
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.mft
File: 37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.mft (raw, json)
Hash identifier: 4+/1BcYz3yqgZgqh1cH8HlRjkvupGLHMmOleslwlrr4=
Subject key identifier: 13:9A:BB:9B:6B:F3:15:07:9E:A5:C0:DB:8B:8A:3D:DD:8D:70:91:58
Authority key identifier: 37:60:6E:99:C5:9E:71:07:D5:AC:FA:7E:8D:E3:FC:DF:E0:FF:A6:57
Certificate issuer: /CN=37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657
Certificate serial: 7138CDAF7F373A6AF7B74F206553E1DBDE068C14
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.mft
Manifest number: 39
Signing time: Fri 12 Jun 2026 23:28:48 +0000
Manifest this update: Fri 12 Jun 2026 23:23:48 +0000
Manifest next update: Sun 14 Jun 2026 02:27:48 +0000
Files and hashes: 1: 323030313a6466323a633238303a3a2f34382d3438203d3e20313339393839.roa (hash: O7Qsfv9shx16yrQW2Xe4frvAZ94BOmPstpdbztVAHcM=)
2: 37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.crl (hash: 3bcUb0pFFPVdRotZkBsndtVi2bmQURn/NlIPu8/Wayc=)
3: 3130332e3134382e37362e302f32342d3234203d3e20313339393839.roa (hash: 7Srge9sdh/jCl7HVuvbDBLE62n0zvsTPF/zsdp6ZWdc=)
4: 3130332e3134382e37362e302f32332d3233203d3e20313339393839.roa (hash: Fs+RqQ+YiPkIKy5ykH1+x0x7YMvGdMnBJYUHtFZf1pc=)
5: 3130332e3134382e37372e302f32342d3234203d3e20313339393839.roa (hash: jCqON8Yk3P3gMbZcKuKALDn9F/zcK2FOZiJKlSNeDJ8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.crl
rsync://rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 20:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:38:cd:af:7f:37:3a:6a:f7:b7:4f:20:65:53:e1:db:de:06:8c:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657
Validity
Not Before: Jun 12 23:23:48 2026 GMT
Not After : Jun 14 02:27:48 2026 GMT
Subject: CN=139ABB9B6BF315079EA5C0DB8B8A3DDD8D709158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:02:ef:d7:8f:0b:03:12:54:de:96:2e:13:36:
37:0a:93:5f:8a:d8:b3:ad:17:49:b3:ba:19:02:91:
ad:60:d3:16:40:58:f1:a1:1a:38:d7:a3:d5:7e:2c:
7e:13:19:bc:14:a1:98:ec:10:a2:ed:b6:cc:7c:fd:
06:22:12:32:a0:e1:cc:b1:13:a2:4f:19:5a:16:24:
d8:dc:03:5f:7b:f4:fd:e8:ab:2d:6e:d0:50:2f:a1:
1a:88:ff:40:56:17:c7:30:df:aa:31:18:27:fb:78:
5d:9d:f6:21:57:d9:5c:12:80:48:81:fa:95:d2:e4:
07:3a:e1:ea:a9:cb:7f:11:d9:a3:b6:94:d7:91:98:
36:6f:7c:08:4a:17:44:61:e1:fe:02:13:94:34:57:
3a:d8:5e:bf:d0:23:79:61:b0:ac:37:32:a7:87:58:
63:b5:ba:32:08:d7:f4:88:8f:48:d1:17:33:29:63:
63:5d:5a:fe:73:29:84:81:4c:13:a0:66:ba:29:3f:
a2:75:6f:13:b6:e0:03:34:93:1d:a9:54:60:ed:ad:
49:6d:a1:1e:d3:8f:31:75:aa:05:87:03:43:42:ec:
c9:3f:e4:e4:31:50:32:3c:da:b1:12:08:0d:04:e0:
9d:97:54:e3:48:b2:88:a1:48:08:79:3f:f1:44:ef:
b0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:9A:BB:9B:6B:F3:15:07:9E:A5:C0:DB:8B:8A:3D:DD:8D:70:91:58
X509v3 Authority Key Identifier:
keyid:37:60:6E:99:C5:9E:71:07:D5:AC:FA:7E:8D:E3:FC:DF:E0:FF:A6:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:84:38:42:4b:2c:e8:8d:32:db:0e:e9:92:d7:fd:1a:c9:ce:
d9:a2:bb:e9:dc:f6:16:f5:b9:54:dd:d9:e8:44:41:ed:bf:1c:
44:7d:67:c4:aa:c5:93:91:5b:90:c8:fe:36:bd:08:93:4b:c4:
80:5d:a9:41:ad:67:ac:db:56:06:ab:30:cf:e0:16:ef:20:f7:
4e:f7:a4:1a:65:1f:d3:5b:bb:4e:2d:5f:3f:4b:84:bb:d7:06:
cb:9e:cc:e6:70:b1:73:a7:66:a4:ef:85:2d:5c:6e:f9:50:c4:
59:77:ae:29:5a:83:4e:3f:ba:42:bf:20:e3:eb:65:af:f2:b1:
2c:5e:4b:13:4d:23:4b:29:61:d6:cb:f2:8e:65:fb:86:73:6e:
8a:1d:30:62:b8:c6:a3:a7:67:ce:23:38:0b:a2:05:12:bc:a8:
08:49:a4:c5:7e:bd:24:3b:c4:e0:40:dd:8b:c2:72:a1:5e:4e:
7c:46:fa:fc:0e:ae:68:7e:3c:b8:5a:45:27:46:19:eb:3b:9a:
da:10:93:e6:18:f2:e8:37:7a:38:2a:45:4e:cb:ef:11:0e:a4:
45:b8:3b:d8:e4:fd:07:cd:f8:06:d4:db:cb:c3:f0:d1:df:d9:
75:f8:f7:bd:8d:64:50:ce:ea:cf:e5:7f:09:c7:20:e7:45:3e:
f5:95:8f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:55:34 2026 by rpki-client