$ rpki-client -vvvf rpki-rsync.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/07036C5527255D59345E40A173983EEEA0C09FD0.mft File: 07036C5527255D59345E40A173983EEEA0C09FD0.mft (raw, json) Hash identifier: jxZTX+HOCyXeZtRdRoJ6RmUCUcvGU8+BlB48Le61cug= Subject key identifier: C0:42:95:01:D2:31:5A:45:31:62:F8:54:88:33:2A:B9:64:29:AF:18 Authority key identifier: 07:03:6C:55:27:25:5D:59:34:5E:40:A1:73:98:3E:EE:A0:C0:9F:D0 Certificate issuer: /CN=07036C5527255D59345E40A173983EEEA0C09FD0 Certificate serial: 27BDE5B2DFC59CA41FA516BFEDAF7A1C5FB857E6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07036C5527255D59345E40A173983EEEA0C09FD0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/07036C5527255D59345E40A173983EEEA0C09FD0.mft Manifest number: BF Signing time: Tue 22 Sep 2026 22:08:52 +0000 Manifest this update: Tue 22 Sep 2026 22:03:52 +0000 Manifest next update: Thu 24 Sep 2026 00:43:52 +0000 Files and hashes: 1: 3130332e3137322e3137312e302f32342d3234203d3e20313432333936.roa (hash: XhiLVWroBIGTKL45UQb8xrlJuP9CTy+d6X2Fb8sJelo=) 2: 3130332e3137322e3137302e302f32342d3234203d3e20313432333936.roa (hash: 4usmrutgY/beqY8KttmIEGM6ND+uj+WPCIUZTt7ix2A=) 3: 3130332e3137322e3137302e302f32332d3233203d3e20313432333936.roa (hash: xCKI0MCHXup6mIiN8YCHZcQ0nipWKRsEPA9gZhTI18I=) 4: 07036C5527255D59345E40A173983EEEA0C09FD0.crl (hash: WbdpQ+Gr7s/Vd4E2a4BTqBbFOOIub6eNNGW/tt6V5Tg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/07036C5527255D59345E40A173983EEEA0C09FD0.crl rsync://rpki-rsync.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/07036C5527255D59345E40A173983EEEA0C09FD0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07036C5527255D59345E40A173983EEEA0C09FD0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 00:43:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:bd:e5:b2:df:c5:9c:a4:1f:a5:16:bf:ed:af:7a:1c:5f:b8:57:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07036C5527255D59345E40A173983EEEA0C09FD0 Validity Not Before: Sep 22 22:03:52 2026 GMT Not After : Sep 24 00:43:52 2026 GMT Subject: CN=C0429501D2315A453162F85488332AB96429AF18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:69:64:77:86:32:2a:bf:a5:af:53:0b:37:2e: 16:11:14:a4:49:53:bf:82:97:16:b2:1d:11:b2:13: cd:3e:b4:62:92:57:ab:2e:b3:09:74:5b:be:35:a7: f5:36:2a:c5:46:02:59:c3:c9:4a:31:9b:83:9f:2e: 6c:24:31:26:a5:dd:1b:e4:66:43:7f:50:4f:03:02: d0:29:36:9a:8c:92:14:c3:71:1c:20:bd:e5:65:68: 42:7e:b6:1a:79:17:6b:67:9a:f7:98:70:2e:5b:94: d3:09:9e:4e:f5:fa:14:c2:f8:3c:fa:aa:c8:34:a9: b3:16:69:5f:c7:bd:5e:57:97:7e:40:21:64:14:ec: fc:d0:91:01:b6:c7:ed:db:15:14:a6:08:c0:05:de: 92:b6:ea:4f:52:19:dd:ce:2a:bf:e2:6e:6e:e4:cd: 4d:2e:c6:34:71:37:17:e1:05:18:12:c4:b1:6b:f0: 74:6a:71:89:08:d3:bf:5b:56:88:53:e2:53:9f:05: 39:21:1a:aa:0d:94:8e:0a:80:8c:af:95:28:ab:1b: 98:08:59:b2:37:dd:fd:f8:c2:a3:09:f3:76:10:b6: 48:a9:58:fa:67:5c:fd:32:c9:65:0b:f6:75:2c:25: 29:ac:ff:be:b4:5f:79:9e:b9:06:5d:c6:fb:fb:7d: 70:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:42:95:01:D2:31:5A:45:31:62:F8:54:88:33:2A:B9:64:29:AF:18 X509v3 Authority Key Identifier: keyid:07:03:6C:55:27:25:5D:59:34:5E:40:A1:73:98:3E:EE:A0:C0:9F:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/07036C5527255D59345E40A173983EEEA0C09FD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07036C5527255D59345E40A173983EEEA0C09FD0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/07036C5527255D59345E40A173983EEEA0C09FD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:ce:26:85:9f:50:20:0b:5b:9b:10:93:d7:5d:df:49:a8:55: 8a:24:f5:c2:74:0f:a1:79:99:a6:55:0d:9e:92:8d:ca:62:f0: 7d:b4:81:bf:3a:01:6e:c2:b0:5a:65:2a:58:29:91:e9:ca:99: 0f:2d:b1:5a:17:5a:ae:b9:30:6d:72:0e:45:c8:13:92:68:18: a3:fb:20:97:56:41:c2:03:c0:29:39:10:b3:72:0c:46:ca:31: 6a:ad:74:d3:a2:37:be:74:5c:1b:4c:b9:23:b8:02:85:bf:71: be:bb:aa:05:40:10:47:dc:38:b9:7d:65:06:9d:07:50:f8:f4: 6a:c4:05:42:10:bb:5f:5f:7c:a7:c5:ea:d9:99:5d:cf:19:2a: d3:09:e6:66:34:be:d6:78:c1:07:79:09:27:90:49:2b:fb:b0: 77:8f:30:ce:10:e2:7e:c6:8e:6b:d4:ef:f1:e5:70:3d:4a:09: e1:58:93:bf:ab:0f:f4:eb:b4:6f:7c:f6:5d:63:7d:f8:44:75: 53:7f:80:00:f3:e7:9b:6c:51:01:ee:3e:4b:7b:19:f4:d7:4e: d4:01:d5:37:a2:9f:19:11:2b:a6:4e:22:4e:eb:ee:69:a9:f0: 01:94:5b:3f:db:54:01:d5:f1:e4:9e:3f:3f:52:3f:2e:00:26: f2:69:50:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ73lst/FnKQfpRa/7a96HF+4V+YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDcwMzZDNTUyNzI1NUQ1OTM0NUU0MEExNzM5ODNFRUVB MEMwOUZEMDAeFw0yNjA5MjIyMjAzNTJaFw0yNjA5MjQwMDQzNTJaMDMxMTAvBgNV BAMTKEMwNDI5NTAxRDIzMTVBNDUzMTYyRjg1NDg4MzMyQUI5NjQyOUFGMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkaWR3hjIqv6WvUws3LhYRFKRJ U7+ClxayHRGyE80+tGKSV6suswl0W741p/U2KsVGAlnDyUoxm4OfLmwkMSal3Rvk ZkN/UE8DAtApNpqMkhTDcRwgveVlaEJ+thp5F2tnmveYcC5blNMJnk71+hTC+Dz6 qsg0qbMWaV/HvV5Xl35AIWQU7PzQkQG2x+3bFRSmCMAF3pK26k9SGd3OKr/ibm7k zU0uxjRxNxfhBRgSxLFr8HRqcYkI079bVohT4lOfBTkhGqoNlI4KgIyvlSirG5gI WbI33f34wqMJ83YQtkipWPpnXP0yyWUL9nUsJSms/760X3meuQZdxvv7fXDJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwEKVAdIxWkUxYvhUiDMquWQprxgwHwYDVR0j BBgwFoAUBwNsVSclXVk0XkChc5g+7qDAn9AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjFkYjZjOWItZDhmYy00ZDhjLTgwY2ItZmQyMjQxMjA4ZGRlLzAvMDcwMzZDNTUy NzI1NUQ1OTM0NUU0MEExNzM5ODNFRUVBMEMwOUZEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNzAzNkM1NTI3MjU1RDU5MzQ1RTQwQTE3Mzk4M0VFRUEwQzA5 RkQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjFkYjZjOWItZDhmYy00ZDhjLTgw Y2ItZmQyMjQxMjA4ZGRlLzAvMDcwMzZDNTUyNzI1NUQ1OTM0NUU0MEExNzM5ODNF RUVBMEMwOUZEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACvOJoWfUCALW5sQk9dd30moVYok9cJ0D6F5 maZVDZ6Sjcpi8H20gb86AW7CsFplKlgpkenKmQ8tsVoXWq65MG1yDkXIE5JoGKP7 IJdWQcIDwCk5ELNyDEbKMWqtdNOiN750XBtMuSO4AoW/cb67qgVAEEfcOLl9ZQad B1D49GrEBUIQu19ffKfF6tmZXc8ZKtMJ5mY0vtZ4wQd5CSeQSSv7sHePMM4Q4n7G jmvU7/HlcD1KCeFYk7+rD/TrtG989l1jffhEdVN/gADz55tsUQHuPkt7GfTXTtQB 1TeinxkRK6ZOIk7r7mmp8AGUWz/bVAHV8eSePz9SPy4AJvJpUNY= -----END CERTIFICATE-----Generated at Wed Sep 23 09:23:44 2026 by rpki-client