$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.mft File: 37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.mft (raw, json) Hash identifier: 9652P82Q9mRo0lkzCmaGy8nkojoEm+E515NyTJwkbGE= Subject key identifier: 15:B2:24:C3:66:AF:39:8B:0A:32:D7:5D:C2:5B:BD:8C:2E:AE:05:05 Authority key identifier: 37:CD:F1:E9:4B:DA:EC:13:9C:C5:23:6C:AC:31:B5:BC:C9:69:88:01 Certificate issuer: /CN=37CDF1E94BDAEC139CC5236CAC31B5BCC9698801 Certificate serial: 2887FF461D3871EEDC067EAA0878BBE6BB2994A7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.mft Manifest number: 0105 Signing time: Sat 14 Nov 2026 14:58:09 +0000 Manifest this update: Sat 14 Nov 2026 14:53:09 +0000 Manifest next update: Sun 15 Nov 2026 15:23:09 +0000 Files and hashes: 1: 37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.crl (hash: /Qv2cBSxCdPjsj1cr9h1pHIapZJRins5cRtPGRK2wj4=) 2: 3130332e3139372e39352e302f32342d3234203d3e20313334363233.roa (hash: 4ReHII19sMtLUmN25MV5QEEELuhP3ebBL+yWF3/glT8=) 3: 3130332e3139372e39332e302f32342d3234203d3e20313334363233.roa (hash: 1pNOuwLSFvDZKZb1JbkTYWa4bVsi9xEgXcnRAdjK3AA=) 4: 323430333a38303a3a2f33322d3332203d3e20313334363233.roa (hash: inLR2m+CNyWZtV7tSrbcfy2w31JySfyEWxhtZ4Xzv1o=) 5: 3130332e3139372e39342e302f32342d3234203d3e20313334363233.roa (hash: +RaMMzQEXugZGAStK2jVfuqHhSZkIhelhN6AejuGcmY=) 6: 3130332e3139372e39322e302f32342d3234203d3e20313334363233.roa (hash: i5NpAq6M/TDd5Dq259HV37KsdS0u5rn8gSLjnNIutJI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.crl rsync://rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 15:23:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:87:ff:46:1d:38:71:ee:dc:06:7e:aa:08:78:bb:e6:bb:29:94:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37CDF1E94BDAEC139CC5236CAC31B5BCC9698801 Validity Not Before: Nov 14 14:53:09 2026 GMT Not After : Nov 15 15:23:09 2026 GMT Subject: CN=15B224C366AF398B0A32D75DC25BBD8C2EAE0505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:62:40:88:98:2c:cc:8f:0a:70:c1:db:16:1b: 2c:6d:f4:b5:3c:af:51:6b:30:3e:84:d0:3f:8f:79: 27:95:06:46:2c:18:ae:f5:0b:43:fe:d0:1b:50:b7: 3a:9a:86:ae:8d:c4:4c:b7:75:ae:ab:12:c8:ea:dc: e5:c0:f0:cc:ae:a3:03:c0:bd:28:66:50:54:94:fb: ea:d1:41:00:38:16:91:51:87:a9:d8:e0:83:96:4e: ec:ef:b5:46:f9:f1:4a:77:11:e0:09:e9:70:80:a5: 27:32:83:ec:c8:50:72:b9:03:13:6a:8c:aa:15:c1: de:7d:ee:1e:28:d0:92:e3:0e:9f:66:24:42:f8:47: d2:35:5f:b6:dc:06:32:30:62:a9:a2:1d:d3:a5:9a: f5:38:77:44:85:db:7b:ac:fb:b6:16:ac:c9:22:14: fa:15:5e:df:e9:2c:ea:b8:a0:49:a8:dc:89:32:54: 0f:0d:fd:00:8d:b9:c9:5d:58:72:be:22:39:be:49: 3e:0e:c8:9d:c3:34:4e:6b:13:ac:77:88:22:d2:35: 99:92:e9:c7:5d:fd:0c:15:9f:45:59:ea:d2:e8:89: 27:29:18:78:34:ca:05:80:a8:43:0c:f4:81:42:f5: 2f:84:bf:89:61:24:90:54:b5:06:97:64:63:47:69: 7f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:B2:24:C3:66:AF:39:8B:0A:32:D7:5D:C2:5B:BD:8C:2E:AE:05:05 X509v3 Authority Key Identifier: keyid:37:CD:F1:E9:4B:DA:EC:13:9C:C5:23:6C:AC:31:B5:BC:C9:69:88:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:8a:94:90:21:cb:11:6e:6f:12:64:49:bd:ee:d5:7e:fc:1a: f3:cf:fc:4c:ae:90:fd:30:65:e3:66:77:88:2f:7d:dc:d7:06: d2:ee:29:5c:7d:1c:c0:00:c2:0a:8b:07:3e:da:fe:4e:e2:8a: 1f:03:c9:39:bf:88:97:49:82:70:40:5f:f4:32:ef:6d:8e:0f: 64:29:99:78:b5:e7:dd:aa:88:d9:14:18:a5:2d:a5:14:2e:44: 89:5a:df:b3:24:7b:47:3b:c6:77:41:1e:7e:7c:13:2a:e3:b3: e5:e9:d5:c9:8a:d2:ca:42:6b:27:53:79:39:32:6b:12:a8:59: 97:c7:35:63:ad:8b:7c:78:70:7e:cc:af:b5:ad:af:88:13:82: 73:70:f7:c2:4b:97:f9:ff:d5:b8:45:65:e8:e1:64:10:d7:a7: 76:b9:a5:8b:33:8d:ae:92:26:cc:ed:4d:4b:aa:1a:b7:9d:ab: b9:8e:94:a6:72:59:41:8e:1d:ab:a8:f2:e7:11:70:4a:51:2e: ea:ed:5c:92:c1:c7:b7:36:90:b1:ab:89:33:c5:7b:60:b8:01: 92:7b:ea:7b:5b:ec:59:88:f6:5f:87:8d:8b:14:3a:3b:c2:10: dd:0f:ca:fe:6a:a9:ad:0c:d2:26:ad:7c:eb:0d:d6:95:d0:ca: 55:87:5c:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKIf/Rh04ce7cBn6qCHi75rsplKcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdDREYxRTk0QkRBRUMxMzlDQzUyMzZDQUMzMUI1QkND OTY5ODgwMTAeFw0yNjExMTQxNDUzMDlaFw0yNjExMTUxNTIzMDlaMDMxMTAvBgNV BAMTKDE1QjIyNEMzNjZBRjM5OEIwQTMyRDc1REMyNUJCRDhDMkVBRTA1MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0YkCImCzMjwpwwdsWGyxt9LU8 r1FrMD6E0D+PeSeVBkYsGK71C0P+0BtQtzqahq6NxEy3da6rEsjq3OXA8MyuowPA vShmUFSU++rRQQA4FpFRh6nY4IOWTuzvtUb58Up3EeAJ6XCApScyg+zIUHK5AxNq jKoVwd597h4o0JLjDp9mJEL4R9I1X7bcBjIwYqmiHdOlmvU4d0SF23us+7YWrMki FPoVXt/pLOq4oEmo3IkyVA8N/QCNucldWHK+Ijm+ST4OyJ3DNE5rE6x3iCLSNZmS 6cdd/QwVn0VZ6tLoiScpGHg0ygWAqEMM9IFC9S+Ev4lhJJBUtQaXZGNHaX8HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFbIkw2avOYsKMtddwlu9jC6uBQUwHwYDVR0j BBgwFoAUN83x6Uva7BOcxSNsrDG1vMlpiAEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2VkMTAwZGYtMDQ0MS00MzgxLWEzZmEtNTg3ZGI5ZTljMmYwLzAvMzdDREYxRTk0 QkRBRUMxMzlDQzUyMzZDQUMzMUI1QkNDOTY5ODgwMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zN0NERjFFOTRCREFFQzEzOUNDNTIzNkNBQzMxQjVCQ0M5Njk4 ODAxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2VkMTAwZGYtMDQ0MS00MzgxLWEz ZmEtNTg3ZGI5ZTljMmYwLzAvMzdDREYxRTk0QkRBRUMxMzlDQzUyMzZDQUMzMUI1 QkNDOTY5ODgwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFGKlJAhyxFubxJkSb3u1X78GvPP/EyukP0w ZeNmd4gvfdzXBtLuKVx9HMAAwgqLBz7a/k7iih8DyTm/iJdJgnBAX/Qy722OD2Qp mXi1592qiNkUGKUtpRQuRIla37Mke0c7xndBHn58Eyrjs+Xp1cmK0spCaydTeTky axKoWZfHNWOti3x4cH7Mr7Wtr4gTgnNw98JLl/n/1bhFZejhZBDXp3a5pYszja6S JsztTUuqGredq7mOlKZyWUGOHauo8ucRcEpRLurtXJLBx7c2kLGriTPFe2C4AZJ7 6ntb7FmI9l+HjYsUOjvCEN0Pyv5qqa0M0iatfOsN1pXQylWHXBA= -----END CERTIFICATE-----Generated at Sat Nov 14 22:26:54 2026 by rpki-client