
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/37B043860635643A07D4415D3C8C4959A51F0B69.mft
File: 37B043860635643A07D4415D3C8C4959A51F0B69.mft (raw, json)
Hash identifier: nwybLL+KZSF3y2JQyksDilAzxI2jmqgFEPxcAFH3E7c=
Subject key identifier: 2C:3D:31:DD:52:2C:0B:DD:F1:30:D1:5C:B0:1B:E5:E8:BE:88:BB:36
Authority key identifier: 37:B0:43:86:06:35:64:3A:07:D4:41:5D:3C:8C:49:59:A5:1F:0B:69
Certificate issuer: /CN=37B043860635643A07D4415D3C8C4959A51F0B69
Certificate serial: 3E851102D1A10C36307CA2F8BF89ED75C61CECD8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37B043860635643A07D4415D3C8C4959A51F0B69.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/37B043860635643A07D4415D3C8C4959A51F0B69.mft
Manifest number: 6F
Signing time: Fri 24 Jul 2026 05:10:49 +0000
Manifest this update: Fri 24 Jul 2026 05:05:49 +0000
Manifest next update: Sat 25 Jul 2026 07:26:49 +0000
Files and hashes: 1: 3130332e3136392e34312e302f32342d3234203d3e20313432333332.roa (hash: A3dxGP2PxS97Lp2Vu736TLE9a7nlQtJcScv1U2W/tIo=)
2: 3130332e3136392e34302e302f32342d3234203d3e20313432333332.roa (hash: tjpf/AYVS8VtbIjx4X/JSsd7T5PpSDR5QfD/ek24bNQ=)
3: 3130332e3136392e34302e302f32332d3233203d3e20313432333332.roa (hash: 8ork7TaYxje1H50vqdK8v7A0WuTweiRWILiO2ZZPRvI=)
4: 37B043860635643A07D4415D3C8C4959A51F0B69.crl (hash: ez5ejLbcpn6o8OeIS1tlGBeh+2GJGLk0ylbfw+0dvhE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/37B043860635643A07D4415D3C8C4959A51F0B69.crl
rsync://rpki-rsync.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/37B043860635643A07D4415D3C8C4959A51F0B69.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37B043860635643A07D4415D3C8C4959A51F0B69.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 07:07:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:85:11:02:d1:a1:0c:36:30:7c:a2:f8:bf:89:ed:75:c6:1c:ec:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37B043860635643A07D4415D3C8C4959A51F0B69
Validity
Not Before: Jul 24 05:05:49 2026 GMT
Not After : Jul 25 07:26:49 2026 GMT
Subject: CN=2C3D31DD522C0BDDF130D15CB01BE5E8BE88BB36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c2:9d:ab:08:1d:c2:a8:f9:a2:34:0f:ed:69:
f7:4a:98:3e:42:71:b0:f2:41:0b:a1:ae:c3:d3:0f:
33:e9:45:f7:16:95:ce:68:64:9d:1c:c3:6c:6b:aa:
ec:36:5b:1e:ba:d3:3f:ba:6f:56:f5:8e:ff:61:dc:
ae:d0:d1:fe:0e:a8:c3:9d:68:91:87:b5:bc:fe:56:
6a:07:43:d0:82:1d:6a:06:15:79:a5:22:0d:39:57:
39:db:e8:fb:99:3b:8a:ab:ca:91:43:31:8e:3b:eb:
a2:a8:34:92:c9:3c:2a:70:3f:44:d5:b4:50:66:31:
74:53:46:6f:f3:79:99:4b:1c:4a:4f:7c:18:f4:8d:
a6:b2:6d:c0:ac:91:ea:26:a7:4c:b5:30:9e:61:a8:
d3:6d:b3:62:a0:b5:3d:62:ed:aa:79:6b:d2:dc:ed:
32:43:ce:7a:b4:c6:ee:26:48:5a:3f:5c:62:08:b9:
02:bc:91:50:0d:4c:0b:a4:ba:36:4e:80:bc:9e:7c:
24:7d:02:a1:95:06:fa:aa:db:11:44:45:23:e3:3d:
cd:3e:94:11:9e:a2:c8:f2:d7:21:6d:78:a1:3e:77:
a9:f9:26:1d:8c:cf:d0:04:c9:8e:dc:1b:1d:71:6b:
e3:17:b1:67:ed:22:2f:6c:88:ab:11:c9:ce:21:ce:
06:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:3D:31:DD:52:2C:0B:DD:F1:30:D1:5C:B0:1B:E5:E8:BE:88:BB:36
X509v3 Authority Key Identifier:
keyid:37:B0:43:86:06:35:64:3A:07:D4:41:5D:3C:8C:49:59:A5:1F:0B:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/37B043860635643A07D4415D3C8C4959A51F0B69.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37B043860635643A07D4415D3C8C4959A51F0B69.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/37B043860635643A07D4415D3C8C4959A51F0B69.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:73:9d:22:b7:81:cb:40:9d:45:c8:b7:97:90:2e:4a:22:85:
62:18:d9:ae:e3:e1:a9:56:27:3f:62:1c:1a:ff:21:89:f7:a7:
8f:5d:5d:9a:c9:fa:0b:b0:ab:68:9f:0e:15:2f:55:a0:f2:2e:
40:4f:b1:34:45:45:f9:bf:f4:6c:fb:f2:cb:97:7d:1b:57:ef:
5c:50:42:50:4f:41:ab:ff:38:21:01:19:3a:94:a8:11:98:5f:
7c:6b:8e:34:c1:af:5b:e1:f4:79:02:1d:f4:1e:0b:cd:6e:f8:
38:4a:ec:56:47:8c:1f:aa:5e:b1:bd:85:bd:ae:28:80:4f:8f:
f9:fe:9c:bc:0c:90:4e:9c:b2:b9:d5:f8:60:dd:78:99:42:9f:
c0:31:1f:e7:21:ab:78:50:1a:e2:1a:de:0e:f4:38:af:7f:36:
f0:c3:15:fc:7a:18:08:bd:ca:9c:46:37:70:89:d3:8b:06:60:
4b:b3:a6:30:c7:60:87:4e:10:90:b4:98:e3:20:1c:ec:bc:bb:
ca:06:84:0b:f1:dd:e7:a2:f2:6a:33:2b:fb:8b:91:da:74:b4:
89:99:19:5d:f0:ac:97:2d:c4:4d:4c:c8:14:5a:9c:c4:29:d0:
6c:44:0e:72:12:8a:4a:8e:89:61:c1:64:3e:d8:e0:e0:02:8d:
f5:3b:ad:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:06:15 2026 by rpki-client