$ rpki-client -vvf rpki-rsync.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.mft File: 37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.mft (raw, json) Hash identifier: ubfmSmdOiTScGcKqrOf8M1mnQiWphn2UV4VAMjCFlAk= Subject key identifier: 15:6D:3B:DB:FE:A4:6F:CF:0E:B1:5D:16:B4:D9:5C:F1:EF:5F:65:6F Authority key identifier: 37:BB:70:91:96:04:AC:31:A2:42:3F:E2:DD:1F:9B:79:CB:59:F7:F4 Certificate issuer: /CN=37BB70919604AC31A2423FE2DD1F9B79CB59F7F4 Certificate serial: 5050AF1A32869AF9CAE5EC59764641B2C2D9D7E9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 07:21:46 +0000 Manifest this update: Wed 17 Jun 2026 07:16:46 +0000 Manifest next update: Thu 18 Jun 2026 07:32:46 +0000 Files and hashes: 1: 3130332e332e3233322e302f32342d3234203d3e20313531353238.roa (hash: Im3o8YUekrl4UUhItVyydZhi8GU6lVLXxpRk9EL/+Ow=) 2: 37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.crl (hash: q6KORWT3gSgcCSvM2a+iaWiI7oHJBdD6v19Q0grFzbA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.crl rsync://rpki-rsync.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:50:af:1a:32:86:9a:f9:ca:e5:ec:59:76:46:41:b2:c2:d9:d7:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37BB70919604AC31A2423FE2DD1F9B79CB59F7F4 Validity Not Before: Jun 17 07:16:46 2026 GMT Not After : Jun 18 07:32:46 2026 GMT Subject: CN=156D3BDBFEA46FCF0EB15D16B4D95CF1EF5F656F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:89:1f:3e:7f:32:89:52:0d:0c:fa:20:a2:45: d8:73:fe:60:9f:e8:ea:84:d9:78:f2:b7:3f:66:c6: 7f:3b:c4:27:c6:b3:a3:3f:45:c9:2c:b9:7d:f1:f7: 2d:9d:dd:94:99:e7:1d:b4:44:d5:9a:83:d6:1f:73: 67:f7:97:12:f4:1f:f2:6c:b1:ad:c5:85:03:fd:99: ab:d9:95:74:29:ff:ca:ef:a1:29:58:b8:bd:27:c1: 20:2d:ce:f8:ac:c0:98:62:75:e6:c5:98:f6:db:84: b9:26:5a:04:ec:c4:09:81:e6:a4:ea:15:f8:b3:65: c7:79:40:36:78:be:1e:0a:bf:b5:53:e5:07:2f:e1: 0c:0b:48:3c:ff:c2:b4:3c:6c:1b:c4:19:1b:ee:ec: 4a:0f:f7:f6:0a:32:c2:e6:1b:45:b8:d4:e3:c9:e2: 5b:b9:11:36:c8:21:ff:b7:4d:61:4a:eb:e8:4d:6b: c3:f0:a5:e9:a8:40:c2:a1:0b:74:5e:81:ba:63:a0: 73:35:de:3c:05:4b:00:77:e0:67:85:b7:5f:cb:22: db:62:dc:aa:6a:25:70:9d:07:bf:8b:be:ac:f2:e8: e1:7c:1a:9d:f8:6d:dd:6e:54:4b:a1:98:85:fc:ed: 85:9e:06:94:2e:f9:df:a2:4e:5a:62:1c:8c:af:c7: 16:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:6D:3B:DB:FE:A4:6F:CF:0E:B1:5D:16:B4:D9:5C:F1:EF:5F:65:6F X509v3 Authority Key Identifier: keyid:37:BB:70:91:96:04:AC:31:A2:42:3F:E2:DD:1F:9B:79:CB:59:F7:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:b4:2c:bd:af:af:b8:04:f0:ca:98:9c:c6:04:9e:4d:96:ba: c9:e3:4f:7c:ab:be:52:d0:ed:18:a5:57:0e:10:4f:38:5e:f8: a0:d0:38:e6:b6:8c:56:44:da:6b:f3:49:df:42:50:fd:ca:0c: 4f:51:48:64:cf:38:ed:57:b8:d4:dd:40:8d:81:05:0c:1f:5d: 0e:74:5b:53:61:0b:1c:f9:05:0c:38:bc:73:e0:41:d7:ec:b0: 8f:f9:92:f2:1b:02:49:3c:f3:fc:f5:e1:94:69:92:58:5c:da: 4b:bb:3d:17:ae:60:97:cb:11:2a:f4:1e:77:35:ac:05:42:3e: 1f:73:32:f3:e5:66:5f:5d:28:80:a5:f9:78:1e:c8:17:82:e6: c0:81:aa:67:06:54:0f:b9:af:30:17:bc:7f:9c:05:df:3c:d8: 28:f7:99:e2:5a:43:3e:8c:5e:c8:f3:f5:88:4f:28:f8:db:26: 8b:60:60:bd:ec:67:fe:5e:c1:fc:13:98:8f:73:16:ab:0d:47: e1:a4:90:68:dc:63:cb:b5:82:54:a8:89:18:3f:2d:a0:d5:3d: f3:58:ef:9e:5f:ea:bd:1e:29:3a:04:0a:1e:97:2c:e8:89:58: 60:bf:e3:ba:03:ec:62:a6:8a:ce:89:03:78:89:ba:17:16:9c: 38:f7:ab:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUFCvGjKGmvnK5exZdkZBssLZ1+kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdCQjcwOTE5NjA0QUMzMUEyNDIzRkUyREQxRjlCNzlD QjU5RjdGNDAeFw0yNjA2MTcwNzE2NDZaFw0yNjA2MTgwNzMyNDZaMDMxMTAvBgNV BAMTKDE1NkQzQkRCRkVBNDZGQ0YwRUIxNUQxNkI0RDk1Q0YxRUY1RjY1NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCziR8+fzKJUg0M+iCiRdhz/mCf 6OqE2Xjytz9mxn87xCfGs6M/RcksuX3x9y2d3ZSZ5x20RNWag9Yfc2f3lxL0H/Js sa3FhQP9mavZlXQp/8rvoSlYuL0nwSAtzviswJhidebFmPbbhLkmWgTsxAmB5qTq FfizZcd5QDZ4vh4Kv7VT5Qcv4QwLSDz/wrQ8bBvEGRvu7EoP9/YKMsLmG0W41OPJ 4lu5ETbIIf+3TWFK6+hNa8PwpemoQMKhC3RegbpjoHM13jwFSwB34GeFt1/LItti 3KpqJXCdB7+Lvqzy6OF8Gp34bd1uVEuhmIX87YWeBpQu+d+iTlpiHIyvxxaVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFW072/6kb88OsV0WtNlc8e9fZW8wHwYDVR0j BBgwFoAUN7twkZYErDGiQj/i3R+bectZ9/QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTllN2NhMzktOGRiYy00MjgyLWEwZDMtODQ4MDIzNzI2ODYyLzAvMzdCQjcwOTE5 NjA0QUMzMUEyNDIzRkUyREQxRjlCNzlDQjU5RjdGNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zN0JCNzA5MTk2MDRBQzMxQTI0MjNGRTJERDFGOUI3OUNCNTlG N0Y0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTllN2NhMzktOGRiYy00MjgyLWEw ZDMtODQ4MDIzNzI2ODYyLzAvMzdCQjcwOTE5NjA0QUMzMUEyNDIzRkUyREQxRjlC NzlDQjU5RjdGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACC0LL2vr7gE8MqYnMYEnk2WusnjT3yrvlLQ 7RilVw4QTzhe+KDQOOa2jFZE2mvzSd9CUP3KDE9RSGTPOO1XuNTdQI2BBQwfXQ50 W1NhCxz5BQw4vHPgQdfssI/5kvIbAkk88/z14ZRpklhc2ku7PReuYJfLESr0Hnc1 rAVCPh9zMvPlZl9dKICl+XgeyBeC5sCBqmcGVA+5rzAXvH+cBd882Cj3meJaQz6M Xsjz9YhPKPjbJotgYL3sZ/5ewfwTmI9zFqsNR+GkkGjcY8u1glSoiRg/LaDVPfNY 755f6r0eKToECh6XLOiJWGC/47oD7GKmis6JA3iJuhcWnDj3q5w= -----END CERTIFICATE-----Generated at Wed Jun 17 11:49:11 2026 by rpki-client