$ rpki-client -vvvf rpki-rsync.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/6E36D51ED37E76652D33954036B724B015FE6535.mft File: 6E36D51ED37E76652D33954036B724B015FE6535.mft (raw, json) Hash identifier: H1EUeZdQ7b0QyfAjKeVh0s2fRnTIM8deWaHXx278yRc= Subject key identifier: 86:B9:8A:19:4F:5F:CE:E5:4D:6C:56:D3:9B:7A:52:F0:F7:A2:0F:3E Authority key identifier: 6E:36:D5:1E:D3:7E:76:65:2D:33:95:40:36:B7:24:B0:15:FE:65:35 Certificate issuer: /CN=6E36D51ED37E76652D33954036B724B015FE6535 Certificate serial: 43740D9E66F37583A8E05953C765321AE479A2A8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6E36D51ED37E76652D33954036B724B015FE6535.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/6E36D51ED37E76652D33954036B724B015FE6535.mft Manifest number: BE Signing time: Mon 21 Sep 2026 08:42:14 +0000 Manifest this update: Mon 21 Sep 2026 08:37:14 +0000 Manifest next update: Tue 22 Sep 2026 12:35:14 +0000 Files and hashes: 1: 3130332e3133392e3138362e302f32342d3234203d3e20313338383634.roa (hash: FcbgzQdIQigiunMpm6/hzO5KdG9gtqkjcIfWQ/NRFWE=) 2: 6E36D51ED37E76652D33954036B724B015FE6535.crl (hash: XBMXOd8cpGTrebWiCGTTiolbQqyd/e0CdHOe8kzz3z0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/6E36D51ED37E76652D33954036B724B015FE6535.crl rsync://rpki-rsync.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/6E36D51ED37E76652D33954036B724B015FE6535.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6E36D51ED37E76652D33954036B724B015FE6535.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 12:35:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:74:0d:9e:66:f3:75:83:a8:e0:59:53:c7:65:32:1a:e4:79:a2:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E36D51ED37E76652D33954036B724B015FE6535 Validity Not Before: Sep 21 08:37:14 2026 GMT Not After : Sep 22 12:35:14 2026 GMT Subject: CN=86B98A194F5FCEE54D6C56D39B7A52F0F7A20F3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d4:b0:77:20:db:1e:46:75:e2:ee:79:ca:a4: 83:9a:f2:bd:14:e0:dd:9c:eb:20:99:5c:44:79:00: 7e:86:b0:53:89:57:c2:b4:b6:6b:64:df:a8:20:79: 10:cc:dd:bc:00:78:d0:7d:a0:4d:3e:ff:c5:d8:b0: 65:fc:eb:98:3b:47:a7:da:ac:4d:2a:15:e8:1f:f5: 36:4d:38:4e:c8:65:1f:9f:39:be:d0:37:20:71:23: b6:d3:8a:55:10:a3:7f:ff:cd:6b:28:eb:4c:d5:38: 03:75:61:0a:b3:22:3d:27:9c:7c:c6:b6:cf:4e:03: 23:cf:86:24:73:d9:7d:34:ad:55:1b:b8:4c:03:bf: cd:24:99:db:39:24:98:b7:cd:f2:04:e3:4a:f5:50: e1:29:35:36:2f:12:08:56:ee:bc:08:9e:61:41:1e: 10:4f:8e:ee:3c:15:8b:1b:7d:a8:64:2b:10:66:cb: 36:7d:9e:b9:d1:b5:c2:6a:4a:55:83:bb:f6:b9:f4: 96:89:30:ec:a7:67:41:fa:91:a1:12:de:5c:c7:11: bb:a8:8b:98:ba:f1:15:55:53:51:f5:1d:6d:e2:20: e7:4b:e1:b2:e2:c6:92:4d:e8:9c:28:97:3c:54:0b: e9:3d:6a:7a:48:3b:12:93:2b:f5:3c:9e:73:1d:f8: c6:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:B9:8A:19:4F:5F:CE:E5:4D:6C:56:D3:9B:7A:52:F0:F7:A2:0F:3E X509v3 Authority Key Identifier: keyid:6E:36:D5:1E:D3:7E:76:65:2D:33:95:40:36:B7:24:B0:15:FE:65:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/6E36D51ED37E76652D33954036B724B015FE6535.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6E36D51ED37E76652D33954036B724B015FE6535.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/6E36D51ED37E76652D33954036B724B015FE6535.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:88:ea:4c:1b:b2:fe:73:13:74:75:f0:28:2b:13:1c:8a:4f: 8a:d1:69:a5:9c:54:86:24:f7:ef:1d:1f:a0:1f:a4:52:68:4a: 41:f5:3e:53:37:96:5a:70:a7:4f:fa:ad:68:8c:54:da:c4:75: 2d:ef:4e:03:32:29:78:51:2c:c7:45:fe:3f:3f:a2:c8:15:e0: 6f:c4:44:27:10:cd:b9:21:cf:37:65:7e:f4:9f:af:96:98:5c: 0e:83:f1:f6:79:e2:4a:2f:ef:19:59:56:48:8b:69:d6:d5:42: 49:a3:c8:ad:bc:66:4e:1e:6f:2c:db:9b:0b:b7:20:07:37:a4: 46:e6:29:dc:c5:a0:72:7f:0e:c8:e3:41:60:a8:26:d0:f7:11: 7c:ce:13:f3:2d:f7:5f:64:28:d0:0f:47:ca:66:f7:d9:35:b3: 88:8d:c4:d4:65:ac:3e:33:a7:ba:4f:44:f8:f4:5f:0d:7e:18: 40:1a:8c:78:b7:b3:6d:00:9f:d8:07:e5:21:85:8f:94:8a:15: c3:97:1e:8b:61:90:25:14:dd:86:63:88:9c:70:04:ba:9c:19: ec:ed:b2:e5:76:4b:27:b6:df:e7:74:ac:98:92:8b:49:0c:40: 9e:94:02:c7:2f:b6:eb:ae:1d:8b:ab:9c:ea:01:2c:8f:ed:ef: 66:9b:57:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ3QNnmbzdYOo4FlTx2UyGuR5oqgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkUzNkQ1MUVEMzdFNzY2NTJEMzM5NTQwMzZCNzI0QjAx NUZFNjUzNTAeFw0yNjA5MjEwODM3MTRaFw0yNjA5MjIxMjM1MTRaMDMxMTAvBgNV BAMTKDg2Qjk4QTE5NEY1RkNFRTU0RDZDNTZEMzlCN0E1MkYwRjdBMjBGM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC61LB3INseRnXi7nnKpIOa8r0U 4N2c6yCZXER5AH6GsFOJV8K0tmtk36ggeRDM3bwAeNB9oE0+/8XYsGX865g7R6fa rE0qFegf9TZNOE7IZR+fOb7QNyBxI7bTilUQo3//zWso60zVOAN1YQqzIj0nnHzG ts9OAyPPhiRz2X00rVUbuEwDv80kmds5JJi3zfIE40r1UOEpNTYvEghW7rwInmFB HhBPju48FYsbfahkKxBmyzZ9nrnRtcJqSlWDu/a59JaJMOynZ0H6kaES3lzHEbuo i5i68RVVU1H1HW3iIOdL4bLixpJN6JwolzxUC+k9anpIOxKTK/U8nnMd+MbrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhrmKGU9fzuVNbFbTm3pS8PeiDz4wHwYDVR0j BBgwFoAUbjbVHtN+dmUtM5VANrcksBX+ZTUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDQzNThiMDAtMzFjZC00MWEzLTk1MzYtZGJiMTkzZTdmNGQwLzAvNkUzNkQ1MUVE MzdFNzY2NTJEMzM5NTQwMzZCNzI0QjAxNUZFNjUzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82RTM2RDUxRUQzN0U3NjY1MkQzMzk1NDAzNkI3MjRCMDE1RkU2 NTM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDQzNThiMDAtMzFjZC00MWEzLTk1 MzYtZGJiMTkzZTdmNGQwLzAvNkUzNkQ1MUVEMzdFNzY2NTJEMzM5NTQwMzZCNzI0 QjAxNUZFNjUzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI2I6kwbsv5zE3R18CgrExyKT4rRaaWcVIYk 9+8dH6AfpFJoSkH1PlM3llpwp0/6rWiMVNrEdS3vTgMyKXhRLMdF/j8/osgV4G/E RCcQzbkhzzdlfvSfr5aYXA6D8fZ54kov7xlZVkiLadbVQkmjyK28Zk4ebyzbmwu3 IAc3pEbmKdzFoHJ/DsjjQWCoJtD3EXzOE/Mt919kKNAPR8pm99k1s4iNxNRlrD4z p7pPRPj0Xw1+GEAajHi3s20An9gH5SGFj5SKFcOXHothkCUU3YZjiJxwBLqcGezt suV2Sye23+d0rJiSi0kMQJ6UAscvtuuuHYurnOoBLI/t72abVzI= -----END CERTIFICATE-----Generated at Tue Sep 22 03:37:28 2026 by rpki-client