$ rpki-client -vvf rpki-rsync.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/07036C5527255D59345E40A173983EEEA0C09FD0.mft File: 07036C5527255D59345E40A173983EEEA0C09FD0.mft (raw, json) Hash identifier: 55Fovb8f00FL8JpmoZa3GZ4O9d/Xpv01fQEjmDp7EK0= Subject key identifier: 02:90:7E:FC:62:65:A8:2D:BB:11:9A:9D:04:83:19:04:2C:C3:E5:4B Authority key identifier: 07:03:6C:55:27:25:5D:59:34:5E:40:A1:73:98:3E:EE:A0:C0:9F:D0 Certificate issuer: /CN=07036C5527255D59345E40A173983EEEA0C09FD0 Certificate serial: 6B3C441F266AAAAB6F14C936C83FC9F7E78F1D5B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07036C5527255D59345E40A173983EEEA0C09FD0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/07036C5527255D59345E40A173983EEEA0C09FD0.mft Manifest number: 0E Signing time: Tue 12 May 2026 05:25:49 +0000 Manifest this update: Tue 12 May 2026 05:20:49 +0000 Manifest next update: Wed 13 May 2026 06:35:49 +0000 Files and hashes: 1: 3130332e3137322e3137302e302f32332d3233203d3e20313432333936.roa (hash: xCKI0MCHXup6mIiN8YCHZcQ0nipWKRsEPA9gZhTI18I=) 2: 07036C5527255D59345E40A173983EEEA0C09FD0.crl (hash: aqyaGOB4mWup1j+RuysMt5IfVDLW/NrwjXRBLQtz3SQ=) 3: 3130332e3137322e3137302e302f32342d3234203d3e20313432333936.roa (hash: 4usmrutgY/beqY8KttmIEGM6ND+uj+WPCIUZTt7ix2A=) 4: 3130332e3137322e3137312e302f32342d3234203d3e20313432333936.roa (hash: XhiLVWroBIGTKL45UQb8xrlJuP9CTy+d6X2Fb8sJelo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/07036C5527255D59345E40A173983EEEA0C09FD0.crl rsync://rpki-rsync.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/07036C5527255D59345E40A173983EEEA0C09FD0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07036C5527255D59345E40A173983EEEA0C09FD0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 06:35:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:3c:44:1f:26:6a:aa:ab:6f:14:c9:36:c8:3f:c9:f7:e7:8f:1d:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07036C5527255D59345E40A173983EEEA0C09FD0 Validity Not Before: May 12 05:20:49 2026 GMT Not After : May 13 06:35:49 2026 GMT Subject: CN=02907EFC6265A82DBB119A9D048319042CC3E54B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:04:f2:a7:6e:98:1e:25:ff:82:cf:a1:c6:66: 11:82:e2:8b:64:4e:53:e6:8c:82:76:eb:e2:b3:0f: ee:22:68:3b:40:07:0a:b2:e1:4a:89:db:14:f8:55: 08:4b:cf:04:db:b8:60:41:0b:ca:55:95:be:e5:35: 29:b6:03:96:bc:c4:3c:0a:ab:57:28:c3:be:72:be: 45:8a:72:1f:9b:9e:07:17:1d:55:82:2f:ad:46:9c: f1:f5:46:01:a8:5b:f1:07:50:30:8a:0e:d0:4e:48: 98:b5:30:25:e1:cc:16:39:5a:62:a6:b7:57:97:46: 20:a6:50:0d:bf:d3:c1:da:cd:ea:15:9e:da:c7:4c: af:7b:f4:76:06:cf:16:5c:04:09:68:e7:af:8b:13: fc:8d:d4:0c:71:fb:26:b0:76:09:a5:a7:f2:ac:8b: 63:67:85:9b:0c:6d:3e:ef:d3:9d:b4:27:7d:a1:9e: 5d:21:f2:75:97:56:4f:d1:96:b1:9b:2f:f5:02:e5: b8:90:8a:3f:b0:e7:52:a1:e7:46:08:36:b4:d3:30: 50:1c:3a:2c:45:94:e1:67:4d:02:02:70:6a:78:86: 43:e0:a3:7b:ac:31:af:2f:3e:53:08:d3:1a:cb:63: 8c:2d:83:e5:93:77:93:50:0d:0c:1d:5e:db:8b:73: ac:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:90:7E:FC:62:65:A8:2D:BB:11:9A:9D:04:83:19:04:2C:C3:E5:4B X509v3 Authority Key Identifier: keyid:07:03:6C:55:27:25:5D:59:34:5E:40:A1:73:98:3E:EE:A0:C0:9F:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/07036C5527255D59345E40A173983EEEA0C09FD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07036C5527255D59345E40A173983EEEA0C09FD0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/07036C5527255D59345E40A173983EEEA0C09FD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:ba:df:62:0e:08:47:9d:49:e0:3f:25:13:be:0b:d5:c6:6f: cb:04:fc:57:8d:0f:7b:87:87:9d:39:97:28:c9:35:5d:3b:ac: fe:3c:f7:bb:b0:e9:6a:cf:e4:b5:16:0f:5e:38:60:d5:23:ba: 33:4a:e9:2a:4a:7c:4c:35:fd:85:59:db:c2:07:90:88:e7:37: 2c:8b:a8:6b:3d:c6:18:25:88:09:ff:db:8b:86:b4:25:3a:22: 0e:76:97:bb:8a:65:d0:04:26:59:2b:d3:3f:11:d1:b3:b2:c1: 71:43:e3:80:e5:05:02:0e:8b:77:08:6f:7f:65:07:72:9a:61: a3:e6:a2:a9:fd:49:b0:b1:7e:ed:cf:f1:84:ad:5d:3b:73:3d: b2:8f:c4:0e:37:fa:a8:5d:8e:3f:6c:1a:29:c9:21:51:63:fc: 28:d1:e5:57:02:9b:09:0f:36:56:20:5f:f6:2d:d5:74:8f:f5: 7d:f8:28:5a:c8:e5:f6:1d:cc:94:32:6c:aa:55:b7:3b:fc:15: 9e:98:a3:c5:ce:25:46:d7:b1:86:a2:a5:e8:11:c9:38:d1:74: ab:81:4a:32:97:d4:3e:7f:dd:b5:5b:4f:3b:cd:26:91:7c:43: ed:20:5b:4f:66:ff:5d:30:23:6e:8b:a7:23:e2:cf:04:9b:9e: 3a:74:b0:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUazxEHyZqqqtvFMk2yD/J9+ePHVswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDcwMzZDNTUyNzI1NUQ1OTM0NUU0MEExNzM5ODNFRUVB MEMwOUZEMDAeFw0yNjA1MTIwNTIwNDlaFw0yNjA1MTMwNjM1NDlaMDMxMTAvBgNV BAMTKDAyOTA3RUZDNjI2NUE4MkRCQjExOUE5RDA0ODMxOTA0MkNDM0U1NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiBPKnbpgeJf+Cz6HGZhGC4otk TlPmjIJ26+KzD+4iaDtABwqy4UqJ2xT4VQhLzwTbuGBBC8pVlb7lNSm2A5a8xDwK q1cow75yvkWKch+bngcXHVWCL61GnPH1RgGoW/EHUDCKDtBOSJi1MCXhzBY5WmKm t1eXRiCmUA2/08HazeoVntrHTK979HYGzxZcBAlo56+LE/yN1Axx+yawdgmlp/Ks i2NnhZsMbT7v0520J32hnl0h8nWXVk/RlrGbL/UC5biQij+w51Kh50YINrTTMFAc OixFlOFnTQICcGp4hkPgo3usMa8vPlMI0xrLY4wtg+WTd5NQDQwdXtuLc6xvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUApB+/GJlqC27EZqdBIMZBCzD5UswHwYDVR0j BBgwFoAUBwNsVSclXVk0XkChc5g+7qDAn9AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjFkYjZjOWItZDhmYy00ZDhjLTgwY2ItZmQyMjQxMjA4ZGRlLzAvMDcwMzZDNTUy NzI1NUQ1OTM0NUU0MEExNzM5ODNFRUVBMEMwOUZEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNzAzNkM1NTI3MjU1RDU5MzQ1RTQwQTE3Mzk4M0VFRUEwQzA5 RkQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjFkYjZjOWItZDhmYy00ZDhjLTgw Y2ItZmQyMjQxMjA4ZGRlLzAvMDcwMzZDNTUyNzI1NUQ1OTM0NUU0MEExNzM5ODNF RUVBMEMwOUZEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEa632IOCEedSeA/JRO+C9XGb8sE/FeND3uH h505lyjJNV07rP4897uw6WrP5LUWD144YNUjujNK6SpKfEw1/YVZ28IHkIjnNyyL qGs9xhgliAn/24uGtCU6Ig52l7uKZdAEJlkr0z8R0bOywXFD44DlBQIOi3cIb39l B3KaYaPmoqn9SbCxfu3P8YStXTtzPbKPxA43+qhdjj9sGinJIVFj/CjR5VcCmwkP NlYgX/Yt1XSP9X34KFrI5fYdzJQybKpVtzv8FZ6Yo8XOJUbXsYaipegRyTjRdKuB SjKX1D5/3bVbTzvNJpF8Q+0gW09m/10wI26LpyPizwSbnjp0sKY= -----END CERTIFICATE-----Generated at Tue May 12 22:19:43 2026 by rpki-client