$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/C36F2B2665674A939F067F495588261F7D4D6F8D.mft File: C36F2B2665674A939F067F495588261F7D4D6F8D.mft (raw, json) Hash identifier: JXk7KF77uyYh8NFuHUg1r0vihQIZhLp6ZzRbQsyLmJU= Subject key identifier: 41:E6:74:DF:5D:70:4E:ED:B4:12:25:6F:BC:E3:B1:13:0C:EF:0B:B2 Authority key identifier: C3:6F:2B:26:65:67:4A:93:9F:06:7F:49:55:88:26:1F:7D:4D:6F:8D Certificate issuer: /CN=C36F2B2665674A939F067F495588261F7D4D6F8D Certificate serial: 772E7516B92483E9AD6BA8CC6B4412AA82CE5423 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C36F2B2665674A939F067F495588261F7D4D6F8D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/C36F2B2665674A939F067F495588261F7D4D6F8D.mft Manifest number: BD Signing time: Mon 21 Sep 2026 05:08:01 +0000 Manifest this update: Mon 21 Sep 2026 05:03:01 +0000 Manifest next update: Tue 22 Sep 2026 05:42:01 +0000 Files and hashes: 1: C36F2B2665674A939F067F495588261F7D4D6F8D.crl (hash: ILTzschLSJRqNmmDanWv3iKtcEDnTOimrSlfQQ/mvrM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/C36F2B2665674A939F067F495588261F7D4D6F8D.crl rsync://rpki-rsync.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/C36F2B2665674A939F067F495588261F7D4D6F8D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C36F2B2665674A939F067F495588261F7D4D6F8D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:2e:75:16:b9:24:83:e9:ad:6b:a8:cc:6b:44:12:aa:82:ce:54:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C36F2B2665674A939F067F495588261F7D4D6F8D Validity Not Before: Sep 21 05:03:01 2026 GMT Not After : Sep 22 05:42:01 2026 GMT Subject: CN=41E674DF5D704EEDB412256FBCE3B1130CEF0BB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:97:ca:d1:0f:3d:fa:cb:2d:62:9e:79:d1:ac: d0:ef:1b:fe:a7:96:55:9f:9b:b8:46:d0:48:ba:e9: 96:e8:ab:a0:09:7a:cc:93:42:25:f0:c9:6a:e4:25: e4:35:98:a5:b0:e6:6b:2a:b6:d5:30:b5:9d:6f:05: 7d:1f:2d:9e:4f:78:e1:75:49:24:d1:85:06:60:9b: 77:5e:85:b7:25:1e:d7:0d:fe:ac:60:49:c4:2e:59: 34:bb:97:2a:bc:bf:a7:3e:cb:5c:06:24:37:0d:ac: 7d:89:dd:6f:35:1e:5e:f6:fd:c2:41:94:b5:7f:43: d1:33:e1:bb:e7:f4:f6:d5:04:60:2c:ef:a7:af:2e: c1:a4:04:5b:b7:36:46:ed:2f:bb:6e:b0:76:55:9e: a1:dd:c4:e8:45:a2:dc:a9:5b:a8:13:30:40:47:a3: 37:a2:36:b3:69:07:38:ad:d6:db:fd:46:a2:97:d9: 60:21:4a:ac:4a:bf:79:c0:6d:d7:c6:73:92:dd:c5: 80:ec:0e:bb:e2:6a:8a:a1:e9:05:b7:21:7c:87:07: 24:e5:2f:b1:4f:82:de:12:db:2a:72:c5:f2:eb:fd: 53:7a:0c:35:5a:90:1e:2b:92:ea:bc:36:41:2d:cc: f2:51:86:62:f3:57:3f:77:ad:5f:bf:b9:2e:ef:df: 44:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:E6:74:DF:5D:70:4E:ED:B4:12:25:6F:BC:E3:B1:13:0C:EF:0B:B2 X509v3 Authority Key Identifier: keyid:C3:6F:2B:26:65:67:4A:93:9F:06:7F:49:55:88:26:1F:7D:4D:6F:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/C36F2B2665674A939F067F495588261F7D4D6F8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C36F2B2665674A939F067F495588261F7D4D6F8D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/C36F2B2665674A939F067F495588261F7D4D6F8D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:94:34:a1:08:10:b8:a1:fd:03:ab:bc:dd:30:ff:60:46:38: b8:02:d1:b9:5a:c9:79:b2:ba:65:57:d7:97:a1:b7:ec:bd:5e: f0:6a:92:5d:0e:b0:25:28:0c:a7:02:88:8f:b5:5c:80:a9:41: 07:d1:4b:b8:07:59:56:a9:52:d2:b8:c9:20:eb:b8:c4:d2:e6: 3a:12:fc:4a:96:48:99:53:3c:96:02:3a:ec:38:c5:83:bf:41: dd:f4:9e:3c:d1:03:b2:c6:41:b2:0c:62:b2:d5:b2:ea:6a:28: f1:61:54:23:8d:90:7a:52:8b:8a:31:04:3c:e0:b7:9f:d1:da: 46:98:38:c6:cf:4b:3e:d3:7f:f9:fc:05:1a:fd:ec:0e:21:a9: 73:d9:27:d2:35:d8:a8:0b:dd:d5:28:f7:96:4e:7f:35:45:2d: 29:d0:46:f4:ba:c6:9c:25:91:14:35:11:68:65:f3:be:d1:ee: fb:b7:43:44:50:92:c4:4e:7d:65:db:38:9e:a3:f8:9e:ca:7e: 12:be:24:1b:c1:21:d4:45:07:04:fa:db:ca:b9:f4:2d:a1:c5: a5:2d:fc:a3:16:20:c6:26:bf:71:d4:2d:fc:90:23:2d:e8:f1: 30:cb:0c:9d:20:e0:ac:a3:12:aa:c1:d1:12:4f:bc:82:ad:15: 7f:60:5c:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdy51Frkkg+mta6jMa0QSqoLOVCMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM2RjJCMjY2NTY3NEE5MzlGMDY3RjQ5NTU4ODI2MUY3 RDRENkY4RDAeFw0yNjA5MjEwNTAzMDFaFw0yNjA5MjIwNTQyMDFaMDMxMTAvBgNV BAMTKDQxRTY3NERGNUQ3MDRFRURCNDEyMjU2RkJDRTNCMTEzMENFRjBCQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/l8rRDz36yy1innnRrNDvG/6n llWfm7hG0Ei66Zboq6AJesyTQiXwyWrkJeQ1mKWw5msqttUwtZ1vBX0fLZ5PeOF1 SSTRhQZgm3dehbclHtcN/qxgScQuWTS7lyq8v6c+y1wGJDcNrH2J3W81Hl72/cJB lLV/Q9Ez4bvn9PbVBGAs76evLsGkBFu3NkbtL7tusHZVnqHdxOhFotypW6gTMEBH ozeiNrNpBzit1tv9RqKX2WAhSqxKv3nAbdfGc5LdxYDsDrviaoqh6QW3IXyHByTl L7FPgt4S2ypyxfLr/VN6DDVakB4rkuq8NkEtzPJRhmLzVz93rV+/uS7v30QvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQeZ0311wTu20EiVvvOOxEwzvC7IwHwYDVR0j BBgwFoAUw28rJmVnSpOfBn9JVYgmH31Nb40wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjFjN2U4MzMtNmM1NC00ZTBiLTgzMWMtMWMxYTcxMGNlOGUzLzAvQzM2RjJCMjY2 NTY3NEE5MzlGMDY3RjQ5NTU4ODI2MUY3RDRENkY4RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMzZGMkIyNjY1Njc0QTkzOUYwNjdGNDk1NTg4MjYxRjdENEQ2 RjhELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjFjN2U4MzMtNmM1NC00ZTBiLTgz MWMtMWMxYTcxMGNlOGUzLzAvQzM2RjJCMjY2NTY3NEE5MzlGMDY3RjQ5NTU4ODI2 MUY3RDRENkY4RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACeUNKEIELih/QOrvN0w/2BGOLgC0blayXmy umVX15eht+y9XvBqkl0OsCUoDKcCiI+1XICpQQfRS7gHWVapUtK4ySDruMTS5joS /EqWSJlTPJYCOuw4xYO/Qd30njzRA7LGQbIMYrLVsupqKPFhVCONkHpSi4oxBDzg t5/R2kaYOMbPSz7Tf/n8BRr97A4hqXPZJ9I12KgL3dUo95ZOfzVFLSnQRvS6xpwl kRQ1EWhl877R7vu3Q0RQksROfWXbOJ6j+J7KfhK+JBvBIdRFBwT628q59C2hxaUt /KMWIMYmv3HULfyQIy3o8TDLDJ0g4KyjEqrB0RJPvIKtFX9gXIY= -----END CERTIFICATE-----Generated at Mon Sep 21 17:45:16 2026 by rpki-client