
$ rpki-client -vvf rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.mft
File: 37CC3A1A8C16FA30D26D2136495263B0E6A759F5.mft (raw, json)
Hash identifier: OAs9QkpHAI6KDeI7yZztmKwaGmMvMK5W1rawLYLbUVQ=
Subject key identifier: C0:BE:18:ED:6F:B1:1C:A8:AF:FF:04:3A:85:90:B7:29:40:0E:25:3C
Authority key identifier: 37:CC:3A:1A:8C:16:FA:30:D2:6D:21:36:49:52:63:B0:E6:A7:59:F5
Certificate issuer: /CN=37CC3A1A8C16FA30D26D2136495263B0E6A759F5
Certificate serial: 1E5436D1D3A6BDE2C6B8F6DD82156AB435FAA490
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.mft
Manifest number: 3D
Signing time: Tue 16 Jun 2026 16:49:32 +0000
Manifest this update: Tue 16 Jun 2026 16:44:32 +0000
Manifest next update: Wed 17 Jun 2026 20:15:32 +0000
Files and hashes: 1: 3130332e3131332e3132342e302f32342d3234203d3e20313337333433.roa (hash: fyLe+p/AB5OB4ujhmHeH2n5bm2C2Orl4eXn3b+l/rRM=)
2: 37CC3A1A8C16FA30D26D2136495263B0E6A759F5.crl (hash: hUZXgH5wFvj/YrtMJLB9BExNhWvFukHjZRWP6W8Bsm8=)
3: 3130332e3131332e3132342e302f32322d3234203d3e20313337333433.roa (hash: 9QAgWnws9Pn2cMk1Ow/sd4cNStAKYkg3/wIKxMTubt0=)
4: 3130332e3131332e3132342e302f32322d3232203d3e20313337333433.roa (hash: GHzYb3rjVTEQVdIvZj3KeXXe6U5QglqPAin2lkUZXo8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.crl
rsync://rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 20:15:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:54:36:d1:d3:a6:bd:e2:c6:b8:f6:dd:82:15:6a:b4:35:fa:a4:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37CC3A1A8C16FA30D26D2136495263B0E6A759F5
Validity
Not Before: Jun 16 16:44:32 2026 GMT
Not After : Jun 17 20:15:32 2026 GMT
Subject: CN=C0BE18ED6FB11CA8AFFF043A8590B729400E253C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:73:14:e6:68:66:e9:17:c9:5f:54:a6:b6:0e:
04:b9:72:cc:7e:1b:de:c7:85:f3:10:21:5e:78:c6:
18:08:f8:6d:80:5c:9c:94:4b:98:02:72:22:81:96:
4c:66:4e:20:a9:f4:14:78:89:a0:07:f9:48:a0:21:
49:8e:5b:59:11:07:c2:37:6b:f2:7c:27:e7:3a:8d:
09:5f:62:6e:75:2b:61:c3:07:18:0c:f0:47:76:23:
d6:c1:17:87:9e:a2:23:8e:da:80:81:71:24:4f:44:
8b:87:1e:40:aa:10:f0:c7:29:ac:3e:5f:1f:c6:92:
f1:c5:f8:1e:95:ce:5e:49:44:a2:a9:53:7f:d8:66:
a5:2a:df:87:de:15:2f:bd:10:50:12:9c:d6:16:0a:
f7:dc:b0:6c:48:50:38:55:9d:92:bc:88:63:b1:d0:
42:2a:03:29:38:70:bb:70:22:bd:be:ed:6f:d4:d4:
23:5b:41:86:d0:00:b5:72:65:35:72:e5:66:8d:a0:
55:41:14:d1:8e:47:03:ba:98:70:d6:88:48:c2:a9:
00:4b:53:ac:77:3b:48:6e:d8:f9:33:5b:d5:17:24:
46:5c:e4:96:6b:d2:d2:ac:50:ff:7e:f5:60:ee:0c:
ee:13:e1:63:9e:0c:9f:9c:b8:f8:d8:11:cb:7d:1d:
ae:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:BE:18:ED:6F:B1:1C:A8:AF:FF:04:3A:85:90:B7:29:40:0E:25:3C
X509v3 Authority Key Identifier:
keyid:37:CC:3A:1A:8C:16:FA:30:D2:6D:21:36:49:52:63:B0:E6:A7:59:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:72:c7:e8:c1:41:cf:72:46:62:2c:11:24:eb:c2:5c:37:e3:
84:b1:34:b9:60:54:cb:99:54:6a:14:7d:f8:d0:46:d9:c9:c3:
76:2a:c1:6b:56:c2:65:72:21:25:07:12:07:31:b6:67:e7:55:
61:bc:3f:05:27:4f:52:99:72:3f:cc:39:0d:7e:99:21:a7:b5:
c3:b6:a3:81:a5:d9:30:bc:be:c7:9d:0b:1c:1b:29:1c:98:4c:
4f:73:65:ea:b9:7b:08:0c:7d:6b:75:c9:31:26:b8:96:c1:eb:
e3:d2:33:c3:66:de:73:d2:8b:46:af:41:48:ce:c6:85:d8:87:
96:09:ad:f9:db:0b:c3:f7:80:17:e9:7e:13:a0:12:61:d5:5b:
70:57:8a:74:ca:b0:2d:10:09:2e:1f:53:0d:41:cc:83:75:05:
00:ba:60:e0:0d:4e:2d:7f:4d:ab:43:2e:cb:c1:e9:3c:95:c0:
6d:f3:90:ea:fc:a7:76:2d:06:0e:f8:7c:ab:35:3e:b8:0c:53:
77:95:a2:82:ff:c1:50:58:da:dd:77:1c:28:25:92:6f:1c:35:
59:fc:ce:ca:4c:e9:e7:34:66:81:c6:ff:7f:2a:ce:16:02:af:
aa:f2:cc:10:83:ea:b9:de:0b:eb:25:d8:81:13:44:7e:f9:a2:
ec:03:d6:a9
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUHlQ20dOmveLGuPbdghVqtDX6pJAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzdDQzNBMUE4QzE2RkEzMEQyNkQyMTM2NDk1MjYzQjBF
NkE3NTlGNTAeFw0yNjA2MTYxNjQ0MzJaFw0yNjA2MTcyMDE1MzJaMDMxMTAvBgNV
BAMTKEMwQkUxOEVENkZCMTFDQThBRkZGMDQzQTg1OTBCNzI5NDAwRTI1M0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxcxTmaGbpF8lfVKa2DgS5csx+
G97HhfMQIV54xhgI+G2AXJyUS5gCciKBlkxmTiCp9BR4iaAH+UigIUmOW1kRB8I3
a/J8J+c6jQlfYm51K2HDBxgM8Ed2I9bBF4eeoiOO2oCBcSRPRIuHHkCqEPDHKaw+
Xx/GkvHF+B6Vzl5JRKKpU3/YZqUq34feFS+9EFASnNYWCvfcsGxIUDhVnZK8iGOx
0EIqAyk4cLtwIr2+7W/U1CNbQYbQALVyZTVy5WaNoFVBFNGORwO6mHDWiEjCqQBL
U6x3O0hu2PkzW9UXJEZc5JZr0tKsUP9+9WDuDO4T4WOeDJ+cuPjYEct9Ha55AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUwL4Y7W+xHKiv/wQ6hZC3KUAOJTwwHwYDVR0j
BBgwFoAUN8w6GowW+jDSbSE2SVJjsOanWfUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NTBkMDA3MTgtNTIxMC00NDM4LWI2NGQtNjJlYzFmM2ViY2QwLzAvMzdDQzNBMUE4
QzE2RkEzMEQyNkQyMTM2NDk1MjYzQjBFNkE3NTlGNS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8zN0NDM0ExQThDMTZGQTMwRDI2RDIxMzY0OTUyNjNCMEU2QTc1
OUY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTBkMDA3MTgtNTIxMC00NDM4LWI2
NGQtNjJlYzFmM2ViY2QwLzAvMzdDQzNBMUE4QzE2RkEzMEQyNkQyMTM2NDk1MjYz
QjBFNkE3NTlGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFZyx+jBQc9yRmIsESTrwlw344SxNLlgVMuZ
VGoUffjQRtnJw3YqwWtWwmVyISUHEgcxtmfnVWG8PwUnT1KZcj/MOQ1+mSGntcO2
o4Gl2TC8vsedCxwbKRyYTE9zZeq5ewgMfWt1yTEmuJbB6+PSM8Nm3nPSi0avQUjO
xoXYh5YJrfnbC8P3gBfpfhOgEmHVW3BXinTKsC0QCS4fUw1BzIN1BQC6YOANTi1/
TatDLsvB6TyVwG3zkOr8p3YtBg74fKs1PrgMU3eVooL/wVBY2t13HCglkm8cNVn8
zspM6ec0ZoHG/38qzhYCr6ryzBCD6rneC+sl2IETRH75ouwD1qk=
-----END CERTIFICATE-----
Generated at Wed Jun 17 11:50:52 2026 by rpki-client