$ rpki-client -vvf rpki-rsync.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.mft File: 37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.mft (raw, json) Hash identifier: b7TeApTdpzjFPao7lvjuaMEGh4mRbOxF30C3P0uow3Q= Subject key identifier: F9:A7:F4:5F:8F:03:1F:39:D9:A2:33:26:E3:5D:D3:FC:3C:58:E8:11 Authority key identifier: 37:BB:70:91:96:04:AC:31:A2:42:3F:E2:DD:1F:9B:79:CB:59:F7:F4 Certificate issuer: /CN=37BB70919604AC31A2423FE2DD1F9B79CB59F7F4 Certificate serial: 0908D201B4DD475D55CA8C5E1DAB3496F5C7A99D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.mft Manifest number: 0E Signing time: Tue 12 May 2026 10:06:17 +0000 Manifest this update: Tue 12 May 2026 10:01:17 +0000 Manifest next update: Wed 13 May 2026 12:47:17 +0000 Files and hashes: 1: 3130332e332e3233322e302f32342d3234203d3e20313531353238.roa (hash: Im3o8YUekrl4UUhItVyydZhi8GU6lVLXxpRk9EL/+Ow=) 2: 37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.crl (hash: TVeTmzvn2tFxNw3SgT7poO0EKEwx52bLm/FWCf4eVfI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.crl rsync://rpki-rsync.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:08:d2:01:b4:dd:47:5d:55:ca:8c:5e:1d:ab:34:96:f5:c7:a9:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37BB70919604AC31A2423FE2DD1F9B79CB59F7F4 Validity Not Before: May 12 10:01:17 2026 GMT Not After : May 13 12:47:17 2026 GMT Subject: CN=F9A7F45F8F031F39D9A23326E35DD3FC3C58E811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:52:7f:f4:65:05:26:4a:f7:74:82:5c:da:68: ce:be:fc:cc:2a:a1:d3:27:95:3e:df:4a:6d:8e:69: ed:5a:39:f2:3d:a0:5d:95:67:d7:57:bb:fa:24:af: a2:56:e1:dd:e7:e2:9b:5e:16:7d:d8:a6:2f:bd:9a: 44:8a:76:7b:ce:4e:5f:3c:78:d6:e9:46:b4:1e:ee: 8c:ed:58:58:0a:9a:74:70:98:c0:d7:f1:69:82:51: 43:90:f9:c6:8e:2c:d8:65:a2:3a:dd:e7:fa:1a:5f: 2f:b6:1a:02:02:9f:83:3d:3a:8d:83:51:a4:60:ff: 55:67:24:9a:f8:4e:3e:db:e9:4c:04:c2:23:45:0a: 4a:30:03:94:a7:1d:14:0a:dd:75:f7:dd:c0:68:35: 96:a8:ee:9a:cd:c7:83:2f:50:ef:6d:77:4d:1c:3d: 27:db:e5:5d:77:19:70:73:a1:30:ae:5c:8c:89:18: 2f:6c:45:9f:3a:8a:30:c4:b5:7d:49:d4:fd:f7:b3: e0:7d:2b:9b:65:6e:32:4c:a0:58:f7:d1:a4:50:8d: 42:bf:12:f4:b0:d1:4a:dc:0a:02:9a:b1:4d:30:49: f8:4f:34:cd:73:c8:99:2b:db:f9:e1:95:ab:ff:73: 80:56:45:4e:fb:0c:d2:15:76:77:e3:c9:2e:67:e1: de:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:A7:F4:5F:8F:03:1F:39:D9:A2:33:26:E3:5D:D3:FC:3C:58:E8:11 X509v3 Authority Key Identifier: keyid:37:BB:70:91:96:04:AC:31:A2:42:3F:E2:DD:1F:9B:79:CB:59:F7:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:a1:45:4a:bf:80:7d:8d:88:87:0a:83:c3:73:24:ba:dc:af: 33:3b:57:db:71:28:1f:d2:c5:c6:a6:a0:ea:76:39:ae:20:dd: 29:f5:d0:06:5a:70:b9:6a:41:ab:6a:36:42:be:0f:98:89:d7: 60:c6:a4:39:55:a8:c1:d1:4f:83:77:ce:32:1b:15:fa:db:09: b7:64:73:cb:4b:ff:7a:14:a9:f0:14:f4:45:3d:9a:61:f4:de: f7:57:16:7c:5f:e7:b8:f4:5c:a4:a3:ed:c6:c3:c4:e9:f6:31: 7b:02:94:0a:75:8b:f8:f8:bb:6f:61:6a:09:b1:9d:fa:d5:dc: 0d:71:98:db:9c:c6:61:c1:a4:78:b7:d3:86:84:05:41:98:85: 14:fb:ab:d2:5d:8e:18:09:62:a2:02:9c:08:9b:a9:38:6d:1e: 6e:d8:6c:45:26:34:3e:c1:5a:ce:00:e7:82:79:2a:f5:28:af: 95:16:94:f7:c0:bf:a6:22:bb:07:e3:c3:43:9d:63:bc:d7:fc: de:71:07:2c:38:0a:ed:1b:55:e8:27:81:7c:dd:11:fa:7c:8d: a6:d4:4f:ba:62:e8:39:21:32:40:76:8b:ae:cd:88:7b:fc:23: 0d:51:a6:a2:59:df:52:ca:cc:35:69:2f:ff:98:92:42:20:1b: 74:12:bf:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCQjSAbTdR11VyoxeHas0lvXHqZ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdCQjcwOTE5NjA0QUMzMUEyNDIzRkUyREQxRjlCNzlD QjU5RjdGNDAeFw0yNjA1MTIxMDAxMTdaFw0yNjA1MTMxMjQ3MTdaMDMxMTAvBgNV BAMTKEY5QTdGNDVGOEYwMzFGMzlEOUEyMzMyNkUzNUREM0ZDM0M1OEU4MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGUn/0ZQUmSvd0glzaaM6+/Mwq odMnlT7fSm2Oae1aOfI9oF2VZ9dXu/okr6JW4d3n4pteFn3Ypi+9mkSKdnvOTl88 eNbpRrQe7oztWFgKmnRwmMDX8WmCUUOQ+caOLNhlojrd5/oaXy+2GgICn4M9Oo2D UaRg/1VnJJr4Tj7b6UwEwiNFCkowA5SnHRQK3XX33cBoNZao7prNx4MvUO9td00c PSfb5V13GXBzoTCuXIyJGC9sRZ86ijDEtX1J1P33s+B9K5tlbjJMoFj30aRQjUK/ EvSw0UrcCgKasU0wSfhPNM1zyJkr2/nhlav/c4BWRU77DNIVdnfjyS5n4d4FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+af0X48DHznZojMm413T/DxY6BEwHwYDVR0j BBgwFoAUN7twkZYErDGiQj/i3R+bectZ9/QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTllN2NhMzktOGRiYy00MjgyLWEwZDMtODQ4MDIzNzI2ODYyLzAvMzdCQjcwOTE5 NjA0QUMzMUEyNDIzRkUyREQxRjlCNzlDQjU5RjdGNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zN0JCNzA5MTk2MDRBQzMxQTI0MjNGRTJERDFGOUI3OUNCNTlG N0Y0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTllN2NhMzktOGRiYy00MjgyLWEw ZDMtODQ4MDIzNzI2ODYyLzAvMzdCQjcwOTE5NjA0QUMzMUEyNDIzRkUyREQxRjlC NzlDQjU5RjdGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJChRUq/gH2NiIcKg8NzJLrcrzM7V9txKB/S xcamoOp2Oa4g3Sn10AZacLlqQatqNkK+D5iJ12DGpDlVqMHRT4N3zjIbFfrbCbdk c8tL/3oUqfAU9EU9mmH03vdXFnxf57j0XKSj7cbDxOn2MXsClAp1i/j4u29hagmx nfrV3A1xmNucxmHBpHi304aEBUGYhRT7q9JdjhgJYqICnAibqThtHm7YbEUmND7B Ws4A54J5KvUor5UWlPfAv6Yiuwfjw0OdY7zX/N5xByw4Cu0bVegngXzdEfp8jabU T7pi6DkhMkB2i67NiHv8Iw1RpqJZ31LKzDVpL/+YkkIgG3QSv+A= -----END CERTIFICATE-----Generated at Wed May 13 00:20:41 2026 by rpki-client