$ rpki-client -vvf rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.mft File: 37CC3A1A8C16FA30D26D2136495263B0E6A759F5.mft (raw, json) Hash identifier: 5yEfRgu02VeOGqDGRx8BNmMPwLeQ1XJAQ6Et83bGcyQ= Subject key identifier: 04:3B:1D:EA:2B:72:4D:AD:D9:BE:6C:3C:B4:49:CE:8C:88:1D:EC:7A Authority key identifier: 37:CC:3A:1A:8C:16:FA:30:D2:6D:21:36:49:52:63:B0:E6:A7:59:F5 Certificate issuer: /CN=37CC3A1A8C16FA30D26D2136495263B0E6A759F5 Certificate serial: 798B34A74A2C13D6E3623285697235218EB8B83E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 15:51:06 +0000 Manifest this update: Mon 20 Jul 2026 15:46:06 +0000 Manifest next update: Tue 21 Jul 2026 19:05:06 +0000 Files and hashes: 1: 37CC3A1A8C16FA30D26D2136495263B0E6A759F5.crl (hash: +XyDU+DwXlohZAE5yCh05feA+nVVEgoX7xcNXd1mStA=) 2: 3130332e3131332e3132342e302f32322d3232203d3e20313337333433.roa (hash: GHzYb3rjVTEQVdIvZj3KeXXe6U5QglqPAin2lkUZXo8=) 3: 3130332e3131332e3132342e302f32342d3234203d3e20313337333433.roa (hash: fyLe+p/AB5OB4ujhmHeH2n5bm2C2Orl4eXn3b+l/rRM=) 4: 3130332e3131332e3132342e302f32322d3234203d3e20313337333433.roa (hash: 9QAgWnws9Pn2cMk1Ow/sd4cNStAKYkg3/wIKxMTubt0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.crl rsync://rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 19:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:8b:34:a7:4a:2c:13:d6:e3:62:32:85:69:72:35:21:8e:b8:b8:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37CC3A1A8C16FA30D26D2136495263B0E6A759F5 Validity Not Before: Jul 20 15:46:06 2026 GMT Not After : Jul 21 19:05:06 2026 GMT Subject: CN=043B1DEA2B724DADD9BE6C3CB449CE8C881DEC7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:28:25:cf:4f:76:57:bb:84:b9:93:d5:31:4e: 76:b2:22:bd:87:7e:5c:d2:ca:e9:8e:7c:c4:10:39: 4b:d9:64:22:d2:96:fe:a4:64:53:64:4e:52:2f:f9: fb:42:f7:61:51:76:33:c7:09:e0:79:e9:2c:89:e1: aa:54:b3:3d:22:01:28:ab:b6:b0:8e:a4:91:28:6b: 65:9d:9a:8e:a5:f9:fc:97:6f:7b:5d:14:72:4d:ba: c9:74:44:ce:a8:1c:f8:85:79:74:ee:f3:07:14:f9: c4:f3:0b:c9:ee:7e:4d:24:c1:66:78:7a:7e:43:ad: 55:11:ed:6a:7c:e5:db:9b:f7:5e:ab:1a:6d:7c:78: d6:60:fa:50:96:aa:35:30:49:4e:e2:c7:92:6b:ad: 01:9d:82:fa:0c:5d:3c:39:24:32:b4:a8:e5:ac:cc: cb:95:9a:44:1c:f6:aa:d1:c7:2e:b9:6e:be:eb:39: c0:05:c0:58:4a:ce:38:35:4f:ac:1e:dd:7f:95:dd: 85:11:65:b3:9b:88:48:4b:d3:01:7a:fb:74:13:e4: 0e:4a:70:b4:51:ee:8c:bf:db:01:54:5a:19:7b:eb: 27:0d:db:5f:2e:48:ba:a8:50:3d:f3:e5:01:1c:9a: bf:46:4d:f7:e1:dc:01:b3:65:d2:c3:9f:50:8e:89: ed:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:3B:1D:EA:2B:72:4D:AD:D9:BE:6C:3C:B4:49:CE:8C:88:1D:EC:7A X509v3 Authority Key Identifier: keyid:37:CC:3A:1A:8C:16:FA:30:D2:6D:21:36:49:52:63:B0:E6:A7:59:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:9d:79:79:f6:69:0d:bc:5e:0b:02:64:de:9e:0a:24:6f:41: 1c:95:2e:32:db:43:15:c3:e4:40:76:6c:5e:32:33:7a:23:ce: 67:d3:dc:82:fb:0f:90:87:4e:20:88:67:72:2f:80:eb:58:00: c9:ef:37:75:1f:c7:94:04:17:bc:c3:64:0a:43:73:94:7c:7a: 3d:b7:60:88:d5:c1:f9:4c:34:01:12:75:95:8f:c7:a4:44:ae: a0:42:d2:60:51:f3:24:09:70:fe:d7:1f:c9:1f:c2:8f:30:05: e2:30:10:f4:54:dc:5f:86:44:eb:e3:ed:75:3e:bf:9f:27:98: ef:13:0e:da:f5:eb:cb:84:73:c7:16:de:23:cb:be:78:32:0e: 06:a2:d6:ba:6b:6c:04:94:08:fe:d3:9b:7a:85:78:1b:7f:73: 22:23:35:df:3f:bc:42:c3:08:2f:58:92:1e:c9:23:a6:17:b3: 4b:a7:bb:38:0f:b0:e8:94:d9:e0:e0:e1:30:64:5f:5e:dc:ec: 0d:e2:c4:7a:f6:aa:ab:e0:59:4c:95:27:e3:90:12:39:75:8c: 0c:16:d0:41:69:b7:40:37:3a:04:8c:b2:b1:52:1a:b5:49:a9: 42:72:d5:39:56:38:68:a7:27:ab:71:90:ee:32:1b:13:e2:1c: c0:37:6a:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeYs0p0osE9bjYjKFaXI1IY64uD4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdDQzNBMUE4QzE2RkEzMEQyNkQyMTM2NDk1MjYzQjBF NkE3NTlGNTAeFw0yNjA3MjAxNTQ2MDZaFw0yNjA3MjExOTA1MDZaMDMxMTAvBgNV BAMTKDA0M0IxREVBMkI3MjREQUREOUJFNkMzQ0I0NDlDRThDODgxREVDN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcKCXPT3ZXu4S5k9UxTnayIr2H flzSyumOfMQQOUvZZCLSlv6kZFNkTlIv+ftC92FRdjPHCeB56SyJ4apUsz0iASir trCOpJEoa2Wdmo6l+fyXb3tdFHJNusl0RM6oHPiFeXTu8wcU+cTzC8nufk0kwWZ4 en5DrVUR7Wp85dub916rGm18eNZg+lCWqjUwSU7ix5JrrQGdgvoMXTw5JDK0qOWs zMuVmkQc9qrRxy65br7rOcAFwFhKzjg1T6we3X+V3YURZbObiEhL0wF6+3QT5A5K cLRR7oy/2wFUWhl76ycN218uSLqoUD3z5QEcmr9GTffh3AGzZdLDn1COie39AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBDsd6ityTa3Zvmw8tEnOjIgd7HowHwYDVR0j BBgwFoAUN8w6GowW+jDSbSE2SVJjsOanWfUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTBkMDA3MTgtNTIxMC00NDM4LWI2NGQtNjJlYzFmM2ViY2QwLzAvMzdDQzNBMUE4 QzE2RkEzMEQyNkQyMTM2NDk1MjYzQjBFNkE3NTlGNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zN0NDM0ExQThDMTZGQTMwRDI2RDIxMzY0OTUyNjNCMEU2QTc1 OUY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTBkMDA3MTgtNTIxMC00NDM4LWI2 NGQtNjJlYzFmM2ViY2QwLzAvMzdDQzNBMUE4QzE2RkEzMEQyNkQyMTM2NDk1MjYz QjBFNkE3NTlGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACqdeXn2aQ28XgsCZN6eCiRvQRyVLjLbQxXD 5EB2bF4yM3ojzmfT3IL7D5CHTiCIZ3IvgOtYAMnvN3Ufx5QEF7zDZApDc5R8ej23 YIjVwflMNAESdZWPx6RErqBC0mBR8yQJcP7XH8kfwo8wBeIwEPRU3F+GROvj7XU+ v58nmO8TDtr168uEc8cW3iPLvngyDgai1rprbASUCP7Tm3qFeBt/cyIjNd8/vELD CC9Ykh7JI6YXs0unuzgPsOiU2eDg4TBkX17c7A3ixHr2qqvgWUyVJ+OQEjl1jAwW 0EFpt0A3OgSMsrFSGrVJqUJy1TlWOGinJ6txkO4yGxPiHMA3arc= -----END CERTIFICATE-----Generated at Tue Jul 21 07:00:37 2026 by rpki-client