$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/37B043860635643A07D4415D3C8C4959A51F0B69.mft File: 37B043860635643A07D4415D3C8C4959A51F0B69.mft (raw, json) Hash identifier: I04FnaDTXRAaFxZc4+MgSpZnQy3EgYG4YpifoZHb5/Q= Subject key identifier: 03:9B:84:16:4B:8F:09:DA:16:DB:09:37:8D:E2:5A:CB:B3:95:DB:79 Authority key identifier: 37:B0:43:86:06:35:64:3A:07:D4:41:5D:3C:8C:49:59:A5:1F:0B:69 Certificate issuer: /CN=37B043860635643A07D4415D3C8C4959A51F0B69 Certificate serial: 6D896887C264325ABDE96E09AF83694EA1A0AFBA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37B043860635643A07D4415D3C8C4959A51F0B69.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/37B043860635643A07D4415D3C8C4959A51F0B69.mft Manifest number: D3 Signing time: Thu 08 Oct 2026 10:31:00 +0000 Manifest this update: Thu 08 Oct 2026 10:25:59 +0000 Manifest next update: Fri 09 Oct 2026 10:57:59 +0000 Files and hashes: 1: 37B043860635643A07D4415D3C8C4959A51F0B69.crl (hash: cMuN7uAADCYGldcvUkXqa9gcMyvoWOojIFwOmWohQc8=) 2: 3130332e3136392e34302e302f32332d3233203d3e20313432333332.roa (hash: 8ork7TaYxje1H50vqdK8v7A0WuTweiRWILiO2ZZPRvI=) 3: 3130332e3136392e34312e302f32342d3234203d3e20313432333332.roa (hash: A3dxGP2PxS97Lp2Vu736TLE9a7nlQtJcScv1U2W/tIo=) 4: 3130332e3136392e34302e302f32342d3234203d3e20313432333332.roa (hash: tjpf/AYVS8VtbIjx4X/JSsd7T5PpSDR5QfD/ek24bNQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/37B043860635643A07D4415D3C8C4959A51F0B69.crl rsync://rpki-rsync.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/37B043860635643A07D4415D3C8C4959A51F0B69.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37B043860635643A07D4415D3C8C4959A51F0B69.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 10:57:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:89:68:87:c2:64:32:5a:bd:e9:6e:09:af:83:69:4e:a1:a0:af:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37B043860635643A07D4415D3C8C4959A51F0B69 Validity Not Before: Oct 8 10:25:59 2026 GMT Not After : Oct 9 10:57:59 2026 GMT Subject: CN=039B84164B8F09DA16DB09378DE25ACBB395DB79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a6:14:4c:0c:7d:f4:c7:2c:78:11:c2:fb:88: 8b:d0:24:f5:69:e0:e4:06:cd:8f:08:fc:4f:f5:5b: b6:ac:cc:5e:05:dd:18:31:20:23:e9:eb:97:94:f8: d9:92:16:3b:56:6c:02:ab:68:9d:44:3f:b1:9f:4a: 51:9e:3f:c1:3f:2e:f2:a2:d3:de:89:6e:15:68:da: 7c:f9:08:f8:18:aa:2c:5c:82:68:d9:a0:a9:a7:55: f1:ab:83:f1:1d:35:3e:c4:f8:fd:4f:63:8e:53:78: fe:09:b3:15:40:b9:54:d8:b2:4d:91:52:68:6a:92: a0:c3:29:c6:aa:4b:c4:15:33:00:94:d5:8c:69:fa: ee:a6:5d:17:11:b9:2f:ec:9d:5d:a6:81:b3:c2:dd: de:5c:5c:9f:ca:e1:22:a5:e1:2b:5e:1a:d0:54:bb: 18:24:fa:27:95:97:89:81:7e:79:3e:71:e7:eb:81: 65:6f:08:4d:e4:24:40:f0:28:62:fe:05:03:03:5d: 56:16:8d:bc:c8:b1:6b:f3:91:7a:62:41:36:38:12: 97:a3:c9:b9:1a:8e:e5:62:22:88:8b:ed:8f:3e:2a: 38:13:c3:33:bb:62:7e:80:c5:5b:12:7e:7e:58:3f: b7:f6:d5:6d:88:9a:2b:b3:08:67:cb:f1:d1:4f:a8: c9:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:9B:84:16:4B:8F:09:DA:16:DB:09:37:8D:E2:5A:CB:B3:95:DB:79 X509v3 Authority Key Identifier: keyid:37:B0:43:86:06:35:64:3A:07:D4:41:5D:3C:8C:49:59:A5:1F:0B:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/37B043860635643A07D4415D3C8C4959A51F0B69.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37B043860635643A07D4415D3C8C4959A51F0B69.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/37B043860635643A07D4415D3C8C4959A51F0B69.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:8a:46:6d:f4:45:9f:83:55:c0:6c:cd:f5:b4:38:d2:e2:f1: 2e:f6:7c:02:fd:fd:d7:6d:36:c8:6d:25:04:cf:63:e4:53:dd: fa:45:bd:f8:f2:36:3e:5f:38:eb:0e:95:44:28:0b:32:a6:9e: 5b:62:74:4c:87:a6:44:fb:9b:e4:32:be:a8:92:c4:2c:57:80: 58:14:b9:20:44:66:a0:91:4f:49:e0:31:62:ab:55:58:0c:15: 99:62:29:b4:8f:55:b9:de:f7:94:37:cd:cc:00:58:5b:db:3c: 0e:70:ad:b2:e0:aa:60:b3:a7:a8:88:a0:60:07:aa:85:e5:8d: 91:e8:6f:d0:3b:ec:5f:3b:ea:60:0e:d7:25:1c:14:93:99:56: 2c:5a:ea:5c:3b:df:9e:81:ac:f6:54:49:11:a4:c8:5e:d0:64: 14:39:6a:52:6f:36:3c:0e:29:06:11:7c:d0:21:9c:72:3f:3b: 98:06:ed:a8:6b:ae:d4:71:37:f8:a2:e8:03:db:70:ea:49:48: cb:37:2e:a8:1f:56:75:31:42:ef:b6:07:5a:d1:45:cf:0a:7d: 23:02:db:13:ee:4b:f6:e0:2c:0e:ca:97:1e:4c:53:b1:83:f9: 21:1b:a7:97:b2:ed:fe:b3:25:75:93:14:9b:f8:ec:c1:15:13: 45:58:06:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbYloh8JkMlq96W4Jr4NpTqGgr7owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdCMDQzODYwNjM1NjQzQTA3RDQ0MTVEM0M4QzQ5NTlB NTFGMEI2OTAeFw0yNjEwMDgxMDI1NTlaFw0yNjEwMDkxMDU3NTlaMDMxMTAvBgNV BAMTKDAzOUI4NDE2NEI4RjA5REExNkRCMDkzNzhERTI1QUNCQjM5NURCNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlphRMDH30xyx4EcL7iIvQJPVp 4OQGzY8I/E/1W7aszF4F3RgxICPp65eU+NmSFjtWbAKraJ1EP7GfSlGeP8E/LvKi 096JbhVo2nz5CPgYqixcgmjZoKmnVfGrg/EdNT7E+P1PY45TeP4JsxVAuVTYsk2R UmhqkqDDKcaqS8QVMwCU1Yxp+u6mXRcRuS/snV2mgbPC3d5cXJ/K4SKl4SteGtBU uxgk+ieVl4mBfnk+cefrgWVvCE3kJEDwKGL+BQMDXVYWjbzIsWvzkXpiQTY4Epej ybkajuViIoiL7Y8+KjgTwzO7Yn6AxVsSfn5YP7f21W2ImiuzCGfL8dFPqMm1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA5uEFkuPCdoW2wk3jeJay7OV23kwHwYDVR0j BBgwFoAUN7BDhgY1ZDoH1EFdPIxJWaUfC2kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmNiNTI2MTktMzc5ZC00MzBhLWIxOWItMWYwZWM1M2FlOTA5LzAvMzdCMDQzODYw NjM1NjQzQTA3RDQ0MTVEM0M4QzQ5NTlBNTFGMEI2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zN0IwNDM4NjA2MzU2NDNBMDdENDQxNUQzQzhDNDk1OUE1MUYw QjY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmNiNTI2MTktMzc5ZC00MzBhLWIx OWItMWYwZWM1M2FlOTA5LzAvMzdCMDQzODYwNjM1NjQzQTA3RDQ0MTVEM0M4QzQ5 NTlBNTFGMEI2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACWKRm30RZ+DVcBszfW0ONLi8S72fAL9/ddt NshtJQTPY+RT3fpFvfjyNj5fOOsOlUQoCzKmnltidEyHpkT7m+QyvqiSxCxXgFgU uSBEZqCRT0ngMWKrVVgMFZliKbSPVbne95Q3zcwAWFvbPA5wrbLgqmCzp6iIoGAH qoXljZHob9A77F876mAO1yUcFJOZVixa6lw7356BrPZUSRGkyF7QZBQ5alJvNjwO KQYRfNAhnHI/O5gG7ahrrtRxN/ii6APbcOpJSMs3LqgfVnUxQu+2B1rRRc8KfSMC 2xPuS/bgLA7Klx5MU7GD+SEbp5ey7f6zJXWTFJv47MEVE0VYBso= -----END CERTIFICATE-----Generated at Thu Oct 8 17:06:09 2026 by rpki-client