$ rpki-client -vvvf rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.mft File: 37CC3A1A8C16FA30D26D2136495263B0E6A759F5.mft (raw, json) Hash identifier: vwt/KUk6dv+UK6VQwwH9Ll1l6eSI4t+Z/wLwbDJv+7A= Subject key identifier: 9C:1B:E6:4F:28:7C:9C:46:1A:A4:A9:33:B9:13:0B:60:2D:50:DA:3F Authority key identifier: 37:CC:3A:1A:8C:16:FA:30:D2:6D:21:36:49:52:63:B0:E6:A7:59:F5 Certificate issuer: /CN=37CC3A1A8C16FA30D26D2136495263B0E6A759F5 Certificate serial: 2B3403C52CFAC183F424A15859DB1152C8A0CEF4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.mft Manifest number: F8 Signing time: Tue 03 Nov 2026 22:51:22 +0000 Manifest this update: Tue 03 Nov 2026 22:46:22 +0000 Manifest next update: Thu 05 Nov 2026 01:47:22 +0000 Files and hashes: 1: 3130332e3131332e3132342e302f32322d3234203d3e20313337333433.roa (hash: 9QAgWnws9Pn2cMk1Ow/sd4cNStAKYkg3/wIKxMTubt0=) 2: 37CC3A1A8C16FA30D26D2136495263B0E6A759F5.crl (hash: XL5VvElG9Yuhge465hzu5zS67CHdm12c8149lB8Te9I=) 3: 3130332e3131332e3132342e302f32342d3234203d3e20313337333433.roa (hash: fyLe+p/AB5OB4ujhmHeH2n5bm2C2Orl4eXn3b+l/rRM=) 4: 3130332e3131332e3132342e302f32322d3232203d3e20313337333433.roa (hash: GHzYb3rjVTEQVdIvZj3KeXXe6U5QglqPAin2lkUZXo8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.crl rsync://rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 10:07:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:34:03:c5:2c:fa:c1:83:f4:24:a1:58:59:db:11:52:c8:a0:ce:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37CC3A1A8C16FA30D26D2136495263B0E6A759F5 Validity Not Before: Nov 3 22:46:22 2026 GMT Not After : Nov 5 01:47:22 2026 GMT Subject: CN=9C1BE64F287C9C461AA4A933B9130B602D50DA3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:74:43:30:01:48:57:75:77:3b:b3:fd:95:c7: 25:55:c8:3b:5d:3e:5b:95:31:4c:ce:9a:33:0d:74: e8:20:b4:69:6f:d3:ae:55:e4:e1:3e:89:35:27:cc: b5:2d:ad:74:82:a3:29:29:2e:5e:e8:c8:0a:ea:6f: 9f:62:50:5f:ab:99:ea:05:ec:1a:06:01:f0:04:e0: 00:11:9a:80:69:e8:23:ea:00:55:6d:de:a4:a2:e1: e8:c4:c4:b0:56:76:e8:bc:11:e0:ea:d8:77:e3:5b: d8:af:2b:da:f5:ca:27:e1:67:85:f7:08:6f:8e:f6: b7:9c:ea:e9:cd:c2:31:a0:02:bf:bb:db:14:ba:21: 10:83:9d:71:61:2c:e9:ce:a0:5c:cf:f8:89:54:7d: 10:30:c1:81:7c:18:48:26:c7:43:20:97:68:4f:cc: ff:ad:f3:0b:6c:8c:ac:c1:e8:a5:bc:84:1a:c2:64: 0f:c9:09:0c:02:d0:04:1d:00:50:11:39:18:89:fc: 55:db:79:e1:79:6d:40:de:9a:dd:f2:2e:92:05:72: 94:fe:7d:14:67:e9:23:53:15:f4:2f:00:09:a9:56: 66:eb:bd:af:cf:c4:9c:09:67:8d:4e:85:61:fe:8e: 48:c6:8d:b6:41:96:9e:d5:25:5f:57:f8:5b:96:21: 60:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:1B:E6:4F:28:7C:9C:46:1A:A4:A9:33:B9:13:0B:60:2D:50:DA:3F X509v3 Authority Key Identifier: keyid:37:CC:3A:1A:8C:16:FA:30:D2:6D:21:36:49:52:63:B0:E6:A7:59:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:f6:75:a0:d4:e7:d7:b2:11:5e:29:bf:43:08:a9:3a:f1:51: 45:0c:d7:fd:70:b1:04:01:f8:4b:7b:f0:e4:d2:6b:f3:b9:f2: 7d:f9:b0:6c:f4:b9:b9:e0:e5:6f:4e:2d:0f:60:24:60:8c:49: 7d:df:21:43:4e:c8:4c:20:7a:5d:78:db:de:34:61:9f:e5:5a: 85:a1:0e:28:38:aa:b8:15:3e:65:8b:aa:eb:fb:4f:15:f8:0f: cc:7d:e2:54:ec:37:0c:34:c4:d9:1d:2b:1b:3e:92:cf:33:9b: 7f:ea:95:74:7d:9a:66:f4:60:27:39:6a:e3:1e:60:09:33:cf: 44:05:e3:29:2b:c9:21:91:62:ab:bd:04:69:cd:0b:c3:ab:a0: 64:c8:9a:ac:f2:2d:11:db:05:11:1c:72:26:76:90:0e:e3:b2: 5c:e4:21:53:bf:8a:6a:cc:3e:ed:02:1a:63:7e:90:32:c8:db: be:c6:db:f7:79:08:0a:ca:23:e5:be:af:d2:54:fc:62:54:ed: a1:be:3d:96:5b:10:08:73:1a:72:f7:05:9a:f7:aa:9c:7a:e4: 37:f3:52:c7:e7:88:7c:0c:ab:93:41:36:11:0c:a9:4b:7f:3b: 25:34:07:51:61:03:c2:d7:dd:de:e8:db:4b:5d:f2:02:68:2f: 2f:78:77:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKzQDxSz6wYP0JKFYWdsRUsigzvQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdDQzNBMUE4QzE2RkEzMEQyNkQyMTM2NDk1MjYzQjBF NkE3NTlGNTAeFw0yNjExMDMyMjQ2MjJaFw0yNjExMDUwMTQ3MjJaMDMxMTAvBgNV BAMTKDlDMUJFNjRGMjg3QzlDNDYxQUE0QTkzM0I5MTMwQjYwMkQ1MERBM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtdEMwAUhXdXc7s/2VxyVVyDtd PluVMUzOmjMNdOggtGlv065V5OE+iTUnzLUtrXSCoykpLl7oyArqb59iUF+rmeoF 7BoGAfAE4AARmoBp6CPqAFVt3qSi4ejExLBWdui8EeDq2HfjW9ivK9r1yifhZ4X3 CG+O9rec6unNwjGgAr+72xS6IRCDnXFhLOnOoFzP+IlUfRAwwYF8GEgmx0Mgl2hP zP+t8wtsjKzB6KW8hBrCZA/JCQwC0AQdAFARORiJ/FXbeeF5bUDemt3yLpIFcpT+ fRRn6SNTFfQvAAmpVmbrva/PxJwJZ41OhWH+jkjGjbZBlp7VJV9X+FuWIWCtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnBvmTyh8nEYapKkzuRMLYC1Q2j8wHwYDVR0j BBgwFoAUN8w6GowW+jDSbSE2SVJjsOanWfUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTBkMDA3MTgtNTIxMC00NDM4LWI2NGQtNjJlYzFmM2ViY2QwLzAvMzdDQzNBMUE4 QzE2RkEzMEQyNkQyMTM2NDk1MjYzQjBFNkE3NTlGNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zN0NDM0ExQThDMTZGQTMwRDI2RDIxMzY0OTUyNjNCMEU2QTc1 OUY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTBkMDA3MTgtNTIxMC00NDM4LWI2 NGQtNjJlYzFmM2ViY2QwLzAvMzdDQzNBMUE4QzE2RkEzMEQyNkQyMTM2NDk1MjYz QjBFNkE3NTlGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIL2daDU59eyEV4pv0MIqTrxUUUM1/1wsQQB +Et78OTSa/O58n35sGz0ubng5W9OLQ9gJGCMSX3fIUNOyEwgel142940YZ/lWoWh Dig4qrgVPmWLquv7TxX4D8x94lTsNww0xNkdKxs+ks8zm3/qlXR9mmb0YCc5auMe YAkzz0QF4ykrySGRYqu9BGnNC8OroGTImqzyLRHbBREcciZ2kA7jslzkIVO/imrM Pu0CGmN+kDLI277G2/d5CArKI+W+r9JU/GJU7aG+PZZbEAhzGnL3BZr3qpx65Dfz UsfniHwMq5NBNhEMqUt/OyU0B1FhA8LX3d7o20td8gJoLy94d14= -----END CERTIFICATE-----Generated at Wed Nov 4 01:15:37 2026 by rpki-client