$ rpki-client -vvf rpki-rsync.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/37B043860635643A07D4415D3C8C4959A51F0B69.mft File: 37B043860635643A07D4415D3C8C4959A51F0B69.mft (raw, json) Hash identifier: JACVfQ560sdtLmYRPRXJFyLqxWPMXgax2ONCcnzrhvY= Subject key identifier: 90:1E:26:E3:99:E6:31:4E:5A:3F:35:88:FF:4C:40:69:6F:15:DE:98 Authority key identifier: 37:B0:43:86:06:35:64:3A:07:D4:41:5D:3C:8C:49:59:A5:1F:0B:69 Certificate issuer: /CN=37B043860635643A07D4415D3C8C4959A51F0B69 Certificate serial: 5B6C2DDA9D191FBF9461BEAEDFBA936500DB090B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37B043860635643A07D4415D3C8C4959A51F0B69.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/37B043860635643A07D4415D3C8C4959A51F0B69.mft Manifest number: 40 Signing time: Thu 18 Jun 2026 15:45:52 +0000 Manifest this update: Thu 18 Jun 2026 15:40:52 +0000 Manifest next update: Fri 19 Jun 2026 17:14:52 +0000 Files and hashes: 1: 3130332e3136392e34302e302f32342d3234203d3e20313432333332.roa (hash: tjpf/AYVS8VtbIjx4X/JSsd7T5PpSDR5QfD/ek24bNQ=) 2: 3130332e3136392e34312e302f32342d3234203d3e20313432333332.roa (hash: A3dxGP2PxS97Lp2Vu736TLE9a7nlQtJcScv1U2W/tIo=) 3: 37B043860635643A07D4415D3C8C4959A51F0B69.crl (hash: 5yv+XaBERdO4ah7yQSs64K2/forJOhKkBGIgsAKLDts=) 4: 3130332e3136392e34302e302f32332d3233203d3e20313432333332.roa (hash: 8ork7TaYxje1H50vqdK8v7A0WuTweiRWILiO2ZZPRvI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/37B043860635643A07D4415D3C8C4959A51F0B69.crl rsync://rpki-rsync.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/37B043860635643A07D4415D3C8C4959A51F0B69.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37B043860635643A07D4415D3C8C4959A51F0B69.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 12:15:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:6c:2d:da:9d:19:1f:bf:94:61:be:ae:df:ba:93:65:00:db:09:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37B043860635643A07D4415D3C8C4959A51F0B69 Validity Not Before: Jun 18 15:40:52 2026 GMT Not After : Jun 19 17:14:52 2026 GMT Subject: CN=901E26E399E6314E5A3F3588FF4C40696F15DE98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:94:14:5c:09:d2:52:18:26:62:60:18:a3:d1: 49:90:db:7e:4c:8d:6c:39:45:02:4b:c1:23:02:8f: c2:57:ab:68:52:c7:57:99:7c:70:80:50:04:6c:5d: 07:7b:b4:c0:21:b2:fa:62:75:8c:8d:9e:ef:0c:2c: 84:08:d9:c1:6f:0b:05:c3:46:ed:33:ca:93:53:54: e3:2d:f9:dd:24:dc:d3:23:31:01:e5:84:bc:7e:61: 21:31:44:e6:71:de:0c:7e:a3:76:e5:12:ea:e7:40: 9c:a4:7b:37:3f:70:88:7c:74:87:4d:37:56:4f:00: e1:70:f8:9d:d9:f5:0a:df:47:80:7a:84:8e:36:1f: 87:d7:49:b3:c7:1f:34:72:62:c5:81:be:76:8a:25: e2:27:ce:37:0a:9d:98:6f:26:83:7d:fa:28:e1:34: 04:64:fc:18:a1:89:f9:1e:f8:43:bf:50:11:8f:b8: d5:1e:b7:c5:a7:06:ff:f3:e6:2d:ff:f8:2f:98:14: fc:cd:2c:3e:8d:83:ff:fb:e3:f4:23:0f:79:b7:39: e2:61:bc:ec:b6:c9:9c:2d:2a:e0:23:b9:58:09:d7: 8e:f7:6b:9c:5f:e6:36:b6:1d:f0:f7:80:36:d3:76: cc:5b:a5:61:e4:dc:e0:c3:9b:b8:21:b1:e1:39:c8: 1e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:1E:26:E3:99:E6:31:4E:5A:3F:35:88:FF:4C:40:69:6F:15:DE:98 X509v3 Authority Key Identifier: keyid:37:B0:43:86:06:35:64:3A:07:D4:41:5D:3C:8C:49:59:A5:1F:0B:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/37B043860635643A07D4415D3C8C4959A51F0B69.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37B043860635643A07D4415D3C8C4959A51F0B69.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/37B043860635643A07D4415D3C8C4959A51F0B69.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:e6:f8:28:52:e7:13:91:f2:a5:07:18:54:a8:16:8a:cb:42: 59:6a:5c:b7:54:00:a5:8d:20:46:2d:62:46:4f:b7:1d:ad:d1: c2:52:cb:e1:33:14:6f:2a:cb:ab:9a:62:53:2a:d1:e4:d7:5f: 1e:39:b1:84:48:89:3d:b7:af:c5:dd:d3:06:2d:28:27:19:14: 05:10:78:d2:39:54:56:c8:33:9b:a2:f6:bc:5f:34:53:da:7e: a1:86:d2:69:01:52:ce:2f:5e:86:51:02:7e:b2:d3:a8:2a:2a: f7:ad:3c:7d:25:5d:fb:63:7d:a9:64:d8:55:64:88:75:df:21: d6:7d:37:be:64:45:55:eb:fc:61:c3:c2:a5:ec:5e:b2:3f:49: af:69:6a:c5:82:22:a7:c5:c6:9a:83:2e:76:de:51:59:bb:64: b6:6b:5f:ce:cb:ee:88:d9:50:71:35:83:dd:87:d4:ae:94:cf: 78:58:1d:6a:41:aa:f1:3e:36:74:f4:5b:21:1a:f4:cb:ee:40: 27:b3:f6:38:90:c2:d6:73:7a:d5:9c:cc:d4:f0:c7:ce:f1:b5: 39:6a:82:fa:5f:b3:7b:b3:f5:01:0f:f2:94:38:b5:aa:f6:e6: fe:7b:b6:cb:4c:15:29:b6:ab:11:9e:ee:dc:98:41:f4:66:75: 3f:db:ee:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW2wt2p0ZH7+UYb6u37qTZQDbCQswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdCMDQzODYwNjM1NjQzQTA3RDQ0MTVEM0M4QzQ5NTlB NTFGMEI2OTAeFw0yNjA2MTgxNTQwNTJaFw0yNjA2MTkxNzE0NTJaMDMxMTAvBgNV BAMTKDkwMUUyNkUzOTlFNjMxNEU1QTNGMzU4OEZGNEM0MDY5NkYxNURFOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCylBRcCdJSGCZiYBij0UmQ235M jWw5RQJLwSMCj8JXq2hSx1eZfHCAUARsXQd7tMAhsvpidYyNnu8MLIQI2cFvCwXD Ru0zypNTVOMt+d0k3NMjMQHlhLx+YSExROZx3gx+o3blEurnQJykezc/cIh8dIdN N1ZPAOFw+J3Z9QrfR4B6hI42H4fXSbPHHzRyYsWBvnaKJeInzjcKnZhvJoN9+ijh NARk/Bihifke+EO/UBGPuNUet8WnBv/z5i3/+C+YFPzNLD6Ng//74/QjD3m3OeJh vOy2yZwtKuAjuVgJ1473a5xf5ja2HfD3gDbTdsxbpWHk3ODDm7ghseE5yB6TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkB4m45nmMU5aPzWI/0xAaW8V3pgwHwYDVR0j BBgwFoAUN7BDhgY1ZDoH1EFdPIxJWaUfC2kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmNiNTI2MTktMzc5ZC00MzBhLWIxOWItMWYwZWM1M2FlOTA5LzAvMzdCMDQzODYw NjM1NjQzQTA3RDQ0MTVEM0M4QzQ5NTlBNTFGMEI2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zN0IwNDM4NjA2MzU2NDNBMDdENDQxNUQzQzhDNDk1OUE1MUYw QjY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmNiNTI2MTktMzc5ZC00MzBhLWIx OWItMWYwZWM1M2FlOTA5LzAvMzdCMDQzODYwNjM1NjQzQTA3RDQ0MTVEM0M4QzQ5 NTlBNTFGMEI2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKDm+ChS5xOR8qUHGFSoForLQllqXLdUAKWN IEYtYkZPtx2t0cJSy+EzFG8qy6uaYlMq0eTXXx45sYRIiT23r8Xd0wYtKCcZFAUQ eNI5VFbIM5ui9rxfNFPafqGG0mkBUs4vXoZRAn6y06gqKvetPH0lXftjfalk2FVk iHXfIdZ9N75kRVXr/GHDwqXsXrI/Sa9pasWCIqfFxpqDLnbeUVm7ZLZrX87L7ojZ UHE1g92H1K6Uz3hYHWpBqvE+NnT0WyEa9MvuQCez9jiQwtZzetWczNTwx87xtTlq gvpfs3uz9QEP8pQ4tar25v57tstMFSm2qxGe7tyYQfRmdT/b7jY= -----END CERTIFICATE-----Generated at Thu Jun 18 19:11:08 2026 by rpki-client