$ rpki-client -vvf rpki-rsync.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/36987F1D265142449AF11F138E84E3AE2398BB71.mft File: 36987F1D265142449AF11F138E84E3AE2398BB71.mft (raw, json) Hash identifier: 5CI/ALxSJra3bu5jyL2nqg61bMsWbsr/9JI7PF2T+UI= Subject key identifier: CC:F0:35:FB:75:AB:2C:53:F8:D0:CC:EE:37:78:48:2D:9F:29:D3:8D Authority key identifier: 36:98:7F:1D:26:51:42:44:9A:F1:1F:13:8E:84:E3:AE:23:98:BB:71 Certificate issuer: /CN=36987F1D265142449AF11F138E84E3AE2398BB71 Certificate serial: 49E2E80569B99750EA2D7830C329BF3B0ADFF499 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/36987F1D265142449AF11F138E84E3AE2398BB71.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/36987F1D265142449AF11F138E84E3AE2398BB71.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:39:07 +0000 Manifest this update: Tue 12 May 2026 18:34:07 +0000 Manifest next update: Wed 13 May 2026 19:59:07 +0000 Files and hashes: 1: 323030313a6466343a626430303a3a2f34382d3438203d3e203338343936.roa (hash: Bnl6nUu+xtavXODjc9t+OxHVrv/heBfP+6/XJ45t3VI=) 2: 3130332e3131322e3232332e302f32342d3234203d3e20313337333338.roa (hash: a3+GsbTZLmVRS7NxLcoTxVxS7Q4Y+JKlGjV758bCCgw=) 3: 36987F1D265142449AF11F138E84E3AE2398BB71.crl (hash: 1afThkB8RK1go+4tdygXHmR9oRPWGk26uCrRnYQq5FA=) 4: 3130332e3131322e3232332e302f32342d3234203d3e203338343936.roa (hash: GYqQuuT/LudwwxgSc6XR1akIqTm1hPmdsuPIZrL2W/E=) 5: 323030313a6466343a626430303a3a2f34382d3438203d3e20313337333338.roa (hash: svBe8CrZWGOGef404cwoRo2+yXAKzM2eujaije66wpU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/36987F1D265142449AF11F138E84E3AE2398BB71.crl rsync://rpki-rsync.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/36987F1D265142449AF11F138E84E3AE2398BB71.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/36987F1D265142449AF11F138E84E3AE2398BB71.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:e2:e8:05:69:b9:97:50:ea:2d:78:30:c3:29:bf:3b:0a:df:f4:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36987F1D265142449AF11F138E84E3AE2398BB71 Validity Not Before: May 12 18:34:07 2026 GMT Not After : May 13 19:59:07 2026 GMT Subject: CN=CCF035FB75AB2C53F8D0CCEE3778482D9F29D38D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4e:65:a3:dc:0b:13:c8:dc:b5:71:c1:af:72: f8:9f:b4:fe:9a:16:2e:87:56:ee:5e:98:f6:b6:af: ba:46:99:a4:20:45:eb:2b:31:c6:6f:56:b6:63:5e: f9:8b:dc:c1:0c:5d:c3:2e:60:b5:48:1b:e0:ee:ea: 91:20:75:92:d8:91:cb:8f:dc:fe:6e:d8:a0:38:4e: 8e:01:c1:5b:92:f9:3d:56:d3:2e:33:cd:5d:ad:21: 9d:9d:4d:3f:e2:ea:4b:0d:4d:f1:be:fa:46:17:1e: dd:10:89:c7:b9:e6:2f:2e:cc:a2:f8:c5:95:ce:48: cb:d5:c6:3f:86:c6:e7:6e:57:fa:0d:4b:d6:da:57: 04:0d:fd:94:93:5c:c0:c8:9a:02:1a:2a:70:89:6b: 98:27:9b:42:81:89:73:9a:07:29:da:b7:f5:aa:db: b2:9b:0f:64:ce:e0:72:a3:dd:66:c4:9a:a8:a9:c9: 64:ff:8a:7b:ea:a2:08:21:91:83:85:d6:5f:5d:e7: 23:2a:af:98:75:ba:a9:68:61:8b:b7:77:72:25:2b: e0:ab:66:a2:9b:da:0b:56:93:88:1d:db:35:48:07: 95:a1:99:7b:ed:2e:cd:2a:ab:70:2a:65:ab:0f:41: f2:43:51:7c:de:5d:fd:4e:84:de:a4:10:0a:02:c1: 0f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:F0:35:FB:75:AB:2C:53:F8:D0:CC:EE:37:78:48:2D:9F:29:D3:8D X509v3 Authority Key Identifier: keyid:36:98:7F:1D:26:51:42:44:9A:F1:1F:13:8E:84:E3:AE:23:98:BB:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/36987F1D265142449AF11F138E84E3AE2398BB71.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/36987F1D265142449AF11F138E84E3AE2398BB71.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/36987F1D265142449AF11F138E84E3AE2398BB71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:c0:56:e0:60:b3:c1:c1:54:56:ef:aa:98:3a:36:97:8d:4b: 0d:e1:60:3c:fe:3e:a4:10:d0:44:ce:b3:c4:b3:c2:8e:d1:24: 94:89:79:d1:dd:01:2f:7d:9e:ca:22:36:11:11:0f:34:21:e5: 1e:16:08:44:a5:5c:f6:56:e1:c9:7a:ce:6e:bf:3c:50:e9:7e: 1b:d7:d3:c6:fd:2e:c3:fa:3c:4a:7e:d2:b9:fb:0a:a2:5f:76: fd:41:1b:49:0b:7f:52:2c:a3:d8:d0:43:e0:11:05:7b:92:49: 6b:89:73:e6:ef:b4:61:4a:fb:77:33:5f:5b:8f:83:a9:fb:1e: f6:8d:14:5b:00:77:27:8c:ea:9b:fa:ae:99:f9:39:bd:61:a7: cd:96:2c:b6:e1:5e:32:0d:85:86:0a:71:2f:2a:80:cc:d0:b2: 09:9b:c4:f8:f2:b9:b0:08:d6:b8:5f:d7:74:88:59:a4:84:23: 8f:aa:c5:d6:43:6c:81:53:b1:88:f4:42:b1:5c:b5:3f:c0:9f: 83:73:4a:19:30:fc:74:4c:18:75:37:17:f9:b3:48:cd:04:69: 5c:14:fc:ec:b4:7c:07:61:e5:cb:3e:33:ca:19:58:2e:1a:92: e5:f5:fc:d9:85:1a:a1:63:a3:01:22:97:e3:d4:ee:92:a9:85: cd:07:55:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSeLoBWm5l1DqLXgwwym/Owrf9JkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY5ODdGMUQyNjUxNDI0NDlBRjExRjEzOEU4NEUzQUUy Mzk4QkI3MTAeFw0yNjA1MTIxODM0MDdaFw0yNjA1MTMxOTU5MDdaMDMxMTAvBgNV BAMTKENDRjAzNUZCNzVBQjJDNTNGOEQwQ0NFRTM3Nzg0ODJEOUYyOUQzOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6TmWj3AsTyNy1ccGvcviftP6a Fi6HVu5emPa2r7pGmaQgResrMcZvVrZjXvmL3MEMXcMuYLVIG+Du6pEgdZLYkcuP 3P5u2KA4To4BwVuS+T1W0y4zzV2tIZ2dTT/i6ksNTfG++kYXHt0Qice55i8uzKL4 xZXOSMvVxj+GxuduV/oNS9baVwQN/ZSTXMDImgIaKnCJa5gnm0KBiXOaBynat/Wq 27KbD2TO4HKj3WbEmqipyWT/invqogghkYOF1l9d5yMqr5h1uqloYYu3d3IlK+Cr ZqKb2gtWk4gd2zVIB5WhmXvtLs0qq3AqZasPQfJDUXzeXf1OhN6kEAoCwQ99AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzPA1+3WrLFP40MzuN3hILZ8p040wHwYDVR0j BBgwFoAUNph/HSZRQkSa8R8TjoTjriOYu3EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDJkNmQwZGYtYzIxZS00OTFjLWIxMTYtNGExZDlhMmM3NGJlLzAvMzY5ODdGMUQy NjUxNDI0NDlBRjExRjEzOEU4NEUzQUUyMzk4QkI3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNjk4N0YxRDI2NTE0MjQ0OUFGMTFGMTM4RTg0RTNBRTIzOThC QjcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDJkNmQwZGYtYzIxZS00OTFjLWIx MTYtNGExZDlhMmM3NGJlLzAvMzY5ODdGMUQyNjUxNDI0NDlBRjExRjEzOEU4NEUz QUUyMzk4QkI3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA7AVuBgs8HBVFbvqpg6NpeNSw3hYDz+PqQQ 0ETOs8Szwo7RJJSJedHdAS99nsoiNhERDzQh5R4WCESlXPZW4cl6zm6/PFDpfhvX 08b9LsP6PEp+0rn7CqJfdv1BG0kLf1Iso9jQQ+ARBXuSSWuJc+bvtGFK+3czX1uP g6n7HvaNFFsAdyeM6pv6rpn5Ob1hp82WLLbhXjINhYYKcS8qgMzQsgmbxPjyubAI 1rhf13SIWaSEI4+qxdZDbIFTsYj0QrFctT/An4NzShkw/HRMGHU3F/mzSM0EaVwU /Oy0fAdh5cs+M8oZWC4akuX1/NmFGqFjowEil+PU7pKphc0HVVs= -----END CERTIFICATE-----Generated at Wed May 13 01:36:43 2026 by rpki-client