$ rpki-client -vvf rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.mft File: 37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.mft (raw, json) Hash identifier: FzN4C/0HH4CNF0q121i1hnezyiiFN7x4G333adLbA/g= Subject key identifier: 99:A8:00:55:BC:E4:03:22:E4:4F:33:B7:F5:70:14:4C:32:9E:1C:1D Authority key identifier: 37:60:6E:99:C5:9E:71:07:D5:AC:FA:7E:8D:E3:FC:DF:E0:FF:A6:57 Certificate issuer: /CN=37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657 Certificate serial: 040A283FC61E63D24C685958828CB00CBCC5A4D7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 02:17:05 +0000 Manifest this update: Fri 24 Jul 2026 02:12:05 +0000 Manifest next update: Sat 25 Jul 2026 02:29:05 +0000 Files and hashes: 1: 3130332e3134382e37362e302f32342d3234203d3e20313339393839.roa (hash: 7Srge9sdh/jCl7HVuvbDBLE62n0zvsTPF/zsdp6ZWdc=) 2: 3130332e3134382e37372e302f32342d3234203d3e20313339393839.roa (hash: jCqON8Yk3P3gMbZcKuKALDn9F/zcK2FOZiJKlSNeDJ8=) 3: 323030313a6466323a633238303a3a2f34382d3438203d3e20313339393839.roa (hash: O7Qsfv9shx16yrQW2Xe4frvAZ94BOmPstpdbztVAHcM=) 4: 3130332e3134382e37362e302f32332d3233203d3e20313339393839.roa (hash: Fs+RqQ+YiPkIKy5ykH1+x0x7YMvGdMnBJYUHtFZf1pc=) 5: 37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.crl (hash: spJfmqQejCtz1wV1a5rlZcpqe9uy0biliJMvqlnYqo0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.crl rsync://rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 02:29:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:0a:28:3f:c6:1e:63:d2:4c:68:59:58:82:8c:b0:0c:bc:c5:a4:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657 Validity Not Before: Jul 24 02:12:05 2026 GMT Not After : Jul 25 02:29:05 2026 GMT Subject: CN=99A80055BCE40322E44F33B7F570144C329E1C1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:c5:2b:39:5d:b9:63:0c:f7:e3:a1:68:9e:8f: 4a:dc:08:ce:83:d1:a5:21:fc:3d:57:a0:47:85:62: c1:87:45:af:63:0a:b3:e7:a5:66:6a:da:c5:9f:7c: 99:1c:9d:25:f3:5d:a9:13:af:df:c1:29:33:e7:26: da:fd:04:ea:c9:70:90:63:00:ad:45:4c:39:b4:4b: 65:9e:3c:dc:c3:3c:0e:6d:f6:00:15:fe:a4:75:39: 2a:4c:f5:91:c8:78:63:6c:32:d6:ba:c9:d2:5c:53: 3d:c6:78:4e:77:0e:ab:9a:0a:d1:d5:98:d8:4e:6b: f8:e8:98:2f:29:79:9c:12:c3:66:f1:50:a1:ee:f4: ab:69:1a:3c:58:8f:5a:bc:77:dc:29:1d:46:2c:20: 46:4a:21:9c:f8:95:3a:16:95:59:ff:63:2f:02:c2: b9:13:f9:1a:f7:af:18:9b:46:c0:8a:8a:72:5a:7a: 31:7b:f1:a5:53:51:b3:ae:a5:e4:50:2c:97:17:1a: 25:02:a1:9a:9a:1b:b5:16:f2:82:b2:01:d6:b6:d9: dd:19:59:26:11:11:ea:8e:1b:ba:25:b6:2e:35:90: 24:45:af:77:00:b0:e8:1d:ae:1b:3f:e9:35:d6:dd: 28:80:8c:21:d2:1c:05:22:6a:2b:01:ec:a0:e0:46: 16:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A8:00:55:BC:E4:03:22:E4:4F:33:B7:F5:70:14:4C:32:9E:1C:1D X509v3 Authority Key Identifier: keyid:37:60:6E:99:C5:9E:71:07:D5:AC:FA:7E:8D:E3:FC:DF:E0:FF:A6:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:4d:ca:44:1e:f1:9b:7f:37:ba:94:00:cb:d4:54:08:bb:f5: c8:70:fe:3e:2c:17:83:08:78:e8:ee:ce:d8:69:88:63:de:d9: 47:a3:c7:2e:06:85:37:ba:ac:89:da:d0:be:c9:9a:0e:dc:21: 4b:ff:42:94:c3:36:e8:5d:f0:2c:22:cd:66:a2:e3:7d:72:93: bb:7c:40:e5:e7:f6:7b:6f:73:a6:75:14:9f:4e:68:13:4c:06: ab:e5:bb:16:c2:00:b6:f5:9b:7d:ed:d7:e3:c9:ea:60:97:c5: 74:40:da:55:cc:72:6c:bd:a7:b0:af:4c:4a:a8:4c:e8:9d:a6: bd:26:37:fa:4b:dc:ab:8c:15:89:bc:96:df:3f:cd:bf:78:dd: 2d:d7:16:fb:f0:04:ec:bc:55:ea:c5:e6:a0:5e:a3:1d:a7:2a: 26:1e:41:b6:06:74:e5:4f:14:d7:ff:f0:c8:0c:06:a7:a8:9d: 89:3d:c6:2c:49:eb:80:22:77:1c:60:db:a3:f1:4c:2e:18:14: 96:fd:23:56:e1:db:5c:bb:36:71:d4:cd:30:9a:b4:c0:23:03: fa:98:e2:4e:59:ae:f4:3a:97:99:e7:4d:e7:c8:43:35:ee:d9: 02:4b:aa:29:db:9b:d2:ad:9a:b3:ce:ce:ee:5a:32:5a:44:b9: 63:ec:b4:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBAooP8YeY9JMaFlYgoywDLzFpNcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzc2MDZFOTlDNTlFNzEwN0Q1QUNGQTdFOERFM0ZDREZF MEZGQTY1NzAeFw0yNjA3MjQwMjEyMDVaFw0yNjA3MjUwMjI5MDVaMDMxMTAvBgNV BAMTKDk5QTgwMDU1QkNFNDAzMjJFNDRGMzNCN0Y1NzAxNDRDMzI5RTFDMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmxSs5XbljDPfjoWiej0rcCM6D 0aUh/D1XoEeFYsGHRa9jCrPnpWZq2sWffJkcnSXzXakTr9/BKTPnJtr9BOrJcJBj AK1FTDm0S2WePNzDPA5t9gAV/qR1OSpM9ZHIeGNsMta6ydJcUz3GeE53DquaCtHV mNhOa/jomC8peZwSw2bxUKHu9KtpGjxYj1q8d9wpHUYsIEZKIZz4lToWlVn/Yy8C wrkT+Rr3rxibRsCKinJaejF78aVTUbOupeRQLJcXGiUCoZqaG7UW8oKyAda22d0Z WSYREeqOG7olti41kCRFr3cAsOgdrhs/6TXW3SiAjCHSHAUiaisB7KDgRhalAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmagAVbzkAyLkTzO39XAUTDKeHB0wHwYDVR0j BBgwFoAUN2BumcWecQfVrPp+jeP83+D/plcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDAzMTc0NmUtYjBmNi00ODI3LThjNGUtYjgxOTJkZWNjMzlhLzAvMzc2MDZFOTlD NTlFNzEwN0Q1QUNGQTdFOERFM0ZDREZFMEZGQTY1Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNzYwNkU5OUM1OUU3MTA3RDVBQ0ZBN0U4REUzRkNERkUwRkZB NjU3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDAzMTc0NmUtYjBmNi00ODI3LThj NGUtYjgxOTJkZWNjMzlhLzAvMzc2MDZFOTlDNTlFNzEwN0Q1QUNGQTdFOERFM0ZD REZFMEZGQTY1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFVNykQe8Zt/N7qUAMvUVAi79chw/j4sF4MI eOjuzthpiGPe2Uejxy4GhTe6rIna0L7Jmg7cIUv/QpTDNuhd8CwizWai431yk7t8 QOXn9ntvc6Z1FJ9OaBNMBqvluxbCALb1m33t1+PJ6mCXxXRA2lXMcmy9p7CvTEqo TOidpr0mN/pL3KuMFYm8lt8/zb943S3XFvvwBOy8VerF5qBeox2nKiYeQbYGdOVP FNf/8MgMBqeonYk9xixJ64Aidxxg26PxTC4YFJb9I1bh21y7NnHUzTCatMAjA/qY 4k5ZrvQ6l5nnTefIQzXu2QJLqinbm9KtmrPOzu5aMlpEuWPstAY= -----END CERTIFICATE-----Generated at Fri Jul 24 08:53:29 2026 by rpki-client