$ rpki-client -vvvf rpki-rsync.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.mft File: 37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.mft (raw, json) Hash identifier: qaf9Iyhcm2eUpm24pBjWbKS7ms5QIr8lRxZlQfiFVc8= Subject key identifier: 76:BD:9C:1B:4E:B9:85:15:8A:07:64:51:AA:ED:36:C8:87:42:0C:5E Authority key identifier: 37:BB:70:91:96:04:AC:31:A2:42:3F:E2:DD:1F:9B:79:CB:59:F7:F4 Certificate issuer: /CN=37BB70919604AC31A2423FE2DD1F9B79CB59F7F4 Certificate serial: 792D5AF43C05E4C49990484A71A040AE1D7C0C4A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 23:40:15 +0000 Manifest this update: Wed 23 Sep 2026 23:35:15 +0000 Manifest next update: Fri 25 Sep 2026 00:26:15 +0000 Files and hashes: 1: 37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.crl (hash: vMV3ZwQdnqgdKu8ik+aLYKOOB/+iHqYzPp/hEOw7Y2Y=) 2: 3130332e332e3233322e302f32342d3234203d3e20313531353238.roa (hash: Im3o8YUekrl4UUhItVyydZhi8GU6lVLXxpRk9EL/+Ow=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.crl rsync://rpki-rsync.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 00:26:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:2d:5a:f4:3c:05:e4:c4:99:90:48:4a:71:a0:40:ae:1d:7c:0c:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37BB70919604AC31A2423FE2DD1F9B79CB59F7F4 Validity Not Before: Sep 23 23:35:15 2026 GMT Not After : Sep 25 00:26:15 2026 GMT Subject: CN=76BD9C1B4EB985158A076451AAED36C887420C5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:1c:51:39:47:b7:e3:c1:42:d4:b9:b1:34:01: 9f:22:79:8c:11:ef:1a:82:be:af:4b:96:c3:8d:61: 7a:05:ef:36:c0:79:4d:0a:d8:f2:a3:c8:1d:b0:ec: bc:62:3b:53:a3:54:93:ae:0b:92:ed:c5:e6:51:3b: 95:63:ed:ac:c6:55:de:c5:8b:2d:b0:a1:84:16:8b: 0c:33:d2:b9:f1:2c:2d:2f:0e:4c:b8:43:9a:33:5a: 57:15:75:ea:de:6a:c2:a6:06:51:54:fa:2c:47:2f: ea:8e:5c:c7:54:0d:70:f3:72:dd:9b:f9:bd:83:1a: 0f:7b:fe:cd:77:7b:3d:91:cd:fc:99:9f:e0:77:67: 2f:21:ab:4c:12:d2:c3:06:24:94:3e:cd:8c:8e:3c: fd:a1:36:cc:5f:7e:f8:a1:08:d0:89:34:1f:c4:ee: 2f:16:de:ef:87:53:b0:af:43:4f:2d:bb:ef:54:9f: 97:22:78:2a:23:40:2a:40:89:dd:c9:51:b7:4d:f0: 3f:89:ed:63:51:45:ea:f4:5d:b0:a2:b8:6a:5e:a0: 60:26:cc:6a:1e:e3:09:ff:05:10:22:31:3c:d9:da: 3c:f3:09:00:1d:f8:83:b5:d1:fc:9e:b7:d7:0a:eb: 9c:a8:25:99:e6:77:d7:9a:c5:91:ac:c2:d3:e7:2b: 9d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:BD:9C:1B:4E:B9:85:15:8A:07:64:51:AA:ED:36:C8:87:42:0C:5E X509v3 Authority Key Identifier: keyid:37:BB:70:91:96:04:AC:31:A2:42:3F:E2:DD:1F:9B:79:CB:59:F7:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:53:3b:4a:6c:12:71:86:c9:c7:2e:d0:fb:5f:4d:f2:1e:c2: ff:2f:3e:0e:7a:51:3e:1c:87:e1:e8:64:7a:d3:31:76:94:04: 2c:c3:5b:f8:0f:22:11:ad:e3:97:7c:e7:48:1b:7b:00:03:6c: bc:88:52:b7:07:0d:3c:5d:62:79:94:6e:3b:24:30:08:04:b1: 43:f1:5d:04:20:09:9e:b2:f5:38:5f:d4:ad:71:2d:5a:5c:fe: a0:91:59:40:a8:05:c3:da:59:f4:65:8c:2a:93:85:b7:83:7b: 35:e7:e5:ee:79:d1:a5:e0:28:32:54:aa:d1:2a:cf:58:b4:61: 81:a6:77:84:8d:b3:b1:f0:a4:a3:d7:16:05:05:66:1f:e7:5a: 7f:93:6f:2b:1f:ef:63:19:1c:6e:39:8a:88:55:9f:55:2a:cb: b7:0b:0f:59:a8:49:68:8b:d1:36:cf:ca:fd:84:27:1c:9d:16: 17:06:06:6b:12:de:c8:d0:e5:8b:fe:79:93:24:6a:04:cd:2e: 71:ea:62:69:27:c5:ab:63:73:1b:43:0c:c1:1f:03:ba:91:69: 6a:c6:12:29:a3:a4:7a:e8:38:ac:45:d3:1a:ca:fe:3d:8a:2d: 58:44:8c:1b:0e:56:49:37:39:99:d9:7a:19:6c:96:61:fd:86: 50:1d:a8:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeS1a9DwF5MSZkEhKcaBArh18DEowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdCQjcwOTE5NjA0QUMzMUEyNDIzRkUyREQxRjlCNzlD QjU5RjdGNDAeFw0yNjA5MjMyMzM1MTVaFw0yNjA5MjUwMDI2MTVaMDMxMTAvBgNV BAMTKDc2QkQ5QzFCNEVCOTg1MTU4QTA3NjQ1MUFBRUQzNkM4ODc0MjBDNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiHFE5R7fjwULUubE0AZ8ieYwR 7xqCvq9LlsONYXoF7zbAeU0K2PKjyB2w7LxiO1OjVJOuC5LtxeZRO5Vj7azGVd7F iy2woYQWiwwz0rnxLC0vDky4Q5ozWlcVdereasKmBlFU+ixHL+qOXMdUDXDzct2b +b2DGg97/s13ez2RzfyZn+B3Zy8hq0wS0sMGJJQ+zYyOPP2hNsxffvihCNCJNB/E 7i8W3u+HU7CvQ08tu+9Un5cieCojQCpAid3JUbdN8D+J7WNRRer0XbCiuGpeoGAm zGoe4wn/BRAiMTzZ2jzzCQAd+IO10fyet9cK65yoJZnmd9eaxZGswtPnK53jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdr2cG065hRWKB2RRqu02yIdCDF4wHwYDVR0j BBgwFoAUN7twkZYErDGiQj/i3R+bectZ9/QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTllN2NhMzktOGRiYy00MjgyLWEwZDMtODQ4MDIzNzI2ODYyLzAvMzdCQjcwOTE5 NjA0QUMzMUEyNDIzRkUyREQxRjlCNzlDQjU5RjdGNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zN0JCNzA5MTk2MDRBQzMxQTI0MjNGRTJERDFGOUI3OUNCNTlG N0Y0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTllN2NhMzktOGRiYy00MjgyLWEw ZDMtODQ4MDIzNzI2ODYyLzAvMzdCQjcwOTE5NjA0QUMzMUEyNDIzRkUyREQxRjlC NzlDQjU5RjdGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ5TO0psEnGGyccu0PtfTfIewv8vPg56UT4c h+HoZHrTMXaUBCzDW/gPIhGt45d850gbewADbLyIUrcHDTxdYnmUbjskMAgEsUPx XQQgCZ6y9Thf1K1xLVpc/qCRWUCoBcPaWfRljCqThbeDezXn5e550aXgKDJUqtEq z1i0YYGmd4SNs7HwpKPXFgUFZh/nWn+Tbysf72MZHG45iohVn1Uqy7cLD1moSWiL 0TbPyv2EJxydFhcGBmsS3sjQ5Yv+eZMkagTNLnHqYmknxatjcxtDDMEfA7qRaWrG EimjpHroOKxF0xrK/j2KLVhEjBsOVkk3OZnZehlslmH9hlAdqN8= -----END CERTIFICATE-----Generated at Thu Sep 24 08:41:56 2026 by rpki-client