$ rpki-client -vvf rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.mft File: 37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.mft (raw, json) Hash identifier: nW7R58pRHvpvkjAN5CtHCpsV9mm804SArAPPu0uSp7w= Subject key identifier: F7:97:9B:60:AE:33:6A:AB:93:28:97:A4:E1:12:85:06:DD:0B:30:F0 Authority key identifier: 37:60:6E:99:C5:9E:71:07:D5:AC:FA:7E:8D:E3:FC:DF:E0:FF:A6:57 Certificate issuer: /CN=37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657 Certificate serial: 36AA8454CDDB8E5A634BBA83911B7B121A219AE7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.mft Manifest number: 07 Signing time: Wed 06 May 2026 18:43:40 +0000 Manifest this update: Wed 06 May 2026 18:38:40 +0000 Manifest next update: Thu 07 May 2026 20:32:40 +0000 Files and hashes: 1: 37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.crl (hash: u6Y2PqPxvkrJ8dKeRpyq0zDYwx/Mw+46lll3XrxMLzM=) 2: 3130332e3134382e37362e302f32332d3233203d3e20313339393839.roa (hash: Fs+RqQ+YiPkIKy5ykH1+x0x7YMvGdMnBJYUHtFZf1pc=) 3: 3130332e3134382e37362e302f32342d3234203d3e20313339393839.roa (hash: 7Srge9sdh/jCl7HVuvbDBLE62n0zvsTPF/zsdp6ZWdc=) 4: 3130332e3134382e37372e302f32342d3234203d3e20313339393839.roa (hash: jCqON8Yk3P3gMbZcKuKALDn9F/zcK2FOZiJKlSNeDJ8=) 5: 323030313a6466323a633238303a3a2f34382d3438203d3e20313339393839.roa (hash: O7Qsfv9shx16yrQW2Xe4frvAZ94BOmPstpdbztVAHcM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.crl rsync://rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 May 2026 20:32:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:aa:84:54:cd:db:8e:5a:63:4b:ba:83:91:1b:7b:12:1a:21:9a:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657 Validity Not Before: May 6 18:38:40 2026 GMT Not After : May 7 20:32:40 2026 GMT Subject: CN=F7979B60AE336AAB932897A4E1128506DD0B30F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0a:36:dd:7c:e4:20:1d:17:e7:7b:d6:3e:6b: bb:06:95:74:b1:e4:52:84:bf:e5:35:e9:90:16:99: 42:43:ea:d4:ba:9d:e3:ad:bb:5f:cc:6c:78:a6:db: 1c:aa:1f:60:c5:10:5f:eb:98:ff:f7:08:e6:a2:7a: e9:ca:70:70:2c:21:5e:2d:f5:28:a2:04:4c:d6:22: 4b:98:ef:cb:68:56:d8:5e:d8:d3:42:5d:e3:4a:33: d4:a4:a2:65:6f:e6:37:c0:0b:4b:09:d5:cb:82:a7: 66:ed:32:1c:f3:60:0e:8c:42:3a:32:f3:50:67:3c: ca:a5:21:0f:e3:1e:61:15:fa:44:47:1e:ec:81:1a: 31:14:fd:af:69:ba:ac:82:a6:84:35:5c:e2:5d:a6: 78:af:08:52:f9:b7:61:b9:c4:8f:20:07:18:c4:2c: f5:13:ee:c8:7f:bd:55:9a:d0:6e:c4:bd:cc:f9:f4: e7:89:0c:fa:7f:c0:2a:bb:fc:ff:ea:1f:9b:69:d7: 9a:4e:67:fa:e9:59:fd:db:98:eb:44:6a:29:5a:9c: c4:b8:6a:d7:b2:09:b4:49:9b:e9:0e:c9:8c:06:e8: 28:33:b0:42:fd:1f:fc:d9:d2:70:f4:b8:da:c7:85: 56:52:a0:58:7a:45:7a:eb:3e:18:91:4c:d5:5a:ea: 26:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:97:9B:60:AE:33:6A:AB:93:28:97:A4:E1:12:85:06:DD:0B:30:F0 X509v3 Authority Key Identifier: keyid:37:60:6E:99:C5:9E:71:07:D5:AC:FA:7E:8D:E3:FC:DF:E0:FF:A6:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:f3:4d:a8:c7:5f:88:55:02:2c:69:8a:ff:a1:c5:b9:fb:45: 6f:6d:cc:66:76:bb:86:6e:9e:e5:02:7b:a3:94:bb:fc:b3:d0: 6a:f8:59:fb:83:00:f8:2b:e0:68:b0:86:16:2f:91:f4:9c:1e: 3e:45:a8:ec:01:4b:de:60:9c:01:8e:bb:95:6d:5a:91:d7:d0: 93:0f:75:2f:29:40:e6:6b:f5:38:72:8e:bd:84:14:21:3f:e4: c7:5f:8a:4e:35:fa:1e:35:35:ef:6b:0b:e2:62:79:d1:1c:f8: c9:4c:44:67:b9:6e:ee:da:13:74:6f:7e:51:ab:3f:23:bc:e3: af:07:c8:a1:13:a7:e4:89:8d:74:2c:e3:be:65:8f:c8:4a:7e: 0c:22:ea:c0:f5:83:87:d9:47:43:1c:eb:1e:9d:9b:a1:94:40: 87:47:aa:bf:04:2e:02:b1:0b:b3:ba:fc:60:29:65:c1:f5:17: 59:6c:7c:8c:e7:05:9d:f7:9a:ea:6d:e9:9a:64:84:55:83:70: 4f:9d:ea:12:f1:4b:c5:58:ed:b0:fe:24:7c:c8:5a:af:76:82: 61:66:48:e2:b9:bc:30:71:69:06:7c:57:d7:5f:56:9d:9d:3f: c7:28:25:3c:84:a4:7d:20:63:1e:1e:6d:de:e5:44:3f:e9:e4: 43:b6:94:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNqqEVM3bjlpjS7qDkRt7EhohmucwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzc2MDZFOTlDNTlFNzEwN0Q1QUNGQTdFOERFM0ZDREZF MEZGQTY1NzAeFw0yNjA1MDYxODM4NDBaFw0yNjA1MDcyMDMyNDBaMDMxMTAvBgNV BAMTKEY3OTc5QjYwQUUzMzZBQUI5MzI4OTdBNEUxMTI4NTA2REQwQjMwRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqCjbdfOQgHRfne9Y+a7sGlXSx 5FKEv+U16ZAWmUJD6tS6neOtu1/MbHim2xyqH2DFEF/rmP/3COaieunKcHAsIV4t 9SiiBEzWIkuY78toVthe2NNCXeNKM9SkomVv5jfAC0sJ1cuCp2btMhzzYA6MQjoy 81BnPMqlIQ/jHmEV+kRHHuyBGjEU/a9puqyCpoQ1XOJdpnivCFL5t2G5xI8gBxjE LPUT7sh/vVWa0G7Evcz59OeJDPp/wCq7/P/qH5tp15pOZ/rpWf3bmOtEailanMS4 ateyCbRJm+kOyYwG6CgzsEL9H/zZ0nD0uNrHhVZSoFh6RXrrPhiRTNVa6ibrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU95ebYK4zaquTKJek4RKFBt0LMPAwHwYDVR0j BBgwFoAUN2BumcWecQfVrPp+jeP83+D/plcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDAzMTc0NmUtYjBmNi00ODI3LThjNGUtYjgxOTJkZWNjMzlhLzAvMzc2MDZFOTlD NTlFNzEwN0Q1QUNGQTdFOERFM0ZDREZFMEZGQTY1Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNzYwNkU5OUM1OUU3MTA3RDVBQ0ZBN0U4REUzRkNERkUwRkZB NjU3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDAzMTc0NmUtYjBmNi00ODI3LThj NGUtYjgxOTJkZWNjMzlhLzAvMzc2MDZFOTlDNTlFNzEwN0Q1QUNGQTdFOERFM0ZD REZFMEZGQTY1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMvzTajHX4hVAixpiv+hxbn7RW9tzGZ2u4Zu nuUCe6OUu/yz0Gr4WfuDAPgr4GiwhhYvkfScHj5FqOwBS95gnAGOu5VtWpHX0JMP dS8pQOZr9Thyjr2EFCE/5Mdfik41+h41Ne9rC+JiedEc+MlMRGe5bu7aE3RvflGr PyO8468HyKETp+SJjXQs475lj8hKfgwi6sD1g4fZR0Mc6x6dm6GUQIdHqr8ELgKx C7O6/GApZcH1F1lsfIznBZ33mupt6ZpkhFWDcE+d6hLxS8VY7bD+JHzIWq92gmFm SOK5vDBxaQZ8V9dfVp2dP8coJTyEpH0gYx4ebd7lRD/p5EO2lCI= -----END CERTIFICATE-----Generated at Thu May 7 06:52:54 2026 by rpki-client