
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/37B043860635643A07D4415D3C8C4959A51F0B69.mft
File: 37B043860635643A07D4415D3C8C4959A51F0B69.mft (raw, json)
Hash identifier: ZgdLXjAIlDPugtI+iBLogroF/zIkC6RDSARzG2ASfyQ=
Subject key identifier: 75:44:4C:75:2B:08:8F:24:9C:D7:1F:2D:B0:0D:F0:B7:0F:98:13:1C
Authority key identifier: 37:B0:43:86:06:35:64:3A:07:D4:41:5D:3C:8C:49:59:A5:1F:0B:69
Certificate issuer: /CN=37B043860635643A07D4415D3C8C4959A51F0B69
Certificate serial: 2E21FD3958F23D6AD3DFAF3ED1CFF645E6E8D1FA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37B043860635643A07D4415D3C8C4959A51F0B69.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/37B043860635643A07D4415D3C8C4959A51F0B69.mft
Manifest number: 7B
Signing time: Sun 02 Aug 2026 05:34:06 +0000
Manifest this update: Sun 02 Aug 2026 05:29:06 +0000
Manifest next update: Mon 03 Aug 2026 07:53:06 +0000
Files and hashes: 1: 3130332e3136392e34302e302f32332d3233203d3e20313432333332.roa (hash: 8ork7TaYxje1H50vqdK8v7A0WuTweiRWILiO2ZZPRvI=)
2: 37B043860635643A07D4415D3C8C4959A51F0B69.crl (hash: 200bH61DEI5Yg7qGeqAiyrj3lbyJd6tf6HYx4tNeB/I=)
3: 3130332e3136392e34302e302f32342d3234203d3e20313432333332.roa (hash: tjpf/AYVS8VtbIjx4X/JSsd7T5PpSDR5QfD/ek24bNQ=)
4: 3130332e3136392e34312e302f32342d3234203d3e20313432333332.roa (hash: A3dxGP2PxS97Lp2Vu736TLE9a7nlQtJcScv1U2W/tIo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/37B043860635643A07D4415D3C8C4959A51F0B69.crl
rsync://rpki-rsync.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/37B043860635643A07D4415D3C8C4959A51F0B69.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37B043860635643A07D4415D3C8C4959A51F0B69.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 07:53:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:21:fd:39:58:f2:3d:6a:d3:df:af:3e:d1:cf:f6:45:e6:e8:d1:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37B043860635643A07D4415D3C8C4959A51F0B69
Validity
Not Before: Aug 2 05:29:06 2026 GMT
Not After : Aug 3 07:53:06 2026 GMT
Subject: CN=75444C752B088F249CD71F2DB00DF0B70F98131C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1f:df:99:e9:80:96:38:10:0f:06:4c:6e:e1:
40:5a:53:9a:a0:09:90:15:89:21:91:94:64:ee:90:
81:81:fb:5c:e0:e3:a5:67:f7:30:2c:36:b4:83:a5:
b8:e9:cd:ee:8e:9e:8f:5d:1e:5a:df:f8:98:bc:3e:
bd:07:3a:2a:a2:b6:6c:da:76:4d:77:a7:0c:99:59:
92:28:8d:fe:bd:29:e0:7c:f2:7d:ca:de:ad:a9:a6:
8b:da:8d:47:7d:16:bc:66:1d:de:29:ad:ab:53:c5:
ea:e0:40:ee:d1:fd:d0:e1:55:73:95:fe:8c:c0:a4:
c7:7c:c1:7b:bd:97:03:de:98:45:5a:e3:1f:0f:db:
3f:b7:d4:5b:76:a3:06:37:42:6e:a8:dc:62:6c:e7:
7a:c6:ee:48:e8:d4:66:5b:95:b6:3c:ce:0c:db:08:
f5:ff:0a:d7:79:54:78:6d:83:b3:06:4f:e7:96:bf:
59:1f:c5:c3:f2:c6:aa:41:2c:39:da:15:04:39:fc:
9d:10:9f:e5:3b:d9:25:63:40:f8:00:ed:bd:e2:03:
f1:ce:6f:92:22:6f:12:71:6a:d2:37:3a:9f:7f:bf:
cd:db:88:3b:f6:f8:4d:59:e8:78:30:43:f7:0e:36:
f3:54:40:99:6d:ca:00:c1:58:64:7d:f7:47:f2:ee:
ba:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:44:4C:75:2B:08:8F:24:9C:D7:1F:2D:B0:0D:F0:B7:0F:98:13:1C
X509v3 Authority Key Identifier:
keyid:37:B0:43:86:06:35:64:3A:07:D4:41:5D:3C:8C:49:59:A5:1F:0B:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/37B043860635643A07D4415D3C8C4959A51F0B69.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37B043860635643A07D4415D3C8C4959A51F0B69.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/37B043860635643A07D4415D3C8C4959A51F0B69.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:6b:51:d1:d2:75:73:82:e2:ef:60:3e:29:3b:27:58:8b:82:
2f:79:b7:d8:f4:3d:27:95:d5:1b:03:5c:2d:e0:fa:f1:b9:1f:
78:f9:d2:9e:62:6e:95:26:48:c2:e7:16:e6:59:03:3e:7c:bd:
9f:a7:96:4b:be:b6:62:92:05:f7:90:57:7e:e1:43:e7:1e:4a:
14:81:35:4b:85:0b:85:4a:e6:24:62:0b:4b:ba:43:f4:1b:e0:
8d:8b:82:0a:5e:8a:39:dd:d7:fb:79:7a:a8:84:fb:cf:ac:40:
e5:ff:0a:0b:91:20:6e:0e:1f:f7:09:ce:33:c4:2b:c6:c1:d9:
fd:d6:a2:39:01:d1:6e:26:e0:ce:43:8c:5c:f5:8b:f9:58:59:
87:d6:36:36:2d:02:45:43:47:b4:3f:34:1c:40:25:2f:bf:5a:
c7:01:9a:08:66:c1:46:98:ba:1d:5b:3d:17:05:12:76:86:d3:
fd:fa:90:cb:92:46:dd:69:69:63:67:51:73:2e:e5:b7:db:0c:
91:6d:86:28:f2:43:92:82:e4:ac:5c:be:1e:ee:de:03:7f:2c:
fe:4f:ed:8a:84:56:08:d8:c1:59:00:2f:46:5b:ea:4e:f3:83:
2a:48:96:b6:cd:2a:12:1b:f3:85:46:86:50:81:ea:ed:31:f6:
d6:1a:37:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 22:51:58 2026 by rpki-client