$ rpki-client -vvf repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/37A94886A0E275DC8F922930328C955CC4307FF1.mft File: 37A94886A0E275DC8F922930328C955CC4307FF1.mft (raw, json) Hash identifier: da3nskCPfm9Lnk57BJLoZPbI7mosTcNALo204I8HGW8= Subject key identifier: CD:9B:56:B0:98:83:4C:28:3A:77:BC:19:70:93:2B:ED:51:A1:2B:38 Authority key identifier: 37:A9:48:86:A0:E2:75:DC:8F:92:29:30:32:8C:95:5C:C4:30:7F:F1 Certificate issuer: /CN=37A94886A0E275DC8F922930328C955CC4307FF1 Certificate serial: 5CAEF153BB1FCCF8A287B0E2FEF6773436590907 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37A94886A0E275DC8F922930328C955CC4307FF1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/37A94886A0E275DC8F922930328C955CC4307FF1.mft Manifest number: 013D Signing time: Fri 06 Mar 2026 20:52:36 +0000 Manifest this update: Fri 06 Mar 2026 20:47:36 +0000 Manifest next update: Tue 10 Mar 2026 05:33:36 +0000 Files and hashes: 1: 37A94886A0E275DC8F922930328C955CC4307FF1.crl (hash: ZFfx6VhwivccEsk+vyDPRPC9DFXduRxjCi889B5MzNk=) 2: 33362e35302e3235332e302f32342d3234203d3e20313338383239.roa (hash: K614n2L+d8fiCVgpbPYwtvyP0HHCDEIeDO9qqortOwg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/37A94886A0E275DC8F922930328C955CC4307FF1.crl rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/37A94886A0E275DC8F922930328C955CC4307FF1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37A94886A0E275DC8F922930328C955CC4307FF1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 22:43:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:ae:f1:53:bb:1f:cc:f8:a2:87:b0:e2:fe:f6:77:34:36:59:09:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37A94886A0E275DC8F922930328C955CC4307FF1 Validity Not Before: Mar 6 20:47:36 2026 GMT Not After : Mar 10 05:33:36 2026 GMT Subject: CN=CD9B56B098834C283A77BC1970932BED51A12B38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ba:c3:eb:f3:08:f8:b8:16:10:d2:bc:8b:3b: f9:02:13:c7:12:76:a1:c0:42:16:24:27:c8:71:c6: cc:ec:2f:a9:08:b6:5f:2e:7f:7d:bf:9b:fb:12:e6: fa:04:41:e2:d1:2d:b0:82:8a:39:aa:86:9e:13:51: 80:a0:e4:7d:4b:8b:ac:da:61:a8:2e:d7:50:9f:c2: 46:fc:3d:93:98:8a:e3:d1:f6:0e:96:74:8b:9a:33: 07:97:a7:a7:d9:48:0a:3f:c9:17:c2:75:33:a1:31: 43:97:4a:1b:45:49:4a:07:d2:16:db:d7:4b:8a:47: b2:72:7b:0e:6f:49:57:77:49:6a:ec:22:3e:8a:eb: b2:ae:3b:01:d9:e6:f2:90:98:5c:ac:57:d5:c2:fe: 98:72:b6:5d:71:63:d2:9d:20:85:f1:be:67:2b:8d: 27:4a:0f:83:db:d8:f3:b0:91:47:24:25:a9:75:08: b5:d7:f3:31:11:c7:c9:9a:0c:ee:de:5e:37:41:ec: 7e:a2:c4:bb:58:0e:de:f3:1b:55:d5:0f:6e:7b:44: 3e:5c:7c:6b:b3:5b:0e:09:41:85:a4:49:02:46:75: 2b:d3:92:27:b2:b7:f1:ae:ee:0c:42:d5:b5:13:d6: c8:bf:6a:c1:39:26:44:be:a9:ba:e3:6d:c9:d7:81: de:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:9B:56:B0:98:83:4C:28:3A:77:BC:19:70:93:2B:ED:51:A1:2B:38 X509v3 Authority Key Identifier: keyid:37:A9:48:86:A0:E2:75:DC:8F:92:29:30:32:8C:95:5C:C4:30:7F:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/37A94886A0E275DC8F922930328C955CC4307FF1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37A94886A0E275DC8F922930328C955CC4307FF1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/37A94886A0E275DC8F922930328C955CC4307FF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:10:b5:e4:9b:4a:84:df:5c:c4:80:1e:56:59:80:7c:0f:80: a8:e8:5d:9a:3c:6e:14:4f:9e:e4:5c:27:be:00:29:9b:33:1d: 52:fd:f8:a2:a1:b1:91:fc:89:f5:e2:b8:21:74:db:51:16:14: 4d:7e:ef:94:b2:32:7f:b2:17:62:94:1a:c3:93:ce:46:07:3b: e2:6f:1b:80:9a:2c:c5:f7:86:b2:de:b4:91:31:c0:e5:64:9b: 10:e2:fc:d0:e6:9e:64:5c:5d:be:9c:59:30:b4:4f:92:c3:3f: 13:6b:8c:6f:43:7f:e4:fe:4d:be:d6:0c:73:ba:e7:5f:3f:4d: 2a:ee:df:3e:4e:74:0a:3f:60:0d:00:2c:7b:c4:d9:81:60:02: 90:d3:4f:d6:5f:a3:ae:20:89:2a:34:4a:13:43:e7:5b:b5:5c: fd:2f:01:43:b3:3e:e7:82:2d:33:ce:6a:47:d5:a2:56:b8:20: 37:31:0f:6c:f3:96:1e:38:ea:aa:92:04:e1:62:7a:db:f8:a6: 1c:51:aa:81:a9:cd:b6:d1:a2:c2:b9:7f:77:2a:19:f3:86:f4: b9:c2:52:9d:e2:ae:7e:6f:cf:18:13:e5:f6:90:8d:ed:d8:85: 1b:00:f3:2d:83:88:b9:34:65:c4:69:b4:cc:9f:ba:a9:d5:6d: be:c2:a1:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXK7xU7sfzPiih7Di/vZ3NDZZCQcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdBOTQ4ODZBMEUyNzVEQzhGOTIyOTMwMzI4Qzk1NUND NDMwN0ZGMTAeFw0yNjAzMDYyMDQ3MzZaFw0yNjAzMTAwNTMzMzZaMDMxMTAvBgNV BAMTKENEOUI1NkIwOTg4MzRDMjgzQTc3QkMxOTcwOTMyQkVENTFBMTJCMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPusPr8wj4uBYQ0ryLO/kCE8cS dqHAQhYkJ8hxxszsL6kItl8uf32/m/sS5voEQeLRLbCCijmqhp4TUYCg5H1Li6za Yagu11Cfwkb8PZOYiuPR9g6WdIuaMweXp6fZSAo/yRfCdTOhMUOXShtFSUoH0hbb 10uKR7Jyew5vSVd3SWrsIj6K67KuOwHZ5vKQmFysV9XC/phytl1xY9KdIIXxvmcr jSdKD4Pb2POwkUckJal1CLXX8zERx8maDO7eXjdB7H6ixLtYDt7zG1XVD257RD5c fGuzWw4JQYWkSQJGdSvTkieyt/Gu7gxC1bUT1si/asE5JkS+qbrjbcnXgd7DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzZtWsJiDTCg6d7wZcJMr7VGhKzgwHwYDVR0j BBgwFoAUN6lIhqDiddyPkikwMoyVXMQwf/EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MGE2ZmVhYS02YjRmLTQ3Y2YtOWUzYy0wMGFlYWM2N2EzMmEvMS8zN0E5NDg4NkEw RTI3NURDOEY5MjI5MzAzMjhDOTU1Q0M0MzA3RkYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzdBOTQ4ODZBMEUyNzVEQzhGOTIyOTMwMzI4Qzk1NUNDNDMw N0ZGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDBhNmZlYWEtNmI0Zi00N2NmLTll M2MtMDBhZWFjNjdhMzJhLzEvMzdBOTQ4ODZBMEUyNzVEQzhGOTIyOTMwMzI4Qzk1 NUNDNDMwN0ZGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE8QteSbSoTfXMSAHlZZgHwPgKjoXZo8bhRP nuRcJ74AKZszHVL9+KKhsZH8ifXiuCF021EWFE1+75SyMn+yF2KUGsOTzkYHO+Jv G4CaLMX3hrLetJExwOVkmxDi/NDmnmRcXb6cWTC0T5LDPxNrjG9Df+T+Tb7WDHO6 518/TSru3z5OdAo/YA0ALHvE2YFgApDTT9Zfo64giSo0ShND51u1XP0vAUOzPueC LTPOakfVola4IDcxD2zzlh446qqSBOFietv4phxRqoGpzbbRosK5f3cqGfOG9LnC Up3irn5vzxgT5faQje3YhRsA8y2DiLk0ZcRptMyfuqnVbb7CoS8= -----END CERTIFICATE-----Generated at Sun Mar 8 00:35:25 2026 by rpki-client