$ rpki-client -vvf rpki-rsync.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.mft File: 37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.mft (raw, json) Hash identifier: fW2LYWXiQmeu6sOWKKlvVewiAzxue3Gewh7hQmXxRTY= Subject key identifier: 37:1B:0F:C0:A2:EC:64:8C:5F:18:08:BE:6A:6C:C4:BB:9E:FA:F0:5A Authority key identifier: 37:BB:70:91:96:04:AC:31:A2:42:3F:E2:DD:1F:9B:79:CB:59:F7:F4 Certificate issuer: /CN=37BB70919604AC31A2423FE2DD1F9B79CB59F7F4 Certificate serial: 2D5C93D9061D5FB9DB0DC38E41CC099A8A1E83B2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 02:12:24 +0000 Manifest this update: Sat 20 Jun 2026 02:07:24 +0000 Manifest next update: Sun 21 Jun 2026 05:27:24 +0000 Files and hashes: 1: 37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.crl (hash: V01VgZDhxN3AImCn3jdJKcpHLzbLbqjUWBM4ojgp+zc=) 2: 3130332e332e3233322e302f32342d3234203d3e20313531353238.roa (hash: Im3o8YUekrl4UUhItVyydZhi8GU6lVLXxpRk9EL/+Ow=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.crl rsync://rpki-rsync.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 05:27:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:5c:93:d9:06:1d:5f:b9:db:0d:c3:8e:41:cc:09:9a:8a:1e:83:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37BB70919604AC31A2423FE2DD1F9B79CB59F7F4 Validity Not Before: Jun 20 02:07:24 2026 GMT Not After : Jun 21 05:27:24 2026 GMT Subject: CN=371B0FC0A2EC648C5F1808BE6A6CC4BB9EFAF05A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:98:b6:4d:29:c9:ef:98:c3:c8:78:88:8e:e5: 79:ad:46:e1:2c:93:8e:80:ba:d6:87:1f:ae:0a:74: 2d:c9:d9:04:71:23:d6:e8:a5:0a:ee:7b:6a:26:aa: ea:19:38:af:5d:1f:0a:62:aa:a9:d8:fc:18:a7:7c: 6b:d0:78:16:1b:0d:d5:18:bb:00:15:fd:91:c3:d5: 3e:59:7a:97:eb:3c:14:14:f8:0c:04:ff:d2:d6:8d: 0b:8c:7c:05:b0:c0:0d:69:4a:c2:98:01:17:96:b7: ce:36:b3:ce:32:c2:08:80:5d:5c:49:8f:0f:89:7f: c2:ed:9a:c1:9f:7f:68:1c:e6:3a:45:e7:fd:5f:b8: 2a:ad:b7:48:f0:8a:d2:cf:d7:36:06:87:9b:41:45: c3:40:3d:95:5e:78:1f:4e:16:36:4a:50:80:49:9b: 1a:83:b7:5f:59:1c:6e:d8:a6:fa:22:8d:9c:6e:a1: c1:16:89:51:ec:45:81:59:3c:52:7c:27:2a:93:b0: 10:0c:17:ea:62:51:1b:95:17:f1:63:27:32:18:76: 4b:a5:91:0b:ba:d3:f9:d1:b0:cf:96:9f:dd:f6:0c: 9a:87:50:6b:d5:f4:d4:05:0b:21:b9:88:9e:8d:82: 4d:ae:74:67:d4:0d:36:1f:d1:37:26:87:ee:53:31: 37:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:1B:0F:C0:A2:EC:64:8C:5F:18:08:BE:6A:6C:C4:BB:9E:FA:F0:5A X509v3 Authority Key Identifier: keyid:37:BB:70:91:96:04:AC:31:A2:42:3F:E2:DD:1F:9B:79:CB:59:F7:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:0e:3c:6f:26:4c:af:fe:11:4c:8e:55:a6:f9:3b:aa:b1:b3: 16:25:83:f6:5e:7a:9d:38:44:a2:04:fc:b6:c1:21:1b:66:45: 39:91:3e:bf:b1:40:f8:7d:49:a7:cd:40:ae:8d:13:3a:61:4c: 7f:c6:52:26:b1:69:d8:1d:9e:f8:4a:25:e3:6a:84:60:17:19: 17:8c:e3:60:9d:bd:97:d0:ce:ec:ef:ed:ba:da:2f:af:e8:4c: 1e:83:fd:89:85:ff:80:ff:fc:63:d3:2d:aa:19:fe:34:dc:52: c8:ff:e4:f1:49:49:9a:ba:57:ab:27:9b:c2:2a:f8:f5:97:fe: 9f:5e:81:93:b4:d0:e2:25:1b:16:1c:70:bc:aa:27:35:ce:45: 72:87:6d:b5:af:f0:df:37:ae:e9:cb:07:d0:23:76:f4:db:54: 15:e0:d3:b6:e3:50:eb:38:9a:f8:46:7d:40:a4:cc:88:73:79: cf:22:f4:e3:61:10:a5:7a:ae:69:7e:7c:dc:b5:f9:97:26:be: b8:b4:6e:f0:d1:39:ba:64:c7:5f:79:ed:ca:be:f1:d8:45:4d: 4f:72:05:86:ba:15:4d:69:50:5b:ec:58:84:3a:95:73:d9:d5: bd:1b:7b:a7:8e:56:86:3f:db:04:28:ac:8f:fe:0f:4f:0f:41: b5:d4:89:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULVyT2QYdX7nbDcOOQcwJmooeg7IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdCQjcwOTE5NjA0QUMzMUEyNDIzRkUyREQxRjlCNzlD QjU5RjdGNDAeFw0yNjA2MjAwMjA3MjRaFw0yNjA2MjEwNTI3MjRaMDMxMTAvBgNV BAMTKDM3MUIwRkMwQTJFQzY0OEM1RjE4MDhCRTZBNkNDNEJCOUVGQUYwNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5mLZNKcnvmMPIeIiO5XmtRuEs k46AutaHH64KdC3J2QRxI9bopQrue2omquoZOK9dHwpiqqnY/BinfGvQeBYbDdUY uwAV/ZHD1T5ZepfrPBQU+AwE/9LWjQuMfAWwwA1pSsKYAReWt842s84ywgiAXVxJ jw+Jf8LtmsGff2gc5jpF5/1fuCqtt0jwitLP1zYGh5tBRcNAPZVeeB9OFjZKUIBJ mxqDt19ZHG7YpvoijZxuocEWiVHsRYFZPFJ8JyqTsBAMF+piURuVF/FjJzIYdkul kQu60/nRsM+Wn932DJqHUGvV9NQFCyG5iJ6Ngk2udGfUDTYf0Tcmh+5TMTdtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNxsPwKLsZIxfGAi+amzEu5768FowHwYDVR0j BBgwFoAUN7twkZYErDGiQj/i3R+bectZ9/QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTllN2NhMzktOGRiYy00MjgyLWEwZDMtODQ4MDIzNzI2ODYyLzAvMzdCQjcwOTE5 NjA0QUMzMUEyNDIzRkUyREQxRjlCNzlDQjU5RjdGNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zN0JCNzA5MTk2MDRBQzMxQTI0MjNGRTJERDFGOUI3OUNCNTlG N0Y0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTllN2NhMzktOGRiYy00MjgyLWEw ZDMtODQ4MDIzNzI2ODYyLzAvMzdCQjcwOTE5NjA0QUMzMUEyNDIzRkUyREQxRjlC NzlDQjU5RjdGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG0OPG8mTK/+EUyOVab5O6qxsxYlg/Zeep04 RKIE/LbBIRtmRTmRPr+xQPh9SafNQK6NEzphTH/GUiaxadgdnvhKJeNqhGAXGReM 42CdvZfQzuzv7braL6/oTB6D/YmF/4D//GPTLaoZ/jTcUsj/5PFJSZq6V6snm8Iq +PWX/p9egZO00OIlGxYccLyqJzXORXKHbbWv8N83runLB9AjdvTbVBXg07bjUOs4 mvhGfUCkzIhzec8i9ONhEKV6rml+fNy1+Zcmvri0bvDRObpkx1957cq+8dhFTU9y BYa6FU1pUFvsWIQ6lXPZ1b0be6eOVoY/2wQorI/+D08PQbXUifQ= -----END CERTIFICATE-----Generated at Sat Jun 20 09:17:45 2026 by rpki-client