
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/37F03E3124DF827AEC6F617458716798083055BC.mft
File: 37F03E3124DF827AEC6F617458716798083055BC.mft (raw, json)
Hash identifier: +1fvpv982zskuP1vVfp9gUGqE6uzJZUbnU8XeiwYQtk=
Subject key identifier: C4:0C:89:DD:E4:89:74:9D:30:91:25:CC:B9:D2:B0:F3:63:F2:BE:19
Authority key identifier: 37:F0:3E:31:24:DF:82:7A:EC:6F:61:74:58:71:67:98:08:30:55:BC
Certificate issuer: /CN=37F03E3124DF827AEC6F617458716798083055BC
Certificate serial: 118951C6BCC7F58C3F2709E68BEC90E178BD7519
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37F03E3124DF827AEC6F617458716798083055BC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/37F03E3124DF827AEC6F617458716798083055BC.mft
Manifest number: 05
Signing time: Tue 05 May 2026 11:37:41 +0000
Manifest this update: Tue 05 May 2026 11:32:41 +0000
Manifest next update: Wed 06 May 2026 13:42:41 +0000
Files and hashes: 1: 3130332e3138392e3230312e302f32342d3234203d3e2039333431.roa (hash: p+akLfy0WmwcWwKoICEgVlXEAKS1XaUc7gLYGzrKupw=)
2: 3130332e3138392e3230302e302f32342d3234203d3e2039333431.roa (hash: zaT8QtBX8CWaeAVSKVLb2kSXw2+Ap6i51NDs3hsOZzg=)
3: 37F03E3124DF827AEC6F617458716798083055BC.crl (hash: EyvKlkUzEK2HxXa9aZb4EV021967J2Woqn07M0SFEdc=)
4: 3130332e3138392e3230302e302f32332d3233203d3e2039333431.roa (hash: dsSBEZ+RmcKKQ/S8RAk9jCD+91Y66d5ktHEFnBxIwCc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/37F03E3124DF827AEC6F617458716798083055BC.crl
rsync://rpki-rsync.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/37F03E3124DF827AEC6F617458716798083055BC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37F03E3124DF827AEC6F617458716798083055BC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 06 May 2026 10:15:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:89:51:c6:bc:c7:f5:8c:3f:27:09:e6:8b:ec:90:e1:78:bd:75:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37F03E3124DF827AEC6F617458716798083055BC
Validity
Not Before: May 5 11:32:41 2026 GMT
Not After : May 6 13:42:41 2026 GMT
Subject: CN=C40C89DDE489749D309125CCB9D2B0F363F2BE19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:05:a8:28:8c:05:23:21:08:f1:ef:be:19:1e:
a9:ac:44:90:4f:33:65:e6:df:fc:a4:26:f0:cc:67:
fc:2a:7e:84:b0:65:41:2e:1d:ed:fd:a7:5a:28:6b:
4c:86:9b:ca:61:fb:28:32:11:15:bd:5d:65:b1:8e:
ba:81:46:e3:56:5d:3a:25:ab:1d:29:7f:72:d2:53:
ec:75:2a:be:fe:0c:bb:39:57:ae:77:07:ca:7d:63:
17:d8:e2:4a:60:63:0f:32:f3:29:a2:26:d3:8f:59:
dd:20:fb:be:75:df:ff:11:6c:3a:9c:4e:d4:7c:cc:
42:36:6b:8d:33:ee:ea:f7:c4:d7:e6:c7:03:08:90:
b9:44:a2:7d:ba:d1:d5:3f:eb:45:fa:8b:5f:8e:4b:
99:4e:4a:26:74:b8:0b:b5:95:02:d6:02:eb:67:b5:
49:b5:3b:c5:e1:ff:67:2e:68:c0:8e:88:07:be:61:
1f:d0:da:f8:c8:d5:ad:1e:db:ff:f1:cf:98:bd:2f:
53:1b:16:0b:91:f1:bc:37:5b:9d:28:0d:41:61:ca:
79:59:34:f9:97:d8:91:8d:20:d1:f1:19:c2:6f:82:
75:75:f5:6f:66:94:be:14:32:66:1a:69:87:06:ac:
63:f1:b5:60:e9:f8:fb:cf:2b:30:ce:15:5d:1b:0c:
a0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:0C:89:DD:E4:89:74:9D:30:91:25:CC:B9:D2:B0:F3:63:F2:BE:19
X509v3 Authority Key Identifier:
keyid:37:F0:3E:31:24:DF:82:7A:EC:6F:61:74:58:71:67:98:08:30:55:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/37F03E3124DF827AEC6F617458716798083055BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37F03E3124DF827AEC6F617458716798083055BC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/37F03E3124DF827AEC6F617458716798083055BC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:07:1f:71:0f:cc:c4:58:f3:e3:75:a6:4e:6c:55:d6:4e:43:
f8:71:a9:01:03:46:10:69:44:3b:66:2c:86:a4:5b:7c:fb:79:
76:48:93:3e:ed:3c:c8:34:4b:d3:67:78:3c:33:a2:a6:d0:a3:
88:0a:48:27:45:a0:48:5d:fc:0a:cf:70:24:1a:91:f7:3c:61:
39:e6:a6:22:75:df:9f:fa:2e:14:71:e2:c9:ca:39:ca:67:68:
a6:20:43:a2:8c:a0:e5:54:6b:60:8b:50:90:ff:a3:46:4f:ea:
ea:bc:a9:29:2c:31:73:99:41:87:35:4f:38:12:64:5a:2e:bb:
82:21:c0:fa:98:34:24:0c:29:e5:16:79:66:04:58:ff:2f:c3:
c2:53:bc:e6:ae:d4:2b:2f:a5:b0:cb:9f:d3:e0:a6:b9:77:4d:
6b:ad:51:02:29:d1:c6:6b:67:65:c4:80:db:f6:7b:87:e2:c0:
80:1d:ec:09:41:00:71:74:4b:df:15:c0:a6:32:81:2e:17:dc:
85:a9:f0:01:e8:e5:49:c5:31:ea:f5:07:04:13:97:c6:0c:cf:
8f:8a:b8:00:d0:de:2a:f0:1e:d8:26:ae:72:d5:70:45:a8:b4:
b1:c7:f0:f4:5a:0e:80:ec:58:63:91:16:89:5d:36:04:70:92:
40:20:8d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 14:20:05 2026 by rpki-client