$ rpki-client -vvvf rpki-rsync.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.mft File: 37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.mft (raw, json) Hash identifier: x/YFo3oYTbgCPi5REr93qiTd1Ukw4lF9jA9cGPzwFyc= Subject key identifier: 36:8F:9A:F1:94:5F:43:6D:79:C3:D3:BD:A3:B0:CA:68:4C:CD:DE:52 Authority key identifier: 37:BB:70:91:96:04:AC:31:A2:42:3F:E2:DD:1F:9B:79:CB:59:F7:F4 Certificate issuer: /CN=37BB70919604AC31A2423FE2DD1F9B79CB59F7F4 Certificate serial: 7E690D7C72A1EF5423EC5AF86AB2F0629CD9E76D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.mft Manifest number: BF Signing time: Mon 21 Sep 2026 16:42:15 +0000 Manifest this update: Mon 21 Sep 2026 16:37:15 +0000 Manifest next update: Tue 22 Sep 2026 20:25:15 +0000 Files and hashes: 1: 3130332e332e3233322e302f32342d3234203d3e20313531353238.roa (hash: Im3o8YUekrl4UUhItVyydZhi8GU6lVLXxpRk9EL/+Ow=) 2: 37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.crl (hash: aS2d/xOZ5l5nK5TPBVIlq/dRpojwgNfSVXvFb22qKsA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.crl rsync://rpki-rsync.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 20:25:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:69:0d:7c:72:a1:ef:54:23:ec:5a:f8:6a:b2:f0:62:9c:d9:e7:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37BB70919604AC31A2423FE2DD1F9B79CB59F7F4 Validity Not Before: Sep 21 16:37:15 2026 GMT Not After : Sep 22 20:25:15 2026 GMT Subject: CN=368F9AF1945F436D79C3D3BDA3B0CA684CCDDE52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b7:33:47:56:c9:54:77:41:92:04:fd:9d:ad: 0d:36:da:b7:e0:db:bb:af:67:16:a0:52:91:c4:b6: 53:be:94:78:08:2f:d0:20:eb:8d:b8:41:d3:c5:11: f6:f9:12:5b:75:b8:00:cb:ce:d7:da:42:04:c6:96: 78:23:03:83:bf:41:20:d9:93:a9:5c:ec:5e:cc:e3: 02:fa:84:2c:ce:17:43:28:6d:e5:ce:af:78:d5:92: 85:df:3a:be:71:bb:00:05:b4:ff:af:d1:3d:8f:cf: cb:c4:2b:f8:df:14:a8:6f:3c:82:c0:b9:39:3c:1a: 58:81:bb:83:91:82:c7:1c:80:95:f4:e1:d5:83:19: 18:c5:b2:4a:38:f0:a7:cc:e0:d1:f0:ee:b5:b2:46: 9c:0e:39:56:82:69:07:f0:97:5f:11:05:ba:57:82: 97:b8:29:22:8b:50:92:c0:54:47:31:94:14:02:f9: 39:f9:97:cd:ec:0a:96:43:30:e9:d5:10:20:57:d2: 00:47:93:4d:91:ed:f8:01:e2:62:ef:76:5c:61:ac: 62:4f:13:59:77:43:73:b6:58:24:5b:71:64:b7:aa: b6:36:a8:2c:89:1f:43:ac:f0:29:ac:43:8a:cc:19: 26:cb:c2:89:ef:a4:67:a5:ba:2c:91:0e:10:86:57: 22:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:8F:9A:F1:94:5F:43:6D:79:C3:D3:BD:A3:B0:CA:68:4C:CD:DE:52 X509v3 Authority Key Identifier: keyid:37:BB:70:91:96:04:AC:31:A2:42:3F:E2:DD:1F:9B:79:CB:59:F7:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:26:98:60:1c:2b:64:f0:b2:08:d6:a2:4f:d5:ff:58:40:1b: 70:e9:c8:a7:6c:da:68:e9:b9:70:0f:85:f5:5a:dc:ea:62:64: bb:2c:eb:48:da:69:7f:c4:b5:9b:55:11:ce:25:4a:34:e4:8d: f2:28:21:fa:fa:7d:ea:78:8c:30:52:1f:c4:bf:b2:76:a5:b8: dd:77:87:64:b7:d3:9d:1c:cf:9e:15:4d:3d:1b:81:ad:a7:8c: 5e:e4:9a:7a:55:20:f6:b3:a9:37:58:6c:fe:49:f5:a3:86:7c: 5e:8a:44:ae:0a:2d:22:b8:e9:53:dd:5a:a4:66:0b:35:00:39: f4:35:05:a5:27:f4:be:75:e8:df:ce:44:31:55:c3:4e:c6:fb: 8d:41:4e:63:d8:14:34:bb:95:eb:c0:df:41:6e:fa:f7:f0:99: 2e:ae:e9:a7:17:b6:3c:bd:71:7d:0a:e5:c6:34:47:da:3b:f0: dc:ba:a1:13:df:85:51:83:fa:d1:56:d1:2f:46:9b:db:c8:da: b4:cf:ab:a4:10:05:2c:13:a7:96:11:8f:19:b0:f6:e1:11:e7: 8f:8e:9c:80:ea:8f:64:5f:7d:79:dd:30:41:58:cd:0f:0f:d5: 76:23:dc:7e:6a:5a:dc:76:6f:67:c8:31:76:e4:71:b7:5b:39: 7c:88:e6:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfmkNfHKh71Qj7Fr4arLwYpzZ520wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdCQjcwOTE5NjA0QUMzMUEyNDIzRkUyREQxRjlCNzlD QjU5RjdGNDAeFw0yNjA5MjExNjM3MTVaFw0yNjA5MjIyMDI1MTVaMDMxMTAvBgNV BAMTKDM2OEY5QUYxOTQ1RjQzNkQ3OUMzRDNCREEzQjBDQTY4NENDRERFNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJtzNHVslUd0GSBP2drQ022rfg 27uvZxagUpHEtlO+lHgIL9Ag6424QdPFEfb5Elt1uADLztfaQgTGlngjA4O/QSDZ k6lc7F7M4wL6hCzOF0MobeXOr3jVkoXfOr5xuwAFtP+v0T2Pz8vEK/jfFKhvPILA uTk8GliBu4ORgsccgJX04dWDGRjFsko48KfM4NHw7rWyRpwOOVaCaQfwl18RBbpX gpe4KSKLUJLAVEcxlBQC+Tn5l83sCpZDMOnVECBX0gBHk02R7fgB4mLvdlxhrGJP E1l3Q3O2WCRbcWS3qrY2qCyJH0Os8CmsQ4rMGSbLwonvpGeluiyRDhCGVyJBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNo+a8ZRfQ215w9O9o7DKaEzN3lIwHwYDVR0j BBgwFoAUN7twkZYErDGiQj/i3R+bectZ9/QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTllN2NhMzktOGRiYy00MjgyLWEwZDMtODQ4MDIzNzI2ODYyLzAvMzdCQjcwOTE5 NjA0QUMzMUEyNDIzRkUyREQxRjlCNzlDQjU5RjdGNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zN0JCNzA5MTk2MDRBQzMxQTI0MjNGRTJERDFGOUI3OUNCNTlG N0Y0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTllN2NhMzktOGRiYy00MjgyLWEw ZDMtODQ4MDIzNzI2ODYyLzAvMzdCQjcwOTE5NjA0QUMzMUEyNDIzRkUyREQxRjlC NzlDQjU5RjdGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADkmmGAcK2TwsgjWok/V/1hAG3DpyKds2mjp uXAPhfVa3OpiZLss60jaaX/EtZtVEc4lSjTkjfIoIfr6fep4jDBSH8S/snaluN13 h2S3050cz54VTT0bga2njF7kmnpVIPazqTdYbP5J9aOGfF6KRK4KLSK46VPdWqRm CzUAOfQ1BaUn9L516N/ORDFVw07G+41BTmPYFDS7levA30Fu+vfwmS6u6acXtjy9 cX0K5cY0R9o78Ny6oRPfhVGD+tFW0S9Gm9vI2rTPq6QQBSwTp5YRjxmw9uER54+O nIDqj2RffXndMEFYzQ8P1XYj3H5qWtx2b2fIMXbkcbdbOXyI5u4= -----END CERTIFICATE-----Generated at Tue Sep 22 01:04:57 2026 by rpki-client