
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/37F03E3124DF827AEC6F617458716798083055BC.mft
File: 37F03E3124DF827AEC6F617458716798083055BC.mft (raw, json)
Hash identifier: royVO81Nt+PFoTpWdhX1QgE7BZ+cbs2yCL20XYE9OH0=
Subject key identifier: 95:0E:93:39:62:49:9C:56:5B:2B:1B:63:4F:F7:66:8A:A0:86:9D:82
Authority key identifier: 37:F0:3E:31:24:DF:82:7A:EC:6F:61:74:58:71:67:98:08:30:55:BC
Certificate issuer: /CN=37F03E3124DF827AEC6F617458716798083055BC
Certificate serial: 0615B3902EB54C120C7EBDBBD07255BA982078DF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37F03E3124DF827AEC6F617458716798083055BC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/37F03E3124DF827AEC6F617458716798083055BC.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 13:26:23 +0000
Manifest this update: Thu 23 Jul 2026 13:21:23 +0000
Manifest next update: Fri 24 Jul 2026 16:15:23 +0000
Files and hashes: 1: 3130332e3138392e3230302e302f32342d3234203d3e2039333431.roa (hash: zaT8QtBX8CWaeAVSKVLb2kSXw2+Ap6i51NDs3hsOZzg=)
2: 3130332e3138392e3230302e302f32332d3233203d3e2039333431.roa (hash: dsSBEZ+RmcKKQ/S8RAk9jCD+91Y66d5ktHEFnBxIwCc=)
3: 37F03E3124DF827AEC6F617458716798083055BC.crl (hash: 8+3gezryzu7v89YDO+C3s0UHt8IiC3UiNtSCKEd3Ego=)
4: 3130332e3138392e3230312e302f32342d3234203d3e2039333431.roa (hash: p+akLfy0WmwcWwKoICEgVlXEAKS1XaUc7gLYGzrKupw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/37F03E3124DF827AEC6F617458716798083055BC.crl
rsync://rpki-rsync.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/37F03E3124DF827AEC6F617458716798083055BC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37F03E3124DF827AEC6F617458716798083055BC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 16:15:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:15:b3:90:2e:b5:4c:12:0c:7e:bd:bb:d0:72:55:ba:98:20:78:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37F03E3124DF827AEC6F617458716798083055BC
Validity
Not Before: Jul 23 13:21:23 2026 GMT
Not After : Jul 24 16:15:23 2026 GMT
Subject: CN=950E933962499C565B2B1B634FF7668AA0869D82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a8:47:ba:89:36:0f:b4:46:0e:3a:5d:2c:e3:
9f:ba:11:d6:55:d9:eb:2c:dd:04:6b:29:ba:16:a8:
96:cb:3c:c5:99:67:e5:38:03:a5:fd:3c:17:c5:5d:
9f:ce:e9:3f:4e:15:90:a4:15:73:66:49:d3:14:bc:
14:30:4b:5c:16:d4:3c:d1:91:87:07:7d:26:dc:cc:
ec:b7:46:10:f6:b9:48:dd:de:69:a9:00:9e:8d:a9:
97:41:c4:0d:df:a0:22:3e:7a:32:2f:ec:78:7d:1b:
68:b2:33:c1:d4:1e:04:b2:0a:b7:c7:b6:3f:01:ce:
c9:40:6f:f9:62:26:46:7d:10:17:be:7b:29:51:15:
ec:fd:63:f5:2b:63:9c:97:d8:72:fe:12:b9:e4:37:
d9:cf:02:6c:d8:15:5f:4b:91:b2:b8:71:0d:ab:87:
93:20:d6:9c:7f:5e:cf:fa:80:28:99:e2:c5:1d:9b:
2c:90:09:f7:a2:58:6f:3b:d6:8c:c6:35:a6:6c:7a:
a6:dd:57:a8:81:79:41:04:43:e7:44:3e:91:38:fa:
85:72:14:01:0c:1d:9e:27:00:ca:b3:0a:3a:16:85:
71:e3:c5:da:6e:5f:c4:db:5b:f7:64:27:e8:31:15:
b7:98:74:00:e7:25:b2:b4:14:84:9e:87:5f:e8:9f:
03:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:0E:93:39:62:49:9C:56:5B:2B:1B:63:4F:F7:66:8A:A0:86:9D:82
X509v3 Authority Key Identifier:
keyid:37:F0:3E:31:24:DF:82:7A:EC:6F:61:74:58:71:67:98:08:30:55:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/37F03E3124DF827AEC6F617458716798083055BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37F03E3124DF827AEC6F617458716798083055BC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/37F03E3124DF827AEC6F617458716798083055BC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:90:5b:46:1e:2c:6f:48:86:18:bc:da:7b:a6:07:99:42:bf:
83:f1:9a:6e:7d:8c:ab:ca:88:66:fe:22:58:37:98:fa:06:74:
1e:de:f3:27:f9:75:a5:c3:17:a3:b2:2c:e6:d0:69:d4:88:ae:
c3:80:0c:c0:05:eb:69:bb:cf:f8:04:e3:8c:c2:e7:59:13:7f:
78:01:fd:c6:44:10:e0:ff:e7:73:06:08:58:f4:e5:b1:17:e6:
50:1f:0e:ab:64:88:9c:d7:b2:b7:fe:15:88:47:d9:0f:3c:eb:
cc:52:c7:54:4a:0a:b0:d7:bf:02:60:c8:97:2e:d4:18:76:77:
81:ed:3c:9a:ad:1a:cd:38:23:db:91:a1:02:53:e4:38:51:3d:
90:bf:ad:b1:87:31:27:fe:12:4e:91:27:13:b6:2c:aa:bb:9d:
18:9d:13:4d:a2:3a:f9:cf:9f:18:42:cd:37:35:65:d5:c7:96:
52:4d:8e:fe:70:dd:a3:9b:4b:b8:0e:6c:63:61:62:d0:51:4b:
79:d8:d2:f0:ed:a8:e2:5b:26:8e:f3:c4:15:59:3c:68:0a:0d:
78:7d:6b:1e:dc:48:06:c6:d5:3c:70:23:a3:e9:99:c2:32:7c:
54:fa:e3:b8:d2:8a:67:8a:22:e9:60:49:3b:f5:01:67:07:9a:
40:49:4b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:16:58 2026 by rpki-client