
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.mft
File: 37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.mft (raw, json)
Hash identifier: vATNbznTqqzID11dxjymf86RlLLaIMLj22nClogI1k4=
Subject key identifier: 77:0B:79:E7:79:CB:1C:45:FB:DB:FE:92:34:D2:78:6A:8D:57:E8:C2
Authority key identifier: 37:CD:F1:E9:4B:DA:EC:13:9C:C5:23:6C:AC:31:B5:BC:C9:69:88:01
Certificate issuer: /CN=37CDF1E94BDAEC139CC5236CAC31B5BCC9698801
Certificate serial: 461C009BA835CB605C6A45758169C344E5175537
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 18:02:06 +0000
Manifest this update: Thu 23 Jul 2026 17:57:06 +0000
Manifest next update: Fri 24 Jul 2026 18:38:06 +0000
Files and hashes: 1: 3130332e3139372e39332e302f32342d3234203d3e20313334363233.roa (hash: 1pNOuwLSFvDZKZb1JbkTYWa4bVsi9xEgXcnRAdjK3AA=)
2: 37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.crl (hash: 3jetXKFQLnwRIPqWJ4/glI54u4wzwt+fmOPai8J+cMU=)
3: 3130332e3139372e39322e302f32342d3234203d3e20313334363233.roa (hash: i5NpAq6M/TDd5Dq259HV37KsdS0u5rn8gSLjnNIutJI=)
4: 323430333a38303a3a2f33322d3332203d3e20313334363233.roa (hash: inLR2m+CNyWZtV7tSrbcfy2w31JySfyEWxhtZ4Xzv1o=)
5: 3130332e3139372e39342e302f32342d3234203d3e20313334363233.roa (hash: +RaMMzQEXugZGAStK2jVfuqHhSZkIhelhN6AejuGcmY=)
6: 3130332e3139372e39352e302f32342d3234203d3e20313334363233.roa (hash: 4ReHII19sMtLUmN25MV5QEEELuhP3ebBL+yWF3/glT8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.crl
rsync://rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 18:38:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:1c:00:9b:a8:35:cb:60:5c:6a:45:75:81:69:c3:44:e5:17:55:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37CDF1E94BDAEC139CC5236CAC31B5BCC9698801
Validity
Not Before: Jul 23 17:57:06 2026 GMT
Not After : Jul 24 18:38:06 2026 GMT
Subject: CN=770B79E779CB1C45FBDBFE9234D2786A8D57E8C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a2:39:75:a0:c2:be:90:97:a3:30:77:3f:6e:
57:65:41:35:8d:d3:bd:6d:38:98:66:54:52:0a:1b:
40:4e:7b:92:58:d1:86:ea:2f:da:6a:ad:8f:f9:6e:
38:2e:53:3c:71:c5:37:d7:8a:48:10:3a:71:c7:cf:
08:7e:3e:f3:4f:ea:23:51:e2:c6:3c:b9:d4:cd:fc:
1a:a1:24:ee:61:9b:91:a2:b2:eb:ee:01:cb:c3:d2:
ec:c9:48:1a:f8:0b:61:0b:3c:d2:cb:f8:cd:16:5c:
4f:6b:a4:98:e9:c9:09:1d:3c:31:f2:53:cb:e5:04:
10:a7:4b:00:7a:3a:b8:e6:54:0e:76:a6:1a:b4:dd:
cf:2d:d4:5c:9d:8b:51:a1:c7:a8:74:dd:88:9d:71:
2e:af:88:07:b4:ec:3c:f0:cf:82:ea:96:db:03:f5:
a2:29:05:d1:e6:70:77:ad:ac:1b:d6:b8:ee:5b:b4:
96:06:f5:df:ba:0b:7e:f0:b1:c0:c0:00:fd:f9:82:
67:da:54:18:39:b5:32:84:d3:91:d3:dd:b8:e6:7b:
f8:60:ba:59:2a:f3:b6:e1:df:94:2b:62:db:ba:72:
a8:0c:2f:3b:b3:b8:ac:9f:3b:63:72:18:0b:fb:e6:
c0:c7:2f:37:a2:cd:d4:76:57:a8:fd:75:b3:5d:a3:
b4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:0B:79:E7:79:CB:1C:45:FB:DB:FE:92:34:D2:78:6A:8D:57:E8:C2
X509v3 Authority Key Identifier:
keyid:37:CD:F1:E9:4B:DA:EC:13:9C:C5:23:6C:AC:31:B5:BC:C9:69:88:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:41:62:c0:90:d9:23:ba:92:d0:57:89:65:88:63:21:48:58:
48:61:54:cc:64:ea:4e:cd:30:f9:5c:8e:06:89:4e:ba:ea:37:
8f:75:46:57:fb:c3:99:3f:48:a2:e4:fc:ed:78:3a:c9:0f:31:
02:23:93:33:a9:88:4d:4c:5e:3e:b8:4a:b7:a5:f6:3a:3c:fa:
a5:76:39:3a:36:44:0f:d0:9f:30:81:86:b4:64:24:f6:1b:a5:
2b:21:d0:c9:6e:6a:88:29:33:ab:be:bb:26:85:70:61:84:0e:
a3:4c:a4:6c:68:28:38:fb:64:5c:ff:9f:ba:6f:e1:40:4e:d4:
c8:35:e1:06:c4:62:e4:63:ce:8f:c5:ca:f9:f4:ea:90:d1:41:
87:42:8e:61:7c:6f:3c:d3:70:cb:70:97:2a:ea:fa:23:b6:13:
05:2b:99:3e:ee:5f:1a:bb:b0:08:a0:cc:ce:c5:37:40:ee:ca:
28:91:36:da:17:19:36:4b:55:e0:59:75:a5:25:cb:68:3a:61:
90:2d:af:f2:b1:8a:61:97:b0:03:b8:4d:b5:cf:cb:d5:24:35:
af:7c:94:76:87:b9:91:41:57:16:ed:f8:da:fb:0c:8e:bb:6a:
e5:51:68:98:86:64:e2:50:83:27:9d:42:d2:b6:69:a7:94:a1:
a2:4e:48:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:58:02 2026 by rpki-client