$ rpki-client -vvvf rpki-rsync.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.mft File: 37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.mft (raw, json) Hash identifier: dWP7uxYWMCRuigAYuKjI2uXX42TWfmebs8OVknIwzYU= Subject key identifier: DA:08:5E:AE:29:8C:11:EE:2C:A4:6B:D8:8F:BE:6E:E9:DD:31:BB:BE Authority key identifier: 37:BB:70:91:96:04:AC:31:A2:42:3F:E2:DD:1F:9B:79:CB:59:F7:F4 Certificate issuer: /CN=37BB70919604AC31A2423FE2DD1F9B79CB59F7F4 Certificate serial: 2E1F16C2F3DB51581D212B7BFF2EE361FD39CB7B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.mft Manifest number: A6 Signing time: Thu 03 Sep 2026 09:39:06 +0000 Manifest this update: Thu 03 Sep 2026 09:34:06 +0000 Manifest next update: Fri 04 Sep 2026 11:24:06 +0000 Files and hashes: 1: 37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.crl (hash: lVuFRw9aAwaVxQdaoVywxREPe1k7AwrbIcupU67IVmk=) 2: 3130332e332e3233322e302f32342d3234203d3e20313531353238.roa (hash: Im3o8YUekrl4UUhItVyydZhi8GU6lVLXxpRk9EL/+Ow=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.crl rsync://rpki-rsync.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 11:24:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:1f:16:c2:f3:db:51:58:1d:21:2b:7b:ff:2e:e3:61:fd:39:cb:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37BB70919604AC31A2423FE2DD1F9B79CB59F7F4 Validity Not Before: Sep 3 09:34:06 2026 GMT Not After : Sep 4 11:24:06 2026 GMT Subject: CN=DA085EAE298C11EE2CA46BD88FBE6EE9DD31BBBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:85:80:41:fc:1c:31:3f:a9:69:d3:ed:4b:ce: e5:9a:94:d2:c7:ed:d8:51:e5:4a:3e:41:9a:c0:63: 8d:c3:bd:cb:fb:94:db:b5:7b:08:3b:82:6f:f3:7a: a7:51:48:01:32:3d:0a:7d:dd:08:76:26:6a:81:6e: 9b:d3:4d:d0:0a:47:ac:2c:fb:14:35:0b:ec:3a:26: 7a:9c:1d:cb:d3:c6:5c:79:70:48:1e:db:31:93:6c: 8f:f9:1e:e6:3d:fb:a4:1c:ac:f9:7d:40:b2:44:0e: d6:9d:85:c6:09:af:1a:aa:09:e4:3c:3f:a3:66:3c: e8:7e:3b:c8:a7:76:8a:09:3a:2b:d0:03:e1:b5:47: 3e:ac:cd:d5:b8:30:e5:4e:c5:8d:b8:4d:46:c2:9d: 42:dc:f3:fc:ab:0c:29:37:71:c4:be:b7:f7:6e:9f: 28:61:7f:a3:3f:c8:f5:b2:84:d2:5a:d8:11:f8:a7: 55:cd:00:f5:b6:73:70:9a:70:12:b3:d5:cc:c0:68: 32:88:29:a2:65:12:ae:f0:0e:d3:b0:91:3b:ee:e3: 7a:5a:75:f7:3c:66:7b:72:52:71:ac:8f:b3:fb:02: 3b:4e:97:43:f0:ae:48:a7:c5:21:37:69:e8:1b:0d: 82:63:cb:a2:c6:b3:4c:c9:28:d0:3c:17:d3:e1:76: 8c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:08:5E:AE:29:8C:11:EE:2C:A4:6B:D8:8F:BE:6E:E9:DD:31:BB:BE X509v3 Authority Key Identifier: keyid:37:BB:70:91:96:04:AC:31:A2:42:3F:E2:DD:1F:9B:79:CB:59:F7:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:4a:84:6a:01:f0:76:06:08:9e:11:ba:28:aa:4e:ee:ad:98: f9:3d:3b:f0:c5:5e:32:f8:ea:90:05:39:34:c8:06:54:38:07: 3b:b2:8a:37:dc:59:99:c4:94:d3:57:2a:e1:ee:5b:12:dd:ef: 24:d2:c0:d9:cd:7d:9d:cc:1a:60:ff:ea:13:55:1a:7c:c6:2f: 04:63:54:55:91:53:25:9f:20:25:a5:56:fe:1b:0b:6b:74:3e: 7a:da:58:d2:ec:5d:f5:d8:f5:b1:1c:9b:27:54:5d:33:02:f5: 2a:cf:1f:eb:4b:64:3d:04:6f:b5:cb:3c:3f:10:7b:b4:e0:43: 89:1b:33:ff:b3:d1:c1:f0:1b:23:f9:7d:04:8d:b6:1e:27:5c: 56:a6:5f:c3:ed:87:27:f0:71:a6:00:4d:37:34:b4:36:aa:86: 7c:9a:ca:53:96:31:40:6c:63:92:c6:b5:ef:d7:5e:b9:c0:5e: 1d:45:1d:3a:b6:49:35:c9:dc:6f:e8:7e:55:51:b1:6b:1c:85: a2:ed:2f:18:dc:9e:d8:ae:b8:da:0e:73:d1:9d:81:d4:f9:a1: c1:96:3d:34:10:1f:6e:e1:c1:a6:13:a7:31:19:e3:f5:86:c7: 27:bb:82:22:b0:bd:69:d8:c5:22:fe:1a:b4:32:74:c4:b2:23: eb:78:e3:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULh8WwvPbUVgdISt7/y7jYf05y3swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdCQjcwOTE5NjA0QUMzMUEyNDIzRkUyREQxRjlCNzlD QjU5RjdGNDAeFw0yNjA5MDMwOTM0MDZaFw0yNjA5MDQxMTI0MDZaMDMxMTAvBgNV BAMTKERBMDg1RUFFMjk4QzExRUUyQ0E0NkJEODhGQkU2RUU5REQzMUJCQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDghYBB/BwxP6lp0+1LzuWalNLH 7dhR5Uo+QZrAY43Dvcv7lNu1ewg7gm/zeqdRSAEyPQp93Qh2JmqBbpvTTdAKR6ws +xQ1C+w6JnqcHcvTxlx5cEge2zGTbI/5HuY9+6QcrPl9QLJEDtadhcYJrxqqCeQ8 P6NmPOh+O8indooJOivQA+G1Rz6szdW4MOVOxY24TUbCnULc8/yrDCk3ccS+t/du nyhhf6M/yPWyhNJa2BH4p1XNAPW2c3CacBKz1czAaDKIKaJlEq7wDtOwkTvu43pa dfc8ZntyUnGsj7P7AjtOl0PwrkinxSE3aegbDYJjy6LGs0zJKNA8F9PhdozpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2gherimMEe4spGvYj75u6d0xu74wHwYDVR0j BBgwFoAUN7twkZYErDGiQj/i3R+bectZ9/QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTllN2NhMzktOGRiYy00MjgyLWEwZDMtODQ4MDIzNzI2ODYyLzAvMzdCQjcwOTE5 NjA0QUMzMUEyNDIzRkUyREQxRjlCNzlDQjU5RjdGNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zN0JCNzA5MTk2MDRBQzMxQTI0MjNGRTJERDFGOUI3OUNCNTlG N0Y0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTllN2NhMzktOGRiYy00MjgyLWEw ZDMtODQ4MDIzNzI2ODYyLzAvMzdCQjcwOTE5NjA0QUMzMUEyNDIzRkUyREQxRjlC NzlDQjU5RjdGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM5KhGoB8HYGCJ4RuiiqTu6tmPk9O/DFXjL4 6pAFOTTIBlQ4BzuyijfcWZnElNNXKuHuWxLd7yTSwNnNfZ3MGmD/6hNVGnzGLwRj VFWRUyWfICWlVv4bC2t0PnraWNLsXfXY9bEcmydUXTMC9SrPH+tLZD0Eb7XLPD8Q e7TgQ4kbM/+z0cHwGyP5fQSNth4nXFamX8PthyfwcaYATTc0tDaqhnyaylOWMUBs Y5LGte/XXrnAXh1FHTq2STXJ3G/oflVRsWschaLtLxjcntiuuNoOc9GdgdT5ocGW PTQQH27hwaYTpzEZ4/WGxye7giKwvWnYxSL+GrQydMSyI+t444Q= -----END CERTIFICATE-----Generated at Thu Sep 3 18:57:48 2026 by rpki-client