$ rpki-client -vvf rpki-rsync.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/637A957BABD264BD486DB1ED9AD344531E09DAA9.mft File: 637A957BABD264BD486DB1ED9AD344531E09DAA9.mft (raw, json) Hash identifier: aJw7bo7OD62Cn8Z7FOXbFGpvRuxhrSaoimjhhbhvSL8= Subject key identifier: E4:64:52:56:36:6B:CD:1B:97:AA:B6:0F:96:3B:4E:73:6B:37:82:1F Authority key identifier: 63:7A:95:7B:AB:D2:64:BD:48:6D:B1:ED:9A:D3:44:53:1E:09:DA:A9 Certificate issuer: /CN=637A957BABD264BD486DB1ED9AD344531E09DAA9 Certificate serial: 404A615D90C2D65F1E5C815FDB2AFE3B9D809DB3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/637A957BABD264BD486DB1ED9AD344531E09DAA9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/637A957BABD264BD486DB1ED9AD344531E09DAA9.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 22:24:28 +0000 Manifest this update: Tue 28 Jul 2026 22:19:28 +0000 Manifest next update: Wed 29 Jul 2026 23:44:28 +0000 Files and hashes: 1: 637A957BABD264BD486DB1ED9AD344531E09DAA9.crl (hash: F2lvN5SVIaODZQAcP5bZZhZWWuuZqOv9HcFkve/jVUo=) 2: 3130332e3136302e3133382e302f32332d3234203d3e203338333230.roa (hash: pBvBGLopvQdoZtJVsgZWZ9wA+Pu9rrcY8EO/1TZFlpo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/637A957BABD264BD486DB1ED9AD344531E09DAA9.crl rsync://rpki-rsync.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/637A957BABD264BD486DB1ED9AD344531E09DAA9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/637A957BABD264BD486DB1ED9AD344531E09DAA9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 23:44:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:4a:61:5d:90:c2:d6:5f:1e:5c:81:5f:db:2a:fe:3b:9d:80:9d:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=637A957BABD264BD486DB1ED9AD344531E09DAA9 Validity Not Before: Jul 28 22:19:28 2026 GMT Not After : Jul 29 23:44:28 2026 GMT Subject: CN=E4645256366BCD1B97AAB60F963B4E736B37821F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b2:43:98:43:4b:62:e5:3b:ba:e6:71:91:37: 23:e5:80:96:2e:41:44:00:3a:2a:e4:89:32:78:7f: 8f:d0:bf:8d:b0:c5:33:8a:ea:ac:12:d9:71:73:27: 09:6d:2b:c7:ee:97:cb:db:69:9c:a4:b1:d4:27:ac: c8:93:cf:c9:ef:2d:57:8a:99:c3:1f:48:da:6a:52: c6:b0:a4:ee:90:e9:77:db:10:d2:1a:8d:6a:f3:38: a6:7f:81:8a:2c:05:e0:ef:e5:6b:b0:1d:6b:e0:57: 88:6a:7a:1c:e8:e7:24:35:df:96:96:89:55:04:5e: 01:2c:aa:f1:9f:6d:54:bc:b0:be:bc:53:b6:75:c0: fb:c2:62:53:91:2c:6c:b4:0a:df:cd:14:24:35:e6: 1b:e9:e7:ca:d2:88:7c:d1:75:6d:ae:20:9f:38:e1: 6c:2a:57:0c:76:87:0d:63:5c:c8:bc:12:f0:ab:8b: be:c5:f4:9e:6a:2e:bc:d6:c1:54:92:39:e2:cd:de: 30:bd:49:5b:b4:c1:1c:9b:84:52:88:86:ad:8b:7f: 41:c4:ad:8d:52:8f:83:a2:7f:45:a0:e3:d3:90:b8: 27:42:28:40:53:5e:6f:56:3f:9c:87:f8:4f:9b:4a: a7:c6:08:ad:78:cb:c4:f8:da:28:e0:59:fd:a5:a7: 12:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:64:52:56:36:6B:CD:1B:97:AA:B6:0F:96:3B:4E:73:6B:37:82:1F X509v3 Authority Key Identifier: keyid:63:7A:95:7B:AB:D2:64:BD:48:6D:B1:ED:9A:D3:44:53:1E:09:DA:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/637A957BABD264BD486DB1ED9AD344531E09DAA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/637A957BABD264BD486DB1ED9AD344531E09DAA9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/637A957BABD264BD486DB1ED9AD344531E09DAA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:42:0c:cd:3b:28:3e:8e:dc:38:5e:60:cd:d5:00:b1:80:a6: 2d:c7:4d:2b:d5:31:67:bd:71:4a:8c:a9:08:45:b7:ff:34:62: 46:7a:dd:09:bd:63:4f:3f:64:ab:2d:7f:2b:c8:5e:f4:b3:fe: 83:f1:39:3d:af:d0:a7:a0:40:3c:9b:50:e7:d3:17:3b:e9:77: 2e:6b:c3:fc:87:88:f7:9c:04:91:fa:5c:b2:40:b0:a9:30:71: 73:61:af:ca:20:db:02:43:7d:34:c8:af:27:4b:84:59:10:1a: ab:d3:e3:0f:cb:a1:8d:46:f5:f6:6f:4c:3b:58:0e:98:25:61: a7:66:e0:da:71:65:75:df:0c:bd:40:c3:d2:99:1f:71:aa:c1: a3:87:44:cf:ff:5a:42:9b:3f:35:5b:5b:18:a2:82:86:c5:c0: 08:c8:c8:eb:4b:39:9e:7b:e1:3f:73:78:9a:d5:2f:fd:1b:b7: 42:27:a7:9e:fa:67:0d:9b:8f:5e:44:3f:b4:88:33:71:75:36: be:8e:05:bd:50:64:b6:67:8a:10:58:9c:72:c3:f5:0d:4c:5e: 18:3a:0e:1a:31:23:5b:eb:1d:d1:8a:bf:ca:93:bb:61:33:3d: 92:5e:45:0e:05:32:86:91:34:d2:a9:c3:e3:28:d5:15:a1:6d: d2:bf:fe:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQEphXZDC1l8eXIFf2yr+O52AnbMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM3QTk1N0JBQkQyNjRCRDQ4NkRCMUVEOUFEMzQ0NTMx RTA5REFBOTAeFw0yNjA3MjgyMjE5MjhaFw0yNjA3MjkyMzQ0MjhaMDMxMTAvBgNV BAMTKEU0NjQ1MjU2MzY2QkNEMUI5N0FBQjYwRjk2M0I0RTczNkIzNzgyMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsskOYQ0ti5Tu65nGRNyPlgJYu QUQAOirkiTJ4f4/Qv42wxTOK6qwS2XFzJwltK8ful8vbaZyksdQnrMiTz8nvLVeK mcMfSNpqUsawpO6Q6XfbENIajWrzOKZ/gYosBeDv5WuwHWvgV4hqehzo5yQ135aW iVUEXgEsqvGfbVS8sL68U7Z1wPvCYlORLGy0Ct/NFCQ15hvp58rSiHzRdW2uIJ84 4WwqVwx2hw1jXMi8EvCri77F9J5qLrzWwVSSOeLN3jC9SVu0wRybhFKIhq2Lf0HE rY1Sj4Oif0Wg49OQuCdCKEBTXm9WP5yH+E+bSqfGCK14y8T42ijgWf2lpxIBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5GRSVjZrzRuXqrYPljtOc2s3gh8wHwYDVR0j BBgwFoAUY3qVe6vSZL1IbbHtmtNEUx4J2qkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmZkYjE4ZWYtNjU5Zi00YjFlLWEyZTAtYjU4YWY2YjEyNzFmLzAvNjM3QTk1N0JB QkQyNjRCRDQ4NkRCMUVEOUFEMzQ0NTMxRTA5REFBOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MzdBOTU3QkFCRDI2NEJENDg2REIxRUQ5QUQzNDQ1MzFFMDlE QUE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmZkYjE4ZWYtNjU5Zi00YjFlLWEy ZTAtYjU4YWY2YjEyNzFmLzAvNjM3QTk1N0JBQkQyNjRCRDQ4NkRCMUVEOUFEMzQ0 NTMxRTA5REFBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIJCDM07KD6O3DheYM3VALGApi3HTSvVMWe9 cUqMqQhFt/80YkZ63Qm9Y08/ZKstfyvIXvSz/oPxOT2v0KegQDybUOfTFzvpdy5r w/yHiPecBJH6XLJAsKkwcXNhr8og2wJDfTTIrydLhFkQGqvT4w/LoY1G9fZvTDtY DpglYadm4NpxZXXfDL1Aw9KZH3GqwaOHRM//WkKbPzVbWxiigobFwAjIyOtLOZ57 4T9zeJrVL/0bt0Inp576Zw2bj15EP7SIM3F1Nr6OBb1QZLZnihBYnHLD9Q1MXhg6 DhoxI1vrHdGKv8qTu2EzPZJeRQ4FMoaRNNKpw+Mo1RWhbdK//kc= -----END CERTIFICATE-----Generated at Wed Jul 29 07:19:03 2026 by rpki-client