$ rpki-client -vvvf rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.mft File: 37CC3A1A8C16FA30D26D2136495263B0E6A759F5.mft (raw, json) Hash identifier: ynmz/D0VWTynT8EgKhOFqQ5dVR2hsbzbr+DolZibCEU= Subject key identifier: 4C:61:D1:F2:68:94:D2:80:8D:81:56:D3:0C:B0:85:57:88:75:87:27 Authority key identifier: 37:CC:3A:1A:8C:16:FA:30:D2:6D:21:36:49:52:63:B0:E6:A7:59:F5 Certificate issuer: /CN=37CC3A1A8C16FA30D26D2136495263B0E6A759F5 Certificate serial: 1D69E79280D8C4CD69BCDC85E4C5499D4FB83AF5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.mft Manifest number: C5 Signing time: Sat 26 Sep 2026 22:02:19 +0000 Manifest this update: Sat 26 Sep 2026 21:57:19 +0000 Manifest next update: Mon 28 Sep 2026 01:39:19 +0000 Files and hashes: 1: 37CC3A1A8C16FA30D26D2136495263B0E6A759F5.crl (hash: opXQXRL0sm2LtDZsyudiBOpmbNYogNReGXcoTTw1sS0=) 2: 3130332e3131332e3132342e302f32322d3232203d3e20313337333433.roa (hash: GHzYb3rjVTEQVdIvZj3KeXXe6U5QglqPAin2lkUZXo8=) 3: 3130332e3131332e3132342e302f32342d3234203d3e20313337333433.roa (hash: fyLe+p/AB5OB4ujhmHeH2n5bm2C2Orl4eXn3b+l/rRM=) 4: 3130332e3131332e3132342e302f32322d3234203d3e20313337333433.roa (hash: 9QAgWnws9Pn2cMk1Ow/sd4cNStAKYkg3/wIKxMTubt0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.crl rsync://rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 01:39:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:69:e7:92:80:d8:c4:cd:69:bc:dc:85:e4:c5:49:9d:4f:b8:3a:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37CC3A1A8C16FA30D26D2136495263B0E6A759F5 Validity Not Before: Sep 26 21:57:19 2026 GMT Not After : Sep 28 01:39:19 2026 GMT Subject: CN=4C61D1F26894D2808D8156D30CB0855788758727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:06:c2:7f:42:fb:3d:a0:6c:61:27:5f:7e:c7: 96:88:2d:65:ab:6e:b1:f0:1c:cb:fd:f9:2e:b8:b2: 16:3b:36:fa:d3:64:17:be:dc:e6:84:fc:70:38:2f: f5:88:e5:ef:0b:b1:ee:98:0f:8d:2d:f9:79:a5:ea: 93:3c:b6:0b:1b:4f:ba:63:1b:33:1f:96:84:56:9f: e9:f7:8b:24:73:c1:12:4a:0f:06:53:15:d2:36:a2: b7:36:62:3a:68:67:fd:4a:4d:46:c5:b9:92:8f:1a: bd:ba:56:17:0e:a9:1b:a8:4f:ec:d4:83:20:0d:9c: 3f:cd:13:57:c9:6d:cb:b3:5d:db:c0:1e:fd:0e:12: b4:5a:2f:b6:6f:53:31:97:d3:5a:bd:6c:2e:fe:bf: 42:5a:39:1b:b2:64:88:ae:80:9e:98:01:5d:7b:e6: ee:ad:11:2c:dc:83:5d:c4:22:cf:9b:1c:5f:03:07: 2f:35:4d:da:69:d8:da:fb:2b:66:e9:51:bf:2a:15: 68:19:a8:45:72:f8:ab:43:db:57:51:0d:c9:60:fd: a8:05:9d:a3:e8:ed:83:d7:17:87:d6:e6:31:f0:50: 70:95:ce:dc:21:3b:4c:65:e1:5a:f5:13:f9:95:88: 46:c6:d2:4a:02:a9:8b:e2:84:b5:e6:5c:c0:2b:aa: 82:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:61:D1:F2:68:94:D2:80:8D:81:56:D3:0C:B0:85:57:88:75:87:27 X509v3 Authority Key Identifier: keyid:37:CC:3A:1A:8C:16:FA:30:D2:6D:21:36:49:52:63:B0:E6:A7:59:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:04:f3:0d:2b:b5:a4:e2:30:d6:ce:e4:ef:54:ed:de:95:21: 3c:31:5d:e7:52:24:7d:ca:90:42:e5:80:61:0a:0a:7b:38:ef: 27:0a:25:49:57:52:75:03:48:b8:49:84:b5:8a:d9:22:a6:18: b0:c5:0b:78:63:10:49:82:89:d0:a8:94:68:ac:02:5f:2a:9f: d9:6d:06:77:94:e5:9f:10:56:2c:56:ea:a0:5f:75:9e:68:f5: 9d:8a:33:c1:2e:03:14:7a:4f:c6:74:42:c3:0a:88:94:32:9e: 42:67:b7:bb:1d:1c:45:75:8a:7d:fb:8b:54:77:61:0b:5b:13: 59:de:55:fa:2d:80:ce:f5:2f:7e:9c:86:56:3a:9d:08:69:3e: 1e:00:67:e6:8a:e7:c1:12:58:2d:6f:36:39:28:b6:d9:20:ea: 41:a9:c9:b7:b0:cf:57:c1:03:61:83:e6:d0:f7:c4:43:44:e2: a7:1e:da:85:4a:75:ae:80:66:0c:40:7d:4a:68:de:cd:f0:52: 3d:b2:19:f3:52:fd:89:47:75:d4:da:8a:96:9d:3e:6a:85:dd: 93:98:2d:ae:5e:59:ca:12:5b:23:73:7f:65:d6:a6:c5:9e:19: aa:73:aa:84:68:51:23:4d:e3:ef:ee:d5:d8:9f:e7:b2:8f:63: 68:50:df:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHWnnkoDYxM1pvNyF5MVJnU+4OvUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdDQzNBMUE4QzE2RkEzMEQyNkQyMTM2NDk1MjYzQjBF NkE3NTlGNTAeFw0yNjA5MjYyMTU3MTlaFw0yNjA5MjgwMTM5MTlaMDMxMTAvBgNV BAMTKDRDNjFEMUYyNjg5NEQyODA4RDgxNTZEMzBDQjA4NTU3ODg3NTg3MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgBsJ/Qvs9oGxhJ19+x5aILWWr brHwHMv9+S64shY7NvrTZBe+3OaE/HA4L/WI5e8Lse6YD40t+Xml6pM8tgsbT7pj GzMfloRWn+n3iyRzwRJKDwZTFdI2orc2YjpoZ/1KTUbFuZKPGr26VhcOqRuoT+zU gyANnD/NE1fJbcuzXdvAHv0OErRaL7ZvUzGX01q9bC7+v0JaORuyZIiugJ6YAV17 5u6tESzcg13EIs+bHF8DBy81Tdpp2Nr7K2bpUb8qFWgZqEVy+KtD21dRDclg/agF naPo7YPXF4fW5jHwUHCVztwhO0xl4Vr1E/mViEbG0koCqYvihLXmXMArqoKhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTGHR8miU0oCNgVbTDLCFV4h1hycwHwYDVR0j BBgwFoAUN8w6GowW+jDSbSE2SVJjsOanWfUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTBkMDA3MTgtNTIxMC00NDM4LWI2NGQtNjJlYzFmM2ViY2QwLzAvMzdDQzNBMUE4 QzE2RkEzMEQyNkQyMTM2NDk1MjYzQjBFNkE3NTlGNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zN0NDM0ExQThDMTZGQTMwRDI2RDIxMzY0OTUyNjNCMEU2QTc1 OUY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTBkMDA3MTgtNTIxMC00NDM4LWI2 NGQtNjJlYzFmM2ViY2QwLzAvMzdDQzNBMUE4QzE2RkEzMEQyNkQyMTM2NDk1MjYz QjBFNkE3NTlGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHAE8w0rtaTiMNbO5O9U7d6VITwxXedSJH3K kELlgGEKCns47ycKJUlXUnUDSLhJhLWK2SKmGLDFC3hjEEmCidColGisAl8qn9lt BneU5Z8QVixW6qBfdZ5o9Z2KM8EuAxR6T8Z0QsMKiJQynkJnt7sdHEV1in37i1R3 YQtbE1neVfotgM71L36chlY6nQhpPh4AZ+aK58ESWC1vNjkottkg6kGpybewz1fB A2GD5tD3xENE4qce2oVKda6AZgxAfUpo3s3wUj2yGfNS/YlHddTaipadPmqF3ZOY La5eWcoSWyNzf2XWpsWeGapzqoRoUSNN4+/u1dif57KPY2hQ3+8= -----END CERTIFICATE-----Generated at Sun Sep 27 12:36:12 2026 by rpki-client