$ rpki-client -vvf repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft File: 37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft (raw, json) Hash identifier: tS8p6Okyq5WazJKs11Hwij/cSGs5nRlEb075dVjd7P4= Subject key identifier: 40:35:E5:C5:A8:81:57:DE:51:2E:C8:63:72:E1:58:38:AB:78:42:88 Authority key identifier: 37:DE:96:17:07:CE:C8:F6:38:34:DC:DB:8C:5A:27:83:76:D5:1A:C8 Certificate issuer: /CN=37DE961707CEC8F63834DCDB8C5A278376D51AC8 Certificate serial: 08E84ADCA9FE03B780850FEE802296FB1B06D816 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37DE961707CEC8F63834DCDB8C5A278376D51AC8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft Manifest number: 056C Signing time: Wed 15 Apr 2026 19:31:56 +0000 Manifest this update: Wed 15 Apr 2026 19:26:56 +0000 Manifest next update: Sat 18 Apr 2026 22:54:56 +0000 Files and hashes: 1: 37DE961707CEC8F63834DCDB8C5A278376D51AC8.crl (hash: 0zTR6Leh3mMLp0NhGdq5AsWNMK1FesXvA1PiO6dsA7k=) 2: 3130332e3231372e3231372e302f32342d3234203d3e203234353239.roa (hash: r6bDLYYIyERHbAoCwxWGZY4ywTgVflQracjKfLYbn5I=) 3: 3130332e3231372e3231392e302f32342d3234203d3e203234353239.roa (hash: RtJ2p5QNEW/uF9klgSx5eHDHY6XjqqipAM/35eEdr1s=) 4: 3130332e3231372e3231382e302f32342d3234203d3e203234353239.roa (hash: r5FJio9tKv9JNtA5eG5F3RQatFMR61KMFIqTgV3qbBk=) 5: 3130332e3231372e3231362e302f32342d3234203d3e203234353239.roa (hash: CSDWBlIV2G6aqdhFlFLDoZ0ooert/+t0AJaoDV04pCg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.crl rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37DE961707CEC8F63834DCDB8C5A278376D51AC8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 22:54:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:e8:4a:dc:a9:fe:03:b7:80:85:0f:ee:80:22:96:fb:1b:06:d8:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37DE961707CEC8F63834DCDB8C5A278376D51AC8 Validity Not Before: Apr 15 19:26:56 2026 GMT Not After : Apr 18 22:54:56 2026 GMT Subject: CN=4035E5C5A88157DE512EC86372E15838AB784288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:47:64:4e:15:6f:d2:e0:43:c9:bd:f6:8c:34: 5a:5f:10:49:ed:82:18:25:ad:23:26:79:0a:ed:bc: 30:d6:e3:1f:3d:d0:ce:6a:4f:54:f4:36:6f:b7:e2: 01:91:13:48:cd:64:39:46:54:db:f5:08:24:eb:c6: 34:ca:a9:cd:ec:8b:d3:8a:c7:19:35:9c:6f:e1:20: fd:ef:52:6c:82:5e:89:af:90:db:5b:e2:1b:2f:14: 6d:19:27:6d:d0:89:63:46:14:ff:01:a8:8a:2a:05: 80:9c:06:f2:db:e7:9a:0a:71:8d:ff:2e:85:d2:cb: ba:9c:f9:44:5b:f4:40:96:a3:72:7f:38:dd:b4:f7: 02:18:54:ca:1e:70:4b:0e:6b:a5:2a:a4:40:72:d4: 77:5b:93:31:8a:1a:6b:34:af:79:b8:21:a4:24:b2: b1:c3:a9:47:72:65:d2:01:bd:38:76:e5:5b:d4:31: cb:7c:5b:9d:6c:34:63:e8:20:35:05:dd:84:ef:78: 98:98:0f:31:4d:4a:3b:f3:07:e1:9b:cd:26:71:ef: 99:23:bc:c4:c0:2f:9b:c6:62:9b:88:cf:51:d9:f2: 44:72:d3:c4:6b:80:5f:ff:e5:b2:7d:18:6b:75:7e: 65:22:72:a0:aa:24:20:ab:74:3a:bd:06:e4:2b:a4: 5a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:35:E5:C5:A8:81:57:DE:51:2E:C8:63:72:E1:58:38:AB:78:42:88 X509v3 Authority Key Identifier: keyid:37:DE:96:17:07:CE:C8:F6:38:34:DC:DB:8C:5A:27:83:76:D5:1A:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37DE961707CEC8F63834DCDB8C5A278376D51AC8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:b0:ee:9b:99:be:93:d4:ad:c3:cf:8e:cc:c3:19:9c:b2:f1: f8:84:04:c6:b8:05:38:5d:62:86:5a:98:1c:c0:53:bc:ad:8b: cb:98:8e:79:c9:b0:0f:a6:73:ed:0d:0a:25:58:a9:49:6b:e6: 6a:21:d2:80:52:ec:20:66:0f:c6:e2:03:bf:a0:34:6b:cc:20: 40:67:6d:a1:39:60:c0:2c:33:8e:ea:52:2e:1a:92:2f:87:a4: ec:f1:4b:c6:6a:47:d3:0d:74:a4:43:e4:3c:c1:4c:8a:2f:63: 0e:02:1f:dc:d1:c3:59:7a:6a:31:cb:80:ee:f7:8f:ab:43:ff: 71:34:b4:da:4f:a2:dc:4e:a5:47:f5:9d:e7:aa:17:b4:f1:58: fe:58:df:db:01:51:e8:cc:8b:8b:80:85:11:d4:c2:71:97:44: 7b:0e:76:7f:8e:86:39:c1:78:d9:2e:4f:93:f3:d8:36:39:db: 38:a1:18:ac:2a:a2:98:09:83:d3:59:70:6d:ab:0f:1e:d7:88: 98:67:05:62:e1:57:c7:dc:7a:2a:31:ce:fd:4f:db:d1:2b:aa: 18:8c:1a:9e:48:ae:99:a6:7d:84:fe:48:75:d2:17:79:93:c9: 50:d9:54:00:a7:36:b9:d6:93:df:14:b6:cb:73:27:40:56:09: 7a:c4:90:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCOhK3Kn+A7eAhQ/ugCKW+xsG2BYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdERTk2MTcwN0NFQzhGNjM4MzREQ0RCOEM1QTI3ODM3 NkQ1MUFDODAeFw0yNjA0MTUxOTI2NTZaFw0yNjA0MTgyMjU0NTZaMDMxMTAvBgNV BAMTKDQwMzVFNUM1QTg4MTU3REU1MTJFQzg2MzcyRTE1ODM4QUI3ODQyODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwR2ROFW/S4EPJvfaMNFpfEEnt ghglrSMmeQrtvDDW4x890M5qT1T0Nm+34gGRE0jNZDlGVNv1CCTrxjTKqc3si9OK xxk1nG/hIP3vUmyCXomvkNtb4hsvFG0ZJ23QiWNGFP8BqIoqBYCcBvLb55oKcY3/ LoXSy7qc+URb9ECWo3J/ON209wIYVMoecEsOa6UqpEBy1HdbkzGKGms0r3m4IaQk srHDqUdyZdIBvTh25VvUMct8W51sNGPoIDUF3YTveJiYDzFNSjvzB+GbzSZx75kj vMTAL5vGYpuIz1HZ8kRy08RrgF//5bJ9GGt1fmUicqCqJCCrdDq9BuQrpFoTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQDXlxaiBV95RLshjcuFYOKt4QogwHwYDVR0j BBgwFoAUN96WFwfOyPY4NNzbjFong3bVGsgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MjJmNTE1Mi1hMjk1LTQ3YjctYWRkYy1mYmZlZjMyNDdlM2IvMC8zN0RFOTYxNzA3 Q0VDOEY2MzgzNERDREI4QzVBMjc4Mzc2RDUxQUM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzdERTk2MTcwN0NFQzhGNjM4MzREQ0RCOEM1QTI3ODM3NkQ1 MUFDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjIyZjUxNTItYTI5NS00N2I3LWFk ZGMtZmJmZWYzMjQ3ZTNiLzAvMzdERTk2MTcwN0NFQzhGNjM4MzREQ0RCOEM1QTI3 ODM3NkQ1MUFDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHew7puZvpPUrcPPjszDGZyy8fiEBMa4BThd YoZamBzAU7yti8uYjnnJsA+mc+0NCiVYqUlr5moh0oBS7CBmD8biA7+gNGvMIEBn baE5YMAsM47qUi4aki+HpOzxS8ZqR9MNdKRD5DzBTIovYw4CH9zRw1l6ajHLgO73 j6tD/3E0tNpPotxOpUf1neeqF7TxWP5Y39sBUejMi4uAhRHUwnGXRHsOdn+OhjnB eNkuT5Pz2DY52zihGKwqopgJg9NZcG2rDx7XiJhnBWLhV8fceioxzv1P29ErqhiM Gp5IrpmmfYT+SHXSF3mTyVDZVACnNrnWk98UtstzJ0BWCXrEkOA= -----END CERTIFICATE-----Generated at Fri Apr 17 21:49:14 2026 by rpki-client