$ rpki-client -vvf repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/37A94886A0E275DC8F922930328C955CC4307FF1.mft File: 37A94886A0E275DC8F922930328C955CC4307FF1.mft (raw, json) Hash identifier: xH9upHx/vurDNfgx1frP5mea/boB8qLy1hh6wHDlJ+o= Subject key identifier: 25:3D:77:0A:86:A4:16:05:33:C0:C1:B7:7D:EB:46:8B:26:6D:DC:3C Authority key identifier: 37:A9:48:86:A0:E2:75:DC:8F:92:29:30:32:8C:95:5C:C4:30:7F:F1 Certificate issuer: /CN=37A94886A0E275DC8F922930328C955CC4307FF1 Certificate serial: 795836511804E8B350B41BF63F69E6C4C6015C14 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37A94886A0E275DC8F922930328C955CC4307FF1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/37A94886A0E275DC8F922930328C955CC4307FF1.mft Manifest number: 0151 Signing time: Tue 21 Apr 2026 01:42:41 +0000 Manifest this update: Tue 21 Apr 2026 01:37:41 +0000 Manifest next update: Fri 24 Apr 2026 07:30:41 +0000 Files and hashes: 1: 37A94886A0E275DC8F922930328C955CC4307FF1.crl (hash: veUtl8QnZVj6hNfp8bK9A0UANiRrar/4jFlhlm9aY5E=) 2: 33362e35302e3235332e302f32342d3234203d3e20313338383239.roa (hash: K614n2L+d8fiCVgpbPYwtvyP0HHCDEIeDO9qqortOwg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/37A94886A0E275DC8F922930328C955CC4307FF1.crl rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/37A94886A0E275DC8F922930328C955CC4307FF1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37A94886A0E275DC8F922930328C955CC4307FF1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:30:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:58:36:51:18:04:e8:b3:50:b4:1b:f6:3f:69:e6:c4:c6:01:5c:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37A94886A0E275DC8F922930328C955CC4307FF1 Validity Not Before: Apr 21 01:37:41 2026 GMT Not After : Apr 24 07:30:41 2026 GMT Subject: CN=253D770A86A4160533C0C1B77DEB468B266DDC3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:91:23:e8:0a:ba:58:2b:a4:d5:eb:3f:78:c5: 6b:c3:f9:e2:04:29:21:87:66:f4:55:fe:3b:44:33: c7:58:2a:e4:79:f6:9f:ea:51:d2:ad:ab:47:1e:fe: cb:b1:cc:d5:e0:50:bf:e4:99:be:f1:3f:83:1c:fc: 28:f5:70:bb:82:22:9b:ff:2a:cc:1e:74:7f:44:ff: 3a:8a:ab:c3:62:e0:f7:9e:f2:32:df:b9:ce:0d:15: ea:74:50:b5:03:f8:f5:fc:53:bc:b7:73:e4:9d:ec: 5d:06:b9:85:03:15:d8:86:b7:86:a8:9f:26:c2:25: 80:bf:50:8b:25:af:e4:c0:c8:1d:cb:04:86:ff:99: 02:7c:10:dc:4c:ba:8f:39:76:f9:9a:be:3e:c4:24: fc:29:3a:a7:d1:28:a4:c5:79:a2:4a:01:c6:83:a9: f3:eb:83:e9:73:60:e5:fb:0f:9e:11:db:3c:53:bc: 5d:38:7e:0e:92:16:d3:6d:84:d2:b7:c8:b5:49:f2: 14:01:35:47:b7:5e:30:be:b6:6f:17:54:4a:b6:9c: 14:7b:e7:16:52:ff:f5:20:9f:da:72:c6:7a:f6:6b: f9:1c:91:70:81:02:3a:9c:57:5e:ea:89:1f:c0:98: aa:de:6a:08:20:a7:b1:45:32:f3:b9:31:ea:51:71: 69:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:3D:77:0A:86:A4:16:05:33:C0:C1:B7:7D:EB:46:8B:26:6D:DC:3C X509v3 Authority Key Identifier: keyid:37:A9:48:86:A0:E2:75:DC:8F:92:29:30:32:8C:95:5C:C4:30:7F:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/37A94886A0E275DC8F922930328C955CC4307FF1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37A94886A0E275DC8F922930328C955CC4307FF1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/37A94886A0E275DC8F922930328C955CC4307FF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:f9:45:83:b4:23:2c:ee:19:65:6e:0e:50:cd:e0:b5:2e:1e: 32:9f:51:e5:0f:a1:9f:ba:c9:6e:31:cf:22:bf:7f:af:8a:55: d2:e8:c7:65:06:ab:79:a4:2c:b0:17:d2:4a:6a:2e:1c:3f:6a: 63:fb:bf:27:7c:f5:8a:e3:04:b4:cb:f5:93:7e:e3:d2:d9:75: 30:97:bc:53:cb:aa:d2:44:6e:39:72:69:c1:03:c5:b6:df:ed: b5:46:c0:0f:76:a0:6a:07:56:35:ad:eb:3e:e3:8f:5a:67:9f: 12:55:3d:fe:29:7e:df:3f:16:3d:0a:84:fe:06:c6:5e:5e:2f: 9c:b1:27:37:a8:6b:7f:bb:47:a2:72:3e:93:df:16:76:7c:54: 9c:a4:e8:ea:3d:8e:8b:05:a4:36:6e:76:ae:bb:c0:78:95:2b: 31:78:b9:21:fd:76:79:09:71:0e:23:d7:a4:78:cb:fb:25:35: c1:d5:44:ee:a6:2d:bf:9f:1e:99:a0:95:33:95:ae:d4:55:e6: 28:01:8e:44:19:ca:f6:1f:25:59:c6:b7:0c:43:27:85:33:89: 7c:26:13:8f:d6:6c:fc:07:8f:47:a4:93:8c:10:6d:57:fd:8f: b2:2a:76:61:af:27:6b:d5:2f:47:0c:2e:36:d7:0d:a6:8d:c1: ee:3b:aa:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeVg2URgE6LNQtBv2P2nmxMYBXBQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdBOTQ4ODZBMEUyNzVEQzhGOTIyOTMwMzI4Qzk1NUND NDMwN0ZGMTAeFw0yNjA0MjEwMTM3NDFaFw0yNjA0MjQwNzMwNDFaMDMxMTAvBgNV BAMTKDI1M0Q3NzBBODZBNDE2MDUzM0MwQzFCNzdERUI0NjhCMjY2RERDM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1kSPoCrpYK6TV6z94xWvD+eIE KSGHZvRV/jtEM8dYKuR59p/qUdKtq0ce/suxzNXgUL/kmb7xP4Mc/Cj1cLuCIpv/ KswedH9E/zqKq8Ni4Pee8jLfuc4NFep0ULUD+PX8U7y3c+Sd7F0GuYUDFdiGt4ao nybCJYC/UIslr+TAyB3LBIb/mQJ8ENxMuo85dvmavj7EJPwpOqfRKKTFeaJKAcaD qfPrg+lzYOX7D54R2zxTvF04fg6SFtNthNK3yLVJ8hQBNUe3XjC+tm8XVEq2nBR7 5xZS//Ugn9pyxnr2a/kckXCBAjqcV17qiR/AmKreagggp7FFMvO5MepRcWm1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJT13CoakFgUzwMG3fetGiyZt3DwwHwYDVR0j BBgwFoAUN6lIhqDiddyPkikwMoyVXMQwf/EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MGE2ZmVhYS02YjRmLTQ3Y2YtOWUzYy0wMGFlYWM2N2EzMmEvMS8zN0E5NDg4NkEw RTI3NURDOEY5MjI5MzAzMjhDOTU1Q0M0MzA3RkYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzdBOTQ4ODZBMEUyNzVEQzhGOTIyOTMwMzI4Qzk1NUNDNDMw N0ZGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDBhNmZlYWEtNmI0Zi00N2NmLTll M2MtMDBhZWFjNjdhMzJhLzEvMzdBOTQ4ODZBMEUyNzVEQzhGOTIyOTMwMzI4Qzk1 NUNDNDMwN0ZGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMv5RYO0IyzuGWVuDlDN4LUuHjKfUeUPoZ+6 yW4xzyK/f6+KVdLox2UGq3mkLLAX0kpqLhw/amP7vyd89YrjBLTL9ZN+49LZdTCX vFPLqtJEbjlyacEDxbbf7bVGwA92oGoHVjWt6z7jj1pnnxJVPf4pft8/Fj0KhP4G xl5eL5yxJzeoa3+7R6JyPpPfFnZ8VJyk6Oo9josFpDZudq67wHiVKzF4uSH9dnkJ cQ4j16R4y/slNcHVRO6mLb+fHpmglTOVrtRV5igBjkQZyvYfJVnGtwxDJ4UziXwm E4/WbPwHj0ekk4wQbVf9j7IqdmGvJ2vVL0cMLjbXDaaNwe47qmI= -----END CERTIFICATE-----Generated at Wed Apr 22 09:50:04 2026 by rpki-client