$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/C36F2B2665674A939F067F495588261F7D4D6F8D.mft File: C36F2B2665674A939F067F495588261F7D4D6F8D.mft (raw, json) Hash identifier: MocgoGmAibXsBub7C7RzhRoh3mFCb2o4X+vU0eeHcxo= Subject key identifier: FD:CD:48:42:E9:A3:6D:88:72:97:2C:EC:1A:C1:FC:A8:B8:E5:46:F1 Authority key identifier: C3:6F:2B:26:65:67:4A:93:9F:06:7F:49:55:88:26:1F:7D:4D:6F:8D Certificate issuer: /CN=C36F2B2665674A939F067F495588261F7D4D6F8D Certificate serial: 592EFD991B4D89E56C94B936C5E387F4533C2687 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C36F2B2665674A939F067F495588261F7D4D6F8D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/C36F2B2665674A939F067F495588261F7D4D6F8D.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 08:31:50 +0000 Manifest this update: Wed 23 Sep 2026 08:26:50 +0000 Manifest next update: Thu 24 Sep 2026 09:09:50 +0000 Files and hashes: 1: C36F2B2665674A939F067F495588261F7D4D6F8D.crl (hash: ZvaSVULDdXecwt82ENUyt0BNYiKqX21IYLyAALLGhgk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/C36F2B2665674A939F067F495588261F7D4D6F8D.crl rsync://rpki-rsync.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/C36F2B2665674A939F067F495588261F7D4D6F8D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C36F2B2665674A939F067F495588261F7D4D6F8D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 09:09:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:2e:fd:99:1b:4d:89:e5:6c:94:b9:36:c5:e3:87:f4:53:3c:26:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C36F2B2665674A939F067F495588261F7D4D6F8D Validity Not Before: Sep 23 08:26:50 2026 GMT Not After : Sep 24 09:09:50 2026 GMT Subject: CN=FDCD4842E9A36D8872972CEC1AC1FCA8B8E546F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:17:9f:52:c2:3c:11:ec:77:63:32:57:9a:ff: 65:b7:b0:3e:f7:dc:3d:b4:7a:aa:e1:14:5b:cb:95: 89:51:ea:ed:59:8e:93:d5:d2:52:96:09:83:bb:30: 98:a7:b3:f0:33:e7:25:b3:1a:40:a6:d9:f3:45:cc: c4:03:18:05:d5:23:16:d5:9c:8d:84:f1:45:40:56: 2b:b4:da:f3:8a:4f:3d:be:94:5c:ff:da:fc:52:66: 63:7d:30:b9:0a:9d:de:6c:97:9e:7e:58:5d:42:e9: a8:59:be:56:90:9c:d5:67:ce:bd:06:17:ec:8d:cf: 8d:cd:e3:e5:90:1d:6e:84:e8:25:12:ee:13:b0:4c: 5a:70:d1:16:a4:5d:0b:6d:5a:71:98:2a:6c:fd:c3: a2:6c:3a:0d:17:6b:2c:81:96:9f:3e:03:92:5a:ae: 51:04:56:6d:cf:3e:aa:48:93:02:87:9c:6f:f7:fe: 87:8e:6a:e3:07:80:2e:28:f0:3c:64:78:66:33:ae: 19:84:c5:db:12:5e:7d:19:bc:ea:4e:89:2d:50:d4: 18:6d:05:5d:03:c3:ed:5d:63:b6:a6:05:2b:f6:c2: c6:c3:49:0e:18:87:db:5d:75:fd:1e:8e:43:46:a3: 8c:2e:94:16:eb:6e:2b:4e:e8:40:cf:0a:5e:ed:ee: f0:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:CD:48:42:E9:A3:6D:88:72:97:2C:EC:1A:C1:FC:A8:B8:E5:46:F1 X509v3 Authority Key Identifier: keyid:C3:6F:2B:26:65:67:4A:93:9F:06:7F:49:55:88:26:1F:7D:4D:6F:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/C36F2B2665674A939F067F495588261F7D4D6F8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C36F2B2665674A939F067F495588261F7D4D6F8D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/C36F2B2665674A939F067F495588261F7D4D6F8D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:0f:0a:00:bd:5a:05:6e:f1:6a:e0:6b:fd:f0:bf:14:32:8c: b4:52:fc:43:b4:e7:db:17:d2:01:6b:ee:a5:66:a6:89:74:1f: ae:5e:df:94:14:6b:a0:43:b7:f7:09:c2:43:78:80:2d:1c:25: e4:4c:94:b0:07:31:01:96:26:03:06:12:13:04:d2:2e:e1:ad: ad:28:93:8c:c9:ee:0c:75:26:02:e2:e1:1c:43:73:60:03:60: 04:b3:0a:b4:0a:47:7c:43:0f:fd:5c:93:95:4a:9d:a4:93:6c: d2:f1:1c:06:89:da:2a:59:a8:05:3a:c8:74:dd:29:ab:97:79: ee:b3:a5:8c:a4:6a:57:98:79:fb:76:d5:7a:9d:74:86:2a:8d: 54:8c:a9:0c:d2:94:50:c1:4f:93:23:14:f4:0b:a3:7b:f1:66: ac:77:27:c9:da:3e:1e:cf:5b:3f:19:ee:4c:2e:15:77:f1:7c: 71:01:7e:97:f6:d8:27:1d:6f:7e:11:db:35:c6:96:c9:b0:bb: 3c:90:78:68:df:62:5e:39:f9:b4:d7:58:30:3b:a1:66:c4:82: b0:6b:25:26:bf:a3:6b:d0:63:21:13:40:5e:55:29:6e:c3:e8: 6c:9f:56:dd:43:69:9a:d7:3d:ff:ac:c4:c3:08:37:46:70:43: 84:c9:6a:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWS79mRtNieVslLk2xeOH9FM8JocwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM2RjJCMjY2NTY3NEE5MzlGMDY3RjQ5NTU4ODI2MUY3 RDRENkY4RDAeFw0yNjA5MjMwODI2NTBaFw0yNjA5MjQwOTA5NTBaMDMxMTAvBgNV BAMTKEZEQ0Q0ODQyRTlBMzZEODg3Mjk3MkNFQzFBQzFGQ0E4QjhFNTQ2RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRF59SwjwR7HdjMlea/2W3sD73 3D20eqrhFFvLlYlR6u1ZjpPV0lKWCYO7MJins/Az5yWzGkCm2fNFzMQDGAXVIxbV nI2E8UVAViu02vOKTz2+lFz/2vxSZmN9MLkKnd5sl55+WF1C6ahZvlaQnNVnzr0G F+yNz43N4+WQHW6E6CUS7hOwTFpw0RakXQttWnGYKmz9w6JsOg0XayyBlp8+A5Ja rlEEVm3PPqpIkwKHnG/3/oeOauMHgC4o8DxkeGYzrhmExdsSXn0ZvOpOiS1Q1Bht BV0Dw+1dY7amBSv2wsbDSQ4Yh9tddf0ejkNGo4wulBbrbitO6EDPCl7t7vBbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/c1IQumjbYhylyzsGsH8qLjlRvEwHwYDVR0j BBgwFoAUw28rJmVnSpOfBn9JVYgmH31Nb40wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjFjN2U4MzMtNmM1NC00ZTBiLTgzMWMtMWMxYTcxMGNlOGUzLzAvQzM2RjJCMjY2 NTY3NEE5MzlGMDY3RjQ5NTU4ODI2MUY3RDRENkY4RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMzZGMkIyNjY1Njc0QTkzOUYwNjdGNDk1NTg4MjYxRjdENEQ2 RjhELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjFjN2U4MzMtNmM1NC00ZTBiLTgz MWMtMWMxYTcxMGNlOGUzLzAvQzM2RjJCMjY2NTY3NEE5MzlGMDY3RjQ5NTU4ODI2 MUY3RDRENkY4RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEkPCgC9WgVu8Wrga/3wvxQyjLRS/EO059sX 0gFr7qVmpol0H65e35QUa6BDt/cJwkN4gC0cJeRMlLAHMQGWJgMGEhME0i7hra0o k4zJ7gx1JgLi4RxDc2ADYASzCrQKR3xDD/1ck5VKnaSTbNLxHAaJ2ipZqAU6yHTd KauXee6zpYykaleYeft21XqddIYqjVSMqQzSlFDBT5MjFPQLo3vxZqx3J8naPh7P Wz8Z7kwuFXfxfHEBfpf22Ccdb34R2zXGlsmwuzyQeGjfYl45+bTXWDA7oWbEgrBr JSa/o2vQYyETQF5VKW7D6GyfVt1DaZrXPf+sxMMIN0ZwQ4TJauU= -----END CERTIFICATE-----Generated at Thu Sep 24 00:55:09 2026 by rpki-client