$ rpki-client -vvf rpki-rsync.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/C36F2B2665674A939F067F495588261F7D4D6F8D.mft File: C36F2B2665674A939F067F495588261F7D4D6F8D.mft (raw, json) Hash identifier: sERtu3KSAjlxY98SeNXhJ/B366R/ArbACbbcp6jytOw= Subject key identifier: E4:8A:08:D3:F3:82:75:FC:64:AA:38:C8:B7:8E:1B:ED:2E:B9:35:00 Authority key identifier: C3:6F:2B:26:65:67:4A:93:9F:06:7F:49:55:88:26:1F:7D:4D:6F:8D Certificate issuer: /CN=C36F2B2665674A939F067F495588261F7D4D6F8D Certificate serial: 472B9740C3CE1FBC31802998A7460B7C30F5E13C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C36F2B2665674A939F067F495588261F7D4D6F8D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/C36F2B2665674A939F067F495588261F7D4D6F8D.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 12:35:30 +0000 Manifest this update: Thu 23 Jul 2026 12:30:30 +0000 Manifest next update: Fri 24 Jul 2026 15:54:30 +0000 Files and hashes: 1: C36F2B2665674A939F067F495588261F7D4D6F8D.crl (hash: cdwJEBvzKKHYNgQ1fHgD5f03xHVu9ee5/jA6XZShDtc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/C36F2B2665674A939F067F495588261F7D4D6F8D.crl rsync://rpki-rsync.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/C36F2B2665674A939F067F495588261F7D4D6F8D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C36F2B2665674A939F067F495588261F7D4D6F8D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 15:54:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:2b:97:40:c3:ce:1f:bc:31:80:29:98:a7:46:0b:7c:30:f5:e1:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C36F2B2665674A939F067F495588261F7D4D6F8D Validity Not Before: Jul 23 12:30:30 2026 GMT Not After : Jul 24 15:54:30 2026 GMT Subject: CN=E48A08D3F38275FC64AA38C8B78E1BED2EB93500 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:4c:96:b5:27:c2:be:ed:8c:c5:28:3a:b4:48: 58:93:2e:27:16:fe:70:d9:31:05:51:f1:62:34:dd: f7:6a:25:d4:37:c9:26:92:fa:8f:3e:14:ba:20:78: 9f:3d:16:2f:03:5e:2e:3c:31:74:26:14:a4:c8:66: 4e:49:8b:1d:4d:2a:da:0d:4a:72:9e:a1:20:26:cd: 13:59:8d:f3:86:5a:bd:1a:73:b2:8f:65:59:fe:4e: db:f1:d8:05:c9:5e:e8:84:64:5c:81:e2:6c:45:60: 11:14:3d:a3:b7:b3:b5:48:30:09:95:d8:f3:a5:41: 1e:07:04:9f:8f:6a:83:c1:cc:76:d6:e8:ed:01:1e: 66:2c:8e:ae:dd:aa:82:cc:91:0d:1b:56:38:75:9d: 63:76:20:16:86:1d:1b:c1:fe:89:f5:ef:47:45:f9: b0:06:83:4f:62:f9:cb:72:d1:97:a0:4a:b3:8c:14: eb:24:48:d7:43:22:d5:30:9e:95:b9:ff:3e:d9:16: 5b:f8:86:07:bc:dd:94:5e:7f:7b:73:d5:b8:dc:c5: 8f:d5:6b:e2:29:46:1c:90:37:f6:7d:cc:17:50:8a: 4b:3a:8a:ac:e1:30:27:37:74:be:5f:b5:8a:eb:99: 9f:60:a7:10:32:76:9e:61:b7:e0:cb:62:a2:4e:91: 2a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:8A:08:D3:F3:82:75:FC:64:AA:38:C8:B7:8E:1B:ED:2E:B9:35:00 X509v3 Authority Key Identifier: keyid:C3:6F:2B:26:65:67:4A:93:9F:06:7F:49:55:88:26:1F:7D:4D:6F:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/C36F2B2665674A939F067F495588261F7D4D6F8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C36F2B2665674A939F067F495588261F7D4D6F8D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/C36F2B2665674A939F067F495588261F7D4D6F8D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:33:bb:c0:53:4e:7e:1e:33:84:22:c2:a3:48:e6:be:9b:69: 72:0b:c2:24:0b:f1:2b:53:e1:28:fa:8c:25:de:46:67:01:5b: 0a:c8:a0:d8:7b:cb:6b:ea:71:a0:b5:f8:1b:b3:41:1b:94:2f: b9:6f:66:bc:08:17:a6:9e:de:42:2f:52:bd:6d:13:cc:a4:48: b3:99:28:eb:3c:87:48:27:cc:d0:c9:0a:ca:f7:db:f4:76:69: b5:82:b7:96:a9:14:0b:9c:b3:b5:11:a5:3f:a6:b8:75:c3:97: 21:4e:86:00:a6:45:01:52:42:9d:10:90:b3:52:ca:5a:7c:ea: 59:5b:7a:fa:79:48:0c:a0:9d:33:39:5d:49:92:fa:04:7d:be: 29:b1:14:30:97:c0:32:e4:a6:e4:27:23:6b:8b:40:d8:0a:82: 68:37:89:cb:68:e5:de:54:df:f3:91:11:dd:da:b5:58:61:94: d8:2b:96:a6:f6:e7:a0:09:ca:e3:71:ef:0c:38:dc:17:2e:98: ed:46:5c:37:27:77:79:38:62:9c:ea:2a:89:18:9d:b8:90:57: 04:d0:99:88:ef:de:c5:f1:ce:d8:18:e7:fb:d1:ea:dd:11:a1: df:da:bb:75:bc:6b:71:4d:77:d5:4f:c9:61:a7:ca:d1:04:63: c1:0b:c5:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURyuXQMPOH7wxgCmYp0YLfDD14TwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM2RjJCMjY2NTY3NEE5MzlGMDY3RjQ5NTU4ODI2MUY3 RDRENkY4RDAeFw0yNjA3MjMxMjMwMzBaFw0yNjA3MjQxNTU0MzBaMDMxMTAvBgNV BAMTKEU0OEEwOEQzRjM4Mjc1RkM2NEFBMzhDOEI3OEUxQkVEMkVCOTM1MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTTJa1J8K+7YzFKDq0SFiTLicW /nDZMQVR8WI03fdqJdQ3ySaS+o8+FLogeJ89Fi8DXi48MXQmFKTIZk5Jix1NKtoN SnKeoSAmzRNZjfOGWr0ac7KPZVn+Ttvx2AXJXuiEZFyB4mxFYBEUPaO3s7VIMAmV 2POlQR4HBJ+PaoPBzHbW6O0BHmYsjq7dqoLMkQ0bVjh1nWN2IBaGHRvB/on170dF +bAGg09i+cty0ZegSrOMFOskSNdDItUwnpW5/z7ZFlv4hge83ZRef3tz1bjcxY/V a+IpRhyQN/Z9zBdQiks6iqzhMCc3dL5ftYrrmZ9gpxAydp5ht+DLYqJOkSohAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5IoI0/OCdfxkqjjIt44b7S65NQAwHwYDVR0j BBgwFoAUw28rJmVnSpOfBn9JVYgmH31Nb40wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjFjN2U4MzMtNmM1NC00ZTBiLTgzMWMtMWMxYTcxMGNlOGUzLzAvQzM2RjJCMjY2 NTY3NEE5MzlGMDY3RjQ5NTU4ODI2MUY3RDRENkY4RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMzZGMkIyNjY1Njc0QTkzOUYwNjdGNDk1NTg4MjYxRjdENEQ2 RjhELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjFjN2U4MzMtNmM1NC00ZTBiLTgz MWMtMWMxYTcxMGNlOGUzLzAvQzM2RjJCMjY2NTY3NEE5MzlGMDY3RjQ5NTU4ODI2 MUY3RDRENkY4RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADszu8BTTn4eM4QiwqNI5r6baXILwiQL8StT 4Sj6jCXeRmcBWwrIoNh7y2vqcaC1+BuzQRuUL7lvZrwIF6ae3kIvUr1tE8ykSLOZ KOs8h0gnzNDJCsr32/R2abWCt5apFAucs7URpT+muHXDlyFOhgCmRQFSQp0QkLNS ylp86llbevp5SAygnTM5XUmS+gR9vimxFDCXwDLkpuQnI2uLQNgKgmg3icto5d5U 3/OREd3atVhhlNgrlqb256AJyuNx7ww43BcumO1GXDcnd3k4YpzqKokYnbiQVwTQ mYjv3sXxztgY5/vR6t0Rod/au3W8a3FNd9VPyWGnytEEY8ELxb4= -----END CERTIFICATE-----Generated at Fri Jul 24 04:14:38 2026 by rpki-client