$ rpki-client -vvvf rpki-rsync.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.mft File: 37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.mft (raw, json) Hash identifier: DxzkIfJmt8EBCtkzq98TLS8iSGokHJbYqZtj5tTWt4k= Subject key identifier: 36:7B:FA:C2:33:51:A5:5E:AC:E8:49:1B:2A:B8:5D:8F:E1:38:A1:2D Authority key identifier: 37:BB:70:91:96:04:AC:31:A2:42:3F:E2:DD:1F:9B:79:CB:59:F7:F4 Certificate issuer: /CN=37BB70919604AC31A2423FE2DD1F9B79CB59F7F4 Certificate serial: 32B9B86FED3FA38014C10505A3A281A6AE402499 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.mft Manifest number: EB Signing time: Sat 24 Oct 2026 23:02:52 +0000 Manifest this update: Sat 24 Oct 2026 22:57:52 +0000 Manifest next update: Sun 25 Oct 2026 23:49:52 +0000 Files and hashes: 1: 3130332e332e3233322e302f32342d3234203d3e20313531353238.roa (hash: Im3o8YUekrl4UUhItVyydZhi8GU6lVLXxpRk9EL/+Ow=) 2: 37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.crl (hash: YpWb8De5ZRuU6Pei3LD1JMtVBPl7ywkD6tFxNSwXXvI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.crl rsync://rpki-rsync.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 23:49:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:b9:b8:6f:ed:3f:a3:80:14:c1:05:05:a3:a2:81:a6:ae:40:24:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37BB70919604AC31A2423FE2DD1F9B79CB59F7F4 Validity Not Before: Oct 24 22:57:52 2026 GMT Not After : Oct 25 23:49:52 2026 GMT Subject: CN=367BFAC23351A55EACE8491B2AB85D8FE138A12D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:15:c8:bf:74:76:17:97:a5:1b:41:98:38:e2: 50:3b:dd:d7:d2:52:95:af:93:e5:9d:8b:42:27:d9: 13:d1:ea:74:02:f3:de:1a:fc:b1:6a:9a:75:1c:83: 70:69:c9:8b:97:e6:37:93:f0:41:68:69:87:fe:92: 4c:c0:e4:81:27:60:d7:0f:f2:6f:4b:af:45:8d:95: 99:a6:84:7e:0d:e2:c6:30:98:7f:55:e4:05:6a:1e: 45:ac:4b:e0:18:c4:c9:77:92:a1:7e:89:d1:41:24: 92:d0:a7:7f:21:84:af:d4:fb:eb:3e:43:57:48:0f: 2b:52:5e:56:37:9a:80:4d:bf:ef:4e:95:d1:9a:26: b9:10:b0:a9:fb:e5:78:48:e4:fa:20:6f:93:4d:d3: 8b:d8:3d:84:9c:e7:30:3d:e4:ab:dc:ac:5a:68:be: 7f:84:1d:3e:e0:93:f6:e8:a4:9b:d4:2b:b8:63:a9: a9:76:24:47:47:76:2c:b2:5e:07:29:ed:d8:b9:22: 80:3c:00:c7:34:da:e1:28:c9:9e:12:3d:37:ea:41: d8:86:77:18:2f:8d:df:43:8f:4d:07:d2:5a:c7:89: 6b:d0:5e:74:cb:00:b2:80:59:03:5b:d3:dc:30:2b: 28:12:04:8f:2e:19:43:96:dc:0d:03:68:8d:08:22: 6e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:7B:FA:C2:33:51:A5:5E:AC:E8:49:1B:2A:B8:5D:8F:E1:38:A1:2D X509v3 Authority Key Identifier: keyid:37:BB:70:91:96:04:AC:31:A2:42:3F:E2:DD:1F:9B:79:CB:59:F7:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:23:11:60:e6:6f:2b:54:19:b7:fa:6b:11:02:01:9c:32:8a: 33:53:d7:d1:49:5b:20:6a:0a:8c:10:bd:bb:0c:c7:1a:a0:5a: e6:dd:89:6b:86:2d:64:f2:47:89:a1:15:24:0b:68:11:74:95: a6:05:24:32:c7:bc:ea:c8:4f:26:23:3b:c8:59:58:59:d9:d9: 93:56:fb:f0:91:ae:57:c2:f3:9b:98:1e:19:cb:3f:83:ab:f8: 78:08:68:f2:e9:92:01:ff:b0:3d:63:45:97:ef:38:b5:05:05: a4:77:74:19:7b:21:fa:12:d9:6c:d0:a7:50:d7:f3:f3:07:b1: 1b:5e:8f:36:94:8d:02:96:1b:25:b0:76:7f:16:5c:36:42:ad: 81:5c:68:c3:82:2a:c1:93:a9:b9:bc:c1:48:40:ca:8c:c7:ed: 53:dd:17:63:6f:ee:5b:ec:01:05:c5:27:46:0d:d5:b8:dd:9b: 53:30:08:fb:90:80:10:9e:ad:8b:b6:ae:56:c6:a9:6e:d2:f1: 94:55:8d:8b:32:6f:a4:ec:ac:93:b4:6a:8c:73:5a:6b:c8:71: 46:d3:88:52:94:c9:f5:f4:4f:90:dd:fb:5a:8a:f3:f9:5f:54: b2:49:86:bd:d9:c6:1b:37:b0:9c:a8:1a:74:19:fb:b5:ef:1a: 69:52:d8:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMrm4b+0/o4AUwQUFo6KBpq5AJJkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdCQjcwOTE5NjA0QUMzMUEyNDIzRkUyREQxRjlCNzlD QjU5RjdGNDAeFw0yNjEwMjQyMjU3NTJaFw0yNjEwMjUyMzQ5NTJaMDMxMTAvBgNV BAMTKDM2N0JGQUMyMzM1MUE1NUVBQ0U4NDkxQjJBQjg1RDhGRTEzOEExMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGFci/dHYXl6UbQZg44lA73dfS UpWvk+Wdi0In2RPR6nQC894a/LFqmnUcg3BpyYuX5jeT8EFoaYf+kkzA5IEnYNcP 8m9Lr0WNlZmmhH4N4sYwmH9V5AVqHkWsS+AYxMl3kqF+idFBJJLQp38hhK/U++s+ Q1dIDytSXlY3moBNv+9OldGaJrkQsKn75XhI5Pogb5NN04vYPYSc5zA95KvcrFpo vn+EHT7gk/bopJvUK7hjqal2JEdHdiyyXgcp7di5IoA8AMc02uEoyZ4SPTfqQdiG dxgvjd9Dj00H0lrHiWvQXnTLALKAWQNb09wwKygSBI8uGUOW3A0DaI0IIm5HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNnv6wjNRpV6s6EkbKrhdj+E4oS0wHwYDVR0j BBgwFoAUN7twkZYErDGiQj/i3R+bectZ9/QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTllN2NhMzktOGRiYy00MjgyLWEwZDMtODQ4MDIzNzI2ODYyLzAvMzdCQjcwOTE5 NjA0QUMzMUEyNDIzRkUyREQxRjlCNzlDQjU5RjdGNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zN0JCNzA5MTk2MDRBQzMxQTI0MjNGRTJERDFGOUI3OUNCNTlG N0Y0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTllN2NhMzktOGRiYy00MjgyLWEw ZDMtODQ4MDIzNzI2ODYyLzAvMzdCQjcwOTE5NjA0QUMzMUEyNDIzRkUyREQxRjlC NzlDQjU5RjdGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALwjEWDmbytUGbf6axECAZwyijNT19FJWyBq CowQvbsMxxqgWubdiWuGLWTyR4mhFSQLaBF0laYFJDLHvOrITyYjO8hZWFnZ2ZNW +/CRrlfC85uYHhnLP4Or+HgIaPLpkgH/sD1jRZfvOLUFBaR3dBl7IfoS2WzQp1DX 8/MHsRtejzaUjQKWGyWwdn8WXDZCrYFcaMOCKsGTqbm8wUhAyozH7VPdF2Nv7lvs AQXFJ0YN1bjdm1MwCPuQgBCerYu2rlbGqW7S8ZRVjYsyb6TsrJO0aoxzWmvIcUbT iFKUyfX0T5Dd+1qK8/lfVLJJhr3Zxhs3sJyoGnQZ+7XvGmlS2AY= -----END CERTIFICATE-----Generated at Sun Oct 25 17:58:05 2026 by rpki-client