$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/37B043860635643A07D4415D3C8C4959A51F0B69.mft File: 37B043860635643A07D4415D3C8C4959A51F0B69.mft (raw, json) Hash identifier: hdqWi7pZL70SlpXgBV1ytLJ+my3fTo+IidWJBW5Wfgc= Subject key identifier: B4:23:B5:71:42:AB:0D:91:23:B4:44:BD:05:E3:0E:FD:D6:20:AA:0D Authority key identifier: 37:B0:43:86:06:35:64:3A:07:D4:41:5D:3C:8C:49:59:A5:1F:0B:69 Certificate issuer: /CN=37B043860635643A07D4415D3C8C4959A51F0B69 Certificate serial: 7347931585F4EC0DF055A27E00505188369205A7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37B043860635643A07D4415D3C8C4959A51F0B69.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/37B043860635643A07D4415D3C8C4959A51F0B69.mft Manifest number: C2 Signing time: Fri 25 Sep 2026 14:33:18 +0000 Manifest this update: Fri 25 Sep 2026 14:28:18 +0000 Manifest next update: Sat 26 Sep 2026 16:00:18 +0000 Files and hashes: 1: 3130332e3136392e34302e302f32332d3233203d3e20313432333332.roa (hash: 8ork7TaYxje1H50vqdK8v7A0WuTweiRWILiO2ZZPRvI=) 2: 3130332e3136392e34302e302f32342d3234203d3e20313432333332.roa (hash: tjpf/AYVS8VtbIjx4X/JSsd7T5PpSDR5QfD/ek24bNQ=) 3: 3130332e3136392e34312e302f32342d3234203d3e20313432333332.roa (hash: A3dxGP2PxS97Lp2Vu736TLE9a7nlQtJcScv1U2W/tIo=) 4: 37B043860635643A07D4415D3C8C4959A51F0B69.crl (hash: 3MAqbuS0oDhVzP5BoZ2RVahwi542sU7ZNXD0Hp+5o/0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/37B043860635643A07D4415D3C8C4959A51F0B69.crl rsync://rpki-rsync.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/37B043860635643A07D4415D3C8C4959A51F0B69.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37B043860635643A07D4415D3C8C4959A51F0B69.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 16:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:47:93:15:85:f4:ec:0d:f0:55:a2:7e:00:50:51:88:36:92:05:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37B043860635643A07D4415D3C8C4959A51F0B69 Validity Not Before: Sep 25 14:28:18 2026 GMT Not After : Sep 26 16:00:18 2026 GMT Subject: CN=B423B57142AB0D9123B444BD05E30EFDD620AA0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e8:7a:2a:ae:73:a3:00:c4:5f:e5:c3:db:3a: 16:7d:a8:68:57:65:fc:2a:ff:18:73:2c:fe:81:7a: c1:dd:7a:49:68:21:1d:82:19:f7:0b:ed:66:0c:fc: c0:08:df:10:e0:0c:9b:cc:e7:76:ca:14:e7:24:4d: b8:1c:58:d1:89:f0:d0:f4:d2:9c:bf:74:b1:a1:a3: 8e:1e:73:9c:e1:75:13:3b:33:ac:9d:39:3b:55:7a: e0:a0:40:2c:e9:5f:87:ea:07:2c:51:a0:29:3f:55: 0a:88:2a:9b:8d:0b:62:92:9a:04:99:d2:17:0d:76: 5e:36:61:bf:dd:62:d7:82:80:4f:57:c9:16:84:73: bc:f2:ec:d5:ec:be:03:8a:3f:1d:0a:96:95:c2:fb: 10:4e:98:00:27:c6:e2:c4:0e:a5:b0:ea:80:b9:76: 8e:90:50:7f:e3:74:a9:6c:fd:69:c1:e6:80:fd:a0: 7d:95:74:34:3a:33:a3:e6:1b:5d:18:54:3a:f8:b0: fa:d6:9c:d9:84:6a:25:21:7a:a8:68:3e:b4:8e:a7: 03:77:92:f5:b3:bf:0f:12:59:71:a8:79:22:6f:d8: c4:62:0d:dc:2d:4e:c1:5d:68:9d:07:6c:81:33:e6: 91:23:16:49:f9:74:e0:aa:e3:37:96:7c:25:d1:26: e2:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:23:B5:71:42:AB:0D:91:23:B4:44:BD:05:E3:0E:FD:D6:20:AA:0D X509v3 Authority Key Identifier: keyid:37:B0:43:86:06:35:64:3A:07:D4:41:5D:3C:8C:49:59:A5:1F:0B:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/37B043860635643A07D4415D3C8C4959A51F0B69.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37B043860635643A07D4415D3C8C4959A51F0B69.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/37B043860635643A07D4415D3C8C4959A51F0B69.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:13:ef:e0:2c:74:7e:2c:2c:b5:bb:13:c9:69:03:f0:70:20: 27:27:91:b3:77:33:ce:80:12:5b:6b:75:42:38:72:2e:13:c9: f7:d1:e9:16:d9:e3:3a:cb:da:33:f3:1b:42:74:15:ac:ad:56: 2e:b2:ac:e6:8d:49:5f:b8:b1:0b:2b:7d:7a:1a:3c:36:54:84: c2:95:46:97:c4:31:f6:0a:f1:ec:01:ea:69:62:28:ae:e3:9e: f6:bd:3d:9d:32:66:20:8e:ad:b3:46:05:c5:c0:f1:00:90:09: ba:02:06:72:2d:ca:18:6a:16:89:90:76:7c:72:56:5a:f7:3b: 81:ac:de:19:64:70:b7:80:b0:49:b6:1e:ef:41:84:ce:7a:af: 82:d8:05:0c:70:88:c2:52:10:17:5b:29:3e:dc:17:c6:ef:39: 0d:ef:de:c6:7a:b5:c7:e7:45:d6:7e:bb:2e:88:f8:fd:de:de: d3:e7:08:aa:50:4d:37:74:d7:d5:2e:8e:66:bb:ac:a5:c0:d4: 1c:cb:99:75:84:53:2e:79:df:4f:ae:f2:4d:65:bf:21:a2:e4: 92:4d:0f:f8:d1:c8:c1:34:59:f7:d6:c1:90:c4:0f:4e:23:c4: 76:f7:4d:e3:2d:48:1a:5c:3e:a1:1e:50:04:5a:d3:ca:27:87: 98:10:6a:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc0eTFYX07A3wVaJ+AFBRiDaSBacwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdCMDQzODYwNjM1NjQzQTA3RDQ0MTVEM0M4QzQ5NTlB NTFGMEI2OTAeFw0yNjA5MjUxNDI4MThaFw0yNjA5MjYxNjAwMThaMDMxMTAvBgNV BAMTKEI0MjNCNTcxNDJBQjBEOTEyM0I0NDRCRDA1RTMwRUZERDYyMEFBMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC16HoqrnOjAMRf5cPbOhZ9qGhX Zfwq/xhzLP6BesHdekloIR2CGfcL7WYM/MAI3xDgDJvM53bKFOckTbgcWNGJ8ND0 0py/dLGho44ec5zhdRM7M6ydOTtVeuCgQCzpX4fqByxRoCk/VQqIKpuNC2KSmgSZ 0hcNdl42Yb/dYteCgE9XyRaEc7zy7NXsvgOKPx0KlpXC+xBOmAAnxuLEDqWw6oC5 do6QUH/jdKls/WnB5oD9oH2VdDQ6M6PmG10YVDr4sPrWnNmEaiUheqhoPrSOpwN3 kvWzvw8SWXGoeSJv2MRiDdwtTsFdaJ0HbIEz5pEjFkn5dOCq4zeWfCXRJuItAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtCO1cUKrDZEjtES9BeMO/dYgqg0wHwYDVR0j BBgwFoAUN7BDhgY1ZDoH1EFdPIxJWaUfC2kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmNiNTI2MTktMzc5ZC00MzBhLWIxOWItMWYwZWM1M2FlOTA5LzAvMzdCMDQzODYw NjM1NjQzQTA3RDQ0MTVEM0M4QzQ5NTlBNTFGMEI2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zN0IwNDM4NjA2MzU2NDNBMDdENDQxNUQzQzhDNDk1OUE1MUYw QjY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmNiNTI2MTktMzc5ZC00MzBhLWIx OWItMWYwZWM1M2FlOTA5LzAvMzdCMDQzODYwNjM1NjQzQTA3RDQ0MTVEM0M4QzQ5 NTlBNTFGMEI2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFIT7+AsdH4sLLW7E8lpA/BwICcnkbN3M86A EltrdUI4ci4TyffR6RbZ4zrL2jPzG0J0FaytVi6yrOaNSV+4sQsrfXoaPDZUhMKV RpfEMfYK8ewB6mliKK7jnva9PZ0yZiCOrbNGBcXA8QCQCboCBnItyhhqFomQdnxy Vlr3O4Gs3hlkcLeAsEm2Hu9BhM56r4LYBQxwiMJSEBdbKT7cF8bvOQ3v3sZ6tcfn RdZ+uy6I+P3e3tPnCKpQTTd019Uujma7rKXA1BzLmXWEUy5530+u8k1lvyGi5JJN D/jRyME0WffWwZDED04jxHb3TeMtSBpcPqEeUARa08onh5gQal4= -----END CERTIFICATE-----Generated at Fri Sep 25 19:58:44 2026 by rpki-client