$ rpki-client -vvf repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft File: 37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft (raw, json) Hash identifier: tH8XQMwq/SQcwkaLvSbsrQsoQ8jbkaqVaFZGrLvktXQ= Subject key identifier: F3:9C:1E:3A:FD:FC:59:9D:FD:7A:BE:20:EF:A0:E4:0C:DE:BE:C3:1E Authority key identifier: 37:DE:96:17:07:CE:C8:F6:38:34:DC:DB:8C:5A:27:83:76:D5:1A:C8 Certificate issuer: /CN=37DE961707CEC8F63834DCDB8C5A278376D51AC8 Certificate serial: 257A6D2DE1F5DA2C8636285230D167BB2500126C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37DE961707CEC8F63834DCDB8C5A278376D51AC8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft Manifest number: 0558 Signing time: Mon 02 Mar 2026 05:51:57 +0000 Manifest this update: Mon 02 Mar 2026 05:46:57 +0000 Manifest next update: Thu 05 Mar 2026 13:17:57 +0000 Files and hashes: 1: 3130332e3231372e3231372e302f32342d3234203d3e203234353239.roa (hash: r6bDLYYIyERHbAoCwxWGZY4ywTgVflQracjKfLYbn5I=) 2: 3130332e3231372e3231362e302f32342d3234203d3e203234353239.roa (hash: CSDWBlIV2G6aqdhFlFLDoZ0ooert/+t0AJaoDV04pCg=) 3: 3130332e3231372e3231382e302f32342d3234203d3e203234353239.roa (hash: r5FJio9tKv9JNtA5eG5F3RQatFMR61KMFIqTgV3qbBk=) 4: 37DE961707CEC8F63834DCDB8C5A278376D51AC8.crl (hash: RQ/x9cCdL6oeTnm9QAXTGDG5/5WU1EjYNkw30Eihna8=) 5: 3130332e3231372e3231392e302f32342d3234203d3e203234353239.roa (hash: RtJ2p5QNEW/uF9klgSx5eHDHY6XjqqipAM/35eEdr1s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.crl rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37DE961707CEC8F63834DCDB8C5A278376D51AC8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:7a:6d:2d:e1:f5:da:2c:86:36:28:52:30:d1:67:bb:25:00:12:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37DE961707CEC8F63834DCDB8C5A278376D51AC8 Validity Not Before: Mar 2 05:46:57 2026 GMT Not After : Mar 5 13:17:57 2026 GMT Subject: CN=F39C1E3AFDFC599DFD7ABE20EFA0E40CDEBEC31E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:77:a3:90:36:38:0d:e1:3b:a7:09:b5:f2:57: 56:e1:b4:51:45:1f:5c:8f:59:dc:6d:25:67:51:a8: 18:5d:62:fd:8f:0d:61:d8:20:9d:63:3c:97:0b:e0: 6b:23:0f:44:ba:80:e0:8d:aa:7b:6c:80:8c:69:70: 38:c3:22:b5:c3:ec:e1:32:1e:13:f2:ec:9c:b0:77: 98:b0:37:2f:4c:fd:d4:8a:c8:9a:5e:ef:ea:59:13: 81:5d:b3:71:d7:a9:e7:39:17:56:af:84:b7:86:90: 71:62:90:45:58:d9:42:07:94:5d:df:3f:44:d9:00: 45:75:f5:30:41:e0:dd:d8:d2:02:99:35:e6:82:9c: 17:80:a3:c8:ff:45:c4:df:ca:36:46:eb:bd:b2:19: c0:ec:22:c6:87:2f:ec:b9:6e:cf:97:3c:c2:ad:0f: 6f:47:9f:93:97:e9:7d:6b:ff:96:24:28:9d:32:23: 0d:a3:93:75:94:72:18:84:87:f5:2f:8e:c2:f1:d4: 9c:06:d2:42:37:ae:45:3f:87:fe:44:16:91:65:87: 0e:74:ca:a1:3f:94:3e:98:4d:0d:40:d0:94:49:e0: fd:e0:70:c3:5f:fe:e5:1c:1c:26:e8:e5:07:f1:f8: 84:5f:5f:ed:85:19:84:ca:d5:d6:5c:08:17:78:b1: b0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:9C:1E:3A:FD:FC:59:9D:FD:7A:BE:20:EF:A0:E4:0C:DE:BE:C3:1E X509v3 Authority Key Identifier: keyid:37:DE:96:17:07:CE:C8:F6:38:34:DC:DB:8C:5A:27:83:76:D5:1A:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37DE961707CEC8F63834DCDB8C5A278376D51AC8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:eb:cc:26:c6:fe:06:93:ab:81:8f:ca:95:5a:04:f0:5d:18: c8:e5:9d:81:5a:90:f9:3d:81:08:cb:25:bc:5b:a0:8b:42:69: 5e:1d:b8:3d:8e:ee:10:4c:f2:8e:3a:6b:3c:6a:21:c7:0b:92: 08:2a:5c:83:c1:b9:cf:58:a5:79:89:32:e9:1e:06:9a:50:2e: 29:dd:f3:29:41:ce:4b:85:88:71:12:20:47:37:b1:8b:b0:65: dd:12:78:d9:2d:5e:f7:13:5f:81:ba:a4:4b:2e:de:76:57:a1: 5b:b4:80:47:a9:84:e3:c0:ab:95:e2:ff:93:a6:c3:dd:6e:d7: b5:17:23:9c:ab:7e:6a:a6:d4:90:c1:58:9f:bd:fa:b6:e8:f5: c7:5c:31:0f:77:39:35:b8:aa:be:bd:24:46:bd:1e:3b:ad:f0: 4c:20:5d:6a:31:e7:1b:6d:b4:46:3d:61:40:ac:99:09:2a:95: 02:6f:c0:1e:a3:cf:f3:78:af:f2:0b:60:f3:bb:61:db:a9:5e: 0a:66:81:f0:c1:5c:67:0c:6a:7d:f8:59:5b:c5:10:66:18:35: 58:d0:c1:e5:dd:e1:23:10:e8:06:7e:b1:36:fa:4f:93:5d:b0: 42:46:d8:69:1f:2b:e3:9d:db:48:8a:1f:74:8e:e6:a5:64:43: 1f:91:2e:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJXptLeH12iyGNihSMNFnuyUAEmwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdERTk2MTcwN0NFQzhGNjM4MzREQ0RCOEM1QTI3ODM3 NkQ1MUFDODAeFw0yNjAzMDIwNTQ2NTdaFw0yNjAzMDUxMzE3NTdaMDMxMTAvBgNV BAMTKEYzOUMxRTNBRkRGQzU5OURGRDdBQkUyMEVGQTBFNDBDREVCRUMzMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGd6OQNjgN4TunCbXyV1bhtFFF H1yPWdxtJWdRqBhdYv2PDWHYIJ1jPJcL4GsjD0S6gOCNqntsgIxpcDjDIrXD7OEy HhPy7Jywd5iwNy9M/dSKyJpe7+pZE4Fds3HXqec5F1avhLeGkHFikEVY2UIHlF3f P0TZAEV19TBB4N3Y0gKZNeaCnBeAo8j/RcTfyjZG672yGcDsIsaHL+y5bs+XPMKt D29Hn5OX6X1r/5YkKJ0yIw2jk3WUchiEh/UvjsLx1JwG0kI3rkU/h/5EFpFlhw50 yqE/lD6YTQ1A0JRJ4P3gcMNf/uUcHCbo5Qfx+IRfX+2FGYTK1dZcCBd4sbAtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU85weOv38WZ39er4g76DkDN6+wx4wHwYDVR0j BBgwFoAUN96WFwfOyPY4NNzbjFong3bVGsgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MjJmNTE1Mi1hMjk1LTQ3YjctYWRkYy1mYmZlZjMyNDdlM2IvMC8zN0RFOTYxNzA3 Q0VDOEY2MzgzNERDREI4QzVBMjc4Mzc2RDUxQUM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzdERTk2MTcwN0NFQzhGNjM4MzREQ0RCOEM1QTI3ODM3NkQ1 MUFDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjIyZjUxNTItYTI5NS00N2I3LWFk ZGMtZmJmZWYzMjQ3ZTNiLzAvMzdERTk2MTcwN0NFQzhGNjM4MzREQ0RCOEM1QTI3 ODM3NkQ1MUFDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALPrzCbG/gaTq4GPypVaBPBdGMjlnYFakPk9 gQjLJbxboItCaV4duD2O7hBM8o46azxqIccLkggqXIPBuc9YpXmJMukeBppQLind 8ylBzkuFiHESIEc3sYuwZd0SeNktXvcTX4G6pEsu3nZXoVu0gEephOPAq5Xi/5Om w91u17UXI5yrfmqm1JDBWJ+9+rbo9cdcMQ93OTW4qr69JEa9Hjut8EwgXWox5xtt tEY9YUCsmQkqlQJvwB6jz/N4r/ILYPO7YdupXgpmgfDBXGcMan34WVvFEGYYNVjQ weXd4SMQ6AZ+sTb6T5NdsEJG2GkfK+Od20iKH3SO5qVkQx+RLo8= -----END CERTIFICATE-----Generated at Mon Mar 2 18:28:22 2026 by rpki-client