
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.mft
File: 37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.mft (raw, json)
Hash identifier: bMUyh8t398Mm7m++54ZB8ZJdtIGz+uk7PkBqHxlxFag=
Subject key identifier: 6A:00:47:6E:03:5C:07:5D:53:85:06:42:31:B2:97:71:58:54:C4:CB
Authority key identifier: 37:60:6E:99:C5:9E:71:07:D5:AC:FA:7E:8D:E3:FC:DF:E0:FF:A6:57
Certificate issuer: /CN=37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657
Certificate serial: 4CEE10DF0685379299480C826D05237F1A786B70
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 14:39:22 +0000
Manifest this update: Tue 12 May 2026 14:34:22 +0000
Manifest next update: Wed 13 May 2026 18:38:22 +0000
Files and hashes: 1: 323030313a6466323a633238303a3a2f34382d3438203d3e20313339393839.roa (hash: O7Qsfv9shx16yrQW2Xe4frvAZ94BOmPstpdbztVAHcM=)
2: 3130332e3134382e37362e302f32332d3233203d3e20313339393839.roa (hash: Fs+RqQ+YiPkIKy5ykH1+x0x7YMvGdMnBJYUHtFZf1pc=)
3: 3130332e3134382e37372e302f32342d3234203d3e20313339393839.roa (hash: jCqON8Yk3P3gMbZcKuKALDn9F/zcK2FOZiJKlSNeDJ8=)
4: 37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.crl (hash: WV9v9/wNpum/+zuzDDcSt361vXMKeTIlnCp7RfoaRWs=)
5: 3130332e3134382e37362e302f32342d3234203d3e20313339393839.roa (hash: 7Srge9sdh/jCl7HVuvbDBLE62n0zvsTPF/zsdp6ZWdc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.crl
rsync://rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:ee:10:df:06:85:37:92:99:48:0c:82:6d:05:23:7f:1a:78:6b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657
Validity
Not Before: May 12 14:34:22 2026 GMT
Not After : May 13 18:38:22 2026 GMT
Subject: CN=6A00476E035C075D5385064231B297715854C4CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:85:65:32:d4:f1:3b:a3:a3:be:52:58:d0:57:
ac:6c:53:85:f0:c8:ea:9f:ee:c1:4d:1a:be:69:9e:
7d:e5:31:2f:f6:26:9b:5d:3f:d5:43:e5:db:95:5e:
cc:76:a3:0a:d0:bd:8d:46:eb:6e:8f:a2:90:c3:40:
bf:e6:cc:c6:25:06:9a:9b:bb:cf:40:c5:36:c9:ff:
b1:9b:28:7b:af:b0:04:d2:9f:05:e1:86:6c:f0:48:
4b:23:52:d6:76:25:f1:5a:89:25:c5:a9:e6:e2:27:
22:00:72:fd:48:21:f6:95:21:a5:52:4c:ad:54:22:
dc:ed:68:22:ef:44:0a:fa:26:49:12:2a:82:7d:39:
cb:8d:7f:2b:ca:84:f5:a0:62:98:f9:c5:42:28:95:
06:65:bb:66:86:70:23:75:8f:44:d8:44:46:e2:35:
ba:e7:a8:b2:27:ec:cf:85:4f:1b:d5:fb:1e:35:47:
71:c6:70:cb:94:8b:e7:88:68:2c:04:76:44:72:d8:
e5:74:e0:f0:e1:b9:cc:c4:69:0a:51:38:b4:09:ad:
76:38:14:6d:55:d3:44:25:ad:fc:e3:2a:37:fe:bd:
66:8e:fa:a6:51:8c:0b:41:87:39:fb:bf:a1:b0:b6:
1e:7c:1d:3e:eb:31:76:90:14:57:a6:a2:e3:9f:31:
f2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:00:47:6E:03:5C:07:5D:53:85:06:42:31:B2:97:71:58:54:C4:CB
X509v3 Authority Key Identifier:
keyid:37:60:6E:99:C5:9E:71:07:D5:AC:FA:7E:8D:E3:FC:DF:E0:FF:A6:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:2e:7a:40:c3:8d:79:7b:93:58:0d:08:8e:b1:54:6b:41:7c:
ab:e7:79:be:c3:b3:0a:a0:75:7e:70:11:2d:89:ac:48:27:72:
55:ad:43:80:6a:78:c9:d6:38:99:14:d6:92:d4:3c:93:49:73:
50:08:a7:b7:64:3d:91:ea:6f:e0:05:22:69:d1:6f:4b:12:41:
18:0c:96:6c:ec:31:e6:b4:9c:9b:90:47:64:6f:cf:8c:93:1b:
b9:95:62:4d:05:43:00:6c:b7:2d:1b:a9:d1:f5:e5:49:3b:6a:
8b:c4:5a:63:a0:8b:22:ed:42:2f:9b:65:aa:7c:6b:4c:81:45:
7a:af:64:ba:7a:80:4b:9f:c6:aa:79:d1:a3:20:10:79:78:ba:
ae:0d:81:3f:f1:ef:1f:12:4c:e3:04:08:2e:74:df:8e:ef:bf:
c1:71:df:fb:c4:90:fc:49:7a:51:d1:78:0c:e7:b2:ee:ab:b2:
17:14:71:88:7c:dc:ed:e7:9d:97:c0:e1:a5:72:0f:5b:53:ff:
3e:34:d3:9f:54:5f:05:9c:dd:69:be:e1:dd:36:ff:32:92:a7:
6e:3b:9c:0f:35:97:24:56:bb:44:7c:01:97:cd:21:0b:4f:d7:
25:20:97:94:c9:5a:91:ce:da:30:63:0c:b2:f4:56:e1:60:cc:
38:4a:65:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:36:08 2026 by rpki-client