$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/37F03E3124DF827AEC6F617458716798083055BC.mft File: 37F03E3124DF827AEC6F617458716798083055BC.mft (raw, json) Hash identifier: VkJKBNjQVxW1shLCTGYc5ADkChxdM2reHAfa3d0xRqg= Subject key identifier: EE:53:9D:A5:98:4D:CE:08:74:41:41:27:72:36:A9:2B:9C:F2:7A:E5 Authority key identifier: 37:F0:3E:31:24:DF:82:7A:EC:6F:61:74:58:71:67:98:08:30:55:BC Certificate issuer: /CN=37F03E3124DF827AEC6F617458716798083055BC Certificate serial: 66EE14BBD1D17D8F982788D6E9A34D99834C35C4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37F03E3124DF827AEC6F617458716798083055BC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/37F03E3124DF827AEC6F617458716798083055BC.mft Manifest number: BF Signing time: Tue 22 Sep 2026 08:32:03 +0000 Manifest this update: Tue 22 Sep 2026 08:27:03 +0000 Manifest next update: Wed 23 Sep 2026 09:36:03 +0000 Files and hashes: 1: 3130332e3138392e3230302e302f32332d3233203d3e2039333431.roa (hash: dsSBEZ+RmcKKQ/S8RAk9jCD+91Y66d5ktHEFnBxIwCc=) 2: 37F03E3124DF827AEC6F617458716798083055BC.crl (hash: Uj0w0AcrnnBpGtsDNQoBVqy3x3UJDoIGrf4VWHpZ82U=) 3: 3130332e3138392e3230312e302f32342d3234203d3e2039333431.roa (hash: p+akLfy0WmwcWwKoICEgVlXEAKS1XaUc7gLYGzrKupw=) 4: 3130332e3138392e3230302e302f32342d3234203d3e2039333431.roa (hash: zaT8QtBX8CWaeAVSKVLb2kSXw2+Ap6i51NDs3hsOZzg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/37F03E3124DF827AEC6F617458716798083055BC.crl rsync://rpki-rsync.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/37F03E3124DF827AEC6F617458716798083055BC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37F03E3124DF827AEC6F617458716798083055BC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 09:36:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:ee:14:bb:d1:d1:7d:8f:98:27:88:d6:e9:a3:4d:99:83:4c:35:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37F03E3124DF827AEC6F617458716798083055BC Validity Not Before: Sep 22 08:27:03 2026 GMT Not After : Sep 23 09:36:03 2026 GMT Subject: CN=EE539DA5984DCE08744141277236A92B9CF27AE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:bf:63:11:ef:09:ff:d7:af:9a:6d:21:0e:0c: e3:d5:ef:83:9f:80:f5:b0:95:5c:4d:ad:a1:f1:66: c9:71:e0:3c:ea:27:63:c2:96:e4:37:c6:00:49:e7: 97:36:9b:2f:3c:bd:24:1b:60:ad:0d:44:ec:35:9c: 26:29:36:35:80:b2:be:88:3b:88:1b:ec:4a:d3:63: 7e:86:f0:d6:98:95:7f:39:87:91:9c:b5:dc:45:d1: fc:f7:ae:5c:45:84:63:23:ad:ee:72:d0:1d:31:88: 28:7d:fd:c1:86:d4:8b:c0:64:b8:67:30:97:92:82: 76:92:5f:dd:fb:39:1b:32:5e:d3:0d:db:98:1e:8c: 3e:8f:95:f4:ff:c0:7a:44:2a:11:42:3e:06:be:f7: fc:1c:b5:44:46:13:a6:cd:b7:64:38:ae:6b:08:cf: 0c:9f:f0:b0:23:e0:07:67:de:1d:52:53:83:cc:04: d0:0e:b8:f9:1a:ea:05:2b:80:93:03:a2:80:ab:75: 7c:66:f1:0a:15:ae:e4:17:2a:c8:73:22:78:23:4c: 22:e3:b9:ec:8e:9b:34:9d:46:a0:71:4e:fc:a8:e6: 39:3b:9a:8a:e5:65:22:b0:73:f3:03:c7:c9:ec:80: c3:89:3e:eb:c3:1a:55:12:d2:a3:fa:81:14:b4:58: ae:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:53:9D:A5:98:4D:CE:08:74:41:41:27:72:36:A9:2B:9C:F2:7A:E5 X509v3 Authority Key Identifier: keyid:37:F0:3E:31:24:DF:82:7A:EC:6F:61:74:58:71:67:98:08:30:55:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/37F03E3124DF827AEC6F617458716798083055BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37F03E3124DF827AEC6F617458716798083055BC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/37F03E3124DF827AEC6F617458716798083055BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:07:7e:4f:c8:36:da:34:3e:7d:0c:e0:47:2b:52:74:20:e4: 0c:37:28:f3:ba:0e:eb:2a:03:34:ac:27:72:88:28:cb:cc:9a: b3:12:05:ab:65:2a:49:33:c4:62:3a:37:48:b2:36:42:9f:6b: 6d:e7:a4:d5:be:a1:92:0b:e7:d3:61:7e:8d:51:78:c3:9b:ea: 92:e8:6d:7e:03:0d:36:33:d5:9d:eb:29:d7:88:ea:8e:36:b7: c2:f0:8f:3a:35:18:a8:fd:05:ce:bd:b3:7c:25:8d:62:7e:62: c6:31:c3:28:b6:bd:0a:72:6e:a8:60:5f:71:fc:55:18:ce:60: 51:fb:ee:a4:d5:dd:e4:8c:de:1b:58:ff:6f:3d:3f:b4:78:f8: c9:12:dd:37:cb:76:88:96:1d:4a:40:10:1f:28:08:54:d2:d2: da:96:50:b6:91:1b:8d:0a:85:3a:c7:05:96:1a:9e:f5:d1:e7: 14:c8:a3:ca:0e:94:96:33:2e:4c:a7:4c:a4:41:bb:76:59:75: ff:b1:80:53:28:05:1c:63:0d:7d:94:4e:5c:cb:9e:f4:6c:6d: 4b:18:8d:ba:cb:ef:d6:eb:58:7a:a4:61:2b:36:0d:51:4c:70: fe:81:22:ac:ac:fd:b2:8b:9d:cd:cd:cb:92:44:e0:63:78:12: e0:fa:a1:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZu4Uu9HRfY+YJ4jW6aNNmYNMNcQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdGMDNFMzEyNERGODI3QUVDNkY2MTc0NTg3MTY3OTgw ODMwNTVCQzAeFw0yNjA5MjIwODI3MDNaFw0yNjA5MjMwOTM2MDNaMDMxMTAvBgNV BAMTKEVFNTM5REE1OTg0RENFMDg3NDQxNDEyNzcyMzZBOTJCOUNGMjdBRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZv2MR7wn/16+abSEODOPV74Of gPWwlVxNraHxZslx4DzqJ2PCluQ3xgBJ55c2my88vSQbYK0NROw1nCYpNjWAsr6I O4gb7ErTY36G8NaYlX85h5GctdxF0fz3rlxFhGMjre5y0B0xiCh9/cGG1IvAZLhn MJeSgnaSX937ORsyXtMN25gejD6PlfT/wHpEKhFCPga+9/wctURGE6bNt2Q4rmsI zwyf8LAj4Adn3h1SU4PMBNAOuPka6gUrgJMDooCrdXxm8QoVruQXKshzIngjTCLj ueyOmzSdRqBxTvyo5jk7morlZSKwc/MDx8nsgMOJPuvDGlUS0qP6gRS0WK59AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7lOdpZhNzgh0QUEncjapK5zyeuUwHwYDVR0j BBgwFoAUN/A+MSTfgnrsb2F0WHFnmAgwVbwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2EyZTVmMDMtYmY5Ni00YjQwLWJkNGEtNmUzODg4YzQwMjA1LzAvMzdGMDNFMzEy NERGODI3QUVDNkY2MTc0NTg3MTY3OTgwODMwNTVCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zN0YwM0UzMTI0REY4MjdBRUM2RjYxNzQ1ODcxNjc5ODA4MzA1 NUJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2EyZTVmMDMtYmY5Ni00YjQwLWJk NGEtNmUzODg4YzQwMjA1LzAvMzdGMDNFMzEyNERGODI3QUVDNkY2MTc0NTg3MTY3 OTgwODMwNTVCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAwHfk/INto0Pn0M4EcrUnQg5Aw3KPO6Dusq AzSsJ3KIKMvMmrMSBatlKkkzxGI6N0iyNkKfa23npNW+oZIL59Nhfo1ReMOb6pLo bX4DDTYz1Z3rKdeI6o42t8Lwjzo1GKj9Bc69s3wljWJ+YsYxwyi2vQpybqhgX3H8 VRjOYFH77qTV3eSM3htY/289P7R4+MkS3TfLdoiWHUpAEB8oCFTS0tqWULaRG40K hTrHBZYanvXR5xTIo8oOlJYzLkynTKRBu3ZZdf+xgFMoBRxjDX2UTlzLnvRsbUsY jbrL79brWHqkYSs2DVFMcP6BIqys/bKLnc3Ny5JE4GN4EuD6oSE= -----END CERTIFICATE-----Generated at Tue Sep 22 18:01:59 2026 by rpki-client