
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/37F03E3124DF827AEC6F617458716798083055BC.mft
File: 37F03E3124DF827AEC6F617458716798083055BC.mft (raw, json)
Hash identifier: YKZoHiNrfAQ8UUh2tlH6O+lOT9WuxJ1PhUk93X9e/6w=
Subject key identifier: 13:F1:41:9B:26:C2:82:9A:D6:CA:FB:0B:94:1D:39:A1:D3:91:E4:53
Authority key identifier: 37:F0:3E:31:24:DF:82:7A:EC:6F:61:74:58:71:67:98:08:30:55:BC
Certificate issuer: /CN=37F03E3124DF827AEC6F617458716798083055BC
Certificate serial: 7ADD10DF49CD59A89290CA55218300DBDA5B0B72
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37F03E3124DF827AEC6F617458716798083055BC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/37F03E3124DF827AEC6F617458716798083055BC.mft
Manifest number: 75
Signing time: Tue 28 Jul 2026 21:07:36 +0000
Manifest this update: Tue 28 Jul 2026 21:02:36 +0000
Manifest next update: Wed 29 Jul 2026 21:56:36 +0000
Files and hashes: 1: 3130332e3138392e3230312e302f32342d3234203d3e2039333431.roa (hash: p+akLfy0WmwcWwKoICEgVlXEAKS1XaUc7gLYGzrKupw=)
2: 37F03E3124DF827AEC6F617458716798083055BC.crl (hash: +fc2ZWXWjcSgxVx3K8umVHMX8extdB5kEYUcvTt7F4Q=)
3: 3130332e3138392e3230302e302f32342d3234203d3e2039333431.roa (hash: zaT8QtBX8CWaeAVSKVLb2kSXw2+Ap6i51NDs3hsOZzg=)
4: 3130332e3138392e3230302e302f32332d3233203d3e2039333431.roa (hash: dsSBEZ+RmcKKQ/S8RAk9jCD+91Y66d5ktHEFnBxIwCc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/37F03E3124DF827AEC6F617458716798083055BC.crl
rsync://rpki-rsync.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/37F03E3124DF827AEC6F617458716798083055BC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37F03E3124DF827AEC6F617458716798083055BC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:56:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:dd:10:df:49:cd:59:a8:92:90:ca:55:21:83:00:db:da:5b:0b:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37F03E3124DF827AEC6F617458716798083055BC
Validity
Not Before: Jul 28 21:02:36 2026 GMT
Not After : Jul 29 21:56:36 2026 GMT
Subject: CN=13F1419B26C2829AD6CAFB0B941D39A1D391E453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a8:c5:38:21:70:32:f1:b8:8a:aa:58:d5:01:
36:16:19:4a:91:a1:50:7f:70:19:a8:57:c6:84:16:
08:af:75:11:a2:71:fb:1a:7e:e8:52:a7:57:ed:26:
7e:4f:f4:fe:f5:30:8a:6a:31:21:28:04:bc:4d:9c:
f0:99:8b:4e:f2:c9:7d:ff:53:35:f4:0f:97:1f:e3:
be:75:0d:85:e5:b0:a5:8c:db:22:a9:05:66:6a:59:
7f:0f:f9:8c:37:c9:31:96:c2:d7:8a:ee:01:36:ec:
65:60:08:82:2d:8f:c0:a3:28:50:b5:43:63:20:f1:
04:12:bf:ee:b8:d0:9b:4f:36:3a:a2:62:aa:ae:03:
dc:4c:0a:3c:7b:60:42:4a:6a:f6:f2:f4:6f:87:bc:
c4:01:cf:8d:96:e6:e9:70:99:67:e1:e6:81:d3:e9:
45:7e:91:9e:c6:2a:68:75:ff:15:c9:4d:8e:2d:c0:
1b:8a:36:37:0f:b2:f9:c2:00:b2:2b:a3:9a:d7:8c:
2c:ce:de:b3:9d:23:23:f9:8d:f1:d9:4d:31:1f:f4:
45:4e:5e:2f:2f:19:66:c0:83:c2:aa:c5:05:73:f6:
9f:71:b7:5c:5c:ca:8c:49:81:05:d9:f6:f5:0d:96:
7f:85:8c:9f:75:ae:54:72:a5:3d:1d:ab:63:c8:97:
10:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F1:41:9B:26:C2:82:9A:D6:CA:FB:0B:94:1D:39:A1:D3:91:E4:53
X509v3 Authority Key Identifier:
keyid:37:F0:3E:31:24:DF:82:7A:EC:6F:61:74:58:71:67:98:08:30:55:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/37F03E3124DF827AEC6F617458716798083055BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37F03E3124DF827AEC6F617458716798083055BC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/37F03E3124DF827AEC6F617458716798083055BC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:3e:60:d1:77:4e:c1:7b:4a:84:c3:12:55:ac:83:da:62:c5:
32:69:83:8e:35:12:cb:c2:99:d0:9e:3e:67:0a:2b:5e:48:0e:
cd:a7:a9:3a:f0:3a:f8:d8:9f:e6:05:b3:67:28:17:4f:18:81:
66:4b:47:f3:57:39:4a:f0:a2:14:96:b4:45:7e:0c:98:61:c2:
90:7a:25:44:eb:6e:b8:cd:5b:f2:1e:77:88:b6:8b:8e:20:07:
eb:59:e9:67:f5:e7:12:22:d0:ba:5e:71:c1:fa:96:f4:54:2c:
bd:3c:ac:09:31:8d:88:96:d0:3d:9b:cb:cf:2f:f7:34:61:8b:
8b:97:f3:96:f2:fb:e5:87:23:e1:c4:83:ed:28:44:48:52:a0:
57:12:d6:7d:f1:94:ff:d8:84:39:af:97:f8:23:4f:b7:9a:f7:
83:65:26:86:aa:d3:bf:89:81:82:d0:46:4e:d9:e9:43:27:98:
f6:e6:f9:89:f6:ca:8f:76:05:3a:d4:55:98:8a:bd:d5:cc:d7:
85:c2:6a:ea:0d:ab:e2:87:84:9c:1c:c2:4d:32:6a:43:ea:9a:
4c:c4:6a:52:a4:7c:13:fb:92:bf:6d:00:0e:c0:27:18:9b:23:
a1:80:9c:1d:ff:9d:26:23:78:d7:59:0b:b3:20:52:15:b4:2c:
31:7c:f4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:38:51 2026 by rpki-client