$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.mft File: 37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.mft (raw, json) Hash identifier: wbpSqR7zO9wW2MBqggGfGb+rQaYkHTPmyWX+Xqw+Fqs= Subject key identifier: 94:E9:E8:19:C4:E2:D6:15:C1:38:99:D7:4D:A1:72:7D:FE:42:7E:FC Authority key identifier: 37:CD:F1:E9:4B:DA:EC:13:9C:C5:23:6C:AC:31:B5:BC:C9:69:88:01 Certificate issuer: /CN=37CDF1E94BDAEC139CC5236CAC31B5BCC9698801 Certificate serial: 042DD0ECB5A3964AD8494855090FA7BBC01DD7CE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.mft Manifest number: F6 Signing time: Tue 03 Nov 2026 07:01:51 +0000 Manifest this update: Tue 03 Nov 2026 06:56:51 +0000 Manifest next update: Wed 04 Nov 2026 07:53:51 +0000 Files and hashes: 1: 3130332e3139372e39322e302f32342d3234203d3e20313334363233.roa (hash: i5NpAq6M/TDd5Dq259HV37KsdS0u5rn8gSLjnNIutJI=) 2: 3130332e3139372e39342e302f32342d3234203d3e20313334363233.roa (hash: +RaMMzQEXugZGAStK2jVfuqHhSZkIhelhN6AejuGcmY=) 3: 3130332e3139372e39352e302f32342d3234203d3e20313334363233.roa (hash: 4ReHII19sMtLUmN25MV5QEEELuhP3ebBL+yWF3/glT8=) 4: 37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.crl (hash: L8dX5vKPrtWuWxNbaRJI4kMkd/CB4MpFTpQIzRnskpc=) 5: 3130332e3139372e39332e302f32342d3234203d3e20313334363233.roa (hash: 1pNOuwLSFvDZKZb1JbkTYWa4bVsi9xEgXcnRAdjK3AA=) 6: 323430333a38303a3a2f33322d3332203d3e20313334363233.roa (hash: inLR2m+CNyWZtV7tSrbcfy2w31JySfyEWxhtZ4Xzv1o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.crl rsync://rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 07:53:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:2d:d0:ec:b5:a3:96:4a:d8:49:48:55:09:0f:a7:bb:c0:1d:d7:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37CDF1E94BDAEC139CC5236CAC31B5BCC9698801 Validity Not Before: Nov 3 06:56:51 2026 GMT Not After : Nov 4 07:53:51 2026 GMT Subject: CN=94E9E819C4E2D615C13899D74DA1727DFE427EFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c7:19:8d:d0:5e:e2:af:d5:0f:24:69:8c:2a: 85:05:42:01:a5:0c:c1:8d:41:cf:37:e0:51:fb:36: 73:eb:24:49:2f:bc:36:6d:ac:30:bd:00:22:55:51: 1c:af:ff:e4:2a:7f:b9:86:78:e5:4f:77:04:12:38: 9c:d1:d5:65:e7:b3:cd:5e:91:4d:ae:63:c6:7a:7e: 6f:18:3c:b8:0e:c3:11:a6:1d:e5:98:0d:58:00:4e: 80:cd:ee:77:7f:09:c9:b4:e4:9f:2b:8f:30:0f:d8: ce:9b:df:27:02:b2:94:9b:fa:9d:29:47:3c:e3:68: e8:74:aa:77:67:ac:10:56:5f:af:71:47:b3:62:28: 8b:bf:7c:47:b6:c4:c0:74:d7:bd:5d:25:39:f8:9a: 29:c8:8b:dc:54:54:a5:d1:95:4a:06:4d:8e:96:80: 75:53:e3:a3:f6:1d:a5:a6:20:cc:54:8b:00:b6:4e: b8:3d:2d:ee:5a:44:ba:67:a1:48:83:c8:c1:49:a1: 55:16:89:15:ea:86:85:ff:41:58:f8:83:77:03:f3: 84:27:d3:8b:f4:55:74:8f:f5:40:95:01:7e:62:e2: bb:93:78:a3:b2:11:68:67:bc:e3:1b:5c:c8:ca:39: f8:b5:98:3d:8c:e6:2f:40:4b:1d:c8:ac:e0:20:a6: a2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:E9:E8:19:C4:E2:D6:15:C1:38:99:D7:4D:A1:72:7D:FE:42:7E:FC X509v3 Authority Key Identifier: keyid:37:CD:F1:E9:4B:DA:EC:13:9C:C5:23:6C:AC:31:B5:BC:C9:69:88:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:c4:dd:41:9c:5d:a8:73:d1:52:65:12:53:e7:28:fd:d7:db: bf:64:d2:cd:d2:57:f5:b8:c9:15:e6:a5:f1:d6:9f:d4:d2:00: 7a:ee:a4:66:a9:90:60:85:25:61:aa:01:ce:c5:e5:d3:0a:a5: 3e:00:96:0f:af:b4:28:92:4a:b7:8e:67:64:83:de:9d:82:ba: f2:ea:22:21:f4:bc:7b:fe:f0:9a:7b:be:1a:45:1a:60:45:e7: e4:25:0f:38:19:50:89:4d:4a:f6:36:fc:5e:64:65:66:4b:7e: e0:db:c9:bb:ad:6c:78:9b:72:89:c5:66:5e:7e:34:ba:0f:40: 4d:a8:1f:72:59:18:d6:f8:ab:56:82:75:40:95:8a:1d:3d:3d: 04:61:ef:cb:ff:bd:99:ba:54:8b:08:7b:81:e9:04:48:b6:33: f0:73:4b:72:77:02:9a:57:ad:dc:4a:b8:b1:25:bc:cb:1b:78: 29:68:a9:e4:ef:75:e1:52:7d:47:34:16:87:b7:bd:56:88:22: 12:da:1e:79:66:41:40:d8:5e:ce:c4:f7:0b:bb:81:5b:ba:14: 5c:08:76:92:09:7c:a0:d8:93:2c:af:9f:d5:dc:08:e8:eb:8a: 3b:ff:e3:a0:2e:b7:6f:76:27:87:d5:1c:25:07:30:68:ea:67: d3:d5:b9:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBC3Q7LWjlkrYSUhVCQ+nu8Ad184wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdDREYxRTk0QkRBRUMxMzlDQzUyMzZDQUMzMUI1QkND OTY5ODgwMTAeFw0yNjExMDMwNjU2NTFaFw0yNjExMDQwNzUzNTFaMDMxMTAvBgNV BAMTKDk0RTlFODE5QzRFMkQ2MTVDMTM4OTlENzREQTE3MjdERkU0MjdFRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOxxmN0F7ir9UPJGmMKoUFQgGl DMGNQc834FH7NnPrJEkvvDZtrDC9ACJVURyv/+Qqf7mGeOVPdwQSOJzR1WXns81e kU2uY8Z6fm8YPLgOwxGmHeWYDVgAToDN7nd/Ccm05J8rjzAP2M6b3ycCspSb+p0p RzzjaOh0qndnrBBWX69xR7NiKIu/fEe2xMB0171dJTn4minIi9xUVKXRlUoGTY6W gHVT46P2HaWmIMxUiwC2Trg9Le5aRLpnoUiDyMFJoVUWiRXqhoX/QVj4g3cD84Qn 04v0VXSP9UCVAX5i4ruTeKOyEWhnvOMbXMjKOfi1mD2M5i9ASx3IrOAgpqK5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlOnoGcTi1hXBOJnXTaFyff5CfvwwHwYDVR0j BBgwFoAUN83x6Uva7BOcxSNsrDG1vMlpiAEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2VkMTAwZGYtMDQ0MS00MzgxLWEzZmEtNTg3ZGI5ZTljMmYwLzAvMzdDREYxRTk0 QkRBRUMxMzlDQzUyMzZDQUMzMUI1QkNDOTY5ODgwMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zN0NERjFFOTRCREFFQzEzOUNDNTIzNkNBQzMxQjVCQ0M5Njk4 ODAxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2VkMTAwZGYtMDQ0MS00MzgxLWEz ZmEtNTg3ZGI5ZTljMmYwLzAvMzdDREYxRTk0QkRBRUMxMzlDQzUyMzZDQUMzMUI1 QkNDOTY5ODgwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH7E3UGcXahz0VJlElPnKP3X279k0s3SV/W4 yRXmpfHWn9TSAHrupGapkGCFJWGqAc7F5dMKpT4Alg+vtCiSSreOZ2SD3p2CuvLq IiH0vHv+8Jp7vhpFGmBF5+QlDzgZUIlNSvY2/F5kZWZLfuDbybutbHibconFZl5+ NLoPQE2oH3JZGNb4q1aCdUCVih09PQRh78v/vZm6VIsIe4HpBEi2M/BzS3J3AppX rdxKuLElvMsbeCloqeTvdeFSfUc0Foe3vVaIIhLaHnlmQUDYXs7E9wu7gVu6FFwI dpIJfKDYkyyvn9XcCOjrijv/46Aut292J4fVHCUHMGjqZ9PVuUo= -----END CERTIFICATE-----Generated at Tue Nov 3 11:36:39 2026 by rpki-client