$ rpki-client -vvf rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.mft File: 37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.mft (raw, json) Hash identifier: cxxI6emlEA4AZNFVhWkbspHqYp38lmLWcnwU7saHjHQ= Subject key identifier: E7:BB:25:E6:73:9B:20:94:DE:57:E5:5A:A3:26:01:DB:C6:43:27:21 Authority key identifier: 37:CD:F1:E9:4B:DA:EC:13:9C:C5:23:6C:AC:31:B5:BC:C9:69:88:01 Certificate issuer: /CN=37CDF1E94BDAEC139CC5236CAC31B5BCC9698801 Certificate serial: 7F282085467C121174984447D6E67637BA735331 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 19:30:28 +0000 Manifest this update: Mon 20 Jul 2026 19:25:28 +0000 Manifest next update: Tue 21 Jul 2026 21:21:28 +0000 Files and hashes: 1: 3130332e3139372e39332e302f32342d3234203d3e20313334363233.roa (hash: 1pNOuwLSFvDZKZb1JbkTYWa4bVsi9xEgXcnRAdjK3AA=) 2: 3130332e3139372e39322e302f32342d3234203d3e20313334363233.roa (hash: i5NpAq6M/TDd5Dq259HV37KsdS0u5rn8gSLjnNIutJI=) 3: 3130332e3139372e39352e302f32342d3234203d3e20313334363233.roa (hash: 4ReHII19sMtLUmN25MV5QEEELuhP3ebBL+yWF3/glT8=) 4: 323430333a38303a3a2f33322d3332203d3e20313334363233.roa (hash: inLR2m+CNyWZtV7tSrbcfy2w31JySfyEWxhtZ4Xzv1o=) 5: 3130332e3139372e39342e302f32342d3234203d3e20313334363233.roa (hash: +RaMMzQEXugZGAStK2jVfuqHhSZkIhelhN6AejuGcmY=) 6: 37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.crl (hash: QBQssqJsCbLscGZsyAHBL5T7cU9miJVLlTC5lq0Dr2w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.crl rsync://rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 21:21:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:28:20:85:46:7c:12:11:74:98:44:47:d6:e6:76:37:ba:73:53:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37CDF1E94BDAEC139CC5236CAC31B5BCC9698801 Validity Not Before: Jul 20 19:25:28 2026 GMT Not After : Jul 21 21:21:28 2026 GMT Subject: CN=E7BB25E6739B2094DE57E55AA32601DBC6432721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:81:06:b4:d9:6e:74:24:33:9c:07:e5:c4:c6: 87:a1:db:a4:a2:04:ab:fe:69:f6:9e:b2:a5:f2:d0: 28:86:fc:eb:2b:e9:5e:0f:34:76:60:c3:31:5f:ae: ad:c9:50:91:f4:85:ca:c4:52:51:77:74:85:76:51: 54:1a:9b:bf:16:17:ed:af:b5:50:7d:dc:ea:18:d1: f9:fa:81:27:90:80:f0:22:53:ad:e1:f3:34:8e:32: 20:36:34:db:66:e1:d6:fd:85:22:34:fb:fe:2b:83: dd:68:ca:70:bd:12:5e:43:79:56:db:bf:37:61:32: d1:df:0a:fa:e6:6d:85:b8:a9:dd:4e:09:8e:0a:3b: 7a:03:cd:07:d3:1b:35:c1:47:49:9a:b9:8a:09:a6: a2:4a:e5:07:c4:8f:3e:5c:f6:03:ee:fd:bf:aa:ad: 6e:2f:5e:3d:36:23:a1:b0:67:88:0e:90:b3:67:ef: c2:2b:1b:fb:79:52:66:46:c7:87:72:f2:da:5a:39: 33:b7:b2:32:d4:fc:ad:c8:af:9c:0d:74:11:7a:76: 41:68:93:c4:40:9a:ca:d2:02:ab:f7:76:31:50:f7: 66:2f:c1:e0:ec:10:41:94:9d:f7:a9:c7:1f:9b:e3: 82:95:6c:43:a9:8b:08:95:40:bf:4d:2e:fd:d2:b8: d7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:BB:25:E6:73:9B:20:94:DE:57:E5:5A:A3:26:01:DB:C6:43:27:21 X509v3 Authority Key Identifier: keyid:37:CD:F1:E9:4B:DA:EC:13:9C:C5:23:6C:AC:31:B5:BC:C9:69:88:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:97:81:01:44:3b:85:14:ef:32:8b:b8:1b:5a:75:43:c5:19: 35:83:07:fa:4f:38:35:39:67:55:64:7c:5b:8c:07:96:e6:2c: 72:c3:fb:c9:87:64:7f:34:8b:65:36:a6:e7:dc:82:93:3a:74: e9:c2:9a:ad:89:81:a1:ff:86:cf:b2:09:ad:ea:10:d3:51:0f: 4e:11:f9:0b:2e:cb:d7:c0:74:f6:24:f0:02:ff:ae:af:87:83: 34:4e:a7:40:07:44:d4:a4:3f:8b:3f:cf:c5:56:f9:64:93:36: c2:21:e3:94:9f:fe:05:3e:93:ac:34:f8:4d:9b:27:2b:34:b5: 92:6d:90:a7:4e:e4:1f:b6:e0:c3:03:ec:54:d4:f1:f7:3c:09: a0:76:bf:95:25:4c:81:28:5d:ee:35:ef:a8:8f:b7:81:2d:27: 62:68:99:cb:88:4b:2d:8e:ec:2b:d3:d4:ca:f3:6d:66:f2:ea: 4b:a6:bc:a8:f5:4f:48:6d:65:b0:82:da:fe:17:c6:d9:6d:35: 60:d2:b3:d0:14:d1:af:0c:5a:ef:8a:6b:69:e8:c4:a8:af:e5: 4a:f3:1f:99:96:f1:bd:ad:9e:1b:07:c0:e2:f0:23:d6:a2:ed: a4:c5:ff:87:b0:10:74:0f:d2:cf:f1:4f:f2:be:b3:fb:86:20: d4:86:b8:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfygghUZ8EhF0mERH1uZ2N7pzUzEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdDREYxRTk0QkRBRUMxMzlDQzUyMzZDQUMzMUI1QkND OTY5ODgwMTAeFw0yNjA3MjAxOTI1MjhaFw0yNjA3MjEyMTIxMjhaMDMxMTAvBgNV BAMTKEU3QkIyNUU2NzM5QjIwOTRERTU3RTU1QUEzMjYwMURCQzY0MzI3MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSgQa02W50JDOcB+XExoeh26Si BKv+afaesqXy0CiG/Osr6V4PNHZgwzFfrq3JUJH0hcrEUlF3dIV2UVQam78WF+2v tVB93OoY0fn6gSeQgPAiU63h8zSOMiA2NNtm4db9hSI0+/4rg91oynC9El5DeVbb vzdhMtHfCvrmbYW4qd1OCY4KO3oDzQfTGzXBR0mauYoJpqJK5QfEjz5c9gPu/b+q rW4vXj02I6GwZ4gOkLNn78IrG/t5UmZGx4dy8tpaOTO3sjLU/K3Ir5wNdBF6dkFo k8RAmsrSAqv3djFQ92YvweDsEEGUnfepxx+b44KVbEOpiwiVQL9NLv3SuNe3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU57sl5nObIJTeV+VaoyYB28ZDJyEwHwYDVR0j BBgwFoAUN83x6Uva7BOcxSNsrDG1vMlpiAEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2VkMTAwZGYtMDQ0MS00MzgxLWEzZmEtNTg3ZGI5ZTljMmYwLzAvMzdDREYxRTk0 QkRBRUMxMzlDQzUyMzZDQUMzMUI1QkNDOTY5ODgwMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zN0NERjFFOTRCREFFQzEzOUNDNTIzNkNBQzMxQjVCQ0M5Njk4 ODAxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2VkMTAwZGYtMDQ0MS00MzgxLWEz ZmEtNTg3ZGI5ZTljMmYwLzAvMzdDREYxRTk0QkRBRUMxMzlDQzUyMzZDQUMzMUI1 QkNDOTY5ODgwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADuXgQFEO4UU7zKLuBtadUPFGTWDB/pPODU5 Z1VkfFuMB5bmLHLD+8mHZH80i2U2pufcgpM6dOnCmq2JgaH/hs+yCa3qENNRD04R +Qsuy9fAdPYk8AL/rq+HgzROp0AHRNSkP4s/z8VW+WSTNsIh45Sf/gU+k6w0+E2b Jys0tZJtkKdO5B+24MMD7FTU8fc8CaB2v5UlTIEoXe4176iPt4EtJ2JomcuISy2O 7CvT1MrzbWby6kumvKj1T0htZbCC2v4XxtltNWDSs9AU0a8MWu+Ka2noxKiv5Urz H5mW8b2tnhsHwOLwI9ai7aTF/4ewEHQP0s/xT/K+s/uGINSGuDM= -----END CERTIFICATE-----Generated at Tue Jul 21 06:45:27 2026 by rpki-client