$ rpki-client -vvf repo-rpki.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.mft File: 36058F001B4EB8C36AC0C178096CB2C2CB5D6223.mft (raw, json) Hash identifier: v48sjLKpH3JkPmuvKDJjg2Y6knnkH0N3rNTUpMeSMUU= Subject key identifier: 3A:44:DE:D4:53:3D:79:14:A2:9C:16:A9:65:09:F1:8E:35:3D:29:79 Authority key identifier: 36:05:8F:00:1B:4E:B8:C3:6A:C0:C1:78:09:6C:B2:C2:CB:5D:62:23 Certificate issuer: /CN=36058F001B4EB8C36AC0C178096CB2C2CB5D6223 Certificate serial: 63FC34863A27C1FB03F94053662CEBFF1CF806B0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.mft Manifest number: 8B Signing time: Fri 17 Apr 2026 21:52:38 +0000 Manifest this update: Fri 17 Apr 2026 21:47:38 +0000 Manifest next update: Tue 21 Apr 2026 04:03:38 +0000 Files and hashes: 1: 3130332e3134352e3232322e302f32332d3233203d3e20313339343533.roa (hash: WfyKy7SGgw1ll4gSjGcypbLZ+xtgURJsabsZ3eqwV20=) 2: 36058F001B4EB8C36AC0C178096CB2C2CB5D6223.crl (hash: 37FhR2Qf6AdrvS2+6dYWSNN9gex/9MvSap3tO036KZk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.crl rsync://repo-rpki.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 04:03:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:fc:34:86:3a:27:c1:fb:03:f9:40:53:66:2c:eb:ff:1c:f8:06:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36058F001B4EB8C36AC0C178096CB2C2CB5D6223 Validity Not Before: Apr 17 21:47:38 2026 GMT Not After : Apr 21 04:03:38 2026 GMT Subject: CN=3A44DED4533D7914A29C16A96509F18E353D2979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6e:52:ff:2a:8f:a7:39:85:24:73:39:74:3f: f4:ae:e2:bf:ec:3d:bf:1a:c9:f3:c5:e8:a6:b7:70: bb:22:4c:0e:6c:52:4a:30:31:de:7f:bf:ca:4f:a4: 4b:1e:fd:72:a4:8d:cf:69:18:a1:ea:14:c7:be:78: 97:33:44:8c:05:39:5c:fc:e8:b2:b8:48:b6:55:2e: 46:62:2a:97:d4:be:91:bc:c2:28:1e:7c:c6:59:99: 62:99:44:da:c9:1b:08:0a:71:61:7d:c5:cf:ab:90: b8:ab:5c:aa:35:14:28:69:a6:88:44:cc:5e:9e:60: 72:c1:3a:0c:ff:e8:5a:9f:2f:c1:db:1d:60:94:7a: 16:04:c2:5a:fb:48:96:29:49:b7:9e:55:23:15:7d: 7d:e9:64:e6:87:cd:57:d5:e4:2e:a1:42:d3:8c:e4: 6d:58:ce:68:41:02:0e:bb:a5:7a:c1:cc:68:4f:63: ca:7b:97:b7:36:05:9f:89:9f:e8:c6:0b:50:cd:d2: ed:ef:3d:c2:23:42:cc:f3:93:62:b4:9e:20:ee:1b: 71:9d:d4:23:73:16:4b:1e:8c:db:10:a4:8c:70:c0: 13:e8:47:a7:d9:44:0a:34:a4:6d:fa:d7:bc:20:fc: c5:17:87:a7:24:f3:3c:7a:4a:c7:fb:eb:f0:ed:37: 61:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:44:DE:D4:53:3D:79:14:A2:9C:16:A9:65:09:F1:8E:35:3D:29:79 X509v3 Authority Key Identifier: keyid:36:05:8F:00:1B:4E:B8:C3:6A:C0:C1:78:09:6C:B2:C2:CB:5D:62:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:ff:2e:3c:ce:67:8d:f2:53:88:ec:b4:20:22:e8:22:0d:78: 34:be:df:85:7e:7d:fb:9e:47:95:53:bf:f9:f6:5c:48:80:3e: 63:90:a1:0c:f7:0e:67:43:cc:fd:e7:59:77:76:1b:9b:22:4e: e4:74:9b:4e:ad:0e:d5:44:ee:c6:32:1a:ee:69:07:5f:34:15: 73:b3:19:52:72:e0:e3:70:2d:cf:a6:d8:54:4d:6a:b5:15:39: 67:2a:e9:75:50:b0:77:41:6d:5e:c4:dc:e0:23:bd:cf:fd:7f: 19:ea:2f:6f:b0:47:4b:d0:77:76:57:39:0d:90:87:a7:54:a6: 8c:3e:34:04:74:51:ee:a5:e2:5f:13:00:4f:f7:79:3f:91:a6: e1:dd:da:a0:b6:b4:30:44:23:a3:d5:15:1c:6b:2a:65:9e:51: 09:1f:52:43:2e:15:39:c3:91:7b:8c:16:c5:a0:28:0e:bc:29: 13:86:8f:b5:d8:31:16:bd:a5:38:4b:ab:2b:f7:cf:e7:3d:8b: 55:27:f0:b0:97:b3:5a:06:6a:8a:ce:0b:04:1e:7a:85:f1:76: 71:1a:9b:3d:02:58:9e:3f:07:c5:b3:1f:c7:f5:74:90:d9:7d: 6d:99:10:18:22:d7:70:11:27:ce:dd:5b:11:0f:af:0b:c9:dc: 35:43:a9:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY/w0hjonwfsD+UBTZizr/xz4BrAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzYwNThGMDAxQjRFQjhDMzZBQzBDMTc4MDk2Q0IyQzJD QjVENjIyMzAeFw0yNjA0MTcyMTQ3MzhaFw0yNjA0MjEwNDAzMzhaMDMxMTAvBgNV BAMTKDNBNDRERUQ0NTMzRDc5MTRBMjlDMTZBOTY1MDlGMThFMzUzRDI5NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAblL/Ko+nOYUkczl0P/Su4r/s Pb8ayfPF6Ka3cLsiTA5sUkowMd5/v8pPpEse/XKkjc9pGKHqFMe+eJczRIwFOVz8 6LK4SLZVLkZiKpfUvpG8wigefMZZmWKZRNrJGwgKcWF9xc+rkLirXKo1FChppohE zF6eYHLBOgz/6FqfL8HbHWCUehYEwlr7SJYpSbeeVSMVfX3pZOaHzVfV5C6hQtOM 5G1YzmhBAg67pXrBzGhPY8p7l7c2BZ+Jn+jGC1DN0u3vPcIjQszzk2K0niDuG3Gd 1CNzFksejNsQpIxwwBPoR6fZRAo0pG3617wg/MUXh6ck8zx6Ssf76/DtN2HvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOkTe1FM9eRSinBapZQnxjjU9KXkwHwYDVR0j BBgwFoAUNgWPABtOuMNqwMF4CWyywstdYiMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZjVkZDBhYS1mYTdhLTRkYTQtYTFjNy0xZGJjODhiMmMxNjkvMC8zNjA1OEYwMDFC NEVCOEMzNkFDMEMxNzgwOTZDQjJDMkNCNUQ2MjIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzYwNThGMDAxQjRFQjhDMzZBQzBDMTc4MDk2Q0IyQzJDQjVE NjIyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmY1ZGQwYWEtZmE3YS00ZGE0LWEx YzctMWRiYzg4YjJjMTY5LzAvMzYwNThGMDAxQjRFQjhDMzZBQzBDMTc4MDk2Q0Iy QzJDQjVENjIyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHL/LjzOZ43yU4jstCAi6CINeDS+34V+ffue R5VTv/n2XEiAPmOQoQz3DmdDzP3nWXd2G5siTuR0m06tDtVE7sYyGu5pB180FXOz GVJy4ONwLc+m2FRNarUVOWcq6XVQsHdBbV7E3OAjvc/9fxnqL2+wR0vQd3ZXOQ2Q h6dUpow+NAR0Ue6l4l8TAE/3eT+RpuHd2qC2tDBEI6PVFRxrKmWeUQkfUkMuFTnD kXuMFsWgKA68KROGj7XYMRa9pThLqyv3z+c9i1Un8LCXs1oGaorOCwQeeoXxdnEa mz0CWJ4/B8WzH8f1dJDZfW2ZEBgi13ARJ87dWxEPrwvJ3DVDqUk= -----END CERTIFICATE-----Generated at Sun Apr 19 13:00:43 2026 by rpki-client