$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.mft File: 37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.mft (raw, json) Hash identifier: IiosoIFj3Kuic76QNxBNYWn2yDXMD8qhrwd+09+wDEM= Subject key identifier: 62:3F:8E:67:23:BD:DC:D1:10:CA:A9:79:0B:04:4F:05:08:07:9E:A1 Authority key identifier: 37:60:6E:99:C5:9E:71:07:D5:AC:FA:7E:8D:E3:FC:DF:E0:FF:A6:57 Certificate issuer: /CN=37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657 Certificate serial: 2E71769F18FA5E1033C54263AB7FA536959519A1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.mft Manifest number: BD Signing time: Sun 20 Sep 2026 16:42:34 +0000 Manifest this update: Sun 20 Sep 2026 16:37:34 +0000 Manifest next update: Mon 21 Sep 2026 19:14:34 +0000 Files and hashes: 1: 3130332e3134382e37362e302f32332d3233203d3e20313339393839.roa (hash: Fs+RqQ+YiPkIKy5ykH1+x0x7YMvGdMnBJYUHtFZf1pc=) 2: 3130332e3134382e37362e302f32342d3234203d3e20313339393839.roa (hash: 7Srge9sdh/jCl7HVuvbDBLE62n0zvsTPF/zsdp6ZWdc=) 3: 37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.crl (hash: 2hBRxmoGz6jtXmIsqaMoOWLFAmvDSAwPkmtziOKD5E4=) 4: 323030313a6466323a633238303a3a2f34382d3438203d3e20313339393839.roa (hash: O7Qsfv9shx16yrQW2Xe4frvAZ94BOmPstpdbztVAHcM=) 5: 3130332e3134382e37372e302f32342d3234203d3e20313339393839.roa (hash: jCqON8Yk3P3gMbZcKuKALDn9F/zcK2FOZiJKlSNeDJ8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.crl rsync://rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 19:14:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:71:76:9f:18:fa:5e:10:33:c5:42:63:ab:7f:a5:36:95:95:19:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657 Validity Not Before: Sep 20 16:37:34 2026 GMT Not After : Sep 21 19:14:34 2026 GMT Subject: CN=623F8E6723BDDCD110CAA9790B044F0508079EA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ea:c1:cb:57:37:30:ab:86:00:44:45:91:b6: 4d:2e:78:b7:54:d2:76:e2:8f:13:57:97:87:bb:58: 5a:67:2c:9e:ae:83:8a:d4:93:ba:62:78:76:da:85: ad:18:05:b1:a3:46:22:02:4f:35:8c:3c:19:7f:cc: 20:99:5c:5d:8d:0b:e3:ef:4e:95:88:15:f0:7e:d9: 4b:2e:1a:4c:25:12:c9:82:2b:1b:82:20:82:a7:60: 02:ff:a3:fc:35:32:2d:ba:31:8b:76:a1:3b:4a:e9: bb:b9:85:2f:e7:fb:bf:cb:b8:8e:5d:00:f7:41:90: d2:c0:8d:31:8f:5f:37:6f:35:cb:3c:33:7a:44:3f: f8:ad:57:76:32:d0:19:3e:e1:d4:1c:e3:a1:dd:81: 3c:61:16:f4:cf:d5:b6:bf:2f:cf:42:63:74:c0:5e: 86:61:68:82:2f:76:a5:29:4f:8c:89:51:7a:3e:02: 02:9b:af:77:4a:83:1f:0f:4e:2d:50:63:87:fb:0b: 9c:b0:1a:4e:46:9a:1f:cf:cc:c4:b9:ff:cf:02:10: a0:33:77:2d:90:41:4b:4e:d1:71:31:cd:b0:b0:74: fd:b9:dc:79:6a:c7:71:a6:51:70:da:6b:75:fe:54: 0c:4c:75:d0:86:65:ea:fd:4f:06:be:03:72:d4:d8: 8e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:3F:8E:67:23:BD:DC:D1:10:CA:A9:79:0B:04:4F:05:08:07:9E:A1 X509v3 Authority Key Identifier: keyid:37:60:6E:99:C5:9E:71:07:D5:AC:FA:7E:8D:E3:FC:DF:E0:FF:A6:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:8d:c8:e3:ca:88:7f:b3:78:a3:1c:7a:b9:e8:28:64:8f:9f: 18:3e:c2:13:a2:ed:61:86:ea:57:c1:c6:b0:2b:94:71:37:33: 12:49:cf:ee:80:d2:9d:f0:8c:d0:db:b0:db:bc:70:c4:f1:a5: 7e:e9:fc:5d:3d:c0:6a:15:c4:7e:33:25:71:18:9a:54:4c:31: c9:21:e4:11:a1:4e:0b:24:78:09:f6:b3:75:21:fa:69:0d:54: 2f:ff:a3:14:a9:12:de:22:53:01:df:9a:e1:dc:ca:6e:ec:2d: 72:e4:29:f1:ff:8a:19:70:e5:31:4b:e1:ef:0e:64:13:8a:35: 1e:ed:d6:14:1e:f5:0e:bf:4c:71:3b:f6:e1:aa:52:16:e2:13: 3b:0b:67:7e:9b:5d:d5:3e:ef:36:3c:7e:9b:c4:36:bf:fa:e0: 73:a5:0d:75:74:0a:fa:19:58:58:37:8b:26:21:14:b8:ba:7b: 7c:a0:89:10:a8:f4:d2:8d:00:72:87:f7:08:15:eb:5b:4d:4c: 28:1a:7a:06:34:2a:33:35:54:37:7f:cd:70:a6:82:9d:72:b7: 28:c1:47:9c:04:03:83:fe:47:a4:aa:80:ec:cf:d2:0b:c4:28: 54:64:43:b4:f1:6e:0f:fa:ff:93:e6:06:ce:49:cf:ec:03:32: bc:e3:b5:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULnF2nxj6XhAzxUJjq3+lNpWVGaEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzc2MDZFOTlDNTlFNzEwN0Q1QUNGQTdFOERFM0ZDREZF MEZGQTY1NzAeFw0yNjA5MjAxNjM3MzRaFw0yNjA5MjExOTE0MzRaMDMxMTAvBgNV BAMTKDYyM0Y4RTY3MjNCRERDRDExMENBQTk3OTBCMDQ0RjA1MDgwNzlFQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL6sHLVzcwq4YAREWRtk0ueLdU 0nbijxNXl4e7WFpnLJ6ug4rUk7pieHbaha0YBbGjRiICTzWMPBl/zCCZXF2NC+Pv TpWIFfB+2UsuGkwlEsmCKxuCIIKnYAL/o/w1Mi26MYt2oTtK6bu5hS/n+7/LuI5d APdBkNLAjTGPXzdvNcs8M3pEP/itV3Yy0Bk+4dQc46HdgTxhFvTP1ba/L89CY3TA XoZhaIIvdqUpT4yJUXo+AgKbr3dKgx8PTi1QY4f7C5ywGk5Gmh/PzMS5/88CEKAz dy2QQUtO0XExzbCwdP253Hlqx3GmUXDaa3X+VAxMddCGZer9Twa+A3LU2I7bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYj+OZyO93NEQyql5CwRPBQgHnqEwHwYDVR0j BBgwFoAUN2BumcWecQfVrPp+jeP83+D/plcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDAzMTc0NmUtYjBmNi00ODI3LThjNGUtYjgxOTJkZWNjMzlhLzAvMzc2MDZFOTlD NTlFNzEwN0Q1QUNGQTdFOERFM0ZDREZFMEZGQTY1Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNzYwNkU5OUM1OUU3MTA3RDVBQ0ZBN0U4REUzRkNERkUwRkZB NjU3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDAzMTc0NmUtYjBmNi00ODI3LThj NGUtYjgxOTJkZWNjMzlhLzAvMzc2MDZFOTlDNTlFNzEwN0Q1QUNGQTdFOERFM0ZD REZFMEZGQTY1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANKNyOPKiH+zeKMcernoKGSPnxg+whOi7WGG 6lfBxrArlHE3MxJJz+6A0p3wjNDbsNu8cMTxpX7p/F09wGoVxH4zJXEYmlRMMckh 5BGhTgskeAn2s3Uh+mkNVC//oxSpEt4iUwHfmuHcym7sLXLkKfH/ihlw5TFL4e8O ZBOKNR7t1hQe9Q6/THE79uGqUhbiEzsLZ36bXdU+7zY8fpvENr/64HOlDXV0CvoZ WFg3iyYhFLi6e3ygiRCo9NKNAHKH9wgV61tNTCgaegY0KjM1VDd/zXCmgp1ytyjB R5wEA4P+R6SqgOzP0gvEKFRkQ7Txbg/6/5PmBs5Jz+wDMrzjtZ8= -----END CERTIFICATE-----Generated at Mon Sep 21 13:32:11 2026 by rpki-client