$ rpki-client -vvf rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.mft File: D37E9EB2F98E29CDF13865332666AEFB23184FEB.mft (raw, json) Hash identifier: F+rgLqJRkiDduxBIWFHtHpBo0JFC7DMtWvPZARygvj8= Subject key identifier: 69:EC:14:C4:C7:B7:A9:F3:63:2E:43:22:71:2F:67:EF:16:0A:4F:BA Authority key identifier: D3:7E:9E:B2:F9:8E:29:CD:F1:38:65:33:26:66:AE:FB:23:18:4F:EB Certificate issuer: /CN=D37E9EB2F98E29CDF13865332666AEFB23184FEB Certificate serial: 4748A1B62C8C9C3707E512DC3F2C47DDFFECC031 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.mft Manifest number: 6E Signing time: Fri 24 Jul 2026 02:37:33 +0000 Manifest this update: Fri 24 Jul 2026 02:32:33 +0000 Manifest next update: Sat 25 Jul 2026 06:14:33 +0000 Files and hashes: 1: D37E9EB2F98E29CDF13865332666AEFB23184FEB.crl (hash: I2Ryfzgt5UiKK4KBGLKAcw7jhhndjtAlogyZkNDQ/Ws=) 2: 3136302e31392e3134352e302f32342d3234203d3e203435333035.roa (hash: byftjSeCvMFNmeFpkuYeG9YZa2VCV2p6nFeWhRr4XHM=) 3: 3136302e31392e3134342e302f32342d3234203d3e20313532373838.roa (hash: /Ank/NdhTyFolT1yr2gOxvp0mx0tj8KaBVOQP4gcAxk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.crl rsync://rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 06:14:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:48:a1:b6:2c:8c:9c:37:07:e5:12:dc:3f:2c:47:dd:ff:ec:c0:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D37E9EB2F98E29CDF13865332666AEFB23184FEB Validity Not Before: Jul 24 02:32:33 2026 GMT Not After : Jul 25 06:14:33 2026 GMT Subject: CN=69EC14C4C7B7A9F3632E4322712F67EF160A4FBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:44:fe:8e:6d:e3:81:12:f4:64:b6:a8:fc:e8: 65:08:de:58:88:a3:d9:ec:63:db:f1:ce:39:fb:4e: 37:dd:5b:d3:b4:2a:72:6b:1d:04:ad:f2:4b:0f:0c: 87:ce:ce:ce:c2:9a:25:ad:b1:37:be:54:3b:ae:f8: bc:9a:ff:d9:53:c7:9f:3b:ba:aa:72:a5:a2:f4:c2: f5:7c:9c:8f:c7:db:fc:3d:f6:0e:2f:31:3c:52:8f: 51:cb:71:16:aa:15:2c:81:1f:b2:e0:42:85:ae:3c: f3:44:4f:52:51:f5:d9:7a:b7:ec:b3:78:33:1b:df: 98:a7:a6:f1:67:82:78:bc:93:ec:f8:68:06:88:7c: 45:b7:16:06:85:15:1c:1c:5e:c8:d2:8d:4d:1e:75: fe:b8:b8:05:ad:2d:a2:e7:55:0a:87:bd:d9:da:46: 6e:98:e7:3c:e9:84:70:d1:fb:90:93:39:67:21:4d: 5b:d7:02:57:b2:22:0d:bb:80:34:70:83:2b:5d:68: e1:dc:e4:8a:92:11:0e:09:b0:95:87:32:f3:bf:78: 00:09:d5:a8:40:53:08:3c:c2:54:87:fe:bd:cd:48: f9:a6:bf:ce:5a:d2:6c:8f:6f:fc:13:af:ff:95:fd: c1:dc:2e:06:79:a9:7b:a5:6b:6b:82:c2:cc:ed:0b: f5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:EC:14:C4:C7:B7:A9:F3:63:2E:43:22:71:2F:67:EF:16:0A:4F:BA X509v3 Authority Key Identifier: keyid:D3:7E:9E:B2:F9:8E:29:CD:F1:38:65:33:26:66:AE:FB:23:18:4F:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:c0:31:06:83:ed:ba:42:91:68:23:e7:ef:76:8a:40:a6:04: 25:07:7c:72:7a:36:ea:ab:13:8a:c4:b9:27:a7:46:9f:a9:a7: 15:7f:3c:c0:0b:bc:ed:ab:c6:43:0e:77:11:18:04:d1:fc:64: 4b:dd:30:0b:53:fb:de:50:fb:01:fe:4f:f3:16:27:bd:cc:4d: 25:1f:17:63:e5:d0:f4:10:31:c6:f8:96:68:7c:36:90:d5:b1: d8:cf:69:05:b3:9c:85:94:61:3c:22:6d:d0:63:23:5b:78:dc: e6:55:94:7c:e0:22:20:a8:1d:85:9c:52:bb:52:5d:e6:b6:e2: 38:5e:46:01:f6:bf:46:f3:4b:56:0c:ff:45:cb:a7:db:cc:53: ac:ad:f1:1f:54:59:28:3f:72:f1:cd:ef:e4:c0:a4:19:7c:c0: e8:ce:3c:a3:49:10:bb:d1:df:71:be:0d:ef:28:22:03:32:6b: 18:64:f7:34:13:6c:33:3c:e2:2e:72:9a:fd:1a:3b:c0:a5:89: 4f:a1:1b:cd:11:47:ff:f7:49:5d:54:31:3a:2d:75:79:c1:d1: 43:45:7d:82:29:3a:f3:21:ae:63:b2:e2:84:b5:b3:c6:33:60: 5b:bf:05:82:2b:f4:c5:ed:2b:7d:6c:21:7b:59:fa:e0:60:06: cc:75:cf:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR0ihtiyMnDcH5RLcPyxH3f/swDEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM3RTlFQjJGOThFMjlDREYxMzg2NTMzMjY2NkFFRkIy MzE4NEZFQjAeFw0yNjA3MjQwMjMyMzNaFw0yNjA3MjUwNjE0MzNaMDMxMTAvBgNV BAMTKDY5RUMxNEM0QzdCN0E5RjM2MzJFNDMyMjcxMkY2N0VGMTYwQTRGQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPRP6ObeOBEvRktqj86GUI3liI o9nsY9vxzjn7TjfdW9O0KnJrHQSt8ksPDIfOzs7CmiWtsTe+VDuu+Lya/9lTx587 uqpypaL0wvV8nI/H2/w99g4vMTxSj1HLcRaqFSyBH7LgQoWuPPNET1JR9dl6t+yz eDMb35inpvFngni8k+z4aAaIfEW3FgaFFRwcXsjSjU0edf64uAWtLaLnVQqHvdna Rm6Y5zzphHDR+5CTOWchTVvXAleyIg27gDRwgytdaOHc5IqSEQ4JsJWHMvO/eAAJ 1ahAUwg8wlSH/r3NSPmmv85a0myPb/wTr/+V/cHcLgZ5qXula2uCwsztC/VvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaewUxMe3qfNjLkMicS9n7xYKT7owHwYDVR0j BBgwFoAU036esvmOKc3xOGUzJmau+yMYT+swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTJlNWZmODEtYjA4Mi00MzM0LWFkMjktNTVkYzhkMWU1M2I5LzAvRDM3RTlFQjJG OThFMjlDREYxMzg2NTMzMjY2NkFFRkIyMzE4NEZFQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EMzdFOUVCMkY5OEUyOUNERjEzODY1MzMyNjY2QUVGQjIzMTg0 RkVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTJlNWZmODEtYjA4Mi00MzM0LWFk MjktNTVkYzhkMWU1M2I5LzAvRDM3RTlFQjJGOThFMjlDREYxMzg2NTMzMjY2NkFF RkIyMzE4NEZFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE/AMQaD7bpCkWgj5+92ikCmBCUHfHJ6Nuqr E4rEuSenRp+ppxV/PMALvO2rxkMOdxEYBNH8ZEvdMAtT+95Q+wH+T/MWJ73MTSUf F2Pl0PQQMcb4lmh8NpDVsdjPaQWznIWUYTwibdBjI1t43OZVlHzgIiCoHYWcUrtS Xea24jheRgH2v0bzS1YM/0XLp9vMU6yt8R9UWSg/cvHN7+TApBl8wOjOPKNJELvR 33G+De8oIgMyaxhk9zQTbDM84i5ymv0aO8CliU+hG80RR//3SV1UMTotdXnB0UNF fYIpOvMhrmOy4oS1s8YzYFu/BYIr9MXtK31sIXtZ+uBgBsx1z/g= -----END CERTIFICATE-----Generated at Fri Jul 24 08:46:10 2026 by rpki-client