$ rpki-client -vvf rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.mft File: 37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.mft (raw, json) Hash identifier: OyQm7IUjxctwONad9xmPhbmPRWQSxiEArtn+Y8jGBuY= Subject key identifier: 90:8D:B7:25:41:A4:E3:88:88:DB:F4:2F:56:5D:5A:24:22:D4:C4:57 Authority key identifier: 37:60:6E:99:C5:9E:71:07:D5:AC:FA:7E:8D:E3:FC:DF:E0:FF:A6:57 Certificate issuer: /CN=37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657 Certificate serial: 1450C572CBA28F559280646AE62D6F94ACCB9BC0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 12:37:15 +0000 Manifest this update: Tue 28 Jul 2026 12:32:15 +0000 Manifest next update: Wed 29 Jul 2026 13:10:15 +0000 Files and hashes: 1: 3130332e3134382e37372e302f32342d3234203d3e20313339393839.roa (hash: jCqON8Yk3P3gMbZcKuKALDn9F/zcK2FOZiJKlSNeDJ8=) 2: 37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.crl (hash: WtKpyfHwJjBfyGz4pVmKtgnx+nBN7RVDm9cLwwKsJBc=) 3: 3130332e3134382e37362e302f32342d3234203d3e20313339393839.roa (hash: 7Srge9sdh/jCl7HVuvbDBLE62n0zvsTPF/zsdp6ZWdc=) 4: 3130332e3134382e37362e302f32332d3233203d3e20313339393839.roa (hash: Fs+RqQ+YiPkIKy5ykH1+x0x7YMvGdMnBJYUHtFZf1pc=) 5: 323030313a6466323a633238303a3a2f34382d3438203d3e20313339393839.roa (hash: O7Qsfv9shx16yrQW2Xe4frvAZ94BOmPstpdbztVAHcM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.crl rsync://rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:50:c5:72:cb:a2:8f:55:92:80:64:6a:e6:2d:6f:94:ac:cb:9b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657 Validity Not Before: Jul 28 12:32:15 2026 GMT Not After : Jul 29 13:10:15 2026 GMT Subject: CN=908DB72541A4E38888DBF42F565D5A2422D4C457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:80:39:2a:84:44:d7:75:25:48:a1:ae:e2:a2: 95:00:c7:4f:75:78:90:1f:a2:27:89:80:34:df:e2: 8d:a9:79:3e:9b:39:83:71:9b:f1:e4:df:41:22:fb: b4:21:8f:82:d5:3c:3b:4b:a4:7c:7c:98:53:3c:42: 5d:2c:be:0a:e9:72:b0:15:2b:53:b0:14:d9:11:fe: ba:52:36:6c:7f:a2:bc:e0:63:72:c8:b4:fe:db:4c: 6f:01:65:d4:23:fd:ba:68:0c:30:78:80:e3:98:dd: 5a:4d:c1:0c:b7:03:06:7c:b7:81:6b:ac:e9:ed:b0: 6b:05:74:0c:03:9d:56:f1:74:77:ad:df:bd:3d:0c: 06:27:b4:7b:b5:03:27:d1:23:a4:16:fd:b9:51:1c: 54:17:eb:97:a2:4b:41:26:33:a4:8a:e0:22:ea:dd: d2:ac:b8:3a:5b:88:ec:3f:a2:38:1b:c9:58:97:de: 26:6f:45:03:3b:30:9f:28:ff:0f:0c:7f:ff:b8:fe: c0:29:bc:bc:92:90:75:2e:56:9b:a0:aa:38:20:c8: d5:04:6a:a9:13:76:52:9e:48:08:e2:48:fd:63:ba: 87:62:73:d2:58:1f:71:b0:99:f0:2d:6c:e8:5b:37: 82:7f:8e:8d:34:44:61:05:24:72:f7:a8:ed:32:41: 4f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:8D:B7:25:41:A4:E3:88:88:DB:F4:2F:56:5D:5A:24:22:D4:C4:57 X509v3 Authority Key Identifier: keyid:37:60:6E:99:C5:9E:71:07:D5:AC:FA:7E:8D:E3:FC:DF:E0:FF:A6:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:e9:f8:03:c5:64:41:da:46:e0:5c:a8:e9:a3:cf:a2:5a:77: 54:be:f0:da:be:07:9e:02:36:0e:53:3d:6c:42:a8:55:7b:59: bf:18:c3:e8:db:08:ac:29:c2:6b:96:d4:cb:e0:46:a6:e2:f8: 9c:18:ce:e6:08:12:17:d7:27:72:42:05:9f:c1:1e:3d:be:cc: cd:1c:c7:95:97:71:13:c3:7d:00:39:4e:cd:35:38:d3:fa:e4: a6:85:7e:d7:13:31:d5:84:d5:89:e1:aa:3e:e0:bb:b7:eb:d5: 3e:c7:18:60:f8:da:c3:55:63:5a:bc:c6:04:62:38:62:45:d9: ae:ef:e6:14:8d:49:54:1e:1c:5e:4f:31:c9:29:df:35:44:26: f4:2b:99:2a:bb:f5:90:89:40:a1:4e:14:f6:b2:cb:6a:ee:97: c0:0e:f6:cb:3d:bc:46:7d:84:2a:a8:ed:77:02:d1:d8:a1:c9: 38:75:71:19:83:3b:ca:b8:8b:e7:0c:57:cf:dc:77:e2:dd:b5: 9d:de:7a:e5:57:eb:e6:03:0b:46:bb:84:01:68:a5:1d:3e:c5: 5e:d4:af:8b:a9:a7:5e:bd:d3:bc:d8:6a:c6:ad:7b:97:a4:97: 61:2c:f3:4b:2f:77:bc:ab:a4:6c:99:f6:99:ed:83:67:4c:b3: e3:36:eb:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFFDFcsuij1WSgGRq5i1vlKzLm8AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzc2MDZFOTlDNTlFNzEwN0Q1QUNGQTdFOERFM0ZDREZF MEZGQTY1NzAeFw0yNjA3MjgxMjMyMTVaFw0yNjA3MjkxMzEwMTVaMDMxMTAvBgNV BAMTKDkwOERCNzI1NDFBNEUzODg4OERCRjQyRjU2NUQ1QTI0MjJENEM0NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfgDkqhETXdSVIoa7iopUAx091 eJAfoieJgDTf4o2peT6bOYNxm/Hk30Ei+7Qhj4LVPDtLpHx8mFM8Ql0svgrpcrAV K1OwFNkR/rpSNmx/orzgY3LItP7bTG8BZdQj/bpoDDB4gOOY3VpNwQy3AwZ8t4Fr rOntsGsFdAwDnVbxdHet3709DAYntHu1AyfRI6QW/blRHFQX65eiS0EmM6SK4CLq 3dKsuDpbiOw/ojgbyViX3iZvRQM7MJ8o/w8Mf/+4/sApvLySkHUuVpugqjggyNUE aqkTdlKeSAjiSP1juodic9JYH3GwmfAtbOhbN4J/jo00RGEFJHL3qO0yQU/HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkI23JUGk44iI2/QvVl1aJCLUxFcwHwYDVR0j BBgwFoAUN2BumcWecQfVrPp+jeP83+D/plcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDAzMTc0NmUtYjBmNi00ODI3LThjNGUtYjgxOTJkZWNjMzlhLzAvMzc2MDZFOTlD NTlFNzEwN0Q1QUNGQTdFOERFM0ZDREZFMEZGQTY1Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNzYwNkU5OUM1OUU3MTA3RDVBQ0ZBN0U4REUzRkNERkUwRkZB NjU3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDAzMTc0NmUtYjBmNi00ODI3LThj NGUtYjgxOTJkZWNjMzlhLzAvMzc2MDZFOTlDNTlFNzEwN0Q1QUNGQTdFOERFM0ZD REZFMEZGQTY1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGzp+APFZEHaRuBcqOmjz6Jad1S+8Nq+B54C Ng5TPWxCqFV7Wb8Yw+jbCKwpwmuW1MvgRqbi+JwYzuYIEhfXJ3JCBZ/BHj2+zM0c x5WXcRPDfQA5Ts01ONP65KaFftcTMdWE1Ynhqj7gu7fr1T7HGGD42sNVY1q8xgRi OGJF2a7v5hSNSVQeHF5PMckp3zVEJvQrmSq79ZCJQKFOFPayy2rul8AO9ss9vEZ9 hCqo7XcC0dihyTh1cRmDO8q4i+cMV8/cd+LdtZ3eeuVX6+YDC0a7hAFopR0+xV7U r4upp16907zYasate5ekl2Es80svd7yrpGyZ9pntg2dMs+M26/8= -----END CERTIFICATE-----Generated at Tue Jul 28 23:20:43 2026 by rpki-client