$ rpki-client -vvvf rpki-rsync.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/6E36D51ED37E76652D33954036B724B015FE6535.mft File: 6E36D51ED37E76652D33954036B724B015FE6535.mft (raw, json) Hash identifier: zGpEzL51RaVox8VbP1yc8I+AJX1jTHt2yxow/ePuIYw= Subject key identifier: 20:72:FC:75:7C:F9:D9:EB:AA:15:5E:A2:DE:55:44:44:80:BB:A3:B9 Authority key identifier: 6E:36:D5:1E:D3:7E:76:65:2D:33:95:40:36:B7:24:B0:15:FE:65:35 Certificate issuer: /CN=6E36D51ED37E76652D33954036B724B015FE6535 Certificate serial: 2C6A29A25037948BAB94B65A489C9BDFF3D5E7A8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6E36D51ED37E76652D33954036B724B015FE6535.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/6E36D51ED37E76652D33954036B724B015FE6535.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 10:38:46 +0000 Manifest this update: Thu 24 Sep 2026 10:33:46 +0000 Manifest next update: Fri 25 Sep 2026 11:07:46 +0000 Files and hashes: 1: 6E36D51ED37E76652D33954036B724B015FE6535.crl (hash: nflm2dFrJG9t/o/CPsmWaRPGPcj9Xlm4GneWZxjk858=) 2: 3130332e3133392e3138362e302f32342d3234203d3e20313338383634.roa (hash: FcbgzQdIQigiunMpm6/hzO5KdG9gtqkjcIfWQ/NRFWE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/6E36D51ED37E76652D33954036B724B015FE6535.crl rsync://rpki-rsync.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/6E36D51ED37E76652D33954036B724B015FE6535.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6E36D51ED37E76652D33954036B724B015FE6535.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:6a:29:a2:50:37:94:8b:ab:94:b6:5a:48:9c:9b:df:f3:d5:e7:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E36D51ED37E76652D33954036B724B015FE6535 Validity Not Before: Sep 24 10:33:46 2026 GMT Not After : Sep 25 11:07:46 2026 GMT Subject: CN=2072FC757CF9D9EBAA155EA2DE55444480BBA3B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:89:93:29:b2:11:f7:e4:ca:11:b2:6a:cc:17: 11:1f:75:8e:2c:b5:9e:c8:bb:61:55:b7:e9:ec:c1: e5:cc:4d:6c:0a:23:8e:08:c3:b9:51:bf:64:e7:44: da:ce:a3:f0:e8:8f:ef:0b:1e:0a:93:54:03:73:7d: ca:29:52:a3:3f:a5:66:8e:e3:21:a2:a4:c7:b8:7a: a6:c6:2d:33:ad:bd:f1:69:ba:e2:72:be:f0:c3:6e: 0b:0b:ba:ce:10:60:aa:de:0a:de:e9:66:1c:62:f1: 5e:5b:a4:63:97:20:30:33:e9:5f:67:3e:21:30:bf: f9:9e:57:67:58:fd:92:92:01:01:df:49:39:0c:00: 21:0f:10:70:77:a8:f0:3a:84:47:a0:0d:41:4d:d0: 71:51:05:c9:c3:be:7b:a3:45:e0:63:23:b8:34:94: 21:74:f5:7d:85:5f:a7:bf:08:b1:5a:aa:59:69:19: dd:82:0b:86:b6:24:53:24:24:52:5e:9a:4e:85:53: 42:dc:d0:35:ed:5d:81:07:81:ec:a4:36:5b:aa:44: b6:54:be:b5:87:03:58:96:a5:9e:25:82:c3:ee:0e: d4:cb:15:0e:cb:d9:3a:d5:ce:18:0a:00:44:f0:d2: d8:ff:16:c2:74:fd:e1:40:95:67:a3:65:01:17:d2: 25:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:72:FC:75:7C:F9:D9:EB:AA:15:5E:A2:DE:55:44:44:80:BB:A3:B9 X509v3 Authority Key Identifier: keyid:6E:36:D5:1E:D3:7E:76:65:2D:33:95:40:36:B7:24:B0:15:FE:65:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/6E36D51ED37E76652D33954036B724B015FE6535.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6E36D51ED37E76652D33954036B724B015FE6535.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/6E36D51ED37E76652D33954036B724B015FE6535.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:e1:ef:2c:c5:0f:fa:c3:37:95:45:65:dd:5f:2d:0c:25:5c: 9b:df:94:23:11:d2:63:d6:b6:30:36:6a:0c:28:85:b0:42:71: 2f:ad:9c:8f:5f:44:00:74:87:ab:58:0b:71:c3:bd:92:14:9a: 85:f8:16:cf:02:3d:25:be:7e:64:f0:98:ad:72:62:d7:66:b5: 7c:5d:5b:89:ea:13:d3:ac:43:d4:d9:42:27:bb:fe:9e:6e:72: ee:65:c7:51:b9:d7:a4:1e:82:83:22:a2:9d:41:1d:35:9e:98: 55:58:05:2c:de:86:57:81:c1:4e:a9:cc:2c:39:be:c5:c9:00: f6:e4:39:d7:ed:76:e9:0a:14:56:28:e0:9d:ae:62:2a:a0:33: 6a:1f:9e:99:45:10:e7:84:d4:7f:41:a3:bb:b9:23:d7:33:ca: 4a:c2:0f:5f:21:10:7e:42:90:10:7b:c2:22:20:1b:2a:bb:dd: 16:36:d5:53:d9:ac:5a:1e:7f:d9:2f:be:e4:17:ad:4a:8b:0e: df:43:da:bd:00:eb:ac:93:38:de:6c:6f:24:59:cf:bd:e0:99: cf:1e:e3:d6:f8:90:11:50:81:b8:f7:4d:07:f6:b5:56:2b:21: 41:cd:48:22:c3:33:cd:d2:6a:be:54:06:17:83:5c:55:35:6d: a1:fe:5d:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULGopolA3lIurlLZaSJyb3/PV56gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkUzNkQ1MUVEMzdFNzY2NTJEMzM5NTQwMzZCNzI0QjAx NUZFNjUzNTAeFw0yNjA5MjQxMDMzNDZaFw0yNjA5MjUxMTA3NDZaMDMxMTAvBgNV BAMTKDIwNzJGQzc1N0NGOUQ5RUJBQTE1NUVBMkRFNTU0NDQ0ODBCQkEzQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxiZMpshH35MoRsmrMFxEfdY4s tZ7Iu2FVt+nsweXMTWwKI44Iw7lRv2TnRNrOo/Doj+8LHgqTVANzfcopUqM/pWaO 4yGipMe4eqbGLTOtvfFpuuJyvvDDbgsLus4QYKreCt7pZhxi8V5bpGOXIDAz6V9n PiEwv/meV2dY/ZKSAQHfSTkMACEPEHB3qPA6hEegDUFN0HFRBcnDvnujReBjI7g0 lCF09X2FX6e/CLFaqllpGd2CC4a2JFMkJFJemk6FU0Lc0DXtXYEHgeykNluqRLZU vrWHA1iWpZ4lgsPuDtTLFQ7L2TrVzhgKAETw0tj/FsJ0/eFAlWejZQEX0iWdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIHL8dXz52euqFV6i3lVERIC7o7kwHwYDVR0j BBgwFoAUbjbVHtN+dmUtM5VANrcksBX+ZTUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDQzNThiMDAtMzFjZC00MWEzLTk1MzYtZGJiMTkzZTdmNGQwLzAvNkUzNkQ1MUVE MzdFNzY2NTJEMzM5NTQwMzZCNzI0QjAxNUZFNjUzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82RTM2RDUxRUQzN0U3NjY1MkQzMzk1NDAzNkI3MjRCMDE1RkU2 NTM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDQzNThiMDAtMzFjZC00MWEzLTk1 MzYtZGJiMTkzZTdmNGQwLzAvNkUzNkQ1MUVEMzdFNzY2NTJEMzM5NTQwMzZCNzI0 QjAxNUZFNjUzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA3h7yzFD/rDN5VFZd1fLQwlXJvflCMR0mPW tjA2agwohbBCcS+tnI9fRAB0h6tYC3HDvZIUmoX4Fs8CPSW+fmTwmK1yYtdmtXxd W4nqE9OsQ9TZQie7/p5ucu5lx1G516QegoMiop1BHTWemFVYBSzehleBwU6pzCw5 vsXJAPbkOdftdukKFFYo4J2uYiqgM2ofnplFEOeE1H9Bo7u5I9czykrCD18hEH5C kBB7wiIgGyq73RY21VPZrFoef9kvvuQXrUqLDt9D2r0A66yTON5sbyRZz73gmc8e 49b4kBFQgbj3TQf2tVYrIUHNSCLDM83Sar5UBheDXFU1baH+XcI= -----END CERTIFICATE-----Generated at Fri Sep 25 00:33:04 2026 by rpki-client