$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/36987F1D265142449AF11F138E84E3AE2398BB71.mft File: 36987F1D265142449AF11F138E84E3AE2398BB71.mft (raw, json) Hash identifier: 1A/0OHiI+7ybtjx+ah1v+dnsRhvtERixuteRilw9Uio= Subject key identifier: 1A:E5:98:D8:0D:8B:BD:1A:66:76:C2:9D:D5:43:DA:D5:43:B6:3D:BD Authority key identifier: 36:98:7F:1D:26:51:42:44:9A:F1:1F:13:8E:84:E3:AE:23:98:BB:71 Certificate issuer: /CN=36987F1D265142449AF11F138E84E3AE2398BB71 Certificate serial: 04C8F5E78F8B866452FC396D5FE7393B4AC46011 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/36987F1D265142449AF11F138E84E3AE2398BB71.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/36987F1D265142449AF11F138E84E3AE2398BB71.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 11:24:41 +0000 Manifest this update: Thu 24 Sep 2026 11:19:41 +0000 Manifest next update: Fri 25 Sep 2026 11:42:41 +0000 Files and hashes: 1: 323030313a6466343a626430303a3a2f34382d3438203d3e20313337333338.roa (hash: svBe8CrZWGOGef404cwoRo2+yXAKzM2eujaije66wpU=) 2: 3130332e3131322e3232332e302f32342d3234203d3e20313337333338.roa (hash: a3+GsbTZLmVRS7NxLcoTxVxS7Q4Y+JKlGjV758bCCgw=) 3: 3130332e3131322e3232332e302f32342d3234203d3e203338343936.roa (hash: GYqQuuT/LudwwxgSc6XR1akIqTm1hPmdsuPIZrL2W/E=) 4: 323030313a6466343a626430303a3a2f34382d3438203d3e203338343936.roa (hash: Bnl6nUu+xtavXODjc9t+OxHVrv/heBfP+6/XJ45t3VI=) 5: 36987F1D265142449AF11F138E84E3AE2398BB71.crl (hash: gIlN0vmT5zBLbFx6K94ogfz6rG2affschOV2wA59sAE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/36987F1D265142449AF11F138E84E3AE2398BB71.crl rsync://rpki-rsync.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/36987F1D265142449AF11F138E84E3AE2398BB71.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/36987F1D265142449AF11F138E84E3AE2398BB71.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:c8:f5:e7:8f:8b:86:64:52:fc:39:6d:5f:e7:39:3b:4a:c4:60:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36987F1D265142449AF11F138E84E3AE2398BB71 Validity Not Before: Sep 24 11:19:41 2026 GMT Not After : Sep 25 11:42:41 2026 GMT Subject: CN=1AE598D80D8BBD1A6676C29DD543DAD543B63DBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0c:43:59:5b:23:fc:04:83:1b:5e:3c:94:e3: d9:60:43:c1:9a:9f:37:bf:7a:65:de:b0:0b:7f:43: 35:88:b6:22:55:3d:15:4b:6c:be:82:1b:d9:92:48: da:80:86:91:88:af:bf:cc:21:69:9c:0d:81:84:d3: bf:f9:c2:74:e2:d8:38:0c:9f:62:62:67:38:1b:f7: 2b:cb:df:0e:e4:5b:8d:81:9b:1e:ed:5e:ae:d9:15: 0c:8f:39:fd:37:a1:d0:92:16:36:55:2f:a4:47:0e: e3:87:fa:a4:ff:b1:39:c3:12:01:7f:6e:58:3b:d4: bf:df:90:fd:97:f1:12:c8:2c:24:5c:16:c1:4d:37: 82:b7:47:e6:04:ef:e9:4d:15:60:0d:8b:0b:a8:8f: 32:c3:fb:ed:ce:84:d2:34:4c:7b:97:10:9b:b9:3b: d4:8b:6b:a6:b1:e5:0e:1f:94:f9:04:c5:34:a0:5a: 5d:4a:f5:03:d1:0d:ea:8e:ac:78:2e:16:6d:78:36: 92:06:6f:1f:de:4e:e5:e6:bc:78:54:3f:e6:cb:0f: ee:1c:35:09:e9:ce:e5:ef:e8:4d:6b:2a:38:44:de: be:17:bc:9a:74:59:fb:68:ca:a8:be:e3:3e:ee:60: 14:eb:db:88:6f:a3:4f:9c:f1:99:0f:fa:73:5c:3a: 05:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:E5:98:D8:0D:8B:BD:1A:66:76:C2:9D:D5:43:DA:D5:43:B6:3D:BD X509v3 Authority Key Identifier: keyid:36:98:7F:1D:26:51:42:44:9A:F1:1F:13:8E:84:E3:AE:23:98:BB:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/36987F1D265142449AF11F138E84E3AE2398BB71.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/36987F1D265142449AF11F138E84E3AE2398BB71.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/36987F1D265142449AF11F138E84E3AE2398BB71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:79:02:29:fe:93:fe:72:38:9f:4b:05:82:6c:27:0e:55:0d: 16:fd:43:16:9c:38:41:7f:69:8c:27:5e:ce:04:62:6d:bf:f8: 82:97:e0:04:aa:28:30:b8:49:a3:54:0a:36:5e:31:7e:a8:24: 98:13:0b:b0:16:16:84:f0:df:0d:fc:e7:0c:1b:42:31:89:01: 36:a9:a6:63:6e:b0:ee:22:09:b3:31:7a:e9:67:d6:6d:ff:ab: 7c:42:42:eb:0f:7a:19:f0:74:00:af:7f:48:57:94:a7:1c:a1: 1c:7f:4b:f2:de:fc:07:06:71:88:dc:01:a8:20:73:89:25:f0: ad:34:21:67:92:5a:f6:20:45:7b:68:1c:11:93:80:4d:4f:51: c2:25:e5:27:5a:d9:ab:07:5f:cf:c4:b1:48:47:f4:5b:71:c6: 0e:23:c0:e9:9c:85:78:48:ce:a0:1d:d0:c5:83:c9:59:45:ee: 7b:43:e0:f9:a5:37:83:01:76:23:6c:16:b7:4f:8f:03:68:89: 51:82:29:6b:73:23:71:e1:77:54:e1:f6:87:42:05:98:5f:6e: f5:a2:c7:5b:77:d7:29:7f:9c:14:c3:06:c5:53:91:b8:73:16: bd:28:9e:3e:36:6c:7a:e3:28:2e:d8:26:71:f7:55:72:b8:7e: 99:23:b9:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBMj154+LhmRS/DltX+c5O0rEYBEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY5ODdGMUQyNjUxNDI0NDlBRjExRjEzOEU4NEUzQUUy Mzk4QkI3MTAeFw0yNjA5MjQxMTE5NDFaFw0yNjA5MjUxMTQyNDFaMDMxMTAvBgNV BAMTKDFBRTU5OEQ4MEQ4QkJEMUE2Njc2QzI5REQ1NDNEQUQ1NDNCNjNEQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqDENZWyP8BIMbXjyU49lgQ8Ga nze/emXesAt/QzWItiJVPRVLbL6CG9mSSNqAhpGIr7/MIWmcDYGE07/5wnTi2DgM n2JiZzgb9yvL3w7kW42Bmx7tXq7ZFQyPOf03odCSFjZVL6RHDuOH+qT/sTnDEgF/ blg71L/fkP2X8RLILCRcFsFNN4K3R+YE7+lNFWANiwuojzLD++3OhNI0THuXEJu5 O9SLa6ax5Q4flPkExTSgWl1K9QPRDeqOrHguFm14NpIGbx/eTuXmvHhUP+bLD+4c NQnpzuXv6E1rKjhE3r4XvJp0Wftoyqi+4z7uYBTr24hvo0+c8ZkP+nNcOgWfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGuWY2A2LvRpmdsKd1UPa1UO2Pb0wHwYDVR0j BBgwFoAUNph/HSZRQkSa8R8TjoTjriOYu3EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDJkNmQwZGYtYzIxZS00OTFjLWIxMTYtNGExZDlhMmM3NGJlLzAvMzY5ODdGMUQy NjUxNDI0NDlBRjExRjEzOEU4NEUzQUUyMzk4QkI3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNjk4N0YxRDI2NTE0MjQ0OUFGMTFGMTM4RTg0RTNBRTIzOThC QjcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDJkNmQwZGYtYzIxZS00OTFjLWIx MTYtNGExZDlhMmM3NGJlLzAvMzY5ODdGMUQyNjUxNDI0NDlBRjExRjEzOEU4NEUz QUUyMzk4QkI3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGB5Ain+k/5yOJ9LBYJsJw5VDRb9QxacOEF/ aYwnXs4EYm2/+IKX4ASqKDC4SaNUCjZeMX6oJJgTC7AWFoTw3w385wwbQjGJATap pmNusO4iCbMxeuln1m3/q3xCQusPehnwdACvf0hXlKccoRx/S/Le/AcGcYjcAagg c4kl8K00IWeSWvYgRXtoHBGTgE1PUcIl5Sda2asHX8/EsUhH9Ftxxg4jwOmchXhI zqAd0MWDyVlF7ntD4PmlN4MBdiNsFrdPjwNoiVGCKWtzI3Hhd1Th9odCBZhfbvWi x1t31yl/nBTDBsVTkbhzFr0onj42bHrjKC7YJnH3VXK4fpkjubU= -----END CERTIFICATE-----Generated at Fri Sep 25 03:32:11 2026 by rpki-client