$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.mft File: 37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.mft (raw, json) Hash identifier: LCr27y7WKzyxgCWSYWhDAgv2xxa3nJfDzw73dFLUz9U= Subject key identifier: DF:5E:A2:B0:58:99:2D:EC:2F:BD:A3:44:B5:AE:E7:15:59:2A:9D:13 Authority key identifier: 37:CD:F1:E9:4B:DA:EC:13:9C:C5:23:6C:AC:31:B5:BC:C9:69:88:01 Certificate issuer: /CN=37CDF1E94BDAEC139CC5236CAC31B5BCC9698801 Certificate serial: 7592F31AF5E9387571DB5F70EBB2D1100AC75D72 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.mft Manifest number: BD Signing time: Mon 21 Sep 2026 01:53:47 +0000 Manifest this update: Mon 21 Sep 2026 01:48:47 +0000 Manifest next update: Tue 22 Sep 2026 04:45:47 +0000 Files and hashes: 1: 3130332e3139372e39322e302f32342d3234203d3e20313334363233.roa (hash: i5NpAq6M/TDd5Dq259HV37KsdS0u5rn8gSLjnNIutJI=) 2: 3130332e3139372e39342e302f32342d3234203d3e20313334363233.roa (hash: +RaMMzQEXugZGAStK2jVfuqHhSZkIhelhN6AejuGcmY=) 3: 323430333a38303a3a2f33322d3332203d3e20313334363233.roa (hash: inLR2m+CNyWZtV7tSrbcfy2w31JySfyEWxhtZ4Xzv1o=) 4: 3130332e3139372e39352e302f32342d3234203d3e20313334363233.roa (hash: 4ReHII19sMtLUmN25MV5QEEELuhP3ebBL+yWF3/glT8=) 5: 37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.crl (hash: f1tPzlSJDdRzuArSWO8+nj/9GrAyAuCNKmwsz3XI5l8=) 6: 3130332e3139372e39332e302f32342d3234203d3e20313334363233.roa (hash: 1pNOuwLSFvDZKZb1JbkTYWa4bVsi9xEgXcnRAdjK3AA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.crl rsync://rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 04:45:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:92:f3:1a:f5:e9:38:75:71:db:5f:70:eb:b2:d1:10:0a:c7:5d:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37CDF1E94BDAEC139CC5236CAC31B5BCC9698801 Validity Not Before: Sep 21 01:48:47 2026 GMT Not After : Sep 22 04:45:47 2026 GMT Subject: CN=DF5EA2B058992DEC2FBDA344B5AEE715592A9D13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2c:e1:fd:f9:90:97:f4:66:fe:c1:36:90:6c: 3e:cb:f5:23:f7:7c:df:40:5f:7f:9f:07:13:df:0d: 9c:46:27:f3:a8:0b:f5:e7:77:8f:ad:a5:5f:0c:0a: 35:0c:6f:71:12:44:49:d1:fc:8d:e1:8d:a9:04:2f: e1:63:56:5e:b3:c2:0f:4f:90:d3:d4:26:92:fe:65: e9:68:d0:06:14:eb:9a:b5:3d:ad:7c:1f:41:e2:0e: fe:0e:cf:58:30:80:a5:5e:6d:12:2d:21:b6:20:38: 20:b8:56:ae:ba:52:8f:9e:22:ea:6e:6f:3b:b3:cb: 85:43:61:45:c2:ab:87:89:48:0a:36:f1:ef:ae:88: 2c:48:c5:bb:3c:c1:fe:56:e4:10:d3:f3:1f:d7:31: 99:3d:06:f1:45:aa:10:96:e9:51:df:1e:b8:01:c0: 55:10:3a:6a:e9:f9:f0:81:f5:b1:74:b5:09:04:3b: 1c:7e:8a:12:af:17:3c:df:89:8a:68:d2:b7:e9:bf: fc:75:28:5f:0a:2d:c8:7b:40:eb:85:02:a0:35:fa: 8e:ec:c0:3d:89:05:0a:65:44:5b:94:93:00:3d:4b: ef:f1:d0:f9:cc:22:43:3b:4d:f4:1f:72:31:52:62: 8d:a6:15:62:9e:ba:87:5b:07:3d:b6:30:43:db:58: 56:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:5E:A2:B0:58:99:2D:EC:2F:BD:A3:44:B5:AE:E7:15:59:2A:9D:13 X509v3 Authority Key Identifier: keyid:37:CD:F1:E9:4B:DA:EC:13:9C:C5:23:6C:AC:31:B5:BC:C9:69:88:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:0e:a1:bd:32:e7:f4:96:b2:35:78:3d:75:8a:b9:25:5a:97: 2f:00:fc:fd:81:68:e9:f6:a0:a1:50:c8:ec:f3:8f:26:74:7e: 64:11:07:f3:d7:6f:9b:59:6c:70:0b:01:d6:57:5f:f7:16:58: 85:21:85:8a:1e:26:14:36:16:b4:db:44:61:d3:cf:9a:24:03: b0:3d:47:7b:4f:c0:48:23:3c:9e:a6:92:06:11:4c:c9:4d:2b: 72:42:be:b1:1b:99:e1:07:5d:20:1d:9a:39:6d:f6:da:01:87: a5:86:9a:31:63:77:40:a3:36:86:44:7e:c7:7a:b3:2a:77:cf: fa:fb:4f:ef:43:b7:03:8b:f7:f0:56:7f:f7:0a:76:62:00:b7: 59:ae:52:91:cd:54:9e:98:c5:eb:ef:4f:13:7b:d1:8d:f8:42: 1b:5c:c7:ee:23:ee:4b:2a:ed:ca:df:a0:2d:13:c3:20:2b:3a: 9c:28:da:1a:3b:9b:e2:1d:c2:29:8d:b7:45:48:78:b5:be:86: d6:04:4c:20:0c:73:97:e5:f6:3b:d2:99:fb:9e:61:8d:3e:c5: bf:51:e1:5c:e2:01:04:dd:89:d3:ab:78:ef:b3:cc:7d:6f:df: fc:8c:b9:41:78:96:43:b4:9c:75:bc:11:65:87:e5:15:51:e5: 58:01:f4:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdZLzGvXpOHVx219w67LREArHXXIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdDREYxRTk0QkRBRUMxMzlDQzUyMzZDQUMzMUI1QkND OTY5ODgwMTAeFw0yNjA5MjEwMTQ4NDdaFw0yNjA5MjIwNDQ1NDdaMDMxMTAvBgNV BAMTKERGNUVBMkIwNTg5OTJERUMyRkJEQTM0NEI1QUVFNzE1NTkyQTlEMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3LOH9+ZCX9Gb+wTaQbD7L9SP3 fN9AX3+fBxPfDZxGJ/OoC/Xnd4+tpV8MCjUMb3ESREnR/I3hjakEL+FjVl6zwg9P kNPUJpL+Zelo0AYU65q1Pa18H0HiDv4Oz1gwgKVebRItIbYgOCC4Vq66Uo+eIupu bzuzy4VDYUXCq4eJSAo28e+uiCxIxbs8wf5W5BDT8x/XMZk9BvFFqhCW6VHfHrgB wFUQOmrp+fCB9bF0tQkEOxx+ihKvFzzfiYpo0rfpv/x1KF8KLch7QOuFAqA1+o7s wD2JBQplRFuUkwA9S+/x0PnMIkM7TfQfcjFSYo2mFWKeuodbBz22MEPbWFbJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU316isFiZLewvvaNEta7nFVkqnRMwHwYDVR0j BBgwFoAUN83x6Uva7BOcxSNsrDG1vMlpiAEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2VkMTAwZGYtMDQ0MS00MzgxLWEzZmEtNTg3ZGI5ZTljMmYwLzAvMzdDREYxRTk0 QkRBRUMxMzlDQzUyMzZDQUMzMUI1QkNDOTY5ODgwMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zN0NERjFFOTRCREFFQzEzOUNDNTIzNkNBQzMxQjVCQ0M5Njk4 ODAxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2VkMTAwZGYtMDQ0MS00MzgxLWEz ZmEtNTg3ZGI5ZTljMmYwLzAvMzdDREYxRTk0QkRBRUMxMzlDQzUyMzZDQUMzMUI1 QkNDOTY5ODgwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIkOob0y5/SWsjV4PXWKuSValy8A/P2BaOn2 oKFQyOzzjyZ0fmQRB/PXb5tZbHALAdZXX/cWWIUhhYoeJhQ2FrTbRGHTz5okA7A9 R3tPwEgjPJ6mkgYRTMlNK3JCvrEbmeEHXSAdmjlt9toBh6WGmjFjd0CjNoZEfsd6 syp3z/r7T+9DtwOL9/BWf/cKdmIAt1muUpHNVJ6YxevvTxN70Y34Qhtcx+4j7ksq 7crfoC0TwyArOpwo2ho7m+IdwimNt0VIeLW+htYETCAMc5fl9jvSmfueYY0+xb9R 4VziAQTdidOreO+zzH1v3/yMuUF4lkO0nHW8EWWH5RVR5VgB9LE= -----END CERTIFICATE-----Generated at Mon Sep 21 09:52:21 2026 by rpki-client