
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/37F03E3124DF827AEC6F617458716798083055BC.mft
File: 37F03E3124DF827AEC6F617458716798083055BC.mft (raw, json)
Hash identifier: 32QZDFNF59Hq9AaB3pkQ0i3RJ6vGRwHK6chYjdbxyTQ=
Subject key identifier: 09:D7:7D:89:F3:9E:C4:AA:93:0B:8C:5A:2A:B0:C4:8B:A5:F7:E9:29
Authority key identifier: 37:F0:3E:31:24:DF:82:7A:EC:6F:61:74:58:71:67:98:08:30:55:BC
Certificate issuer: /CN=37F03E3124DF827AEC6F617458716798083055BC
Certificate serial: 76B0BBF787748F6AFF72EB7A139A4AA631961297
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37F03E3124DF827AEC6F617458716798083055BC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/37F03E3124DF827AEC6F617458716798083055BC.mft
Manifest number: 92
Signing time: Wed 19 Aug 2026 18:21:06 +0000
Manifest this update: Wed 19 Aug 2026 18:16:06 +0000
Manifest next update: Thu 20 Aug 2026 18:47:06 +0000
Files and hashes: 1: 3130332e3138392e3230302e302f32332d3233203d3e2039333431.roa (hash: dsSBEZ+RmcKKQ/S8RAk9jCD+91Y66d5ktHEFnBxIwCc=)
2: 3130332e3138392e3230302e302f32342d3234203d3e2039333431.roa (hash: zaT8QtBX8CWaeAVSKVLb2kSXw2+Ap6i51NDs3hsOZzg=)
3: 3130332e3138392e3230312e302f32342d3234203d3e2039333431.roa (hash: p+akLfy0WmwcWwKoICEgVlXEAKS1XaUc7gLYGzrKupw=)
4: 37F03E3124DF827AEC6F617458716798083055BC.crl (hash: ZNYehQR4/ylbNA2qGxZKdNENypY3IGX1mYLNHSMwTgY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/37F03E3124DF827AEC6F617458716798083055BC.crl
rsync://rpki-rsync.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/37F03E3124DF827AEC6F617458716798083055BC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37F03E3124DF827AEC6F617458716798083055BC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 20 Aug 2026 18:47:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:b0:bb:f7:87:74:8f:6a:ff:72:eb:7a:13:9a:4a:a6:31:96:12:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37F03E3124DF827AEC6F617458716798083055BC
Validity
Not Before: Aug 19 18:16:06 2026 GMT
Not After : Aug 20 18:47:06 2026 GMT
Subject: CN=09D77D89F39EC4AA930B8C5A2AB0C48BA5F7E929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4e:ee:87:aa:6b:98:01:db:cd:74:71:9d:ce:
ba:58:7c:7b:09:79:22:f6:1b:ed:53:30:e6:95:66:
ae:84:34:a3:a7:79:4b:21:ff:68:8a:38:45:62:62:
18:12:47:0c:17:52:e3:d8:63:09:c3:5f:ff:ec:e7:
ff:0c:86:ec:f1:90:ec:ea:1f:03:9d:50:c5:6c:23:
29:18:b6:89:9b:2b:3b:06:34:1e:63:f2:11:96:6b:
07:b1:93:cb:f1:18:26:33:75:c5:9e:de:e2:07:4f:
37:d4:f4:e8:54:80:fb:07:1f:b0:9b:72:b5:3c:f4:
54:74:17:2c:9a:a7:92:42:7b:28:3c:a8:3c:ee:5d:
73:76:7c:68:aa:a4:3a:8c:37:cf:d8:46:76:b1:77:
e5:2c:87:df:09:25:37:a3:f3:2a:b9:a1:85:8f:71:
40:17:03:e0:76:84:b3:f0:2c:39:61:e4:80:b1:57:
bd:ba:46:3d:26:f3:01:d0:c6:a9:42:ed:eb:bf:f2:
8e:bd:6e:63:9b:89:d3:a3:0c:71:31:cb:78:cc:f3:
0e:51:9b:d4:1c:23:e9:49:41:8b:a3:d8:d5:6d:c7:
4c:94:b0:f6:72:df:9e:b5:72:62:ad:29:b4:d7:30:
de:41:80:89:bb:47:14:84:c7:59:ab:3c:60:a2:a2:
77:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D7:7D:89:F3:9E:C4:AA:93:0B:8C:5A:2A:B0:C4:8B:A5:F7:E9:29
X509v3 Authority Key Identifier:
keyid:37:F0:3E:31:24:DF:82:7A:EC:6F:61:74:58:71:67:98:08:30:55:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/37F03E3124DF827AEC6F617458716798083055BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37F03E3124DF827AEC6F617458716798083055BC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/37F03E3124DF827AEC6F617458716798083055BC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:5a:5a:5a:1e:0e:d7:2e:70:26:b6:3e:e4:28:9e:a9:d0:3e:
26:47:6a:c8:16:f9:f3:ea:62:99:12:fb:78:83:5c:0f:8a:2d:
74:13:4b:03:4c:7c:7f:7c:82:58:4f:ad:ef:d2:2a:da:8c:ca:
38:42:9e:7e:f8:18:d1:36:12:df:f3:1b:1e:ab:6f:3f:4f:32:
f8:56:4b:55:11:3b:50:3c:f4:8b:64:d9:93:c8:83:0c:c1:36:
e2:a2:95:43:42:d1:70:26:6f:e1:1e:ff:63:a5:93:d6:0c:de:
c3:88:1f:b2:bb:23:89:f7:6d:d1:72:41:05:ab:2d:84:90:16:
3d:3b:13:c5:b6:52:dd:3d:dc:64:0b:01:60:32:2b:85:b2:9f:
ef:ed:d4:b3:5b:cf:6a:4e:2c:e6:bd:f9:46:38:9e:39:68:25:
95:ac:b5:6c:dd:b2:88:08:85:64:37:63:48:d6:5d:47:ad:fc:
97:4e:96:30:61:e9:47:66:6a:c6:81:03:04:e2:15:a9:a2:aa:
34:10:73:dc:43:ed:a6:06:9f:f5:d6:1f:49:6e:b3:de:cb:4f:
e5:59:6e:83:18:45:8e:47:55:53:d9:ef:2a:d9:63:e0:bd:ea:
54:78:32:57:07:5d:2a:4d:a9:3d:f8:51:35:37:e7:97:96:6a:
8d:25:aa:67
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUdrC794d0j2r/cut6E5pKpjGWEpcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzdGMDNFMzEyNERGODI3QUVDNkY2MTc0NTg3MTY3OTgw
ODMwNTVCQzAeFw0yNjA4MTkxODE2MDZaFw0yNjA4MjAxODQ3MDZaMDMxMTAvBgNV
BAMTKDA5RDc3RDg5RjM5RUM0QUE5MzBCOEM1QTJBQjBDNDhCQTVGN0U5MjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCTu6HqmuYAdvNdHGdzrpYfHsJ
eSL2G+1TMOaVZq6ENKOneUsh/2iKOEViYhgSRwwXUuPYYwnDX//s5/8MhuzxkOzq
HwOdUMVsIykYtombKzsGNB5j8hGWawexk8vxGCYzdcWe3uIHTzfU9OhUgPsHH7Cb
crU89FR0Fyyap5JCeyg8qDzuXXN2fGiqpDqMN8/YRnaxd+Ush98JJTej8yq5oYWP
cUAXA+B2hLPwLDlh5ICxV726Rj0m8wHQxqlC7eu/8o69bmObidOjDHExy3jM8w5R
m9QcI+lJQYuj2NVtx0yUsPZy3561cmKtKbTXMN5BgIm7RxSEx1mrPGCionfZAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUCdd9ifOexKqTC4xaKrDEi6X36SkwHwYDVR0j
BBgwFoAUN/A+MSTfgnrsb2F0WHFnmAgwVbwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
N2EyZTVmMDMtYmY5Ni00YjQwLWJkNGEtNmUzODg4YzQwMjA1LzAvMzdGMDNFMzEy
NERGODI3QUVDNkY2MTc0NTg3MTY3OTgwODMwNTVCQy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8zN0YwM0UzMTI0REY4MjdBRUM2RjYxNzQ1ODcxNjc5ODA4MzA1
NUJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2EyZTVmMDMtYmY5Ni00YjQwLWJk
NGEtNmUzODg4YzQwMjA1LzAvMzdGMDNFMzEyNERGODI3QUVDNkY2MTc0NTg3MTY3
OTgwODMwNTVCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABVaWloeDtcucCa2PuQonqnQPiZHasgW+fPq
YpkS+3iDXA+KLXQTSwNMfH98glhPre/SKtqMyjhCnn74GNE2Et/zGx6rbz9PMvhW
S1URO1A89Itk2ZPIgwzBNuKilUNC0XAmb+Ee/2Olk9YM3sOIH7K7I4n3bdFyQQWr
LYSQFj07E8W2Ut093GQLAWAyK4Wyn+/t1LNbz2pOLOa9+UY4njloJZWstWzdsogI
hWQ3Y0jWXUet/JdOljBh6UdmasaBAwTiFamiqjQQc9xD7aYGn/XWH0lus97LT+VZ
boMYRY5HVVPZ7yrZY+C96lR4MlcHXSpNqT34UTU355eWao0lqmc=
-----END CERTIFICATE-----
Generated at Thu Aug 20 07:04:52 2026 by rpki-client