$ rpki-client -vvf rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.mft File: D37E9EB2F98E29CDF13865332666AEFB23184FEB.mft (raw, json) Hash identifier: SvmE9XUKXotGOnc3S7k3cW6UlavB7t4wrG/sOs8WeWg= Subject key identifier: 8B:D9:8A:59:E1:52:93:F0:6D:BB:F9:F5:64:6E:D9:EF:AE:E0:61:F8 Authority key identifier: D3:7E:9E:B2:F9:8E:29:CD:F1:38:65:33:26:66:AE:FB:23:18:4F:EB Certificate issuer: /CN=D37E9EB2F98E29CDF13865332666AEFB23184FEB Certificate serial: 43E623F728E438013D81A5908F630DB106F02610 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.mft Manifest number: 74 Signing time: Tue 28 Jul 2026 16:32:11 +0000 Manifest this update: Tue 28 Jul 2026 16:27:11 +0000 Manifest next update: Wed 29 Jul 2026 20:02:11 +0000 Files and hashes: 1: 3136302e31392e3134342e302f32342d3234203d3e20313532373838.roa (hash: /Ank/NdhTyFolT1yr2gOxvp0mx0tj8KaBVOQP4gcAxk=) 2: D37E9EB2F98E29CDF13865332666AEFB23184FEB.crl (hash: gZKpocifAV7cX79LpTwqCBWP+KPIvv+7PXPJcUVq2Jk=) 3: 3136302e31392e3134352e302f32342d3234203d3e203435333035.roa (hash: byftjSeCvMFNmeFpkuYeG9YZa2VCV2p6nFeWhRr4XHM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.crl rsync://rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:e6:23:f7:28:e4:38:01:3d:81:a5:90:8f:63:0d:b1:06:f0:26:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D37E9EB2F98E29CDF13865332666AEFB23184FEB Validity Not Before: Jul 28 16:27:11 2026 GMT Not After : Jul 29 20:02:11 2026 GMT Subject: CN=8BD98A59E15293F06DBBF9F5646ED9EFAEE061F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d9:fc:f1:2d:b0:42:67:ba:a4:cc:47:15:6d: bf:30:42:18:ce:4d:ac:9d:13:fa:1d:b6:1f:55:3a: 8a:9d:5e:bd:72:49:94:1c:dc:08:d6:35:44:f8:d7: 22:4a:1d:6e:5a:2c:a5:77:08:96:4a:3b:27:ad:50: 43:7f:55:c6:72:01:47:43:a4:88:d2:58:25:2e:98: a6:38:81:28:5d:05:0f:ac:a2:8d:e5:f2:1a:bc:71: 1d:d7:a8:76:6e:77:54:21:ab:2e:74:c9:b2:2b:5e: b6:6a:37:e3:90:31:34:98:44:47:b4:be:8e:9d:32: af:5d:be:44:75:44:08:fd:7f:a5:7f:b1:75:04:86: ca:25:60:d6:2c:62:75:c9:06:a1:ad:76:d4:aa:84: 40:83:a5:bb:84:c4:91:86:4c:ac:5c:da:7d:29:0a: d3:69:50:08:a4:94:a7:00:a0:ba:b9:60:4d:cd:3b: 7b:4e:4e:dc:79:24:f9:ce:a5:81:40:3d:0b:cc:a9: b9:01:1f:cf:19:83:91:66:7e:b7:ea:19:30:28:c2: 48:63:e2:af:21:b9:00:f2:20:eb:da:f8:74:59:42: 83:be:7b:61:84:47:78:8f:72:02:db:1c:f9:b2:15: 8a:36:f9:9a:10:db:24:68:84:8c:b6:ed:d0:a8:ce: 88:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:D9:8A:59:E1:52:93:F0:6D:BB:F9:F5:64:6E:D9:EF:AE:E0:61:F8 X509v3 Authority Key Identifier: keyid:D3:7E:9E:B2:F9:8E:29:CD:F1:38:65:33:26:66:AE:FB:23:18:4F:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:2c:dc:e6:0d:8c:c3:19:f3:0e:7f:ee:97:a9:fa:93:02:79: 01:3e:02:df:df:ec:b6:aa:d5:8b:bc:07:7d:52:5a:7c:f4:e9: 53:22:9c:26:0b:06:8e:75:ab:b0:7a:42:8c:8e:32:b8:04:61: f6:07:72:f3:19:80:39:69:3e:9f:f2:20:71:fe:ce:dd:d0:91: f7:92:20:05:8e:e0:f6:48:47:e3:2e:02:76:fc:22:10:ee:07: 6d:5d:af:d8:9f:35:12:10:6c:a3:ac:b6:b8:d0:64:d9:02:15: c8:f3:83:fc:9a:0b:07:f4:f6:8a:7c:eb:c6:27:ac:a8:6f:d2: c8:17:fb:04:3b:b6:5c:2c:ec:ba:e6:21:14:5a:4f:08:00:99: 15:86:17:a5:3c:be:b6:5b:de:cd:6f:25:40:6b:1d:38:84:85: 5f:20:13:66:f0:00:da:12:00:d9:57:63:fe:d0:4a:a0:12:77: 27:3f:4d:b6:22:c3:15:06:2a:c3:b5:68:9d:d4:f5:57:ba:4b: c7:a8:2a:68:09:c6:ca:f0:b0:d1:f2:70:f0:41:a2:22:f6:e0: 97:55:40:30:32:57:55:d6:da:9e:3c:f6:a1:2c:2b:d9:cc:e1: 92:23:11:bc:15:ef:4d:67:99:d3:d9:f5:24:bf:7e:ca:87:e6: 80:7e:02:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ+Yj9yjkOAE9gaWQj2MNsQbwJhAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM3RTlFQjJGOThFMjlDREYxMzg2NTMzMjY2NkFFRkIy MzE4NEZFQjAeFw0yNjA3MjgxNjI3MTFaFw0yNjA3MjkyMDAyMTFaMDMxMTAvBgNV BAMTKDhCRDk4QTU5RTE1MjkzRjA2REJCRjlGNTY0NkVEOUVGQUVFMDYxRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt2fzxLbBCZ7qkzEcVbb8wQhjO TaydE/odth9VOoqdXr1ySZQc3AjWNUT41yJKHW5aLKV3CJZKOyetUEN/VcZyAUdD pIjSWCUumKY4gShdBQ+soo3l8hq8cR3XqHZud1Qhqy50ybIrXrZqN+OQMTSYREe0 vo6dMq9dvkR1RAj9f6V/sXUEhsolYNYsYnXJBqGtdtSqhECDpbuExJGGTKxc2n0p CtNpUAiklKcAoLq5YE3NO3tOTtx5JPnOpYFAPQvMqbkBH88Zg5FmfrfqGTAowkhj 4q8huQDyIOva+HRZQoO+e2GER3iPcgLbHPmyFYo2+ZoQ2yRohIy27dCozohNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi9mKWeFSk/Btu/n1ZG7Z767gYfgwHwYDVR0j BBgwFoAU036esvmOKc3xOGUzJmau+yMYT+swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTJlNWZmODEtYjA4Mi00MzM0LWFkMjktNTVkYzhkMWU1M2I5LzAvRDM3RTlFQjJG OThFMjlDREYxMzg2NTMzMjY2NkFFRkIyMzE4NEZFQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EMzdFOUVCMkY5OEUyOUNERjEzODY1MzMyNjY2QUVGQjIzMTg0 RkVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTJlNWZmODEtYjA4Mi00MzM0LWFk MjktNTVkYzhkMWU1M2I5LzAvRDM3RTlFQjJGOThFMjlDREYxMzg2NTMzMjY2NkFF RkIyMzE4NEZFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKws3OYNjMMZ8w5/7pep+pMCeQE+At/f7Laq 1Yu8B31SWnz06VMinCYLBo51q7B6QoyOMrgEYfYHcvMZgDlpPp/yIHH+zt3QkfeS IAWO4PZIR+MuAnb8IhDuB21dr9ifNRIQbKOstrjQZNkCFcjzg/yaCwf09op868Yn rKhv0sgX+wQ7tlws7LrmIRRaTwgAmRWGF6U8vrZb3s1vJUBrHTiEhV8gE2bwANoS ANlXY/7QSqASdyc/TbYiwxUGKsO1aJ3U9Ve6S8eoKmgJxsrwsNHycPBBoiL24JdV QDAyV1XW2p489qEsK9nM4ZIjEbwV701nmdPZ9SS/fsqH5oB+AiY= -----END CERTIFICATE-----Generated at Wed Jul 29 05:24:22 2026 by rpki-client