$ rpki-client -vvvf rpki-rsync.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.mft File: 37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.mft (raw, json) Hash identifier: 9s1j1g2Enszxse4Q1i6eX7HXcgd9ZYU6QW92QQ+oCwI= Subject key identifier: 36:83:6B:39:56:64:A1:56:4D:E9:AE:F7:E6:56:63:F2:B6:7D:10:20 Authority key identifier: 37:BB:70:91:96:04:AC:31:A2:42:3F:E2:DD:1F:9B:79:CB:59:F7:F4 Certificate issuer: /CN=37BB70919604AC31A2423FE2DD1F9B79CB59F7F4 Certificate serial: 2AAFD96739E92D975D99A38EA6AF1C15A5FF7BC6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.mft Manifest number: 0108 Signing time: Sun 15 Nov 2026 09:41:11 +0000 Manifest this update: Sun 15 Nov 2026 09:36:11 +0000 Manifest next update: Mon 16 Nov 2026 11:21:11 +0000 Files and hashes: 1: 37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.crl (hash: IH8tNyYkfbi//bbW7xzC/dSO2GC+ukZgyvtT7OPBC3U=) 2: 3130332e332e3233322e302f32342d3234203d3e20313531353238.roa (hash: Im3o8YUekrl4UUhItVyydZhi8GU6lVLXxpRk9EL/+Ow=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.crl rsync://rpki-rsync.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:af:d9:67:39:e9:2d:97:5d:99:a3:8e:a6:af:1c:15:a5:ff:7b:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37BB70919604AC31A2423FE2DD1F9B79CB59F7F4 Validity Not Before: Nov 15 09:36:11 2026 GMT Not After : Nov 16 11:21:11 2026 GMT Subject: CN=36836B395664A1564DE9AEF7E65663F2B67D1020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3c:28:7b:74:60:4e:10:26:df:ca:c0:8a:ae: 5b:76:c3:82:7f:66:fe:ad:f1:ee:69:0b:6c:15:86: 8d:06:8e:03:92:38:30:3c:0e:59:99:49:52:76:4a: d0:57:1c:08:90:a8:14:83:4d:8e:05:97:c8:bb:7a: 31:6b:92:7d:aa:82:8e:88:c7:39:2f:21:3b:f5:5f: e4:4a:26:03:c7:da:4f:24:aa:e6:9c:fc:14:52:45: 39:32:b2:a4:a8:45:5b:ab:97:ca:7a:ed:8a:b9:bf: 70:95:f8:fe:89:4c:30:d3:0b:5d:9c:c7:f1:79:29: 3d:0f:15:e7:ef:4f:ca:f7:39:09:95:b9:ec:92:42: 6d:9d:3a:e9:64:e2:76:75:4b:90:c1:c9:8e:ec:ad: 1b:77:78:75:1f:f8:75:80:61:35:de:ea:25:f5:c6: 7d:e2:31:36:48:90:86:6b:92:97:2c:58:6e:e7:65: 9f:a3:21:30:77:97:76:84:8e:e5:79:09:1a:10:10: 68:08:5a:a1:e9:bf:34:99:55:1f:37:19:ff:14:2f: 32:18:69:9f:fe:fc:a8:7e:39:36:f1:28:bc:56:f9: 13:1c:ad:ec:c7:b2:4b:4d:94:0c:c3:ab:b7:d4:3f: b1:db:e6:73:3a:25:ad:d2:39:85:37:c4:f5:f1:6d: a5:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:83:6B:39:56:64:A1:56:4D:E9:AE:F7:E6:56:63:F2:B6:7D:10:20 X509v3 Authority Key Identifier: keyid:37:BB:70:91:96:04:AC:31:A2:42:3F:E2:DD:1F:9B:79:CB:59:F7:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:d0:37:53:93:96:d3:47:a3:2a:5f:61:10:98:f6:f3:d7:2b: e1:36:7e:e3:52:94:81:98:b8:ff:65:6a:c0:27:8c:b9:22:46: ef:9e:e8:b1:74:b3:50:7b:91:5d:9b:60:c4:83:49:83:e0:23: ac:ad:db:41:5d:c4:15:59:46:a4:b1:66:65:49:c4:0c:e3:3d: c6:e6:46:b2:e3:49:aa:5d:59:f7:7c:a2:31:9f:44:7c:58:f8: f7:c3:aa:e5:bd:97:43:6f:b0:c0:3b:76:16:3c:8c:6e:0d:98: 58:be:2d:05:71:8d:4f:02:0d:e3:ee:b7:8b:62:bf:ed:3e:30: 61:a5:ce:8b:73:2f:ff:9d:ac:f7:95:8b:85:0b:54:48:64:d1: de:d1:83:b3:8f:26:95:35:81:9b:61:db:1b:00:91:05:44:b7: bc:89:f3:8e:28:13:22:84:51:cc:00:da:07:71:5c:f1:62:fc: 8f:c5:75:b6:d4:1c:53:dd:b8:92:97:51:ff:1e:27:10:13:74: e1:74:4b:3f:40:4e:c3:45:98:05:bd:1e:6e:92:b2:0b:2a:ae: 79:88:97:69:06:4c:5a:71:5c:be:c2:01:a9:7c:d4:8c:ec:aa: 03:5d:d2:d1:34:f9:d7:af:71:e8:65:d4:b2:d2:56:07:56:2a: f7:14:04:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKq/ZZznpLZddmaOOpq8cFaX/e8YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdCQjcwOTE5NjA0QUMzMUEyNDIzRkUyREQxRjlCNzlD QjU5RjdGNDAeFw0yNjExMTUwOTM2MTFaFw0yNjExMTYxMTIxMTFaMDMxMTAvBgNV BAMTKDM2ODM2QjM5NTY2NEExNTY0REU5QUVGN0U2NTY2M0YyQjY3RDEwMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3PCh7dGBOECbfysCKrlt2w4J/ Zv6t8e5pC2wVho0GjgOSODA8DlmZSVJ2StBXHAiQqBSDTY4Fl8i7ejFrkn2qgo6I xzkvITv1X+RKJgPH2k8kquac/BRSRTkysqSoRVurl8p67Yq5v3CV+P6JTDDTC12c x/F5KT0PFefvT8r3OQmVueySQm2dOulk4nZ1S5DByY7srRt3eHUf+HWAYTXe6iX1 xn3iMTZIkIZrkpcsWG7nZZ+jITB3l3aEjuV5CRoQEGgIWqHpvzSZVR83Gf8ULzIY aZ/+/Kh+OTbxKLxW+RMcrezHsktNlAzDq7fUP7Hb5nM6Ja3SOYU3xPXxbaXlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNoNrOVZkoVZN6a735lZj8rZ9ECAwHwYDVR0j BBgwFoAUN7twkZYErDGiQj/i3R+bectZ9/QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTllN2NhMzktOGRiYy00MjgyLWEwZDMtODQ4MDIzNzI2ODYyLzAvMzdCQjcwOTE5 NjA0QUMzMUEyNDIzRkUyREQxRjlCNzlDQjU5RjdGNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zN0JCNzA5MTk2MDRBQzMxQTI0MjNGRTJERDFGOUI3OUNCNTlG N0Y0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTllN2NhMzktOGRiYy00MjgyLWEw ZDMtODQ4MDIzNzI2ODYyLzAvMzdCQjcwOTE5NjA0QUMzMUEyNDIzRkUyREQxRjlC NzlDQjU5RjdGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE3QN1OTltNHoypfYRCY9vPXK+E2fuNSlIGY uP9lasAnjLkiRu+e6LF0s1B7kV2bYMSDSYPgI6yt20FdxBVZRqSxZmVJxAzjPcbm RrLjSapdWfd8ojGfRHxY+PfDquW9l0NvsMA7dhY8jG4NmFi+LQVxjU8CDePut4ti v+0+MGGlzotzL/+drPeVi4ULVEhk0d7Rg7OPJpU1gZth2xsAkQVEt7yJ844oEyKE UcwA2gdxXPFi/I/FdbbUHFPduJKXUf8eJxATdOF0Sz9ATsNFmAW9Hm6SsgsqrnmI l2kGTFpxXL7CAal81IzsqgNd0tE0+devcehl1LLSVgdWKvcUBDw= -----END CERTIFICATE-----Generated at Sun Nov 15 15:18:48 2026 by rpki-client