$ rpki-client -vvf rpki-rsync.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.mft File: F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.mft (raw, json) Hash identifier: KR6yUXt4SVzXEmSeRLPxt5VXp4hFlJ20hg4y643qVmI= Subject key identifier: 40:95:54:E7:1F:F3:31:6C:EA:0C:8D:D4:3B:E6:DC:04:A0:1A:C5:5F Authority key identifier: F0:36:C2:8E:B7:9F:3E:EA:FE:68:70:FD:FB:62:F2:85:8E:A8:D4:91 Certificate issuer: /CN=F036C28EB79F3EEAFE6870FDFB62F2858EA8D491 Certificate serial: 3BC1F9028399EDF0C77489861D800838C68C62BA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 17:21:18 +0000 Manifest this update: Thu 23 Jul 2026 17:16:18 +0000 Manifest next update: Fri 24 Jul 2026 20:13:18 +0000 Files and hashes: 1: F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.crl (hash: XIHysP1qwKsmWYw1AMNIn+ba+27wF293x5kkCqnovC4=) 2: 3130332e32302e38382e302f32342d3234203d3e20313530313837.roa (hash: stKJlVY4X9Us0gcPWRVnra1On9usS4UIj80SOb9p2sg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.crl rsync://rpki-rsync.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:13:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:c1:f9:02:83:99:ed:f0:c7:74:89:86:1d:80:08:38:c6:8c:62:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F036C28EB79F3EEAFE6870FDFB62F2858EA8D491 Validity Not Before: Jul 23 17:16:18 2026 GMT Not After : Jul 24 20:13:18 2026 GMT Subject: CN=409554E71FF3316CEA0C8DD43BE6DC04A01AC55F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c3:af:50:13:bf:df:67:cb:a7:63:7e:75:02: 04:02:53:42:cb:49:84:e8:66:85:3a:b6:b5:bf:d8: ee:8c:20:80:49:db:83:b5:3f:94:ae:25:50:86:59: 83:d7:2c:41:eb:2c:cf:88:c7:ce:07:4a:95:e8:76: b8:65:c7:21:04:3a:40:8f:82:cc:1d:c4:61:f8:fe: 27:29:43:df:5d:41:46:f4:c5:55:3c:f8:96:9a:a7: 8b:f8:d1:b8:ee:96:9b:4a:ce:52:b3:0a:9c:5b:33: 4e:16:69:18:1a:f9:70:f1:2c:81:56:89:05:38:cb: 27:23:57:98:68:5d:09:2d:f5:e9:40:b2:a7:8a:fa: 5b:c2:2c:7d:9c:eb:10:ba:05:a1:86:a5:74:ab:1d: b1:e3:47:b1:d6:2a:a9:b8:a1:d7:5a:ae:7e:a0:cc: a2:8f:d4:2e:73:ae:cd:46:0c:6b:34:fb:35:7f:3f: f4:22:5c:3f:4a:58:58:85:31:44:75:f0:f0:a2:9c: 3e:b0:8d:c0:7e:8d:c9:d6:56:6e:70:8d:ef:ff:c3: 22:05:ae:c5:9d:85:83:76:75:90:61:c5:c0:be:a5: 62:4d:29:e9:c8:9d:97:3b:18:b1:fb:50:96:88:85: 15:80:a5:a7:8e:b1:48:b0:e3:6d:87:1c:2d:a7:38: 70:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:95:54:E7:1F:F3:31:6C:EA:0C:8D:D4:3B:E6:DC:04:A0:1A:C5:5F X509v3 Authority Key Identifier: keyid:F0:36:C2:8E:B7:9F:3E:EA:FE:68:70:FD:FB:62:F2:85:8E:A8:D4:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:51:d4:b0:5b:ec:45:17:cb:84:0f:f8:ab:30:6b:68:c9:b4: e6:33:56:85:28:78:9e:d9:65:77:d3:bd:56:26:47:2c:9f:6c: a9:af:4f:5c:ed:a6:0c:45:d9:0f:c6:d5:58:4e:1f:de:60:5b: 6e:00:46:b3:f3:d7:09:11:75:1e:0c:63:90:be:1f:d2:5d:ef: fe:82:6d:ec:3c:ec:fc:65:7f:87:4f:d7:f6:b3:94:ee:40:99: c8:50:b6:39:4a:f0:c7:0e:03:98:ba:bc:0c:fc:47:03:57:75: 5c:10:ae:ab:ba:ad:d3:14:a0:49:98:b3:4d:86:7d:71:06:17: f7:0a:24:44:59:c2:5a:66:c5:c6:e4:28:18:49:7a:6a:99:e8: 1e:ad:e1:a2:97:0a:a0:e5:bc:e9:c5:26:fc:3e:78:fb:33:87: 4f:43:d7:f4:b3:2a:a6:cf:e2:72:49:48:9b:a6:30:1d:7a:f7: 1c:0d:49:50:d1:e6:48:63:1a:a3:b5:da:d7:ac:43:07:bc:fc: 6f:ad:80:7f:e5:f0:ab:62:75:c6:8b:e0:0d:f7:b3:dd:b3:7e: 63:ea:93:fc:ab:ce:f1:28:46:51:db:2f:5c:30:34:9f:b7:07: 07:43:90:51:61:38:c2:d0:bf:fc:d5:90:c6:c3:61:a0:e5:f0: 4e:19:36:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO8H5AoOZ7fDHdImGHYAIOMaMYrowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjAzNkMyOEVCNzlGM0VFQUZFNjg3MEZERkI2MkYyODU4 RUE4RDQ5MTAeFw0yNjA3MjMxNzE2MThaFw0yNjA3MjQyMDEzMThaMDMxMTAvBgNV BAMTKDQwOTU1NEU3MUZGMzMxNkNFQTBDOERENDNCRTZEQzA0QTAxQUM1NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKw69QE7/fZ8unY351AgQCU0LL SYToZoU6trW/2O6MIIBJ24O1P5SuJVCGWYPXLEHrLM+Ix84HSpXodrhlxyEEOkCP gswdxGH4/icpQ99dQUb0xVU8+Jaap4v40bjulptKzlKzCpxbM04WaRga+XDxLIFW iQU4yycjV5hoXQkt9elAsqeK+lvCLH2c6xC6BaGGpXSrHbHjR7HWKqm4oddarn6g zKKP1C5zrs1GDGs0+zV/P/QiXD9KWFiFMUR18PCinD6wjcB+jcnWVm5wje//wyIF rsWdhYN2dZBhxcC+pWJNKenInZc7GLH7UJaIhRWApaeOsUiw422HHC2nOHBdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQJVU5x/zMWzqDI3UO+bcBKAaxV8wHwYDVR0j BBgwFoAU8DbCjrefPur+aHD9+2LyhY6o1JEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWZjYzFlZjYtNzY5Zi00YWFmLTlkMTQtMmU1YjE1YTZmZjIzLzAvRjAzNkMyOEVC NzlGM0VFQUZFNjg3MEZERkI2MkYyODU4RUE4RDQ5MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMDM2QzI4RUI3OUYzRUVBRkU2ODcwRkRGQjYyRjI4NThFQThE NDkxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWZjYzFlZjYtNzY5Zi00YWFmLTlk MTQtMmU1YjE1YTZmZjIzLzAvRjAzNkMyOEVCNzlGM0VFQUZFNjg3MEZERkI2MkYy ODU4RUE4RDQ5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKhR1LBb7EUXy4QP+Kswa2jJtOYzVoUoeJ7Z ZXfTvVYmRyyfbKmvT1ztpgxF2Q/G1VhOH95gW24ARrPz1wkRdR4MY5C+H9Jd7/6C bew87Pxlf4dP1/azlO5AmchQtjlK8McOA5i6vAz8RwNXdVwQrqu6rdMUoEmYs02G fXEGF/cKJERZwlpmxcbkKBhJemqZ6B6t4aKXCqDlvOnFJvw+ePszh09D1/SzKqbP 4nJJSJumMB169xwNSVDR5khjGqO12tesQwe8/G+tgH/l8KtidcaL4A33s92zfmPq k/yrzvEoRlHbL1wwNJ+3BwdDkFFhOMLQv/zVkMbDYaDl8E4ZNgU= -----END CERTIFICATE-----Generated at Fri Jul 24 07:29:39 2026 by rpki-client