$ rpki-client -vvf rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.mft File: 37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.mft (raw, json) Hash identifier: bOu5Od538o+CmpstgfJlk0uVMl3WdUp4aa60hoKPF3w= Subject key identifier: 46:96:DE:79:31:7B:45:76:C7:29:4C:F2:40:87:1E:6C:F8:ED:C8:39 Authority key identifier: 37:CD:F1:E9:4B:DA:EC:13:9C:C5:23:6C:AC:31:B5:BC:C9:69:88:01 Certificate issuer: /CN=37CDF1E94BDAEC139CC5236CAC31B5BCC9698801 Certificate serial: 018F18A44B0D88A4F1CA157433E9905D91D10EF0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 19:48:09 +0000 Manifest this update: Tue 16 Jun 2026 19:43:09 +0000 Manifest next update: Wed 17 Jun 2026 21:11:09 +0000 Files and hashes: 1: 3130332e3139372e39322e302f32342d3234203d3e20313334363233.roa (hash: i5NpAq6M/TDd5Dq259HV37KsdS0u5rn8gSLjnNIutJI=) 2: 3130332e3139372e39342e302f32342d3234203d3e20313334363233.roa (hash: +RaMMzQEXugZGAStK2jVfuqHhSZkIhelhN6AejuGcmY=) 3: 3130332e3139372e39332e302f32342d3234203d3e20313334363233.roa (hash: 1pNOuwLSFvDZKZb1JbkTYWa4bVsi9xEgXcnRAdjK3AA=) 4: 323430333a38303a3a2f33322d3332203d3e20313334363233.roa (hash: inLR2m+CNyWZtV7tSrbcfy2w31JySfyEWxhtZ4Xzv1o=) 5: 3130332e3139372e39352e302f32342d3234203d3e20313334363233.roa (hash: 4ReHII19sMtLUmN25MV5QEEELuhP3ebBL+yWF3/glT8=) 6: 37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.crl (hash: tON2AYEulGMjOlPvnn8myuuTSq9F+GzzP0+xRHWgSZQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.crl rsync://rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 21:11:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:18:a4:4b:0d:88:a4:f1:ca:15:74:33:e9:90:5d:91:d1:0e:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37CDF1E94BDAEC139CC5236CAC31B5BCC9698801 Validity Not Before: Jun 16 19:43:09 2026 GMT Not After : Jun 17 21:11:09 2026 GMT Subject: CN=4696DE79317B4576C7294CF240871E6CF8EDC839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:31:67:3c:ce:0d:0c:65:42:8d:ca:e9:6f:62: 47:e3:35:b7:c5:12:23:d6:71:a1:c4:9a:d4:19:66: 63:03:fd:ef:50:c5:ee:59:04:c9:dd:36:f4:21:0e: da:07:06:ab:fe:a4:ab:78:28:31:49:4b:28:75:f8: c1:46:8d:ad:85:35:da:0a:1e:a4:85:53:3a:ed:b2: a9:37:9c:7c:9b:a6:09:85:b6:dd:ed:80:e8:33:d4: 2e:fd:6a:7b:03:ac:37:61:6f:1e:47:18:e8:aa:b4: 55:aa:71:93:fe:5f:28:89:59:74:76:1b:6b:77:c1: 17:17:4f:3d:6a:fd:7a:11:02:cc:74:e3:71:8d:33: c2:a7:0a:d8:ce:bb:0d:94:2d:f2:85:62:59:83:c9: 19:fd:94:8c:e9:3b:87:53:91:f4:b2:5a:ed:23:b7: d8:07:37:5d:38:e2:fd:0c:3d:3b:88:0e:9c:45:50: 3c:d2:53:21:a6:c2:27:03:89:1d:0a:ec:c1:70:05: 0c:f2:69:ec:ca:e9:c0:6b:06:cf:2a:66:f5:e1:aa: b8:77:62:e4:0b:9f:fb:31:d8:cb:fe:4b:1b:1e:a1: a5:97:2a:f5:b9:48:9c:db:06:8c:a6:dd:6f:42:dd: 8f:72:e4:1b:07:e5:a7:97:06:e7:a0:0b:38:ec:03: de:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:96:DE:79:31:7B:45:76:C7:29:4C:F2:40:87:1E:6C:F8:ED:C8:39 X509v3 Authority Key Identifier: keyid:37:CD:F1:E9:4B:DA:EC:13:9C:C5:23:6C:AC:31:B5:BC:C9:69:88:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:f8:8a:ef:7c:6e:bb:b8:ae:42:81:76:4d:07:d8:d9:63:e9: 91:d6:31:ba:3c:4b:5c:43:66:00:2e:e6:37:e5:88:a5:f3:22: d4:5f:dc:f3:66:2f:56:18:c8:6e:09:48:47:66:76:bb:48:b1: 9c:f3:f2:ac:b1:29:b2:7e:b5:e1:8a:76:df:a0:be:55:40:07: ab:d2:a2:a6:cc:a5:4c:fd:9a:72:07:b8:a7:8f:2f:a0:66:28: f4:44:9d:4a:77:f7:d4:ee:b2:c1:69:1c:67:18:6a:79:ba:ea: de:bc:3a:10:b7:8c:b0:51:0f:ed:b2:ca:e6:63:af:aa:ae:2b: ec:e7:5a:25:f1:3c:c6:06:64:65:f1:38:7e:2e:7d:2c:e0:61: 1e:01:bc:41:2e:78:3e:1b:c1:bd:1c:24:ec:a1:0f:f9:f3:50: e8:a6:af:29:6c:76:d6:1f:4e:0e:31:7e:66:0b:f7:2b:14:05: 1b:08:eb:79:11:52:3a:72:45:50:44:2b:ab:50:9a:31:c1:b9: de:31:6a:b0:38:75:65:88:bf:59:d7:6c:9a:41:c8:cb:e3:32: 70:17:b3:05:a1:bd:8e:cb:b3:9a:c8:5a:f8:4d:8f:0a:00:fb: 5b:aa:bd:5d:5a:0a:2f:fb:03:cc:7c:af:20:5d:24:07:ec:22: fd:db:c8:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAY8YpEsNiKTxyhV0M+mQXZHRDvAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdDREYxRTk0QkRBRUMxMzlDQzUyMzZDQUMzMUI1QkND OTY5ODgwMTAeFw0yNjA2MTYxOTQzMDlaFw0yNjA2MTcyMTExMDlaMDMxMTAvBgNV BAMTKDQ2OTZERTc5MzE3QjQ1NzZDNzI5NENGMjQwODcxRTZDRjhFREM4MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcMWc8zg0MZUKNyulvYkfjNbfF EiPWcaHEmtQZZmMD/e9Qxe5ZBMndNvQhDtoHBqv+pKt4KDFJSyh1+MFGja2FNdoK HqSFUzrtsqk3nHybpgmFtt3tgOgz1C79ansDrDdhbx5HGOiqtFWqcZP+XyiJWXR2 G2t3wRcXTz1q/XoRAsx043GNM8KnCtjOuw2ULfKFYlmDyRn9lIzpO4dTkfSyWu0j t9gHN1044v0MPTuIDpxFUDzSUyGmwicDiR0K7MFwBQzyaezK6cBrBs8qZvXhqrh3 YuQLn/sx2Mv+SxseoaWXKvW5SJzbBoym3W9C3Y9y5BsH5aeXBuegCzjsA94zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURpbeeTF7RXbHKUzyQIcebPjtyDkwHwYDVR0j BBgwFoAUN83x6Uva7BOcxSNsrDG1vMlpiAEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2VkMTAwZGYtMDQ0MS00MzgxLWEzZmEtNTg3ZGI5ZTljMmYwLzAvMzdDREYxRTk0 QkRBRUMxMzlDQzUyMzZDQUMzMUI1QkNDOTY5ODgwMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zN0NERjFFOTRCREFFQzEzOUNDNTIzNkNBQzMxQjVCQ0M5Njk4 ODAxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2VkMTAwZGYtMDQ0MS00MzgxLWEz ZmEtNTg3ZGI5ZTljMmYwLzAvMzdDREYxRTk0QkRBRUMxMzlDQzUyMzZDQUMzMUI1 QkNDOTY5ODgwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD34iu98bru4rkKBdk0H2Nlj6ZHWMbo8S1xD ZgAu5jfliKXzItRf3PNmL1YYyG4JSEdmdrtIsZzz8qyxKbJ+teGKdt+gvlVAB6vS oqbMpUz9mnIHuKePL6BmKPREnUp399TussFpHGcYanm66t68OhC3jLBRD+2yyuZj r6quK+znWiXxPMYGZGXxOH4ufSzgYR4BvEEueD4bwb0cJOyhD/nzUOimrylsdtYf Tg4xfmYL9ysUBRsI63kRUjpyRVBEK6tQmjHBud4xarA4dWWIv1nXbJpByMvjMnAX swWhvY7Ls5rIWvhNjwoA+1uqvV1aCi/7A8x8ryBdJAfsIv3byKQ= -----END CERTIFICATE-----Generated at Wed Jun 17 09:43:26 2026 by rpki-client