$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.mft File: 37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.mft (raw, json) Hash identifier: zdRb70n65D1JjBpnjEJXvn3FFrGFb9nY9D71Y0waFfI= Subject key identifier: 23:25:1F:0F:34:1E:F2:5F:33:35:71:01:6B:61:F1:38:3F:2D:8E:5C Authority key identifier: 37:60:6E:99:C5:9E:71:07:D5:AC:FA:7E:8D:E3:FC:DF:E0:FF:A6:57 Certificate issuer: /CN=37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657 Certificate serial: 095D9D04F2C9996AB4AF027B22C77C0DF4F8E9CC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 13:01:58 +0000 Manifest this update: Thu 24 Sep 2026 12:56:58 +0000 Manifest next update: Fri 25 Sep 2026 16:13:58 +0000 Files and hashes: 1: 3130332e3134382e37362e302f32332d3233203d3e20313339393839.roa (hash: Fs+RqQ+YiPkIKy5ykH1+x0x7YMvGdMnBJYUHtFZf1pc=) 2: 3130332e3134382e37372e302f32342d3234203d3e20313339393839.roa (hash: jCqON8Yk3P3gMbZcKuKALDn9F/zcK2FOZiJKlSNeDJ8=) 3: 37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.crl (hash: XZBZx9/fdP4o3JfUTkWTyZo9wFEg9XHSUBiedhBQtEM=) 4: 3130332e3134382e37362e302f32342d3234203d3e20313339393839.roa (hash: 7Srge9sdh/jCl7HVuvbDBLE62n0zvsTPF/zsdp6ZWdc=) 5: 323030313a6466323a633238303a3a2f34382d3438203d3e20313339393839.roa (hash: O7Qsfv9shx16yrQW2Xe4frvAZ94BOmPstpdbztVAHcM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.crl rsync://rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:5d:9d:04:f2:c9:99:6a:b4:af:02:7b:22:c7:7c:0d:f4:f8:e9:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657 Validity Not Before: Sep 24 12:56:58 2026 GMT Not After : Sep 25 16:13:58 2026 GMT Subject: CN=23251F0F341EF25F333571016B61F1383F2D8E5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d9:b0:1b:17:b7:fa:99:38:67:7f:a1:ae:28: 0a:b8:dc:da:69:c0:3d:1d:cb:83:39:3a:4d:72:f5: 3c:78:10:15:06:b3:34:84:bb:c0:b0:ca:f3:b2:a4: 61:3c:1f:fe:87:89:3d:cb:47:04:f7:8a:69:9a:1b: e7:44:6e:2b:8d:51:ff:56:40:3c:cc:df:29:3b:57: d5:6a:18:c2:14:6c:70:10:0b:f6:fe:a3:06:19:15: 12:bd:67:76:27:e5:24:b9:f8:de:1a:80:39:9b:4f: 26:bf:57:dd:f6:85:d6:b5:95:ad:78:49:36:cd:1e: ed:70:bc:88:07:d3:3d:d7:a0:99:12:37:d2:b8:39: d9:9d:96:56:fb:40:d5:78:3e:41:fb:33:1c:21:c1: ab:04:15:63:c2:8e:f1:53:97:08:32:48:50:47:e7: ed:a4:2e:3c:b0:f0:5b:10:1d:e0:71:54:3e:47:1a: 05:0f:1f:68:7a:d3:f9:fe:ed:37:64:ba:d5:5c:39: 83:90:c1:b4:4a:5c:30:4d:b7:b7:4a:89:1c:b5:ed: b1:53:29:80:55:61:24:16:a7:1d:02:47:ac:2c:9a: 90:24:b3:91:0c:4b:21:74:7a:b0:26:0b:10:b4:3b: dc:8f:98:ac:ce:fc:65:8b:0c:05:3b:29:65:ce:8e: cf:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:25:1F:0F:34:1E:F2:5F:33:35:71:01:6B:61:F1:38:3F:2D:8E:5C X509v3 Authority Key Identifier: keyid:37:60:6E:99:C5:9E:71:07:D5:AC:FA:7E:8D:E3:FC:DF:E0:FF:A6:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/37606E99C59E7107D5ACFA7E8DE3FCDFE0FFA657.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:18:0b:09:22:bd:04:f9:a4:90:d9:f3:45:d5:1b:fc:e4:e5: 43:ee:4c:80:88:ec:a5:13:2d:ae:01:f8:19:df:00:70:15:78: d2:07:3a:da:00:7e:8c:bd:30:ce:3b:6f:ff:35:9c:58:53:87: d2:b6:0f:12:ec:b1:15:2a:4f:bb:de:72:a7:e7:15:5e:33:5d: 40:ae:71:32:2e:54:3c:e5:7a:7a:63:f8:b0:22:d0:77:62:f7: bd:7f:ab:3a:5e:ac:0b:43:07:c9:bc:95:fa:b5:a0:15:df:c8: 4b:ca:01:5b:b5:f0:c7:ba:7b:28:0b:63:13:57:97:c2:d2:9d: 19:3a:e9:7b:f3:57:1b:95:ad:04:3d:90:35:81:65:30:22:fc: d2:7c:3a:d0:9e:55:c3:03:70:9e:93:44:08:96:3a:53:bb:f6: 51:f0:85:7b:32:a4:1c:51:17:b2:de:0f:84:86:ef:bb:51:ef: 50:47:e2:74:8d:5d:54:7b:d0:a6:0f:84:2e:f6:eb:cf:b6:de: 5f:35:c5:d8:2a:f4:dc:56:b6:db:45:e3:f7:98:9b:9e:9d:4b: fc:9b:d8:2d:b9:7f:6a:51:d2:d5:e2:92:75:01:1a:42:e2:43: e2:9d:75:1c:ec:0b:a9:f1:f1:14:a1:4d:b4:44:cb:8a:f9:f8: cd:ae:86:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCV2dBPLJmWq0rwJ7Isd8DfT46cwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzc2MDZFOTlDNTlFNzEwN0Q1QUNGQTdFOERFM0ZDREZF MEZGQTY1NzAeFw0yNjA5MjQxMjU2NThaFw0yNjA5MjUxNjEzNThaMDMxMTAvBgNV BAMTKDIzMjUxRjBGMzQxRUYyNUYzMzM1NzEwMTZCNjFGMTM4M0YyRDhFNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL2bAbF7f6mThnf6GuKAq43Npp wD0dy4M5Ok1y9Tx4EBUGszSEu8CwyvOypGE8H/6HiT3LRwT3immaG+dEbiuNUf9W QDzM3yk7V9VqGMIUbHAQC/b+owYZFRK9Z3Yn5SS5+N4agDmbTya/V932hda1la14 STbNHu1wvIgH0z3XoJkSN9K4Odmdllb7QNV4PkH7MxwhwasEFWPCjvFTlwgySFBH 5+2kLjyw8FsQHeBxVD5HGgUPH2h60/n+7TdkutVcOYOQwbRKXDBNt7dKiRy17bFT KYBVYSQWpx0CR6wsmpAks5EMSyF0erAmCxC0O9yPmKzO/GWLDAU7KWXOjs+XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIyUfDzQe8l8zNXEBa2HxOD8tjlwwHwYDVR0j BBgwFoAUN2BumcWecQfVrPp+jeP83+D/plcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDAzMTc0NmUtYjBmNi00ODI3LThjNGUtYjgxOTJkZWNjMzlhLzAvMzc2MDZFOTlD NTlFNzEwN0Q1QUNGQTdFOERFM0ZDREZFMEZGQTY1Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNzYwNkU5OUM1OUU3MTA3RDVBQ0ZBN0U4REUzRkNERkUwRkZB NjU3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDAzMTc0NmUtYjBmNi00ODI3LThj NGUtYjgxOTJkZWNjMzlhLzAvMzc2MDZFOTlDNTlFNzEwN0Q1QUNGQTdFOERFM0ZD REZFMEZGQTY1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFIYCwkivQT5pJDZ80XVG/zk5UPuTICI7KUT La4B+BnfAHAVeNIHOtoAfoy9MM47b/81nFhTh9K2DxLssRUqT7vecqfnFV4zXUCu cTIuVDzlenpj+LAi0Hdi971/qzperAtDB8m8lfq1oBXfyEvKAVu18Me6eygLYxNX l8LSnRk66XvzVxuVrQQ9kDWBZTAi/NJ8OtCeVcMDcJ6TRAiWOlO79lHwhXsypBxR F7LeD4SG77tR71BH4nSNXVR70KYPhC7268+23l81xdgq9NxWtttF4/eYm56dS/yb 2C25f2pR0tXiknUBGkLiQ+KddRzsC6nx8RShTbREy4r5+M2uhsw= -----END CERTIFICATE-----Generated at Thu Sep 24 22:06:28 2026 by rpki-client