$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/37B043860635643A07D4415D3C8C4959A51F0B69.mft File: 37B043860635643A07D4415D3C8C4959A51F0B69.mft (raw, json) Hash identifier: xDltCyWlHjcz41Nv6bwf4a/A42kj/TssKBg7lRYBmZM= Subject key identifier: 78:D8:2C:C1:93:AD:6E:28:9C:DD:0B:64:31:56:70:ED:89:40:C9:25 Authority key identifier: 37:B0:43:86:06:35:64:3A:07:D4:41:5D:3C:8C:49:59:A5:1F:0B:69 Certificate issuer: /CN=37B043860635643A07D4415D3C8C4959A51F0B69 Certificate serial: 59F38B8E67AC123D649C6E0A9B9A1EB8C2B78735 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37B043860635643A07D4415D3C8C4959A51F0B69.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/37B043860635643A07D4415D3C8C4959A51F0B69.mft Manifest number: F7 Signing time: Wed 04 Nov 2026 11:01:53 +0000 Manifest this update: Wed 04 Nov 2026 10:56:53 +0000 Manifest next update: Thu 05 Nov 2026 12:49:53 +0000 Files and hashes: 1: 3130332e3136392e34302e302f32332d3233203d3e20313432333332.roa (hash: 8ork7TaYxje1H50vqdK8v7A0WuTweiRWILiO2ZZPRvI=) 2: 37B043860635643A07D4415D3C8C4959A51F0B69.crl (hash: XHsRdus6MdFp5Y2N4H2mjRUVdxx0iAqHg6+UPOptCqA=) 3: 3130332e3136392e34312e302f32342d3234203d3e20313432333332.roa (hash: A3dxGP2PxS97Lp2Vu736TLE9a7nlQtJcScv1U2W/tIo=) 4: 3130332e3136392e34302e302f32342d3234203d3e20313432333332.roa (hash: tjpf/AYVS8VtbIjx4X/JSsd7T5PpSDR5QfD/ek24bNQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/37B043860635643A07D4415D3C8C4959A51F0B69.crl rsync://rpki-rsync.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/37B043860635643A07D4415D3C8C4959A51F0B69.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37B043860635643A07D4415D3C8C4959A51F0B69.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 11:48:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:f3:8b:8e:67:ac:12:3d:64:9c:6e:0a:9b:9a:1e:b8:c2:b7:87:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37B043860635643A07D4415D3C8C4959A51F0B69 Validity Not Before: Nov 4 10:56:53 2026 GMT Not After : Nov 5 12:49:53 2026 GMT Subject: CN=78D82CC193AD6E289CDD0B64315670ED8940C925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6e:f4:6d:cb:70:13:79:03:20:44:29:67:03: 77:30:a5:f9:c8:01:ff:f4:65:6d:35:60:5f:cb:af: e9:36:14:95:02:be:a5:cd:f7:a8:61:7c:3b:04:70: b8:05:04:2a:32:bb:f6:c7:ad:00:66:8c:39:63:86: 87:37:ec:a0:86:14:db:92:c0:45:f0:4e:8e:19:66: 05:ef:c7:05:8e:a5:1d:9e:8a:f9:76:1e:58:60:12: 9a:e8:0d:63:f4:05:b3:94:62:58:a7:f5:f6:73:37: 58:3d:11:ff:06:fc:fa:1e:e7:99:09:49:e0:3a:36: 6f:41:d9:49:3c:05:ff:cb:23:98:46:aa:b0:1d:97: 12:f3:a4:a3:f0:97:0b:4d:20:e3:ab:61:38:df:d4: f4:a2:20:29:a5:71:0c:11:fa:92:de:59:a3:4a:c1: 47:5c:47:15:f6:74:35:0b:73:ae:0f:2a:87:f0:ef: 4f:5a:5d:45:a3:a5:95:88:5e:1c:61:21:70:11:12: ed:6a:4a:1c:32:a6:9b:37:09:07:2d:bf:ff:52:dd: fa:2a:a5:f8:7e:56:57:69:c5:0a:52:a2:6a:b7:b1: 8c:b1:60:dd:66:38:c4:cb:3e:f4:d8:57:1b:5e:ba: 06:ac:e1:ab:71:a6:4e:2a:df:1f:a3:96:f8:7f:d6: c8:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:D8:2C:C1:93:AD:6E:28:9C:DD:0B:64:31:56:70:ED:89:40:C9:25 X509v3 Authority Key Identifier: keyid:37:B0:43:86:06:35:64:3A:07:D4:41:5D:3C:8C:49:59:A5:1F:0B:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/37B043860635643A07D4415D3C8C4959A51F0B69.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37B043860635643A07D4415D3C8C4959A51F0B69.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/37B043860635643A07D4415D3C8C4959A51F0B69.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:3f:68:b0:18:ef:73:fe:75:2c:3d:c7:13:d3:f4:64:68:25: d8:37:8f:b1:b6:91:fd:27:c2:91:1e:7c:c4:84:14:30:c2:72: 86:f6:3f:ff:8a:aa:13:1f:b3:13:41:93:c3:77:13:f5:91:ba: 32:9c:6b:dd:19:62:07:65:76:70:de:34:8b:36:e3:5e:73:94: b0:dd:36:0d:a8:5a:1a:7e:08:b4:13:80:b2:c9:78:c7:c5:12: 99:77:c0:2d:2a:d5:33:bc:9f:27:a8:ce:6c:6b:88:a3:8d:a7: f1:3d:8b:68:d6:aa:64:d0:29:58:9b:c7:75:da:3e:bb:96:4a: 50:0a:57:c7:73:7f:4e:e6:76:10:a9:f7:52:bc:ee:06:dc:e8: cc:6c:2a:97:99:de:c8:56:52:f0:9c:b7:fd:24:c8:c5:bf:f3: f9:25:e3:8d:fa:6b:ac:f3:cf:6e:db:26:c3:72:af:9a:01:89: 20:56:ec:a9:d8:24:7a:af:eb:7e:e7:91:b0:6d:de:a0:05:f5: f6:50:78:89:af:2d:cc:e4:ae:33:e5:c7:73:82:c3:76:8b:bc: a7:6a:29:fb:74:26:bd:a1:6c:99:db:99:26:69:f5:24:0e:02: d9:e7:15:5e:a6:17:11:ce:3c:cd:48:67:55:8b:8a:4c:b3:5b: 66:e7:8a:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWfOLjmesEj1knG4Km5oeuMK3hzUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdCMDQzODYwNjM1NjQzQTA3RDQ0MTVEM0M4QzQ5NTlB NTFGMEI2OTAeFw0yNjExMDQxMDU2NTNaFw0yNjExMDUxMjQ5NTNaMDMxMTAvBgNV BAMTKDc4RDgyQ0MxOTNBRDZFMjg5Q0REMEI2NDMxNTY3MEVEODk0MEM5MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGbvRty3ATeQMgRClnA3cwpfnI Af/0ZW01YF/Lr+k2FJUCvqXN96hhfDsEcLgFBCoyu/bHrQBmjDljhoc37KCGFNuS wEXwTo4ZZgXvxwWOpR2eivl2HlhgEproDWP0BbOUYlin9fZzN1g9Ef8G/Poe55kJ SeA6Nm9B2Uk8Bf/LI5hGqrAdlxLzpKPwlwtNIOOrYTjf1PSiICmlcQwR+pLeWaNK wUdcRxX2dDULc64PKofw709aXUWjpZWIXhxhIXAREu1qShwypps3CQctv/9S3foq pfh+VldpxQpSomq3sYyxYN1mOMTLPvTYVxteugas4atxpk4q3x+jlvh/1sjTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeNgswZOtbiic3QtkMVZw7YlAySUwHwYDVR0j BBgwFoAUN7BDhgY1ZDoH1EFdPIxJWaUfC2kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmNiNTI2MTktMzc5ZC00MzBhLWIxOWItMWYwZWM1M2FlOTA5LzAvMzdCMDQzODYw NjM1NjQzQTA3RDQ0MTVEM0M4QzQ5NTlBNTFGMEI2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zN0IwNDM4NjA2MzU2NDNBMDdENDQxNUQzQzhDNDk1OUE1MUYw QjY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmNiNTI2MTktMzc5ZC00MzBhLWIx OWItMWYwZWM1M2FlOTA5LzAvMzdCMDQzODYwNjM1NjQzQTA3RDQ0MTVEM0M4QzQ5 NTlBNTFGMEI2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIc/aLAY73P+dSw9xxPT9GRoJdg3j7G2kf0n wpEefMSEFDDCcob2P/+KqhMfsxNBk8N3E/WRujKca90ZYgdldnDeNIs2415zlLDd Ng2oWhp+CLQTgLLJeMfFEpl3wC0q1TO8nyeozmxriKONp/E9i2jWqmTQKVibx3Xa PruWSlAKV8dzf07mdhCp91K87gbc6MxsKpeZ3shWUvCct/0kyMW/8/kl4436a6zz z27bJsNyr5oBiSBW7KnYJHqv637nkbBt3qAF9fZQeImvLczkrjPlx3OCw3aLvKdq Kft0Jr2hbJnbmSZp9SQOAtnnFV6mFxHOPM1IZ1WLikyzW2bnijE= -----END CERTIFICATE-----Generated at Wed Nov 4 22:28:37 2026 by rpki-client