$ rpki-client -vvf repo-rpki.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/37D7265DD2BAA67ECABEEC597D30727F574E8A01.mft File: 37D7265DD2BAA67ECABEEC597D30727F574E8A01.mft (raw, json) Hash identifier: zGYvH+EUC7mdMqnIKFJjPAxwFKDWgFeHTABJTyEQktU= Subject key identifier: D6:71:57:49:A7:96:1D:40:75:B0:1A:A3:B0:B4:19:11:CB:75:C7:C4 Authority key identifier: 37:D7:26:5D:D2:BA:A6:7E:CA:BE:EC:59:7D:30:72:7F:57:4E:8A:01 Certificate issuer: /CN=37D7265DD2BAA67ECABEEC597D30727F574E8A01 Certificate serial: 17FFE523FC403B730CA9AF4DDAC8718416445276 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37D7265DD2BAA67ECABEEC597D30727F574E8A01.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/37D7265DD2BAA67ECABEEC597D30727F574E8A01.mft Manifest number: 055A Signing time: Thu 19 Mar 2026 03:40:42 +0000 Manifest this update: Thu 19 Mar 2026 03:35:42 +0000 Manifest next update: Sun 22 Mar 2026 09:37:42 +0000 Files and hashes: 1: 3131332e32302e3133362e302f32312d3234203d3e203435373136.roa (hash: ghYDscgkEkmdPz9NuYZxp4pY2E2dRL+ayWbivu6Gtd8=) 2: 37D7265DD2BAA67ECABEEC597D30727F574E8A01.crl (hash: u8D7Ps3UW4h1y6H2A+eoC2sr5YQGfrz6Ig2yTtRme+U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/37D7265DD2BAA67ECABEEC597D30727F574E8A01.crl rsync://repo-rpki.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/37D7265DD2BAA67ECABEEC597D30727F574E8A01.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37D7265DD2BAA67ECABEEC597D30727F574E8A01.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 09:37:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:ff:e5:23:fc:40:3b:73:0c:a9:af:4d:da:c8:71:84:16:44:52:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37D7265DD2BAA67ECABEEC597D30727F574E8A01 Validity Not Before: Mar 19 03:35:42 2026 GMT Not After : Mar 22 09:37:42 2026 GMT Subject: CN=D6715749A7961D4075B01AA3B0B41911CB75C7C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a0:69:d7:55:c5:af:65:96:34:e9:87:a8:43: b4:d6:ae:84:6a:10:17:2d:c5:6f:a0:36:1f:a1:0c: d2:db:8d:9e:33:ad:e1:d4:53:5a:64:32:14:9e:7c: 96:f1:bd:38:81:de:f7:70:82:58:bd:ba:e0:5b:66: b7:e8:cc:88:f7:a0:57:f2:01:82:d0:be:53:cd:d0: 39:de:35:6e:c6:d6:c0:12:7d:3d:d6:be:64:6d:a6: 8d:ef:f2:4f:54:4c:ab:59:0b:50:6c:b9:51:f8:26: f2:ba:c1:47:d6:43:fd:50:19:b4:aa:4b:fb:50:15: fd:b8:77:ac:3f:b3:a0:1a:c8:c0:f2:fc:6d:1f:aa: 21:a0:7e:b0:a5:78:14:7d:38:7a:62:ae:55:de:0a: 40:46:19:dc:cd:49:ae:77:61:cb:55:21:91:0a:96: b7:47:53:90:bf:d6:12:d1:1d:39:ec:e7:43:f2:b2: 28:09:1b:85:c1:e9:de:04:a8:08:f5:8b:60:4e:e0: df:02:35:b0:e5:44:81:30:f3:24:7b:09:de:f5:c7: de:11:12:0b:2f:5a:e1:51:74:cc:5f:2e:cc:2c:81: 9a:a1:40:1b:7d:0b:e5:30:94:b9:02:df:da:92:9b: c1:e1:05:d1:43:2e:b0:a7:71:f6:90:e7:49:2e:08: 67:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:71:57:49:A7:96:1D:40:75:B0:1A:A3:B0:B4:19:11:CB:75:C7:C4 X509v3 Authority Key Identifier: keyid:37:D7:26:5D:D2:BA:A6:7E:CA:BE:EC:59:7D:30:72:7F:57:4E:8A:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/37D7265DD2BAA67ECABEEC597D30727F574E8A01.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37D7265DD2BAA67ECABEEC597D30727F574E8A01.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/37D7265DD2BAA67ECABEEC597D30727F574E8A01.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:3b:4f:09:29:04:50:1f:f7:b7:08:ad:dd:32:c9:48:f7:07: 7d:44:93:30:ca:b2:ee:2e:c3:c1:b4:dd:32:18:7e:32:23:c0: 29:08:88:84:e2:f1:1f:dc:46:11:81:3d:76:9c:45:ab:bd:36: 01:b7:86:cf:60:03:3b:a3:60:32:e6:9b:5d:c8:b8:eb:30:98: 35:3c:95:9c:0e:26:9c:62:4d:c3:c4:8b:46:57:0a:9d:02:3b: ac:43:2b:bf:af:a3:dc:71:0c:8e:6c:d2:69:a3:04:72:59:06: b7:90:63:a5:d0:1a:42:a6:a6:15:b3:b0:8e:35:f1:1c:52:ba: ff:93:f9:f7:85:97:f4:9c:95:ea:35:96:6a:fd:31:bd:47:19: de:33:bd:65:1d:88:64:02:69:de:63:30:d1:23:28:79:41:19: be:c7:b3:76:14:0c:ca:5d:07:94:1d:ff:a4:0b:6a:5d:2a:12: 43:64:f4:95:b9:29:bd:a3:c4:fd:30:d6:d5:44:66:07:16:82: 06:9a:5b:12:91:bb:db:78:95:18:35:4f:ca:30:ec:13:15:38: a0:72:06:b1:44:f4:6e:e6:76:9c:a2:39:ea:0a:8a:b4:1b:54: 8e:46:a0:11:34:89:3a:71:ab:da:99:fe:3d:1e:41:20:54:93: 50:f2:ae:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF//lI/xAO3MMqa9N2shxhBZEUnYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdENzI2NUREMkJBQTY3RUNBQkVFQzU5N0QzMDcyN0Y1 NzRFOEEwMTAeFw0yNjAzMTkwMzM1NDJaFw0yNjAzMjIwOTM3NDJaMDMxMTAvBgNV BAMTKEQ2NzE1NzQ5QTc5NjFENDA3NUIwMUFBM0IwQjQxOTExQ0I3NUM3QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9oGnXVcWvZZY06YeoQ7TWroRq EBctxW+gNh+hDNLbjZ4zreHUU1pkMhSefJbxvTiB3vdwgli9uuBbZrfozIj3oFfy AYLQvlPN0DneNW7G1sASfT3WvmRtpo3v8k9UTKtZC1BsuVH4JvK6wUfWQ/1QGbSq S/tQFf24d6w/s6AayMDy/G0fqiGgfrCleBR9OHpirlXeCkBGGdzNSa53YctVIZEK lrdHU5C/1hLRHTns50PysigJG4XB6d4EqAj1i2BO4N8CNbDlRIEw8yR7Cd71x94R EgsvWuFRdMxfLswsgZqhQBt9C+UwlLkC39qSm8HhBdFDLrCncfaQ50kuCGeVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1nFXSaeWHUB1sBqjsLQZEct1x8QwHwYDVR0j BBgwFoAUN9cmXdK6pn7KvuxZfTByf1dOigEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWFmMDBlYy1kMDgzLTRhOWYtODIxZi03ZGExOGY4MTU0MTcvMC8zN0Q3MjY1REQy QkFBNjdFQ0FCRUVDNTk3RDMwNzI3RjU3NEU4QTAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzdENzI2NUREMkJBQTY3RUNBQkVFQzU5N0QzMDcyN0Y1NzRF OEEwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTlhZjAwZWMtZDA4My00YTlmLTgy MWYtN2RhMThmODE1NDE3LzAvMzdENzI2NUREMkJBQTY3RUNBQkVFQzU5N0QzMDcy N0Y1NzRFOEEwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABs7TwkpBFAf97cIrd0yyUj3B31EkzDKsu4u w8G03TIYfjIjwCkIiITi8R/cRhGBPXacRau9NgG3hs9gAzujYDLmm13IuOswmDU8 lZwOJpxiTcPEi0ZXCp0CO6xDK7+vo9xxDI5s0mmjBHJZBreQY6XQGkKmphWzsI41 8RxSuv+T+feFl/Scleo1lmr9Mb1HGd4zvWUdiGQCad5jMNEjKHlBGb7Hs3YUDMpd B5Qd/6QLal0qEkNk9JW5Kb2jxP0w1tVEZgcWggaaWxKRu9t4lRg1T8ow7BMVOKBy BrFE9G7mdpyiOeoKirQbVI5GoBE0iTpxq9qZ/j0eQSBUk1Dyrgs= -----END CERTIFICATE-----Generated at Thu Mar 19 09:39:28 2026 by rpki-client