$ rpki-client -vvvf rpki-rsync.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/07036C5527255D59345E40A173983EEEA0C09FD0.mft File: 07036C5527255D59345E40A173983EEEA0C09FD0.mft (raw, json) Hash identifier: VE0y2ZS9baurqTpft2v2nIOpKhRUpRNbzkCHTCvmtnc= Subject key identifier: 5E:46:76:7E:F3:1E:35:DE:D5:38:9E:89:EB:6B:3D:2A:E4:B1:BF:EC Authority key identifier: 07:03:6C:55:27:25:5D:59:34:5E:40:A1:73:98:3E:EE:A0:C0:9F:D0 Certificate issuer: /CN=07036C5527255D59345E40A173983EEEA0C09FD0 Certificate serial: 7EEC3BFEBDA640A794CF5BD2B9ADDFCE404EBC0E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07036C5527255D59345E40A173983EEEA0C09FD0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/07036C5527255D59345E40A173983EEEA0C09FD0.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 08:56:48 +0000 Manifest this update: Thu 24 Sep 2026 08:51:48 +0000 Manifest next update: Fri 25 Sep 2026 09:56:48 +0000 Files and hashes: 1: 3130332e3137322e3137302e302f32332d3233203d3e20313432333936.roa (hash: xCKI0MCHXup6mIiN8YCHZcQ0nipWKRsEPA9gZhTI18I=) 2: 3130332e3137322e3137312e302f32342d3234203d3e20313432333936.roa (hash: XhiLVWroBIGTKL45UQb8xrlJuP9CTy+d6X2Fb8sJelo=) 3: 3130332e3137322e3137302e302f32342d3234203d3e20313432333936.roa (hash: 4usmrutgY/beqY8KttmIEGM6ND+uj+WPCIUZTt7ix2A=) 4: 07036C5527255D59345E40A173983EEEA0C09FD0.crl (hash: zx4AxzBeN9NVFpQaBuFlRB8QWyU+/zQ4zXNqu8AfNvg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/07036C5527255D59345E40A173983EEEA0C09FD0.crl rsync://rpki-rsync.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/07036C5527255D59345E40A173983EEEA0C09FD0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07036C5527255D59345E40A173983EEEA0C09FD0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 09:56:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:ec:3b:fe:bd:a6:40:a7:94:cf:5b:d2:b9:ad:df:ce:40:4e:bc:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07036C5527255D59345E40A173983EEEA0C09FD0 Validity Not Before: Sep 24 08:51:48 2026 GMT Not After : Sep 25 09:56:48 2026 GMT Subject: CN=5E46767EF31E35DED5389E89EB6B3D2AE4B1BFEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:92:fe:1f:7c:0a:80:88:e5:45:e0:09:e9:01: 2d:f8:b9:27:c8:3f:d0:14:ed:b7:a3:db:1f:ac:50: af:74:cd:b7:3d:77:0d:03:26:24:b0:b9:6e:e9:cd: 7a:6b:8e:20:85:8b:fb:14:dc:9c:e5:b0:bb:35:dd: 08:41:18:e8:a6:7e:8b:71:bf:a1:fe:cc:6c:b5:a4: 81:f4:bb:06:16:af:45:2e:9a:d2:08:8a:29:fc:2a: e9:a2:36:39:17:92:36:7c:14:14:4d:5f:10:9c:6f: ad:73:c8:bb:31:7d:8a:31:c4:f0:42:8a:1c:0e:56: bb:eb:81:bd:4b:2b:e8:e3:cb:6b:8d:aa:27:85:fe: 8a:ae:07:2c:45:67:4b:81:a9:94:be:87:55:a2:84: 9c:e5:52:ac:01:5a:71:5e:be:83:7a:36:e7:b9:c9: 5d:cf:32:a4:dc:d8:1a:60:f6:fe:12:3f:46:0f:8b: 08:f6:f2:26:c7:9c:ac:39:6f:0d:9b:b1:8a:97:7e: c0:bd:d7:40:6d:d8:1c:21:a5:4f:91:ee:16:f0:4b: a3:83:76:ef:31:8e:1a:1d:8f:bd:18:56:56:56:39: b5:39:fc:8d:1b:d4:92:71:ae:8e:a1:78:56:aa:06: 4a:70:55:3d:7a:15:84:77:05:e3:c8:0b:f8:c6:99: 50:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:46:76:7E:F3:1E:35:DE:D5:38:9E:89:EB:6B:3D:2A:E4:B1:BF:EC X509v3 Authority Key Identifier: keyid:07:03:6C:55:27:25:5D:59:34:5E:40:A1:73:98:3E:EE:A0:C0:9F:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/07036C5527255D59345E40A173983EEEA0C09FD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07036C5527255D59345E40A173983EEEA0C09FD0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/07036C5527255D59345E40A173983EEEA0C09FD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:94:79:74:af:c7:aa:d1:e3:fd:e9:07:d5:5d:c0:ef:75:f5: c9:ea:16:32:e7:30:ca:85:4e:cb:b4:7e:ed:af:cf:cd:62:b2: eb:06:17:19:4c:40:06:04:ed:f4:9c:a5:63:fe:d7:05:2a:63: e7:de:86:70:6d:bd:9b:6e:a3:b9:e8:7e:0a:98:6d:cb:5a:23: fa:a2:08:63:d9:04:5c:9b:64:c0:fb:ea:cc:c3:91:4a:f7:66: e7:ec:b0:e4:04:fc:2d:42:16:98:e3:60:fb:c3:b3:3d:5e:16: 03:1c:49:69:a5:12:83:d6:aa:7a:a1:c2:08:28:3a:8b:3a:80: 9b:0e:12:97:e5:cf:0f:d0:f6:b2:16:0d:61:39:fa:d2:5e:36: 45:93:3a:79:22:29:7c:ef:93:50:bd:f8:ce:7c:28:97:9b:db: 3a:43:1c:c4:68:7f:33:44:d7:79:5a:82:a4:94:06:90:88:f4: ef:22:b5:01:0f:2e:c2:b7:fd:3a:bc:54:b3:dc:35:f9:8c:59: 8c:f5:73:77:76:77:6f:6c:bf:a8:85:8a:18:78:f6:13:3d:cb: 09:74:da:72:67:08:d7:81:02:fd:01:4a:f2:bd:88:61:2e:cb: 23:b2:68:77:0e:6e:ba:d6:1c:bf:08:93:cf:03:99:06:e4:d8: 8d:94:ce:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfuw7/r2mQKeUz1vSua3fzkBOvA4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDcwMzZDNTUyNzI1NUQ1OTM0NUU0MEExNzM5ODNFRUVB MEMwOUZEMDAeFw0yNjA5MjQwODUxNDhaFw0yNjA5MjUwOTU2NDhaMDMxMTAvBgNV BAMTKDVFNDY3NjdFRjMxRTM1REVENTM4OUU4OUVCNkIzRDJBRTRCMUJGRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCykv4ffAqAiOVF4AnpAS34uSfI P9AU7bej2x+sUK90zbc9dw0DJiSwuW7pzXprjiCFi/sU3JzlsLs13QhBGOimfotx v6H+zGy1pIH0uwYWr0UumtIIiin8KumiNjkXkjZ8FBRNXxCcb61zyLsxfYoxxPBC ihwOVrvrgb1LK+jjy2uNqieF/oquByxFZ0uBqZS+h1WihJzlUqwBWnFevoN6Nue5 yV3PMqTc2Bpg9v4SP0YPiwj28ibHnKw5bw2bsYqXfsC910Bt2BwhpU+R7hbwS6OD du8xjhodj70YVlZWObU5/I0b1JJxro6heFaqBkpwVT16FYR3BePIC/jGmVCdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXkZ2fvMeNd7VOJ6J62s9KuSxv+wwHwYDVR0j BBgwFoAUBwNsVSclXVk0XkChc5g+7qDAn9AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjFkYjZjOWItZDhmYy00ZDhjLTgwY2ItZmQyMjQxMjA4ZGRlLzAvMDcwMzZDNTUy NzI1NUQ1OTM0NUU0MEExNzM5ODNFRUVBMEMwOUZEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNzAzNkM1NTI3MjU1RDU5MzQ1RTQwQTE3Mzk4M0VFRUEwQzA5 RkQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjFkYjZjOWItZDhmYy00ZDhjLTgw Y2ItZmQyMjQxMjA4ZGRlLzAvMDcwMzZDNTUyNzI1NUQ1OTM0NUU0MEExNzM5ODNF RUVBMEMwOUZEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABuUeXSvx6rR4/3pB9VdwO919cnqFjLnMMqF Tsu0fu2vz81isusGFxlMQAYE7fScpWP+1wUqY+fehnBtvZtuo7nofgqYbctaI/qi CGPZBFybZMD76szDkUr3ZufssOQE/C1CFpjjYPvDsz1eFgMcSWmlEoPWqnqhwggo Oos6gJsOEpflzw/Q9rIWDWE5+tJeNkWTOnkiKXzvk1C9+M58KJeb2zpDHMRofzNE 13lagqSUBpCI9O8itQEPLsK3/Tq8VLPcNfmMWYz1c3d2d29sv6iFihh49hM9ywl0 2nJnCNeBAv0BSvK9iGEuyyOyaHcObrrWHL8Ik88DmQbk2I2UzhI= -----END CERTIFICATE-----Generated at Thu Sep 24 12:03:24 2026 by rpki-client