$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.mft File: 37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.mft (raw, json) Hash identifier: m336MTfnyqEhP3bYE5UF67DpsrtU2uSoWk9Nwxdwif4= Subject key identifier: 10:CE:20:AF:09:F9:8D:E4:8E:56:EF:B7:7E:E4:B9:7E:89:BA:6D:81 Authority key identifier: 37:CD:F1:E9:4B:DA:EC:13:9C:C5:23:6C:AC:31:B5:BC:C9:69:88:01 Certificate issuer: /CN=37CDF1E94BDAEC139CC5236CAC31B5BCC9698801 Certificate serial: 6FEBD9AA7785021412C11201A74EB0F8F4E64892 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 23:55:39 +0000 Manifest this update: Wed 23 Sep 2026 23:50:39 +0000 Manifest next update: Fri 25 Sep 2026 03:49:39 +0000 Files and hashes: 1: 3130332e3139372e39322e302f32342d3234203d3e20313334363233.roa (hash: i5NpAq6M/TDd5Dq259HV37KsdS0u5rn8gSLjnNIutJI=) 2: 3130332e3139372e39332e302f32342d3234203d3e20313334363233.roa (hash: 1pNOuwLSFvDZKZb1JbkTYWa4bVsi9xEgXcnRAdjK3AA=) 3: 3130332e3139372e39352e302f32342d3234203d3e20313334363233.roa (hash: 4ReHII19sMtLUmN25MV5QEEELuhP3ebBL+yWF3/glT8=) 4: 3130332e3139372e39342e302f32342d3234203d3e20313334363233.roa (hash: +RaMMzQEXugZGAStK2jVfuqHhSZkIhelhN6AejuGcmY=) 5: 323430333a38303a3a2f33322d3332203d3e20313334363233.roa (hash: inLR2m+CNyWZtV7tSrbcfy2w31JySfyEWxhtZ4Xzv1o=) 6: 37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.crl (hash: YAm/nU/edEzv3r9PN4eyKkMXWj2q9arAkn/VCPwTr+o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.crl rsync://rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 03:49:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:eb:d9:aa:77:85:02:14:12:c1:12:01:a7:4e:b0:f8:f4:e6:48:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37CDF1E94BDAEC139CC5236CAC31B5BCC9698801 Validity Not Before: Sep 23 23:50:39 2026 GMT Not After : Sep 25 03:49:39 2026 GMT Subject: CN=10CE20AF09F98DE48E56EFB77EE4B97E89BA6D81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d1:e1:ca:30:f2:02:b3:0d:be:b2:04:62:3d: ae:aa:4d:27:db:18:8d:24:fd:a2:ca:fb:20:99:97: 3c:f0:d2:60:2a:5f:4f:67:5d:71:7e:0b:d2:c8:ab: fc:d5:6f:8b:04:62:92:7f:93:f0:55:f5:e3:d4:f0: 4c:ec:57:dd:e2:29:16:56:61:b8:5f:75:9e:04:63: a2:57:c3:e5:88:7c:5e:e7:98:b1:41:43:6f:ee:25: dd:87:ed:fb:e4:eb:80:fd:25:5e:0a:b0:21:30:5a: 53:8f:f9:0b:64:de:e5:f0:47:c4:68:d6:cd:1c:11: c5:c5:ac:a9:bc:a7:fb:a9:d2:3d:4c:fe:dc:a4:a8: a0:2c:91:61:6a:71:45:db:fe:93:d4:ff:16:bc:bb: 4c:d1:d3:57:9d:c7:c9:64:29:61:95:8a:f0:91:5f: 22:9b:c5:92:72:e3:66:7d:e5:7c:90:45:bf:e2:f1: b9:b5:48:59:00:60:82:fe:11:72:68:92:3e:c1:59: 63:2e:64:17:4e:93:1d:1e:26:a6:f5:b7:8a:97:ac: 0e:9c:0e:bf:ba:91:e9:7c:5a:1e:fd:fb:86:58:e7: af:ed:a6:4f:d7:2b:d3:91:19:f7:84:8b:ab:30:3d: 62:f8:a5:d0:35:66:f6:5a:a0:33:dd:bf:9a:a8:83: cd:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:CE:20:AF:09:F9:8D:E4:8E:56:EF:B7:7E:E4:B9:7E:89:BA:6D:81 X509v3 Authority Key Identifier: keyid:37:CD:F1:E9:4B:DA:EC:13:9C:C5:23:6C:AC:31:B5:BC:C9:69:88:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:85:16:ac:5f:07:4b:3b:4d:3c:ef:f2:0d:ba:3b:4c:5b:83: 69:01:97:13:5e:05:e4:dc:11:7d:ac:77:ee:29:63:e9:7c:9a: da:8e:33:64:a9:67:1e:59:59:2f:4c:33:a6:14:a9:9b:8b:3d: 75:08:ea:4b:6d:41:ca:2b:be:d6:ad:4a:05:70:bd:ad:12:1a: 72:a0:ac:ce:b8:93:a4:44:ab:1f:c5:5f:35:1d:84:4c:88:25: 88:99:2f:03:e8:95:b3:f8:ca:0a:c9:25:0f:03:ed:86:20:4c: f8:72:11:c6:70:55:93:0c:55:cf:d8:d0:bb:69:c9:36:c6:c2: 23:eb:49:f2:74:62:12:75:f7:07:44:60:2d:f5:b2:3d:52:74: 60:83:e0:f5:ee:1f:b5:ad:f7:08:48:2d:ca:99:92:0c:23:79: c9:39:8a:f9:1f:bf:c8:46:0b:5c:55:c3:da:ec:18:d2:07:02: 13:ba:d8:f6:24:34:12:64:b4:f3:3f:61:82:d8:28:98:68:92: b8:7f:78:66:73:94:99:f4:2d:00:3e:8e:f8:72:b2:16:0a:ab: fe:af:e2:93:84:f2:05:01:f4:8a:ff:29:f5:68:6d:0e:7e:d9: d5:03:8a:29:00:29:ab:6b:65:9e:c1:c6:1d:43:e7:ea:a7:36: d8:6b:1f:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb+vZqneFAhQSwRIBp06w+PTmSJIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdDREYxRTk0QkRBRUMxMzlDQzUyMzZDQUMzMUI1QkND OTY5ODgwMTAeFw0yNjA5MjMyMzUwMzlaFw0yNjA5MjUwMzQ5MzlaMDMxMTAvBgNV BAMTKDEwQ0UyMEFGMDlGOThERTQ4RTU2RUZCNzdFRTRCOTdFODlCQTZEODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC40eHKMPICsw2+sgRiPa6qTSfb GI0k/aLK+yCZlzzw0mAqX09nXXF+C9LIq/zVb4sEYpJ/k/BV9ePU8EzsV93iKRZW YbhfdZ4EY6JXw+WIfF7nmLFBQ2/uJd2H7fvk64D9JV4KsCEwWlOP+Qtk3uXwR8Ro 1s0cEcXFrKm8p/up0j1M/tykqKAskWFqcUXb/pPU/xa8u0zR01edx8lkKWGVivCR XyKbxZJy42Z95XyQRb/i8bm1SFkAYIL+EXJokj7BWWMuZBdOkx0eJqb1t4qXrA6c Dr+6kel8Wh79+4ZY56/tpk/XK9ORGfeEi6swPWL4pdA1ZvZaoDPdv5qog82ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEM4grwn5jeSOVu+3fuS5fom6bYEwHwYDVR0j BBgwFoAUN83x6Uva7BOcxSNsrDG1vMlpiAEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2VkMTAwZGYtMDQ0MS00MzgxLWEzZmEtNTg3ZGI5ZTljMmYwLzAvMzdDREYxRTk0 QkRBRUMxMzlDQzUyMzZDQUMzMUI1QkNDOTY5ODgwMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zN0NERjFFOTRCREFFQzEzOUNDNTIzNkNBQzMxQjVCQ0M5Njk4 ODAxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2VkMTAwZGYtMDQ0MS00MzgxLWEz ZmEtNTg3ZGI5ZTljMmYwLzAvMzdDREYxRTk0QkRBRUMxMzlDQzUyMzZDQUMzMUI1 QkNDOTY5ODgwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIaFFqxfB0s7TTzv8g26O0xbg2kBlxNeBeTc EX2sd+4pY+l8mtqOM2SpZx5ZWS9MM6YUqZuLPXUI6kttQcorvtatSgVwva0SGnKg rM64k6REqx/FXzUdhEyIJYiZLwPolbP4ygrJJQ8D7YYgTPhyEcZwVZMMVc/Y0Ltp yTbGwiPrSfJ0YhJ19wdEYC31sj1SdGCD4PXuH7Wt9whILcqZkgwjeck5ivkfv8hG C1xVw9rsGNIHAhO62PYkNBJktPM/YYLYKJhokrh/eGZzlJn0LQA+jvhyshYKq/6v 4pOE8gUB9Ir/KfVobQ5+2dUDiikAKatrZZ7Bxh1D5+qnNthrH90= -----END CERTIFICATE-----Generated at Thu Sep 24 07:25:23 2026 by rpki-client