$ rpki-client -vvf rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.mft File: 37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.mft (raw, json) Hash identifier: jfi2rEO3UhNbvDagInptJ7vfq7KG6n78DMiXA17KnNU= Subject key identifier: D2:94:12:12:D1:B4:21:7B:3B:CF:DA:D0:B7:89:0C:60:F0:1F:E2:6F Authority key identifier: 37:CD:F1:E9:4B:DA:EC:13:9C:C5:23:6C:AC:31:B5:BC:C9:69:88:01 Certificate issuer: /CN=37CDF1E94BDAEC139CC5236CAC31B5BCC9698801 Certificate serial: 357AF6E188EFA1FCC099847D3E105E310B0DC6B5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:06:43 +0000 Manifest this update: Tue 12 May 2026 20:01:43 +0000 Manifest next update: Wed 13 May 2026 22:57:43 +0000 Files and hashes: 1: 3130332e3139372e39352e302f32342d3234203d3e20313334363233.roa (hash: 4ReHII19sMtLUmN25MV5QEEELuhP3ebBL+yWF3/glT8=) 2: 3130332e3139372e39332e302f32342d3234203d3e20313334363233.roa (hash: 1pNOuwLSFvDZKZb1JbkTYWa4bVsi9xEgXcnRAdjK3AA=) 3: 3130332e3139372e39322e302f32342d3234203d3e20313334363233.roa (hash: i5NpAq6M/TDd5Dq259HV37KsdS0u5rn8gSLjnNIutJI=) 4: 37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.crl (hash: 0JQ722c+UkLWQT1k3c4nPAtyw6L+p52JsG+pUFwPuc8=) 5: 323430333a38303a3a2f33322d3332203d3e20313334363233.roa (hash: inLR2m+CNyWZtV7tSrbcfy2w31JySfyEWxhtZ4Xzv1o=) 6: 3130332e3139372e39342e302f32342d3234203d3e20313334363233.roa (hash: +RaMMzQEXugZGAStK2jVfuqHhSZkIhelhN6AejuGcmY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.crl rsync://rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:7a:f6:e1:88:ef:a1:fc:c0:99:84:7d:3e:10:5e:31:0b:0d:c6:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37CDF1E94BDAEC139CC5236CAC31B5BCC9698801 Validity Not Before: May 12 20:01:43 2026 GMT Not After : May 13 22:57:43 2026 GMT Subject: CN=D2941212D1B4217B3BCFDAD0B7890C60F01FE26F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b5:12:de:e2:23:40:c7:32:e0:4c:10:ac:4a: 7f:e9:09:e3:d7:0d:69:aa:67:ea:6d:c7:68:dc:77: c2:05:3a:f2:5b:03:3c:51:ae:79:18:fd:55:3e:21: b2:14:3d:5b:40:db:16:3f:42:9a:9d:07:4f:bb:02: b6:23:e8:49:6e:95:ef:6f:cf:61:77:f7:48:a4:00: a4:af:53:8f:40:2f:25:17:3f:6b:b5:6b:77:71:48: 7b:8f:6e:a4:df:f8:42:fc:ab:70:a6:1a:98:0d:c7: 58:d9:5c:63:e4:00:49:90:c0:0c:3d:bb:d1:20:bc: 67:03:43:91:7a:68:dd:43:ea:4b:7e:6d:75:e2:cc: 4f:ee:e3:92:91:60:9b:c3:43:b3:26:e8:be:10:d4: 97:c4:94:34:e9:3f:2f:50:74:3e:77:bc:6b:0d:ea: 6d:b2:e3:50:e7:41:f0:57:5a:7e:0a:52:67:9a:cb: a0:aa:22:e9:87:d4:1d:67:7b:35:d2:4c:68:69:11: 50:c5:32:77:d1:05:a0:34:fd:41:68:1b:ea:d0:23: 89:fc:d0:04:ba:49:3d:6a:57:14:8d:89:23:33:b7: 2c:b7:0a:8b:9b:ce:6a:17:f6:c3:1b:fe:64:65:58: 70:43:58:a5:5e:b7:3e:73:17:8d:aa:44:2c:89:e8: a1:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:94:12:12:D1:B4:21:7B:3B:CF:DA:D0:B7:89:0C:60:F0:1F:E2:6F X509v3 Authority Key Identifier: keyid:37:CD:F1:E9:4B:DA:EC:13:9C:C5:23:6C:AC:31:B5:BC:C9:69:88:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:a3:1b:f9:f7:89:ea:b8:01:a8:a8:62:f4:92:37:d8:5a:51: c8:92:9b:07:17:13:42:7b:7c:81:a3:3c:f2:3e:b8:da:55:5c: 31:de:d7:b5:a4:23:f2:f8:39:37:3a:b9:2d:bf:af:7d:75:79: 5a:d2:95:bf:71:95:82:b4:89:c3:51:b0:ad:78:69:55:86:e6: 7c:9d:50:16:83:1d:de:4f:b8:3b:93:82:e7:ab:c4:45:00:81: 6f:07:ab:39:7e:c0:3f:5d:8a:7b:84:5a:0f:cc:85:85:44:2d: bf:37:8d:53:45:f9:61:7e:b6:7d:da:14:f6:ad:a8:df:6b:ba: 8b:f7:c3:4d:65:e8:70:c5:a0:0d:0b:37:e4:d9:e3:ae:1b:a1: a4:32:de:06:4c:a3:f9:de:fe:a9:e3:7f:a6:dc:88:c4:10:ae: f7:da:c7:59:59:6a:c7:f8:c9:de:02:44:a2:d1:a4:03:f8:50: e1:de:30:04:d4:8d:bf:1e:ee:fd:cf:10:b3:da:c4:8f:1e:5c: 40:20:54:c4:4d:d5:cb:08:83:d4:07:fb:1b:90:06:9f:5c:dd: 62:7c:9e:9f:63:f3:95:31:a5:b0:ad:fb:77:cc:4f:21:67:09: 57:f9:a7:c0:25:85:7f:06:af:07:4c:5f:a3:67:64:d4:c6:3e: 5a:7c:d9:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNXr24YjvofzAmYR9PhBeMQsNxrUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdDREYxRTk0QkRBRUMxMzlDQzUyMzZDQUMzMUI1QkND OTY5ODgwMTAeFw0yNjA1MTIyMDAxNDNaFw0yNjA1MTMyMjU3NDNaMDMxMTAvBgNV BAMTKEQyOTQxMjEyRDFCNDIxN0IzQkNGREFEMEI3ODkwQzYwRjAxRkUyNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCftRLe4iNAxzLgTBCsSn/pCePX DWmqZ+ptx2jcd8IFOvJbAzxRrnkY/VU+IbIUPVtA2xY/QpqdB0+7ArYj6Elule9v z2F390ikAKSvU49ALyUXP2u1a3dxSHuPbqTf+EL8q3CmGpgNx1jZXGPkAEmQwAw9 u9EgvGcDQ5F6aN1D6kt+bXXizE/u45KRYJvDQ7Mm6L4Q1JfElDTpPy9QdD53vGsN 6m2y41DnQfBXWn4KUmeay6CqIumH1B1nezXSTGhpEVDFMnfRBaA0/UFoG+rQI4n8 0AS6ST1qVxSNiSMztyy3CoubzmoX9sMb/mRlWHBDWKVetz5zF42qRCyJ6KHfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0pQSEtG0IXs7z9rQt4kMYPAf4m8wHwYDVR0j BBgwFoAUN83x6Uva7BOcxSNsrDG1vMlpiAEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2VkMTAwZGYtMDQ0MS00MzgxLWEzZmEtNTg3ZGI5ZTljMmYwLzAvMzdDREYxRTk0 QkRBRUMxMzlDQzUyMzZDQUMzMUI1QkNDOTY5ODgwMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zN0NERjFFOTRCREFFQzEzOUNDNTIzNkNBQzMxQjVCQ0M5Njk4 ODAxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2VkMTAwZGYtMDQ0MS00MzgxLWEz ZmEtNTg3ZGI5ZTljMmYwLzAvMzdDREYxRTk0QkRBRUMxMzlDQzUyMzZDQUMzMUI1 QkNDOTY5ODgwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG2jG/n3ieq4AaioYvSSN9haUciSmwcXE0J7 fIGjPPI+uNpVXDHe17WkI/L4OTc6uS2/r311eVrSlb9xlYK0icNRsK14aVWG5nyd UBaDHd5PuDuTguerxEUAgW8Hqzl+wD9dinuEWg/MhYVELb83jVNF+WF+tn3aFPat qN9ruov3w01l6HDFoA0LN+TZ464boaQy3gZMo/ne/qnjf6bciMQQrvfax1lZasf4 yd4CRKLRpAP4UOHeMATUjb8e7v3PELPaxI8eXEAgVMRN1csIg9QH+xuQBp9c3WJ8 np9j85UxpbCt+3fMTyFnCVf5p8AlhX8GrwdMX6NnZNTGPlp82W8= -----END CERTIFICATE-----Generated at Tue May 12 23:45:57 2026 by rpki-client