$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.mft File: D37E9EB2F98E29CDF13865332666AEFB23184FEB.mft (raw, json) Hash identifier: oQ/711EMkBD6QGsNwm4OIoqiS1VtV5cqKB4XOocuwKM= Subject key identifier: 5A:0F:82:D8:8E:F5:77:5F:1B:32:B4:3F:85:BF:D8:AF:9B:9C:C1:14 Authority key identifier: D3:7E:9E:B2:F9:8E:29:CD:F1:38:65:33:26:66:AE:FB:23:18:4F:EB Certificate issuer: /CN=D37E9EB2F98E29CDF13865332666AEFB23184FEB Certificate serial: 40FEC39D14D28C76753CA46BFE076ECD837ED90D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.mft Manifest number: A4 Signing time: Thu 03 Sep 2026 03:06:45 +0000 Manifest this update: Thu 03 Sep 2026 03:01:45 +0000 Manifest next update: Fri 04 Sep 2026 03:28:45 +0000 Files and hashes: 1: D37E9EB2F98E29CDF13865332666AEFB23184FEB.crl (hash: U9T2dAFa2p4E/yzrxO6DJ8rm91h8zq0/14YqYyLwyRE=) 2: 3136302e31392e3134342e302f32342d3234203d3e20313532373838.roa (hash: /Ank/NdhTyFolT1yr2gOxvp0mx0tj8KaBVOQP4gcAxk=) 3: 3136302e31392e3134352e302f32342d3234203d3e203435333035.roa (hash: byftjSeCvMFNmeFpkuYeG9YZa2VCV2p6nFeWhRr4XHM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.crl rsync://rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:13:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:fe:c3:9d:14:d2:8c:76:75:3c:a4:6b:fe:07:6e:cd:83:7e:d9:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D37E9EB2F98E29CDF13865332666AEFB23184FEB Validity Not Before: Sep 3 03:01:45 2026 GMT Not After : Sep 4 03:28:45 2026 GMT Subject: CN=5A0F82D88EF5775F1B32B43F85BFD8AF9B9CC114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:00:0e:d4:4e:90:d7:11:5d:a2:87:9b:d9:60: 70:f7:15:e1:a3:ac:46:ed:dc:7d:7d:42:d2:5c:68: e2:14:e0:bc:22:8c:1d:a7:91:1e:e2:b5:74:b3:be: 0f:c9:9c:cf:2f:a3:e4:6d:34:ce:d5:d8:29:10:2b: 2a:9d:bd:72:87:73:83:ed:27:57:9a:76:2a:a1:8d: e2:09:04:21:f0:42:ea:0a:38:d3:7e:f5:70:1e:44: db:da:3d:06:fa:90:f2:2b:b5:25:a9:4e:f9:4a:65: 03:55:0d:86:0f:52:5a:11:2b:5c:aa:26:81:c4:00: 7e:f8:23:2c:4b:31:0d:06:52:5b:f4:95:de:27:de: b9:07:2c:40:e3:07:8b:7a:2e:a0:4a:18:8b:e1:5a: 8a:19:be:b1:f7:fa:6c:be:5c:f0:d9:14:e7:97:53: 18:46:30:4b:13:22:13:5a:44:78:1a:4d:70:0d:86: 8a:51:4a:63:5b:1f:e3:9e:35:6a:62:34:86:d2:f5: 41:ad:ad:72:0d:35:bf:1c:fb:f3:ea:73:d1:10:c8: 80:29:0e:55:2c:d5:cf:9c:7b:0e:b5:7a:e4:be:8e: 2c:6c:32:2f:66:d1:ba:aa:04:0d:cd:42:8d:af:24: 4b:3a:78:76:bd:fb:21:f9:d3:50:fa:c8:e8:e5:75: 08:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:0F:82:D8:8E:F5:77:5F:1B:32:B4:3F:85:BF:D8:AF:9B:9C:C1:14 X509v3 Authority Key Identifier: keyid:D3:7E:9E:B2:F9:8E:29:CD:F1:38:65:33:26:66:AE:FB:23:18:4F:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/D37E9EB2F98E29CDF13865332666AEFB23184FEB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:30:14:7c:15:da:99:d5:d5:3e:3a:85:ae:86:71:bd:24:62: c8:dc:73:a0:e9:fe:63:55:60:95:29:a4:05:d4:64:77:35:12: 0b:cf:6f:ee:9d:9b:94:c6:90:a6:7f:3e:1d:33:c6:fd:ac:0e: 37:87:ff:0e:90:87:9e:9f:40:67:82:fd:e2:8c:25:8c:38:54: 1c:5a:8c:ba:57:f2:da:94:48:47:3c:74:d2:2b:d6:5a:21:6e: 7f:cf:b9:1a:12:1d:ab:5a:cf:4c:c2:5a:7a:78:23:af:ca:a0: 92:dd:68:40:21:43:f6:7c:50:39:3d:c2:e1:25:13:0c:ab:02: c7:1b:4b:0b:41:53:f2:b8:6e:90:f2:fb:ab:f1:d8:27:00:36: 26:4c:82:48:dc:0d:31:18:fb:fb:d6:c8:98:e9:7f:4f:5f:2b: c4:4b:5b:f4:c6:42:a7:12:57:dc:cb:de:d9:75:ab:97:51:8a: 5a:50:0b:d4:fc:72:a9:1b:38:2a:9e:ff:04:ff:52:3d:98:de: aa:be:7c:a1:0d:fc:7d:55:ab:df:c7:5d:8a:38:1b:02:32:6f: c2:bb:fb:02:d3:8f:67:67:f1:02:1e:bf:89:ec:05:d1:e1:52: e6:fd:a5:10:8f:d0:e0:be:3c:38:a8:5e:d4:51:c2:42:d4:b0: a8:02:06:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQP7DnRTSjHZ1PKRr/gduzYN+2Q0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM3RTlFQjJGOThFMjlDREYxMzg2NTMzMjY2NkFFRkIy MzE4NEZFQjAeFw0yNjA5MDMwMzAxNDVaFw0yNjA5MDQwMzI4NDVaMDMxMTAvBgNV BAMTKDVBMEY4MkQ4OEVGNTc3NUYxQjMyQjQzRjg1QkZEOEFGOUI5Q0MxMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnAA7UTpDXEV2ih5vZYHD3FeGj rEbt3H19QtJcaOIU4LwijB2nkR7itXSzvg/JnM8vo+RtNM7V2CkQKyqdvXKHc4Pt J1eadiqhjeIJBCHwQuoKONN+9XAeRNvaPQb6kPIrtSWpTvlKZQNVDYYPUloRK1yq JoHEAH74IyxLMQ0GUlv0ld4n3rkHLEDjB4t6LqBKGIvhWooZvrH3+my+XPDZFOeX UxhGMEsTIhNaRHgaTXANhopRSmNbH+OeNWpiNIbS9UGtrXINNb8c+/Pqc9EQyIAp DlUs1c+cew61euS+jixsMi9m0bqqBA3NQo2vJEs6eHa9+yH501D6yOjldQjnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWg+C2I71d18bMrQ/hb/Yr5ucwRQwHwYDVR0j BBgwFoAU036esvmOKc3xOGUzJmau+yMYT+swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTJlNWZmODEtYjA4Mi00MzM0LWFkMjktNTVkYzhkMWU1M2I5LzAvRDM3RTlFQjJG OThFMjlDREYxMzg2NTMzMjY2NkFFRkIyMzE4NEZFQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EMzdFOUVCMkY5OEUyOUNERjEzODY1MzMyNjY2QUVGQjIzMTg0 RkVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTJlNWZmODEtYjA4Mi00MzM0LWFk MjktNTVkYzhkMWU1M2I5LzAvRDM3RTlFQjJGOThFMjlDREYxMzg2NTMzMjY2NkFF RkIyMzE4NEZFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEQwFHwV2pnV1T46ha6Gcb0kYsjcc6Dp/mNV YJUppAXUZHc1EgvPb+6dm5TGkKZ/Ph0zxv2sDjeH/w6Qh56fQGeC/eKMJYw4VBxa jLpX8tqUSEc8dNIr1lohbn/PuRoSHataz0zCWnp4I6/KoJLdaEAhQ/Z8UDk9wuEl EwyrAscbSwtBU/K4bpDy+6vx2CcANiZMgkjcDTEY+/vWyJjpf09fK8RLW/TGQqcS V9zL3tl1q5dRilpQC9T8cqkbOCqe/wT/Uj2Y3qq+fKEN/H1Vq9/HXYo4GwIyb8K7 +wLTj2dn8QIev4nsBdHhUub9pRCP0OC+PDioXtRRwkLUsKgCBpc= -----END CERTIFICATE-----Generated at Thu Sep 3 05:06:26 2026 by rpki-client