1f:8d:ea:5c:02:75:17:ab:b7:38:
e6:92:5b:82:ab:80:84:ac:86:dd:74:ea:0f:75:27:
05:9c:f9:a8:e0:b3:6b:99:84:c0:c3:b7:38:0d:d1:
17:c1:f9:89:eb:8c:2c:84:bf:4e:33:d9:4e:e8:85:
de:4a:b1:05:da:c6:ca:0c:47:90:e0:03:5c:d5:ef:
29:fc:af:1b:b4:63:03:34:9a:2f:96:ea:f3:ce:d4:
e9:e8:4f:0e:a7:8f:53:af:8f:bc:82:5e:93:5e:48:
69:e9:94:22:88:3c:20:df:7f:38:69:7b:9d:05:10:
8a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:86:14:3F:76:09:35:76:26:CF:AB:84:FE:8B:05:74:3A:82:E0:3D
X509v3 Authority Key Identifier:
keyid:37:B0:43:86:06:35:64:3A:07:D4:41:5D:3C:8C:49:59:A5:1F:0B:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/37B043860635643A07D4415D3C8C4959A51F0B69.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37B043860635643A07D4415D3C8C4959A51F0B69.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/37B043860635643A07D4415D3C8C4959A51F0B69.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:0b:70:b8:6d:78:73:1b:78:44:ca:92:e2:22:3e:00:31:92:
a1:fa:ef:29:00:59:c9:09:25:7a:95:2c:81:3f:cb:52:3b:38:
7a:2c:45:ea:42:d4:8e:32:2e:0b:29:86:1d:88:1c:df:b3:c6:
83:14:cc:9f:94:f7:4c:66:d6:4e:6d:16:92:18:f9:6c:c5:29:
97:34:87:e5:34:27:00:a1:ba:53:f9:c2:eb:5e:70:6c:c0:8c:
c5:8f:00:94:9d:4d:c1:8f:7c:bd:e5:e9:56:22:8f:3e:4d:7f:
41:0f:f0:ed:4a:20:46:b9:35:33:a3:c2:28:94:ae:f6:d5:78:
01:14:19:48:df:e2:0a:10:be:d5:b8:71:f3:25:bf:fd:b1:f3:
36:0f:b6:82:6d:fe:02:02:59:6d:af:23:43:d3:0b:a1:3c:88:
c1:dc:a6:ee:01:a5:31:4f:e4:dd:84:fd:ab:da:eb:4f:bb:a2:
d3:a6:d2:f4:42:97:a8:1f:9d:14:59:65:33:8f:ff:21:c5:fa:
5e:59:e8:e7:19:07:9e:6f:ce:7c:45:35:c5:18:2a:1e:52:a6:
e7:cf:fb:25:2e:63:36:b5:d5:97:c1:26:24:73:ed:cc:95:9f:
a1:a3:65:9c:18:47:63:ad:74:d2:be:80:c8:a1:5d:38:8d:66:
05:91:a5:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:48:56 2026 by rpki-client