$ rpki-client -vvf rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.mft File: 37CC3A1A8C16FA30D26D2136495263B0E6A759F5.mft (raw, json) Hash identifier: nFWiaET3xIS3WfT17s+UxVuIMEl14wEmdWi52i194js= Subject key identifier: BE:88:86:CB:D8:CF:7D:C1:62:58:CC:82:C3:D4:0C:7D:DE:4E:E5:B8 Authority key identifier: 37:CC:3A:1A:8C:16:FA:30:D2:6D:21:36:49:52:63:B0:E6:A7:59:F5 Certificate issuer: /CN=37CC3A1A8C16FA30D26D2136495263B0E6A759F5 Certificate serial: 6A1B35EF5B39C01CED6D19ECCD337339FBAEA3A0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.mft Manifest number: 0F Signing time: Wed 13 May 2026 03:42:32 +0000 Manifest this update: Wed 13 May 2026 03:37:32 +0000 Manifest next update: Thu 14 May 2026 06:21:32 +0000 Files and hashes: 1: 3130332e3131332e3132342e302f32322d3232203d3e20313337333433.roa (hash: GHzYb3rjVTEQVdIvZj3KeXXe6U5QglqPAin2lkUZXo8=) 2: 3130332e3131332e3132342e302f32322d3234203d3e20313337333433.roa (hash: 9QAgWnws9Pn2cMk1Ow/sd4cNStAKYkg3/wIKxMTubt0=) 3: 3130332e3131332e3132342e302f32342d3234203d3e20313337333433.roa (hash: fyLe+p/AB5OB4ujhmHeH2n5bm2C2Orl4eXn3b+l/rRM=) 4: 37CC3A1A8C16FA30D26D2136495263B0E6A759F5.crl (hash: fO5cuN3P8W01EEHua/PYjIaqL+f/Cxrxc9Xd7bmJIxI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.crl rsync://rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:31:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:1b:35:ef:5b:39:c0:1c:ed:6d:19:ec:cd:33:73:39:fb:ae:a3:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37CC3A1A8C16FA30D26D2136495263B0E6A759F5 Validity Not Before: May 13 03:37:32 2026 GMT Not After : May 14 06:21:32 2026 GMT Subject: CN=BE8886CBD8CF7DC16258CC82C3D40C7DDE4EE5B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c8:aa:5c:f8:07:58:a7:79:c0:c5:08:b0:b2: 3f:02:79:9e:4e:dc:31:a1:61:8c:f5:f9:d5:ee:20: 94:6c:39:ef:a5:0d:25:bc:45:c5:d7:b3:d1:52:6e: 52:89:4d:fc:0e:d6:90:69:59:2a:b1:93:25:5f:81: 52:13:9a:0f:56:ae:71:c0:70:52:d7:a9:03:2c:3c: e0:d8:47:71:ef:32:d7:fb:6f:e3:de:68:32:78:b4: f8:a8:60:95:68:86:bb:45:0f:09:ef:ba:17:17:62: fc:98:19:2b:8e:4d:b6:85:06:4a:89:56:5a:a6:66: 4d:bc:2a:c0:82:cb:cc:b7:2a:ae:34:74:89:c5:ee: bb:58:10:52:8c:97:c3:67:10:61:70:12:c8:ef:8c: e0:7c:a1:b3:fc:87:7c:87:18:b0:89:f8:75:3c:e6: 52:37:6c:6d:8c:bf:04:50:09:02:fe:fe:7a:72:e1: 08:6d:9c:9f:10:4b:3b:cf:37:ba:93:c6:a2:cb:89: 7b:af:8a:cd:46:6c:05:13:05:30:22:ad:40:40:33: 97:73:a8:b5:a1:47:44:8b:28:e0:7f:33:30:53:25: 8c:08:66:e3:96:a9:8e:a9:f3:ed:27:65:e6:40:80: a5:a6:18:cd:e1:dc:44:ca:9c:f1:65:04:59:4c:92: d5:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:88:86:CB:D8:CF:7D:C1:62:58:CC:82:C3:D4:0C:7D:DE:4E:E5:B8 X509v3 Authority Key Identifier: keyid:37:CC:3A:1A:8C:16:FA:30:D2:6D:21:36:49:52:63:B0:E6:A7:59:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:a8:ce:ba:ed:70:9b:31:51:07:45:fd:2f:0e:8d:aa:eb:f7: 89:ea:fa:69:a4:9d:bd:73:69:dc:fb:b0:f5:ff:dd:25:60:20: b9:b1:26:40:bd:60:95:ec:aa:ff:ba:c0:0b:71:a3:25:19:38: 9d:ee:eb:9d:d9:9f:12:ed:6d:ae:d6:02:4e:55:e4:35:ed:15: 06:4e:4b:40:f7:be:86:2c:54:8e:3d:0a:d1:e2:5a:96:b4:c4: 7a:c4:e4:74:c8:f2:75:f4:2d:d6:61:a5:ba:95:c8:c4:a3:e4: 9e:da:db:48:ec:b7:98:be:97:d7:33:ef:f0:c9:ec:d0:ac:59: 79:05:2a:0a:1a:aa:2c:8e:9d:4a:95:51:21:2d:51:a9:61:4c: 49:b9:04:71:e6:d7:db:5e:8a:69:80:70:14:66:ff:bf:e0:50: 60:89:3a:7f:94:aa:d2:e2:57:64:69:c4:cd:07:c4:16:89:a9: d5:79:cc:88:c9:14:81:40:8f:4f:60:84:57:59:46:56:45:2c: 2a:72:eb:c3:2a:08:c5:58:1d:10:32:15:d2:58:9a:b7:a4:d0: 64:f4:52:6c:29:c4:b8:a2:d5:33:28:99:d9:b0:1f:32:15:27: 92:8e:45:a1:54:9c:4b:cd:34:88:61:e6:80:57:90:9c:92:39: 78:54:9a:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUahs171s5wBztbRnszTNzOfuuo6AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdDQzNBMUE4QzE2RkEzMEQyNkQyMTM2NDk1MjYzQjBF NkE3NTlGNTAeFw0yNjA1MTMwMzM3MzJaFw0yNjA1MTQwNjIxMzJaMDMxMTAvBgNV BAMTKEJFODg4NkNCRDhDRjdEQzE2MjU4Q0M4MkMzRDQwQzdEREU0RUU1QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAyKpc+AdYp3nAxQiwsj8CeZ5O 3DGhYYz1+dXuIJRsOe+lDSW8RcXXs9FSblKJTfwO1pBpWSqxkyVfgVITmg9WrnHA cFLXqQMsPODYR3HvMtf7b+PeaDJ4tPioYJVohrtFDwnvuhcXYvyYGSuOTbaFBkqJ VlqmZk28KsCCy8y3Kq40dInF7rtYEFKMl8NnEGFwEsjvjOB8obP8h3yHGLCJ+HU8 5lI3bG2MvwRQCQL+/npy4QhtnJ8QSzvPN7qTxqLLiXuvis1GbAUTBTAirUBAM5dz qLWhR0SLKOB/MzBTJYwIZuOWqY6p8+0nZeZAgKWmGM3h3ETKnPFlBFlMktXrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvoiGy9jPfcFiWMyCw9QMfd5O5bgwHwYDVR0j BBgwFoAUN8w6GowW+jDSbSE2SVJjsOanWfUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTBkMDA3MTgtNTIxMC00NDM4LWI2NGQtNjJlYzFmM2ViY2QwLzAvMzdDQzNBMUE4 QzE2RkEzMEQyNkQyMTM2NDk1MjYzQjBFNkE3NTlGNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zN0NDM0ExQThDMTZGQTMwRDI2RDIxMzY0OTUyNjNCMEU2QTc1 OUY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTBkMDA3MTgtNTIxMC00NDM4LWI2 NGQtNjJlYzFmM2ViY2QwLzAvMzdDQzNBMUE4QzE2RkEzMEQyNkQyMTM2NDk1MjYz QjBFNkE3NTlGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC2ozrrtcJsxUQdF/S8Ojarr94nq+mmknb1z adz7sPX/3SVgILmxJkC9YJXsqv+6wAtxoyUZOJ3u653ZnxLtba7WAk5V5DXtFQZO S0D3voYsVI49CtHiWpa0xHrE5HTI8nX0LdZhpbqVyMSj5J7a20jst5i+l9cz7/DJ 7NCsWXkFKgoaqiyOnUqVUSEtUalhTEm5BHHm19teimmAcBRm/7/gUGCJOn+UqtLi V2RpxM0HxBaJqdV5zIjJFIFAj09ghFdZRlZFLCpy68MqCMVYHRAyFdJYmrek0GT0 UmwpxLii1TMomdmwHzIVJ5KORaFUnEvNNIhh5oBXkJySOXhUmvM= -----END CERTIFICATE-----Generated at Wed May 13 05:43:05 2026 by rpki-client