$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.mft File: 3D36B37BDE25595112D2BB921B7F36C6A161CBA1.mft (raw, json) Hash identifier: ppLT1kRJju2E3NxrNfID4S4GMRsfo7YqL38ycPBtOyo= Subject key identifier: EB:F0:2D:64:0D:E8:CF:7B:6B:23:9F:0D:18:C6:BE:2A:DE:89:92:A5 Authority key identifier: 3D:36:B3:7B:DE:25:59:51:12:D2:BB:92:1B:7F:36:C6:A1:61:CB:A1 Certificate issuer: /CN=3D36B37BDE25595112D2BB921B7F36C6A161CBA1 Certificate serial: 168C0F82ADC3B5D4207CAC81FF8DDB3A73A5DE5C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 00:41:35 +0000 Manifest this update: Thu 24 Sep 2026 00:36:35 +0000 Manifest next update: Fri 25 Sep 2026 01:15:35 +0000 Files and hashes: 1: 3130332e3130392e32352e302f32342d3234203d3e20313337333131.roa (hash: hSf4M6pKMLscH8R7TfP9AjqFEoXEdb3myJnr9z/AlaE=) 2: 3130332e3130392e32342e302f32342d3234203d3e20313337333131.roa (hash: yRTCL3qqZl+3vfyw12FbHiGh+XgdfssrTdi86LJj3XA=) 3: 3130332e3130392e32372e302f32342d3234203d3e20313337333131.roa (hash: G6e1r3DRuRea+xhgobcaC8YJTmew1ogfm81bEXCrCm0=) 4: 3130332e3130392e32362e302f32342d3234203d3e20313337333131.roa (hash: Doi0z4NEkGv6RXLNnraqWYaR8sRBho22P+RDGrr47z8=) 5: 3D36B37BDE25595112D2BB921B7F36C6A161CBA1.crl (hash: jeuwLqwK/ouEUc+o7CzQRCojn5luUBsTxlI1stB2qNU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.crl rsync://rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 01:15:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:8c:0f:82:ad:c3:b5:d4:20:7c:ac:81:ff:8d:db:3a:73:a5:de:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D36B37BDE25595112D2BB921B7F36C6A161CBA1 Validity Not Before: Sep 24 00:36:35 2026 GMT Not After : Sep 25 01:15:35 2026 GMT Subject: CN=EBF02D640DE8CF7B6B239F0D18C6BE2ADE8992A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4e:d1:85:91:bb:2a:09:45:9d:c0:20:55:6b: a4:36:01:fa:70:3c:97:e5:ca:b9:a7:db:4b:b6:76: 94:d3:41:18:41:1d:8d:14:df:02:19:7d:3d:f7:b1: a4:5b:78:fd:d5:3e:fe:1c:3e:c8:74:24:09:33:d9: 49:0a:2a:fe:59:41:b9:08:db:86:08:00:02:3b:13: a6:c2:ee:91:50:9d:41:c4:91:5d:13:03:7d:6b:6c: 25:74:68:ad:9a:fd:40:28:48:4a:6d:50:44:af:e2: 0d:15:c9:34:44:39:10:3c:92:64:96:81:5e:0a:e8: ab:35:40:23:2c:52:1e:2a:f0:a5:c3:c7:0d:d2:b2: 7c:28:aa:ec:ad:67:32:5e:1b:5f:90:e5:28:a8:83: 40:7a:a5:f9:fe:95:49:82:60:b4:35:05:9a:7f:7c: 7e:9e:80:3a:0e:c2:07:59:b3:bc:8f:c4:ea:f3:6b: 25:9e:38:c8:38:0e:2f:95:92:70:53:ca:46:f9:6f: 11:f5:52:bc:63:81:96:5d:e6:fb:97:18:1c:af:78: bd:fb:a6:a6:8a:5d:aa:dc:13:92:43:09:a4:ef:e3: 4b:35:cb:af:2f:a1:d8:1e:32:ca:2c:70:af:69:26: b4:65:b4:db:82:09:32:d8:fe:33:2b:81:63:46:4e: 49:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:F0:2D:64:0D:E8:CF:7B:6B:23:9F:0D:18:C6:BE:2A:DE:89:92:A5 X509v3 Authority Key Identifier: keyid:3D:36:B3:7B:DE:25:59:51:12:D2:BB:92:1B:7F:36:C6:A1:61:CB:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:a2:b7:ff:dc:b4:c3:3e:f1:60:9b:5e:d1:4a:18:bf:5d:45: 1e:44:7f:b6:dc:56:ff:67:46:e9:26:e5:8e:d5:a5:1b:49:4d: 53:b9:99:b8:1c:47:df:f9:43:0c:44:7f:99:08:1c:21:0f:d3: 47:e7:e1:7d:b8:f0:2e:78:79:fa:32:f8:2b:4a:b1:4f:5e:9f: 53:ce:68:2e:cc:b9:1d:71:47:69:1c:12:84:be:29:3c:9b:f0: 07:04:2b:77:55:79:c4:07:7d:1f:9d:4a:20:44:1d:aa:5c:a2: 8c:38:18:2e:6b:3c:41:6d:87:07:a7:7f:a9:42:8d:c2:a7:82: d4:af:f8:20:b4:11:a0:85:9b:bb:12:7c:a4:d0:15:f7:e3:44: fa:b5:c5:37:ca:0f:2f:fd:ed:72:85:48:b5:f0:71:49:2e:3b: 05:a0:56:b6:f3:08:03:ca:f0:b8:e9:d0:bc:a1:0c:e3:0b:22: 46:ab:7e:59:c2:78:05:f5:2b:b7:d7:cb:14:00:02:a8:91:4e: 58:4f:d6:ae:73:df:3f:03:78:a1:60:bc:b7:34:c0:01:b6:3e: bf:95:b8:b6:33:ac:a1:e3:b9:2b:8f:b2:2c:f9:d9:12:ff:21: 2d:f8:84:a5:2e:1c:64:e5:be:83:40:16:06:af:67:a5:74:ae: ea:90:9e:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFowPgq3DtdQgfKyB/43bOnOl3lwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0QzNkIzN0JERTI1NTk1MTEyRDJCQjkyMUI3RjM2QzZB MTYxQ0JBMTAeFw0yNjA5MjQwMDM2MzVaFw0yNjA5MjUwMTE1MzVaMDMxMTAvBgNV BAMTKEVCRjAyRDY0MERFOENGN0I2QjIzOUYwRDE4QzZCRTJBREU4OTkyQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQTtGFkbsqCUWdwCBVa6Q2Afpw PJflyrmn20u2dpTTQRhBHY0U3wIZfT33saRbeP3VPv4cPsh0JAkz2UkKKv5ZQbkI 24YIAAI7E6bC7pFQnUHEkV0TA31rbCV0aK2a/UAoSEptUESv4g0VyTREORA8kmSW gV4K6Ks1QCMsUh4q8KXDxw3SsnwoquytZzJeG1+Q5Siog0B6pfn+lUmCYLQ1BZp/ fH6egDoOwgdZs7yPxOrzayWeOMg4Di+VknBTykb5bxH1UrxjgZZd5vuXGByveL37 pqaKXarcE5JDCaTv40s1y68vodgeMsoscK9pJrRltNuCCTLY/jMrgWNGTkm3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6/AtZA3oz3trI58NGMa+Kt6JkqUwHwYDVR0j BBgwFoAUPTaze94lWVES0ruSG382xqFhy6EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDgzNWNiNGEtMmZiOS00MGQ3LWIxNTUtZGNjZTdjYjAwMjkzLzAvM0QzNkIzN0JE RTI1NTk1MTEyRDJCQjkyMUI3RjM2QzZBMTYxQ0JBMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRDM2QjM3QkRFMjU1OTUxMTJEMkJCOTIxQjdGMzZDNkExNjFD QkExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDgzNWNiNGEtMmZiOS00MGQ3LWIx NTUtZGNjZTdjYjAwMjkzLzAvM0QzNkIzN0JERTI1NTk1MTEyRDJCQjkyMUI3RjM2 QzZBMTYxQ0JBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHOit//ctMM+8WCbXtFKGL9dRR5Ef7bcVv9n Rukm5Y7VpRtJTVO5mbgcR9/5QwxEf5kIHCEP00fn4X248C54efoy+CtKsU9en1PO aC7MuR1xR2kcEoS+KTyb8AcEK3dVecQHfR+dSiBEHapcoow4GC5rPEFthwenf6lC jcKngtSv+CC0EaCFm7sSfKTQFffjRPq1xTfKDy/97XKFSLXwcUkuOwWgVrbzCAPK 8Ljp0LyhDOMLIkarflnCeAX1K7fXyxQAAqiRTlhP1q5z3z8DeKFgvLc0wAG2Pr+V uLYzrKHjuSuPsiz52RL/IS34hKUuHGTlvoNAFgavZ6V0ruqQngE= -----END CERTIFICATE-----Generated at Thu Sep 24 20:21:29 2026 by rpki-client