$ rpki-client -vvf rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.mft File: 37CC3A1A8C16FA30D26D2136495263B0E6A759F5.mft (raw, json) Hash identifier: 6PNCfu0tDY7Pr2LmYkcSYWVKlB2sE2xSqytorAHKqX0= Subject key identifier: 2C:B1:16:8D:96:09:D0:E8:09:81:4A:94:68:C4:3B:BF:70:F0:A8:0E Authority key identifier: 37:CC:3A:1A:8C:16:FA:30:D2:6D:21:36:49:52:63:B0:E6:A7:59:F5 Certificate issuer: /CN=37CC3A1A8C16FA30D26D2136495263B0E6A759F5 Certificate serial: 1A0BA6676AD2B648A5082DC36ECD750CF358AA48 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 08:55:57 +0000 Manifest this update: Tue 02 Jun 2026 08:50:57 +0000 Manifest next update: Wed 03 Jun 2026 11:18:57 +0000 Files and hashes: 1: 3130332e3131332e3132342e302f32322d3232203d3e20313337333433.roa (hash: GHzYb3rjVTEQVdIvZj3KeXXe6U5QglqPAin2lkUZXo8=) 2: 37CC3A1A8C16FA30D26D2136495263B0E6A759F5.crl (hash: Ob0VXkSkaWQPD/WcUdzWRTzSVEW7yVFF/eSNWx6cCYg=) 3: 3130332e3131332e3132342e302f32322d3234203d3e20313337333433.roa (hash: 9QAgWnws9Pn2cMk1Ow/sd4cNStAKYkg3/wIKxMTubt0=) 4: 3130332e3131332e3132342e302f32342d3234203d3e20313337333433.roa (hash: fyLe+p/AB5OB4ujhmHeH2n5bm2C2Orl4eXn3b+l/rRM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.crl rsync://rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:0b:a6:67:6a:d2:b6:48:a5:08:2d:c3:6e:cd:75:0c:f3:58:aa:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37CC3A1A8C16FA30D26D2136495263B0E6A759F5 Validity Not Before: Jun 2 08:50:57 2026 GMT Not After : Jun 3 11:18:57 2026 GMT Subject: CN=2CB1168D9609D0E809814A9468C43BBF70F0A80E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a4:1b:8e:c1:7c:5a:bf:53:d1:56:89:20:20: 17:80:32:47:cc:1b:93:22:10:1a:d5:bd:75:17:e2: 94:94:66:44:a4:8b:42:f1:23:c8:67:b4:10:4a:85: c4:9a:87:24:ab:60:e3:59:b7:35:0f:ff:6d:f9:57: 06:73:fd:e5:11:23:79:74:e1:00:83:61:a6:24:de: 8c:73:1a:89:83:48:c7:ac:7b:1b:7b:50:bc:f5:b6: eb:50:d3:cc:ed:8c:7b:95:84:cf:18:0a:7e:b4:04: 29:50:82:14:6f:38:d4:73:6d:9d:be:33:e1:f2:4b: 20:ee:8f:eb:00:17:67:47:12:bd:c3:d8:f8:57:ab: d7:26:ee:07:5f:34:9e:6d:3c:93:98:84:d0:9d:46: 0f:e9:e8:f0:e8:21:f6:61:70:79:1c:02:6e:df:73: 66:51:10:33:b9:07:85:f4:d3:73:de:4b:f7:f2:2d: 62:56:cd:84:79:44:c7:d9:ad:23:65:16:0c:1a:80: 70:04:c4:36:3b:2a:0a:6b:56:a2:4a:61:0b:98:32: 94:6d:da:fa:b9:f3:c3:0e:ad:49:11:5f:ca:98:90: 85:b2:0f:71:54:ce:dd:3b:5c:d0:ed:21:8f:15:39: b9:2e:92:a7:54:69:0a:bc:b3:9d:e9:c8:52:ab:34: 61:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:B1:16:8D:96:09:D0:E8:09:81:4A:94:68:C4:3B:BF:70:F0:A8:0E X509v3 Authority Key Identifier: keyid:37:CC:3A:1A:8C:16:FA:30:D2:6D:21:36:49:52:63:B0:E6:A7:59:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/37CC3A1A8C16FA30D26D2136495263B0E6A759F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:88:21:5b:f4:a0:1b:d0:dc:60:17:93:a3:2a:7e:27:93:ef: f5:11:bb:3f:dc:4f:c2:1a:7a:f2:95:99:c8:3d:d2:13:d5:2b: b7:40:99:c0:59:46:b7:55:79:8a:75:74:11:fc:15:44:30:f4: 57:7e:52:97:3a:c7:b3:a8:d1:25:dd:c6:aa:e4:30:95:bf:4b: ef:c1:42:27:f1:ee:e7:66:25:8a:41:54:4d:25:67:a3:84:e5: e2:9b:61:91:28:db:11:1e:be:7b:9a:57:70:3d:f5:09:04:0e: 47:dc:cd:56:d9:ad:78:ea:8c:08:cd:7a:3a:8d:a6:7a:0e:d6: ce:fc:75:ee:bb:aa:9e:62:eb:d2:e1:dc:c0:dc:70:f6:c9:13: b6:86:06:eb:92:c6:3c:f3:7a:ce:89:c7:eb:aa:9b:e7:5f:d3: ed:b0:f2:f3:ef:c3:59:65:da:ba:a1:10:73:4a:d7:d3:12:cb: 63:79:8b:35:16:a0:fa:b8:e4:7d:b3:6a:8d:4c:4a:37:ab:2e: 3c:48:c7:70:fa:a8:cb:44:53:a0:0b:bb:e9:cf:39:03:37:a5: a0:ba:03:c8:c5:e7:bf:a8:c3:a5:95:0f:46:30:de:23:95:af: b3:99:33:a8:2c:42:bd:68:43:1f:12:f7:d6:a0:ad:c6:1d:69: 01:4c:48:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGgumZ2rStkilCC3Dbs11DPNYqkgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdDQzNBMUE4QzE2RkEzMEQyNkQyMTM2NDk1MjYzQjBF NkE3NTlGNTAeFw0yNjA2MDIwODUwNTdaFw0yNjA2MDMxMTE4NTdaMDMxMTAvBgNV BAMTKDJDQjExNjhEOTYwOUQwRTgwOTgxNEE5NDY4QzQzQkJGNzBGMEE4MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfpBuOwXxav1PRVokgIBeAMkfM G5MiEBrVvXUX4pSUZkSki0LxI8hntBBKhcSahySrYONZtzUP/235VwZz/eURI3l0 4QCDYaYk3oxzGomDSMesext7ULz1tutQ08ztjHuVhM8YCn60BClQghRvONRzbZ2+ M+HySyDuj+sAF2dHEr3D2PhXq9cm7gdfNJ5tPJOYhNCdRg/p6PDoIfZhcHkcAm7f c2ZREDO5B4X003PeS/fyLWJWzYR5RMfZrSNlFgwagHAExDY7KgprVqJKYQuYMpRt 2vq588MOrUkRX8qYkIWyD3FUzt07XNDtIY8VObkukqdUaQq8s53pyFKrNGHvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULLEWjZYJ0OgJgUqUaMQ7v3DwqA4wHwYDVR0j BBgwFoAUN8w6GowW+jDSbSE2SVJjsOanWfUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTBkMDA3MTgtNTIxMC00NDM4LWI2NGQtNjJlYzFmM2ViY2QwLzAvMzdDQzNBMUE4 QzE2RkEzMEQyNkQyMTM2NDk1MjYzQjBFNkE3NTlGNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zN0NDM0ExQThDMTZGQTMwRDI2RDIxMzY0OTUyNjNCMEU2QTc1 OUY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTBkMDA3MTgtNTIxMC00NDM4LWI2 NGQtNjJlYzFmM2ViY2QwLzAvMzdDQzNBMUE4QzE2RkEzMEQyNkQyMTM2NDk1MjYz QjBFNkE3NTlGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIiIIVv0oBvQ3GAXk6MqfieT7/URuz/cT8Ia evKVmcg90hPVK7dAmcBZRrdVeYp1dBH8FUQw9Fd+Upc6x7Oo0SXdxqrkMJW/S+/B Qifx7udmJYpBVE0lZ6OE5eKbYZEo2xEevnuaV3A99QkEDkfczVbZrXjqjAjNejqN pnoO1s78de67qp5i69Lh3MDccPbJE7aGBuuSxjzzes6Jx+uqm+df0+2w8vPvw1ll 2rqhEHNK19MSy2N5izUWoPq45H2zao1MSjerLjxIx3D6qMtEU6ALu+nPOQM3paC6 A8jF57+ow6WVD0Yw3iOVr7OZM6gsQr1oQx8S99agrcYdaQFMSI4= -----END CERTIFICATE-----Generated at Wed Jun 3 04:09:04 2026 by rpki-client