$ rpki-client -vvf rpki-rsync.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/C36F2B2665674A939F067F495588261F7D4D6F8D.mft File: C36F2B2665674A939F067F495588261F7D4D6F8D.mft (raw, json) Hash identifier: KGJNMxA/1mBJjyyWBnW6fy14rw8O/aHr6Apq4tSw/2U= Subject key identifier: CC:E5:F8:DC:B9:0C:B2:F9:31:48:5F:BB:11:1D:A2:D3:39:67:F8:2B Authority key identifier: C3:6F:2B:26:65:67:4A:93:9F:06:7F:49:55:88:26:1F:7D:4D:6F:8D Certificate issuer: /CN=C36F2B2665674A939F067F495588261F7D4D6F8D Certificate serial: 4375F4074EC90542E21AB29AC65112B372A81823 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C36F2B2665674A939F067F495588261F7D4D6F8D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/C36F2B2665674A939F067F495588261F7D4D6F8D.mft Manifest number: 0E Signing time: Tue 12 May 2026 16:31:10 +0000 Manifest this update: Tue 12 May 2026 16:26:10 +0000 Manifest next update: Wed 13 May 2026 18:45:10 +0000 Files and hashes: 1: C36F2B2665674A939F067F495588261F7D4D6F8D.crl (hash: 5xl3ft+BKImhB3Dq2np4UqjvtqJcDda8SbsZZKxrlH8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/C36F2B2665674A939F067F495588261F7D4D6F8D.crl rsync://rpki-rsync.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/C36F2B2665674A939F067F495588261F7D4D6F8D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C36F2B2665674A939F067F495588261F7D4D6F8D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:75:f4:07:4e:c9:05:42:e2:1a:b2:9a:c6:51:12:b3:72:a8:18:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C36F2B2665674A939F067F495588261F7D4D6F8D Validity Not Before: May 12 16:26:10 2026 GMT Not After : May 13 18:45:10 2026 GMT Subject: CN=CCE5F8DCB90CB2F931485FBB111DA2D33967F82B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f1:a2:d8:16:ff:41:27:06:25:8c:30:d1:56: 71:ee:bf:7c:af:fa:c7:cf:64:4e:7c:21:a2:ea:a7: 21:ee:b1:2c:35:7f:df:a1:3e:1d:21:3c:f7:29:e6: 72:d5:40:35:6e:54:28:32:2a:b0:3c:a0:f8:cf:d0: f6:a6:5d:de:b5:85:a8:f6:2d:02:54:a1:f7:38:fd: 83:ba:75:ce:e6:90:52:8d:2e:ff:02:14:a5:0c:13: 24:41:5b:1a:88:7c:08:08:08:22:ca:cc:5f:89:7c: e1:43:13:fe:89:6e:10:74:cd:2c:dc:41:8c:1c:5b: b7:ae:8d:7d:64:6f:97:55:fd:63:9b:d9:6a:62:8c: 47:ee:3a:a4:a3:ac:d6:8c:71:99:0c:8c:d8:5d:f8: 1e:42:89:11:78:b2:bb:90:20:dd:67:20:9b:0e:1b: 06:14:94:9d:11:90:14:2b:c0:96:19:a0:04:aa:db: 9c:11:4a:74:66:90:af:23:29:c4:21:cd:2d:ec:9a: 99:2b:f8:26:18:d4:dc:26:3e:40:d2:40:d1:75:3e: d8:c2:18:4e:7d:36:2c:81:66:e4:b7:f8:5b:e7:20: ca:26:25:b3:3b:66:8d:c1:f5:83:e6:59:d5:13:e6: c1:a7:35:9c:a7:45:dd:20:b0:3c:da:af:b2:15:e4: 42:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:E5:F8:DC:B9:0C:B2:F9:31:48:5F:BB:11:1D:A2:D3:39:67:F8:2B X509v3 Authority Key Identifier: keyid:C3:6F:2B:26:65:67:4A:93:9F:06:7F:49:55:88:26:1F:7D:4D:6F:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/C36F2B2665674A939F067F495588261F7D4D6F8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C36F2B2665674A939F067F495588261F7D4D6F8D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/C36F2B2665674A939F067F495588261F7D4D6F8D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:9f:58:23:87:a4:16:c9:e0:ad:a9:f5:3d:fb:2b:7d:29:e7: 0d:89:18:6d:cc:6b:24:bc:9c:e2:d5:82:95:e1:c0:59:ba:53: 7b:93:73:d6:c8:05:43:e7:c1:f8:13:a3:76:bd:3f:a2:96:84: 9a:77:0e:c6:6f:87:4a:c5:5e:69:69:a7:72:11:10:67:0f:92: e7:e4:73:b0:9f:bd:c1:da:f7:c8:d6:b1:b8:3f:65:3c:73:e7: 93:b4:14:42:c9:88:4e:d7:dd:45:08:ac:ef:1c:f9:62:34:50: 9c:8f:87:97:5e:24:4e:2c:9e:0d:cd:04:c2:31:6b:09:0c:9f: d8:4b:87:d5:e0:fb:6d:b2:c9:bf:cb:30:99:3f:54:06:2b:0c: 34:7e:1d:5d:03:cc:e4:5a:72:89:b7:c8:18:b1:41:77:bf:b5: f8:d2:e7:a9:4b:9d:5d:1a:dd:65:a1:b1:55:da:0a:3d:9c:23: ea:3e:d9:6a:83:dc:ab:14:89:ce:42:51:93:34:83:7f:6e:8b: 7d:48:c6:25:be:90:c1:74:63:92:e1:88:e8:2c:ae:32:00:15: 24:15:97:3a:a7:2d:1d:fb:6f:7d:7d:e0:7f:18:c0:bb:80:6a: 2e:9d:87:b9:68:04:73:e3:1a:d9:24:80:fa:24:97:f3:b6:55: 55:87:5d:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ3X0B07JBULiGrKaxlESs3KoGCMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM2RjJCMjY2NTY3NEE5MzlGMDY3RjQ5NTU4ODI2MUY3 RDRENkY4RDAeFw0yNjA1MTIxNjI2MTBaFw0yNjA1MTMxODQ1MTBaMDMxMTAvBgNV BAMTKENDRTVGOERDQjkwQ0IyRjkzMTQ4NUZCQjExMURBMkQzMzk2N0Y4MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR8aLYFv9BJwYljDDRVnHuv3yv +sfPZE58IaLqpyHusSw1f9+hPh0hPPcp5nLVQDVuVCgyKrA8oPjP0PamXd61haj2 LQJUofc4/YO6dc7mkFKNLv8CFKUMEyRBWxqIfAgICCLKzF+JfOFDE/6JbhB0zSzc QYwcW7eujX1kb5dV/WOb2WpijEfuOqSjrNaMcZkMjNhd+B5CiRF4sruQIN1nIJsO GwYUlJ0RkBQrwJYZoASq25wRSnRmkK8jKcQhzS3smpkr+CYY1NwmPkDSQNF1PtjC GE59NiyBZuS3+FvnIMomJbM7Zo3B9YPmWdUT5sGnNZynRd0gsDzar7IV5ELNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzOX43LkMsvkxSF+7ER2i0zln+CswHwYDVR0j BBgwFoAUw28rJmVnSpOfBn9JVYgmH31Nb40wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjFjN2U4MzMtNmM1NC00ZTBiLTgzMWMtMWMxYTcxMGNlOGUzLzAvQzM2RjJCMjY2 NTY3NEE5MzlGMDY3RjQ5NTU4ODI2MUY3RDRENkY4RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMzZGMkIyNjY1Njc0QTkzOUYwNjdGNDk1NTg4MjYxRjdENEQ2 RjhELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjFjN2U4MzMtNmM1NC00ZTBiLTgz MWMtMWMxYTcxMGNlOGUzLzAvQzM2RjJCMjY2NTY3NEE5MzlGMDY3RjQ5NTU4ODI2 MUY3RDRENkY4RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFyfWCOHpBbJ4K2p9T37K30p5w2JGG3MayS8 nOLVgpXhwFm6U3uTc9bIBUPnwfgTo3a9P6KWhJp3DsZvh0rFXmlpp3IREGcPkufk c7CfvcHa98jWsbg/ZTxz55O0FELJiE7X3UUIrO8c+WI0UJyPh5deJE4sng3NBMIx awkMn9hLh9Xg+22yyb/LMJk/VAYrDDR+HV0DzORacom3yBixQXe/tfjS56lLnV0a 3WWhsVXaCj2cI+o+2WqD3KsUic5CUZM0g39ui31IxiW+kMF0Y5LhiOgsrjIAFSQV lzqnLR37b3194H8YwLuAai6dh7loBHPjGtkkgPokl/O2VVWHXdA= -----END CERTIFICATE-----Generated at Tue May 12 22:19:37 2026 by rpki-client