$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.mft File: 3D36B37BDE25595112D2BB921B7F36C6A161CBA1.mft (raw, json) Hash identifier: z0PJ8wRRIJ5k2E498MiBWrFGBGiliGfULcwT3bZG0A8= Subject key identifier: EB:52:13:E2:C9:10:47:12:69:04:79:A7:3D:EB:3D:75:13:6D:86:3A Authority key identifier: 3D:36:B3:7B:DE:25:59:51:12:D2:BB:92:1B:7F:36:C6:A1:61:CB:A1 Certificate issuer: /CN=3D36B37BDE25595112D2BB921B7F36C6A161CBA1 Certificate serial: 6EE067BB433875188A80481B74DB737301CC8D51 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 17:17:07 +0000 Manifest this update: Thu 24 Sep 2026 17:12:07 +0000 Manifest next update: Fri 25 Sep 2026 20:06:07 +0000 Files and hashes: 1: 3130332e3130392e32352e302f32342d3234203d3e20313337333131.roa (hash: hSf4M6pKMLscH8R7TfP9AjqFEoXEdb3myJnr9z/AlaE=) 2: 3130332e3130392e32342e302f32342d3234203d3e20313337333131.roa (hash: yRTCL3qqZl+3vfyw12FbHiGh+XgdfssrTdi86LJj3XA=) 3: 3130332e3130392e32372e302f32342d3234203d3e20313337333131.roa (hash: G6e1r3DRuRea+xhgobcaC8YJTmew1ogfm81bEXCrCm0=) 4: 3D36B37BDE25595112D2BB921B7F36C6A161CBA1.crl (hash: gU9Zubx522682bcdLkgc8Ia3Q7MN3qt9q+Dd2mDTA1s=) 5: 3130332e3130392e32362e302f32342d3234203d3e20313337333131.roa (hash: Doi0z4NEkGv6RXLNnraqWYaR8sRBho22P+RDGrr47z8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.crl rsync://rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:e0:67:bb:43:38:75:18:8a:80:48:1b:74:db:73:73:01:cc:8d:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D36B37BDE25595112D2BB921B7F36C6A161CBA1 Validity Not Before: Sep 24 17:12:07 2026 GMT Not After : Sep 25 20:06:07 2026 GMT Subject: CN=EB5213E2C9104712690479A73DEB3D75136D863A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:af:be:c5:02:f1:a5:3c:7e:e2:99:ed:f1:a6: 5a:87:da:04:37:ae:e6:7b:a5:e3:07:bb:26:7b:cd: a2:05:c4:2c:fb:a1:83:6e:3b:60:1b:5b:f5:f1:f8: d3:86:21:db:47:f7:e0:1a:21:04:0d:b0:7d:50:08: 4c:9f:1a:e7:f1:1b:ac:9a:29:50:bc:35:38:1f:e3: ed:17:39:50:4b:34:e1:a7:d0:82:73:a2:00:f1:cb: b1:65:80:72:5a:92:0a:e4:03:33:88:10:f2:ba:01: a0:a1:69:0a:63:3a:ca:53:cf:10:8b:3e:13:32:10: ba:8a:b2:9c:7c:54:de:b2:cc:11:d5:2c:e6:43:b7: 9d:ee:3f:3e:78:1c:b0:9b:7d:fb:06:d1:95:ca:5b: 65:59:59:87:ff:56:28:2a:0d:80:80:ef:35:5a:a0: d1:64:84:cc:8f:77:32:6f:53:61:cb:01:97:c9:3f: 17:47:51:c0:49:5c:10:f4:ae:f2:ff:24:86:a0:45: 55:02:be:fb:ee:6a:41:5d:2d:61:24:fc:fb:2c:ee: ca:fb:4d:b4:49:a9:84:0e:05:76:50:d3:72:b5:97: 6c:63:69:f3:f6:29:fa:d7:75:9b:53:9f:1c:be:1b: a7:50:1e:8b:3d:c2:f3:e0:50:6c:de:7c:b2:89:7e: ce:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:52:13:E2:C9:10:47:12:69:04:79:A7:3D:EB:3D:75:13:6D:86:3A X509v3 Authority Key Identifier: keyid:3D:36:B3:7B:DE:25:59:51:12:D2:BB:92:1B:7F:36:C6:A1:61:CB:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:25:32:10:15:19:50:e6:69:7e:3a:a0:bd:06:bb:7b:1e:74: 79:f3:03:3b:76:13:20:da:98:49:b3:09:09:3a:3c:f9:90:45: 7d:3e:02:89:e8:1f:99:10:01:e6:28:c1:21:bb:42:51:97:8f: 10:cc:a1:dc:f5:4a:d8:62:02:41:e2:67:c9:45:94:3b:14:cd: af:0b:39:74:cd:e2:24:1a:b5:21:73:8a:8e:b1:a2:88:f8:c9: d9:35:4d:90:08:81:16:2a:a1:fa:48:87:9a:d7:2c:21:b9:28: dd:3c:53:af:e0:3b:d9:73:96:82:fc:7c:5d:76:53:86:21:cc: eb:0b:44:5b:e0:c8:ae:68:54:78:2f:02:92:f2:67:d0:68:c9: 78:4c:5c:03:81:48:77:e3:fe:8e:3c:3a:67:da:0b:d4:96:55: 06:df:ac:15:34:74:71:c2:f8:48:ce:4c:75:07:9e:2f:19:9d: 4e:e6:a3:18:8c:16:58:10:05:34:57:1e:e2:5a:8a:3c:86:03: ae:04:7d:32:75:26:06:e6:0c:e4:90:af:24:15:89:54:6d:32: 63:02:5e:04:d3:53:55:5d:7f:42:4f:b4:1b:5b:83:ac:7a:60: 44:cb:af:b4:5d:c4:98:eb:f7:02:b6:5b:ac:84:0b:5f:17:aa: e2:b9:c3:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbuBnu0M4dRiKgEgbdNtzcwHMjVEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0QzNkIzN0JERTI1NTk1MTEyRDJCQjkyMUI3RjM2QzZB MTYxQ0JBMTAeFw0yNjA5MjQxNzEyMDdaFw0yNjA5MjUyMDA2MDdaMDMxMTAvBgNV BAMTKEVCNTIxM0UyQzkxMDQ3MTI2OTA0NzlBNzNERUIzRDc1MTM2RDg2M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+r77FAvGlPH7ime3xplqH2gQ3 ruZ7peMHuyZ7zaIFxCz7oYNuO2AbW/Xx+NOGIdtH9+AaIQQNsH1QCEyfGufxG6ya KVC8NTgf4+0XOVBLNOGn0IJzogDxy7FlgHJakgrkAzOIEPK6AaChaQpjOspTzxCL PhMyELqKspx8VN6yzBHVLOZDt53uPz54HLCbffsG0ZXKW2VZWYf/VigqDYCA7zVa oNFkhMyPdzJvU2HLAZfJPxdHUcBJXBD0rvL/JIagRVUCvvvuakFdLWEk/Pss7sr7 TbRJqYQOBXZQ03K1l2xjafP2KfrXdZtTnxy+G6dQHos9wvPgUGzefLKJfs5RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU61IT4skQRxJpBHmnPes9dRNthjowHwYDVR0j BBgwFoAUPTaze94lWVES0ruSG382xqFhy6EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDgzNWNiNGEtMmZiOS00MGQ3LWIxNTUtZGNjZTdjYjAwMjkzLzAvM0QzNkIzN0JE RTI1NTk1MTEyRDJCQjkyMUI3RjM2QzZBMTYxQ0JBMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRDM2QjM3QkRFMjU1OTUxMTJEMkJCOTIxQjdGMzZDNkExNjFD QkExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDgzNWNiNGEtMmZiOS00MGQ3LWIx NTUtZGNjZTdjYjAwMjkzLzAvM0QzNkIzN0JERTI1NTk1MTEyRDJCQjkyMUI3RjM2 QzZBMTYxQ0JBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGAlMhAVGVDmaX46oL0Gu3sedHnzAzt2EyDa mEmzCQk6PPmQRX0+AonoH5kQAeYowSG7QlGXjxDModz1SthiAkHiZ8lFlDsUza8L OXTN4iQatSFzio6xooj4ydk1TZAIgRYqofpIh5rXLCG5KN08U6/gO9lzloL8fF12 U4YhzOsLRFvgyK5oVHgvApLyZ9BoyXhMXAOBSHfj/o48OmfaC9SWVQbfrBU0dHHC +EjOTHUHni8ZnU7moxiMFlgQBTRXHuJaijyGA64EfTJ1JgbmDOSQryQViVRtMmMC XgTTU1Vdf0JPtBtbg6x6YETLr7RdxJjr9wK2W6yEC18XquK5w0s= -----END CERTIFICATE-----Generated at Fri Sep 25 03:35:39 2026 by rpki-client