$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/37F03E3124DF827AEC6F617458716798083055BC.mft File: 37F03E3124DF827AEC6F617458716798083055BC.mft (raw, json) Hash identifier: qIC1hjw1m/rznv7sE/gmVUs2KinS8adR7cYEtCjqhxc= Subject key identifier: 42:F9:C9:B4:2E:B8:51:98:46:6C:77:59:4D:3E:5B:34:B0:85:28:9B Authority key identifier: 37:F0:3E:31:24:DF:82:7A:EC:6F:61:74:58:71:67:98:08:30:55:BC Certificate issuer: /CN=37F03E3124DF827AEC6F617458716798083055BC Certificate serial: 16E609A79CACC88E6EA731705A02A41F060970C5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37F03E3124DF827AEC6F617458716798083055BC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/37F03E3124DF827AEC6F617458716798083055BC.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 21:07:07 +0000 Manifest this update: Wed 23 Sep 2026 21:02:07 +0000 Manifest next update: Fri 25 Sep 2026 00:20:07 +0000 Files and hashes: 1: 3130332e3138392e3230312e302f32342d3234203d3e2039333431.roa (hash: p+akLfy0WmwcWwKoICEgVlXEAKS1XaUc7gLYGzrKupw=) 2: 37F03E3124DF827AEC6F617458716798083055BC.crl (hash: 8usilbeTRzPbVFvyTFufZPi0mUkD46aM9N671T2DWLI=) 3: 3130332e3138392e3230302e302f32332d3233203d3e2039333431.roa (hash: dsSBEZ+RmcKKQ/S8RAk9jCD+91Y66d5ktHEFnBxIwCc=) 4: 3130332e3138392e3230302e302f32342d3234203d3e2039333431.roa (hash: zaT8QtBX8CWaeAVSKVLb2kSXw2+Ap6i51NDs3hsOZzg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/37F03E3124DF827AEC6F617458716798083055BC.crl rsync://rpki-rsync.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/37F03E3124DF827AEC6F617458716798083055BC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37F03E3124DF827AEC6F617458716798083055BC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 00:20:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:e6:09:a7:9c:ac:c8:8e:6e:a7:31:70:5a:02:a4:1f:06:09:70:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37F03E3124DF827AEC6F617458716798083055BC Validity Not Before: Sep 23 21:02:07 2026 GMT Not After : Sep 25 00:20:07 2026 GMT Subject: CN=42F9C9B42EB85198466C77594D3E5B34B085289B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:66:fc:8f:d6:a7:4f:98:ae:e7:bf:a6:3f:03: eb:4e:b9:c3:f7:07:73:2f:7c:cb:3c:a9:08:86:10: 2e:ea:55:12:bd:44:96:aa:d1:4e:8a:b3:43:0e:b0: e1:52:53:02:72:e0:7b:c2:08:c6:8f:0c:c4:31:39: 91:5d:ca:fc:b9:ce:98:68:00:1c:0b:b7:b5:14:ec: 47:23:ca:c4:2f:d3:d7:62:bc:ea:f9:36:48:cf:1b: dd:30:2b:0f:03:3c:4e:51:c7:33:f3:ab:e8:ca:55: 5e:e5:87:69:89:2d:32:5e:ee:46:f9:3a:68:d9:e2: e3:dc:c0:60:2e:b6:95:f6:d0:2d:83:f4:95:98:38: aa:60:6d:79:29:3f:1c:72:13:92:bb:2e:47:86:17: 8d:2a:76:27:38:4e:fd:c1:d0:74:2d:cc:60:d4:33: d4:6f:0f:f4:8c:c9:6b:26:b1:19:ec:4b:06:21:03: ae:28:ef:ee:39:3a:14:fc:4e:9e:fe:29:20:16:44: 78:99:fb:91:4f:3f:88:c1:a4:49:fc:d4:68:4f:f3: 48:1a:d6:8f:c3:ea:70:b9:af:3d:55:42:cb:c8:4c: aa:a7:60:03:68:d0:85:63:64:59:2a:d7:49:0d:dc: ad:4f:56:45:8d:81:38:06:b0:c1:38:d6:d7:56:4f: 15:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:F9:C9:B4:2E:B8:51:98:46:6C:77:59:4D:3E:5B:34:B0:85:28:9B X509v3 Authority Key Identifier: keyid:37:F0:3E:31:24:DF:82:7A:EC:6F:61:74:58:71:67:98:08:30:55:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/37F03E3124DF827AEC6F617458716798083055BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37F03E3124DF827AEC6F617458716798083055BC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/37F03E3124DF827AEC6F617458716798083055BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:bb:29:8f:40:d2:8a:06:01:ac:5d:fc:3c:28:55:7a:a4:3a: b1:9a:bb:c0:58:ba:1f:78:42:64:5d:39:4f:86:a7:0f:85:16: ea:74:84:05:9d:3b:63:36:1b:07:da:3e:00:10:5e:c4:e4:fc: 45:35:bb:63:2d:5e:43:b6:95:a9:71:4e:c8:4b:99:6d:ac:1d: d7:07:5e:1e:28:70:86:73:24:ea:de:8a:aa:b8:18:9c:dd:96: ee:cd:58:d3:a9:a6:3b:cc:80:92:b3:c3:c2:79:ac:18:de:1b: 8c:03:81:ef:0a:96:3e:7a:ce:73:2b:35:a1:34:ce:74:19:ea: f9:f0:7c:03:fd:46:6c:78:04:43:6b:17:54:e5:33:58:a6:3d: 74:ec:ce:a3:92:ec:91:0c:57:32:24:0f:b4:3c:93:27:0a:c4: b7:4f:17:86:f4:86:57:31:05:e5:95:b9:f4:9e:a7:76:56:d3: c3:f8:05:b0:c9:f5:0d:f7:a4:94:76:f0:6f:70:17:c1:a0:2c: 08:93:a9:a8:b1:eb:7c:78:f6:25:f4:42:ae:58:6e:29:1f:8e: 62:35:79:dc:bd:ca:98:31:cf:53:d9:e3:19:6c:f6:e8:b1:00: ba:6c:0a:8c:11:c3:04:66:ee:e6:08:18:a6:5e:78:7b:b3:da: 51:d3:b1:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFuYJp5ysyI5upzFwWgKkHwYJcMUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdGMDNFMzEyNERGODI3QUVDNkY2MTc0NTg3MTY3OTgw ODMwNTVCQzAeFw0yNjA5MjMyMTAyMDdaFw0yNjA5MjUwMDIwMDdaMDMxMTAvBgNV BAMTKDQyRjlDOUI0MkVCODUxOTg0NjZDNzc1OTREM0U1QjM0QjA4NTI4OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3ZvyP1qdPmK7nv6Y/A+tOucP3 B3MvfMs8qQiGEC7qVRK9RJaq0U6Ks0MOsOFSUwJy4HvCCMaPDMQxOZFdyvy5zpho ABwLt7UU7EcjysQv09divOr5NkjPG90wKw8DPE5RxzPzq+jKVV7lh2mJLTJe7kb5 OmjZ4uPcwGAutpX20C2D9JWYOKpgbXkpPxxyE5K7LkeGF40qdic4Tv3B0HQtzGDU M9RvD/SMyWsmsRnsSwYhA64o7+45OhT8Tp7+KSAWRHiZ+5FPP4jBpEn81GhP80ga 1o/D6nC5rz1VQsvITKqnYANo0IVjZFkq10kN3K1PVkWNgTgGsME41tdWTxXlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQvnJtC64UZhGbHdZTT5bNLCFKJswHwYDVR0j BBgwFoAUN/A+MSTfgnrsb2F0WHFnmAgwVbwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2EyZTVmMDMtYmY5Ni00YjQwLWJkNGEtNmUzODg4YzQwMjA1LzAvMzdGMDNFMzEy NERGODI3QUVDNkY2MTc0NTg3MTY3OTgwODMwNTVCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zN0YwM0UzMTI0REY4MjdBRUM2RjYxNzQ1ODcxNjc5ODA4MzA1 NUJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2EyZTVmMDMtYmY5Ni00YjQwLWJk NGEtNmUzODg4YzQwMjA1LzAvMzdGMDNFMzEyNERGODI3QUVDNkY2MTc0NTg3MTY3 OTgwODMwNTVCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKK7KY9A0ooGAaxd/DwoVXqkOrGau8BYuh94 QmRdOU+Gpw+FFup0hAWdO2M2GwfaPgAQXsTk/EU1u2MtXkO2lalxTshLmW2sHdcH Xh4ocIZzJOreiqq4GJzdlu7NWNOppjvMgJKzw8J5rBjeG4wDge8Klj56znMrNaE0 znQZ6vnwfAP9Rmx4BENrF1TlM1imPXTszqOS7JEMVzIkD7Q8kycKxLdPF4b0hlcx BeWVufSep3ZW08P4BbDJ9Q33pJR28G9wF8GgLAiTqaix63x49iX0Qq5YbikfjmI1 edy9ypgxz1PZ4xls9uixALpsCowRwwRm7uYIGKZeeHuz2lHTseg= -----END CERTIFICATE-----Generated at Thu Sep 24 18:26:03 2026 by rpki-client