
$ rpki-client -vvf repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/37A94886A0E275DC8F922930328C955CC4307FF1.mft
File: 37A94886A0E275DC8F922930328C955CC4307FF1.mft (raw, json)
Hash identifier: DzCu2Jw0fKQICNZb30quhQABc6haUwNI6T9r3Qxpjbg=
Subject key identifier: 19:10:7D:D0:FF:81:0F:60:1C:08:99:4C:78:FE:83:9B:34:DF:6E:DA
Authority key identifier: 37:A9:48:86:A0:E2:75:DC:8F:92:29:30:32:8C:95:5C:C4:30:7F:F1
Certificate issuer: /CN=37A94886A0E275DC8F922930328C955CC4307FF1
Certificate serial: 21A559B34F6C13528A0250D5DEDE4D196D925057
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37A94886A0E275DC8F922930328C955CC4307FF1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/37A94886A0E275DC8F922930328C955CC4307FF1.mft
Manifest number: 013A
Signing time: Sat 28 Feb 2026 13:42:33 +0000
Manifest this update: Sat 28 Feb 2026 13:37:33 +0000
Manifest next update: Tue 03 Mar 2026 15:09:33 +0000
Files and hashes: 1: 33362e35302e3235332e302f32342d3234203d3e20313338383239.roa (hash: K614n2L+d8fiCVgpbPYwtvyP0HHCDEIeDO9qqortOwg=)
2: 37A94886A0E275DC8F922930328C955CC4307FF1.crl (hash: qgLO4GazDyuR1XbYjM9FHpP+L7ygvzkymODrZQ6mi8o=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/37A94886A0E275DC8F922930328C955CC4307FF1.crl
rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/37A94886A0E275DC8F922930328C955CC4307FF1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37A94886A0E275DC8F922930328C955CC4307FF1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 15:09:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:a5:59:b3:4f:6c:13:52:8a:02:50:d5:de:de:4d:19:6d:92:50:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37A94886A0E275DC8F922930328C955CC4307FF1
Validity
Not Before: Feb 28 13:37:33 2026 GMT
Not After : Mar 3 15:09:33 2026 GMT
Subject: CN=19107DD0FF810F601C08994C78FE839B34DF6EDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f0:d5:06:f1:21:6d:7d:64:2f:8a:63:28:71:
8d:af:8b:dd:9e:61:5f:76:6e:2f:82:27:21:9f:6a:
b8:5f:e0:f8:f7:1e:bc:53:c1:a0:af:64:bd:d4:cb:
8c:c1:af:4f:5b:3d:1f:88:58:39:39:3d:0c:61:44:
fa:76:ed:7c:ba:34:63:ff:07:88:06:fa:ad:d4:4f:
35:c4:36:c4:2e:c0:ad:a9:a3:f2:24:cc:24:67:52:
e7:fa:42:78:60:62:37:3b:ab:54:4c:bb:75:b0:35:
ed:88:85:4e:9a:d6:dc:74:f3:ba:34:a7:dc:6c:b0:
6c:4e:01:dd:16:64:d7:9d:ad:79:96:66:65:47:42:
cf:56:82:26:8e:91:a1:5d:e8:12:a4:bf:b0:e1:22:
24:bf:ae:f5:87:74:c8:2d:0e:32:84:14:bd:14:12:
1f:28:fc:7d:8c:8c:1d:89:fc:da:b6:0f:bb:98:b0:
11:47:14:2a:b6:bf:ca:ee:05:2c:52:44:24:89:99:
00:ee:7d:02:f8:76:60:32:36:6d:f7:e5:e8:69:50:
d4:45:0f:c6:47:51:93:50:3b:db:da:f9:de:af:e8:
92:1b:15:c5:bb:ce:7c:db:39:ed:d6:c1:7f:2c:a9:
aa:71:1c:63:20:79:c0:cd:39:d1:ed:df:a0:fc:18:
c8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:10:7D:D0:FF:81:0F:60:1C:08:99:4C:78:FE:83:9B:34:DF:6E:DA
X509v3 Authority Key Identifier:
keyid:37:A9:48:86:A0:E2:75:DC:8F:92:29:30:32:8C:95:5C:C4:30:7F:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/37A94886A0E275DC8F922930328C955CC4307FF1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37A94886A0E275DC8F922930328C955CC4307FF1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/37A94886A0E275DC8F922930328C955CC4307FF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:f3:02:97:9f:46:af:da:33:4a:80:54:8f:51:75:a5:4e:22:
9f:66:41:a8:0c:74:cc:82:11:2e:b9:7b:8a:b6:38:61:a4:ae:
ea:d4:b2:33:6f:3f:d9:4d:48:c0:a9:ec:f5:fa:9c:c4:06:7f:
a2:64:9c:fd:06:39:f7:2a:f5:ec:32:6d:b7:c5:a2:7f:8d:fb:
a5:a2:0c:c7:2f:7b:4b:46:91:5c:62:1c:86:96:28:9c:db:80:
88:a8:71:80:f1:a6:74:5d:59:c9:33:22:bf:82:4f:58:36:ed:
2c:23:2e:d6:81:b8:14:62:b1:12:42:47:5d:1a:87:85:28:d0:
48:00:58:89:59:45:7a:9b:bb:4e:99:0a:aa:af:1e:2e:5e:96:
e5:4d:22:d0:f8:b2:e1:4f:8a:43:46:a5:27:b7:68:94:78:b6:
cb:8f:71:2a:46:1a:ca:2b:39:c4:3e:a2:05:db:07:19:c2:b4:
25:f2:57:74:ec:77:d7:6d:62:8b:77:b9:cb:50:ff:a5:c5:c7:
c8:00:2b:60:22:32:23:f6:e6:c3:dc:10:53:5e:25:a2:d8:60:
8a:06:ac:e2:39:48:a9:4a:e5:1e:74:cc:92:2e:41:9e:f5:ac:
f9:8b:ab:55:3d:ee:5b:21:98:e1:df:61:ba:f9:10:7f:3a:2f:
72:d4:27:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:26:21 2026 by rpki-client