$ rpki-client -vvf rpki-rsync.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/36987F1D265142449AF11F138E84E3AE2398BB71.mft File: 36987F1D265142449AF11F138E84E3AE2398BB71.mft (raw, json) Hash identifier: Nb3s5nGnE8Vwe6li12jjcK57QwBX4Qxt+imCsJN7uII= Subject key identifier: 12:F4:76:AC:CC:EB:F9:2A:F7:20:14:02:72:13:0B:BA:B2:26:C7:2C Authority key identifier: 36:98:7F:1D:26:51:42:44:9A:F1:1F:13:8E:84:E3:AE:23:98:BB:71 Certificate issuer: /CN=36987F1D265142449AF11F138E84E3AE2398BB71 Certificate serial: 1BF40D2D8FE0B583D8FFB28C92DC834D8B216CC2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/36987F1D265142449AF11F138E84E3AE2398BB71.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/36987F1D265142449AF11F138E84E3AE2398BB71.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 21:15:58 +0000 Manifest this update: Thu 23 Jul 2026 21:10:58 +0000 Manifest next update: Fri 24 Jul 2026 22:46:58 +0000 Files and hashes: 1: 3130332e3131322e3232332e302f32342d3234203d3e20313337333338.roa (hash: a3+GsbTZLmVRS7NxLcoTxVxS7Q4Y+JKlGjV758bCCgw=) 2: 323030313a6466343a626430303a3a2f34382d3438203d3e20313337333338.roa (hash: svBe8CrZWGOGef404cwoRo2+yXAKzM2eujaije66wpU=) 3: 323030313a6466343a626430303a3a2f34382d3438203d3e203338343936.roa (hash: Bnl6nUu+xtavXODjc9t+OxHVrv/heBfP+6/XJ45t3VI=) 4: 3130332e3131322e3232332e302f32342d3234203d3e203338343936.roa (hash: GYqQuuT/LudwwxgSc6XR1akIqTm1hPmdsuPIZrL2W/E=) 5: 36987F1D265142449AF11F138E84E3AE2398BB71.crl (hash: 4uV6B0rCGvTNplgWKvGgtlT0kiY0Ysj3D47KnplIQVU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/36987F1D265142449AF11F138E84E3AE2398BB71.crl rsync://rpki-rsync.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/36987F1D265142449AF11F138E84E3AE2398BB71.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/36987F1D265142449AF11F138E84E3AE2398BB71.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:46:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:f4:0d:2d:8f:e0:b5:83:d8:ff:b2:8c:92:dc:83:4d:8b:21:6c:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36987F1D265142449AF11F138E84E3AE2398BB71 Validity Not Before: Jul 23 21:10:58 2026 GMT Not After : Jul 24 22:46:58 2026 GMT Subject: CN=12F476ACCCEBF92AF720140272130BBAB226C72C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:b7:2e:a2:4a:87:22:5a:13:d2:78:42:cb:5c: da:88:81:15:4c:e3:2c:8e:2c:2b:3e:12:e1:2e:d3: 00:be:74:3e:11:7a:dc:d6:66:bf:56:4e:70:17:3d: 59:97:d2:fd:3b:6b:4e:78:93:f6:ed:b0:57:72:ae: ff:5f:93:ae:ca:8f:35:48:56:7d:86:06:c5:bc:8c: 1b:77:d1:50:1d:25:29:0e:62:cd:55:e4:8f:44:8b: 6c:84:ac:93:dc:d3:20:0a:dc:9c:63:50:5c:37:96: ab:c9:9e:9f:5d:e8:19:96:73:08:b6:ea:a8:f7:7d: f2:99:54:18:e9:de:bb:ee:7f:b3:e1:de:f7:13:72: 9c:0d:0f:c8:97:a6:d7:fd:43:b0:39:81:3a:9d:10: 48:25:c4:e6:83:af:3e:c0:8f:99:9a:fe:56:54:2a: 7b:8b:b7:ff:66:a1:3c:fd:d1:73:86:8a:f9:2f:b5: 0d:1b:30:8e:5a:a6:7d:ba:9c:93:df:af:b7:cb:d0: de:31:d3:55:94:ef:13:e4:b8:be:5a:e7:87:09:07: bb:19:9c:89:d6:66:5b:78:9a:b3:93:73:52:44:8d: 67:3c:27:6b:73:f6:e8:53:e8:00:f0:99:55:d5:3d: 97:4e:35:ba:e6:cd:35:ec:15:3f:3d:f5:6d:ad:b3: 5f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:F4:76:AC:CC:EB:F9:2A:F7:20:14:02:72:13:0B:BA:B2:26:C7:2C X509v3 Authority Key Identifier: keyid:36:98:7F:1D:26:51:42:44:9A:F1:1F:13:8E:84:E3:AE:23:98:BB:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/36987F1D265142449AF11F138E84E3AE2398BB71.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/36987F1D265142449AF11F138E84E3AE2398BB71.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/36987F1D265142449AF11F138E84E3AE2398BB71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:6a:11:cb:67:e6:47:96:62:4f:16:94:30:30:7e:57:34:5d: 20:23:dc:a1:cb:30:a9:45:a0:60:a9:ca:d7:24:a6:96:c5:e3: 87:df:65:f3:1c:e8:d8:a3:88:39:69:93:73:00:b3:60:bb:a5: 85:9c:fd:79:60:a2:0c:90:94:32:9f:78:b8:3b:3e:71:00:5a: 77:9f:e5:cc:60:e4:be:fa:53:84:40:96:a8:05:9d:bc:f1:52: 9d:4a:9c:ce:45:db:de:4a:1a:7e:ac:2a:08:c5:dc:5a:bc:9c: 3a:08:b0:e9:44:5e:82:62:80:43:cf:56:b8:00:79:87:0a:9d: 94:d8:0c:21:61:60:eb:0b:09:76:d7:73:a2:f8:1d:87:71:70: 4b:08:1a:04:ff:a4:ad:0a:b4:df:14:1f:ab:f7:46:91:e9:c4: f0:c9:65:20:90:41:bf:a4:5d:30:e0:67:8e:4f:52:61:b5:1c: 93:6d:e9:dc:f2:7c:f5:3d:4d:fe:fc:e0:7a:52:ff:0b:e7:82: 5e:43:b2:dd:25:89:30:89:a2:ff:64:a2:59:2b:c0:f7:c3:5e: 2c:29:d3:78:74:b1:e4:f2:dd:85:56:39:0f:fd:cd:bf:69:5d: 5f:6d:e4:ee:e2:d3:66:c6:6a:29:fa:c8:33:12:ec:34:c0:2b: 69:8e:67:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG/QNLY/gtYPY/7KMktyDTYshbMIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY5ODdGMUQyNjUxNDI0NDlBRjExRjEzOEU4NEUzQUUy Mzk4QkI3MTAeFw0yNjA3MjMyMTEwNThaFw0yNjA3MjQyMjQ2NThaMDMxMTAvBgNV BAMTKDEyRjQ3NkFDQ0NFQkY5MkFGNzIwMTQwMjcyMTMwQkJBQjIyNkM3MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0ty6iSociWhPSeELLXNqIgRVM 4yyOLCs+EuEu0wC+dD4RetzWZr9WTnAXPVmX0v07a054k/btsFdyrv9fk67KjzVI Vn2GBsW8jBt30VAdJSkOYs1V5I9Ei2yErJPc0yAK3JxjUFw3lqvJnp9d6BmWcwi2 6qj3ffKZVBjp3rvuf7Ph3vcTcpwND8iXptf9Q7A5gTqdEEglxOaDrz7Aj5ma/lZU KnuLt/9moTz90XOGivkvtQ0bMI5apn26nJPfr7fL0N4x01WU7xPkuL5a54cJB7sZ nInWZlt4mrOTc1JEjWc8J2tz9uhT6ADwmVXVPZdONbrmzTXsFT899W2ts19lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEvR2rMzr+Sr3IBQCchMLurImxywwHwYDVR0j BBgwFoAUNph/HSZRQkSa8R8TjoTjriOYu3EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDJkNmQwZGYtYzIxZS00OTFjLWIxMTYtNGExZDlhMmM3NGJlLzAvMzY5ODdGMUQy NjUxNDI0NDlBRjExRjEzOEU4NEUzQUUyMzk4QkI3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNjk4N0YxRDI2NTE0MjQ0OUFGMTFGMTM4RTg0RTNBRTIzOThC QjcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDJkNmQwZGYtYzIxZS00OTFjLWIx MTYtNGExZDlhMmM3NGJlLzAvMzY5ODdGMUQyNjUxNDI0NDlBRjExRjEzOEU4NEUz QUUyMzk4QkI3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD1qEctn5keWYk8WlDAwflc0XSAj3KHLMKlF oGCpytckppbF44ffZfMc6NijiDlpk3MAs2C7pYWc/XlgogyQlDKfeLg7PnEAWnef 5cxg5L76U4RAlqgFnbzxUp1KnM5F295KGn6sKgjF3Fq8nDoIsOlEXoJigEPPVrgA eYcKnZTYDCFhYOsLCXbXc6L4HYdxcEsIGgT/pK0KtN8UH6v3RpHpxPDJZSCQQb+k XTDgZ45PUmG1HJNt6dzyfPU9Tf784HpS/wvngl5Dst0liTCJov9kolkrwPfDXiwp 03h0seTy3YVWOQ/9zb9pXV9t5O7i02bGain6yDMS7DTAK2mOZ0E= -----END CERTIFICATE-----Generated at Fri Jul 24 04:20:16 2026 by rpki-client