$ rpki-client -vvf rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.mft File: 37CC3A1A8C16FA30D26D2136495263B0E6A759F5.mft (raw, json) Hash identifier: SWBWc1r9IRgMvRYOGlmqmM6yXtRvr+IigeBAl6P8ZxE= Subject key identifier: B4:3B:E5:D6:0E:46:FC:18:DC:91:F1:CF:2C:68:82:AE:B7:F5:36:73 Authority key identifier: 37:CC:3A:1A:8C:16:FA:30:D2:6D:21:36:49:52:63:B0:E6:A7:59:F5 Certificate issuer: /CN=37CC3A1A8C16FA30D26D2136495263B0E6A759F5 Certificate serial: 21AC40E60614DFC2D02C81A5DA89E9D394E8CD45 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 16:55:35 +0000 Manifest this update: Thu 23 Jul 2026 16:50:35 +0000 Manifest next update: Fri 24 Jul 2026 20:11:35 +0000 Files and hashes: 1: 37CC3A1A8C16FA30D26D2136495263B0E6A759F5.crl (hash: NcyRkvuZhKbiwjf7EbV77aePrckWQuqr6VDM4sgJAgo=) 2: 3130332e3131332e3132342e302f32322d3232203d3e20313337333433.roa (hash: GHzYb3rjVTEQVdIvZj3KeXXe6U5QglqPAin2lkUZXo8=) 3: 3130332e3131332e3132342e302f32342d3234203d3e20313337333433.roa (hash: fyLe+p/AB5OB4ujhmHeH2n5bm2C2Orl4eXn3b+l/rRM=) 4: 3130332e3131332e3132342e302f32322d3234203d3e20313337333433.roa (hash: 9QAgWnws9Pn2cMk1Ow/sd4cNStAKYkg3/wIKxMTubt0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.crl rsync://rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:11:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:ac:40:e6:06:14:df:c2:d0:2c:81:a5:da:89:e9:d3:94:e8:cd:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37CC3A1A8C16FA30D26D2136495263B0E6A759F5 Validity Not Before: Jul 23 16:50:35 2026 GMT Not After : Jul 24 20:11:35 2026 GMT Subject: CN=B43BE5D60E46FC18DC91F1CF2C6882AEB7F53673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8b:ac:8c:b1:ca:fb:32:9a:5e:68:d9:f0:fa: 83:0f:48:7b:d0:ef:b4:4f:b3:79:a5:34:2e:c6:a2: 77:88:cc:f3:90:a3:da:48:0e:51:a1:ed:9b:f7:f6: 6f:9e:81:e0:05:50:9d:13:77:ff:a9:fa:f4:97:d0: 64:19:c1:c7:cf:ee:ce:58:64:ea:9f:ae:31:ea:36: 04:ad:42:67:37:51:9b:82:30:2b:03:a7:57:55:56: d2:1d:d7:50:05:4b:a0:1f:e9:ce:43:63:86:a2:ce: 3c:31:48:a3:b0:51:2e:42:93:24:10:36:ae:2e:d2: a8:ee:63:3b:fc:26:24:c9:49:d4:18:d8:9d:0b:db: f3:70:51:c4:5a:ca:b1:ac:99:37:df:07:c3:98:7a: 68:a9:a2:23:98:ab:2a:55:df:19:22:9c:72:e3:ac: 1b:e5:6a:b9:2f:9f:a0:b1:1b:b5:aa:ad:95:dc:0f: 8a:22:10:ca:99:c0:79:96:2b:b9:ea:79:d9:bd:b6: 1c:8d:4c:ab:13:0f:51:8b:a9:70:0e:58:2c:ca:f0: 56:c0:ff:92:a0:f5:8a:dc:79:2f:78:58:fa:36:4c: 4e:3b:9f:9e:99:7c:6d:08:df:17:4a:e2:5d:08:99: 56:1a:1b:23:08:d5:12:4c:a7:2c:4b:a6:13:e8:8f: 24:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:3B:E5:D6:0E:46:FC:18:DC:91:F1:CF:2C:68:82:AE:B7:F5:36:73 X509v3 Authority Key Identifier: keyid:37:CC:3A:1A:8C:16:FA:30:D2:6D:21:36:49:52:63:B0:E6:A7:59:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:3a:30:ef:f2:6e:57:4e:02:73:81:c8:95:5c:06:53:31:1b: 16:5a:f0:54:3d:20:58:43:c5:07:dd:1a:28:51:e1:e0:ae:e0: 68:33:eb:09:59:c2:5b:36:b8:7a:6a:4e:47:cb:e6:df:21:15: 12:99:19:59:cf:fc:18:be:72:ba:a9:82:ab:d5:0f:81:a8:39: 27:b1:37:a9:f4:a3:6c:b0:07:cf:b4:7b:9d:2e:99:68:8d:96: 8c:85:b7:55:a4:3a:ec:1a:48:e7:68:b6:64:d5:7e:81:17:c1: 9a:ad:43:ea:ba:f9:be:58:6b:9d:f4:69:fe:69:0f:8e:ea:72: e6:8c:65:51:87:1f:87:d2:f8:68:e8:b6:82:4a:69:03:51:1b: 28:12:93:d6:01:88:5b:e0:b4:8f:40:f1:59:c4:e0:a9:16:69: 39:f2:ee:68:d2:ef:66:18:8c:ae:9e:57:fb:d8:49:e3:86:6e: 5c:b2:6d:c4:cc:6b:72:39:20:ad:e5:ca:f5:6e:75:cd:b6:aa: fb:b0:a8:72:70:5a:b4:fd:ba:c9:aa:0f:28:8c:8c:64:a4:5f: 0a:0c:97:f4:5e:09:89:c4:1f:98:6d:33:f8:7d:d5:d3:8d:a2: e6:fe:9a:e4:e3:c9:78:e4:82:6a:08:ab:2d:80:a0:c2:ac:4a: 90:e2:10:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIaxA5gYU38LQLIGl2onp05TozUUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdDQzNBMUE4QzE2RkEzMEQyNkQyMTM2NDk1MjYzQjBF NkE3NTlGNTAeFw0yNjA3MjMxNjUwMzVaFw0yNjA3MjQyMDExMzVaMDMxMTAvBgNV BAMTKEI0M0JFNUQ2MEU0NkZDMThEQzkxRjFDRjJDNjg4MkFFQjdGNTM2NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUi6yMscr7MppeaNnw+oMPSHvQ 77RPs3mlNC7GoneIzPOQo9pIDlGh7Zv39m+egeAFUJ0Td/+p+vSX0GQZwcfP7s5Y ZOqfrjHqNgStQmc3UZuCMCsDp1dVVtId11AFS6Af6c5DY4aizjwxSKOwUS5CkyQQ Nq4u0qjuYzv8JiTJSdQY2J0L2/NwUcRayrGsmTffB8OYemipoiOYqypV3xkinHLj rBvlarkvn6CxG7WqrZXcD4oiEMqZwHmWK7nqedm9thyNTKsTD1GLqXAOWCzK8FbA /5Kg9YrceS94WPo2TE47n56ZfG0I3xdK4l0ImVYaGyMI1RJMpyxLphPojySbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtDvl1g5G/BjckfHPLGiCrrf1NnMwHwYDVR0j BBgwFoAUN8w6GowW+jDSbSE2SVJjsOanWfUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTBkMDA3MTgtNTIxMC00NDM4LWI2NGQtNjJlYzFmM2ViY2QwLzAvMzdDQzNBMUE4 QzE2RkEzMEQyNkQyMTM2NDk1MjYzQjBFNkE3NTlGNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zN0NDM0ExQThDMTZGQTMwRDI2RDIxMzY0OTUyNjNCMEU2QTc1 OUY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTBkMDA3MTgtNTIxMC00NDM4LWI2 NGQtNjJlYzFmM2ViY2QwLzAvMzdDQzNBMUE4QzE2RkEzMEQyNkQyMTM2NDk1MjYz QjBFNkE3NTlGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADU6MO/ybldOAnOByJVcBlMxGxZa8FQ9IFhD xQfdGihR4eCu4Ggz6wlZwls2uHpqTkfL5t8hFRKZGVnP/Bi+crqpgqvVD4GoOSex N6n0o2ywB8+0e50umWiNloyFt1WkOuwaSOdotmTVfoEXwZqtQ+q6+b5Ya530af5p D47qcuaMZVGHH4fS+GjotoJKaQNRGygSk9YBiFvgtI9A8VnE4KkWaTny7mjS72YY jK6eV/vYSeOGblyybcTMa3I5IK3lyvVudc22qvuwqHJwWrT9usmqDyiMjGSkXwoM l/ReCYnEH5htM/h91dONoub+muTjyXjkgmoIqy2AoMKsSpDiEFo= -----END CERTIFICATE-----Generated at Fri Jul 24 01:53:12 2026 by rpki-client