$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/C36F2B2665674A939F067F495588261F7D4D6F8D.mft File: C36F2B2665674A939F067F495588261F7D4D6F8D.mft (raw, json) Hash identifier: U/m6UOBdnbOaVi6akdUs1c5g96rqw6F7oVeBxIRx7V8= Subject key identifier: 67:06:39:A2:57:5B:1D:80:3F:C9:5E:45:2F:7A:F6:02:01:89:D8:9F Authority key identifier: C3:6F:2B:26:65:67:4A:93:9F:06:7F:49:55:88:26:1F:7D:4D:6F:8D Certificate issuer: /CN=C36F2B2665674A939F067F495588261F7D4D6F8D Certificate serial: 6EA90079048C1DA990D30EF7F2CF02D615002B63 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C36F2B2665674A939F067F495588261F7D4D6F8D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/C36F2B2665674A939F067F495588261F7D4D6F8D.mft Manifest number: 0106 Signing time: Sun 15 Nov 2026 05:10:37 +0000 Manifest this update: Sun 15 Nov 2026 05:05:37 +0000 Manifest next update: Mon 16 Nov 2026 05:44:37 +0000 Files and hashes: 1: C36F2B2665674A939F067F495588261F7D4D6F8D.crl (hash: Whyb3M+J4+/hzBe0LLbXM+GIXAKmk4QpJum2dJnkz48=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/C36F2B2665674A939F067F495588261F7D4D6F8D.crl rsync://rpki-rsync.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/C36F2B2665674A939F067F495588261F7D4D6F8D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C36F2B2665674A939F067F495588261F7D4D6F8D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 05:44:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:a9:00:79:04:8c:1d:a9:90:d3:0e:f7:f2:cf:02:d6:15:00:2b:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C36F2B2665674A939F067F495588261F7D4D6F8D Validity Not Before: Nov 15 05:05:37 2026 GMT Not After : Nov 16 05:44:37 2026 GMT Subject: CN=670639A2575B1D803FC95E452F7AF6020189D89F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d8:d5:58:a5:e9:ee:14:52:ab:47:23:07:fb: 09:60:02:84:a1:99:aa:8e:70:e5:32:21:28:f4:55: cd:43:1d:9d:89:59:db:74:c6:be:8e:62:3c:71:9b: cf:66:e3:7f:3b:f9:8c:01:07:9a:3a:51:91:e6:63: 08:2c:ea:ae:64:5d:9e:bd:12:63:0b:2a:d7:fe:16: 84:f3:00:e8:b9:f4:af:21:8b:75:7e:01:11:d3:6a: 16:d7:48:0a:90:54:43:63:bf:d1:83:b5:ed:27:28: 02:68:4d:e1:97:cf:ca:a0:da:17:0c:d5:11:99:b7: a2:31:a7:57:fb:eb:3c:b8:27:c6:38:ff:60:e9:b7: ca:46:a7:55:44:33:bb:b2:43:c7:f9:94:66:5d:5f: e6:59:c5:22:dd:1c:31:58:7f:3f:4b:a7:89:84:97: 8a:f6:b5:30:64:7c:20:8f:98:a3:50:25:4d:7a:5e: 78:9d:1d:42:9b:a1:91:9a:0d:f1:36:a7:ad:7c:29: 11:f5:b0:69:02:07:1c:30:26:02:6e:f7:58:36:e6: 20:f8:2e:34:08:8f:46:06:1f:0b:51:47:d3:93:64: 7c:2e:60:a2:30:8c:da:af:18:8f:8a:1b:d2:63:13: 29:d6:fa:48:54:07:f9:92:4e:e1:85:ce:c9:14:f9: c4:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:06:39:A2:57:5B:1D:80:3F:C9:5E:45:2F:7A:F6:02:01:89:D8:9F X509v3 Authority Key Identifier: keyid:C3:6F:2B:26:65:67:4A:93:9F:06:7F:49:55:88:26:1F:7D:4D:6F:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/C36F2B2665674A939F067F495588261F7D4D6F8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C36F2B2665674A939F067F495588261F7D4D6F8D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/C36F2B2665674A939F067F495588261F7D4D6F8D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:af:b6:ec:7c:d3:ff:52:09:87:28:d5:db:56:fc:ed:12:1f: 83:26:61:1c:d4:f7:65:bb:30:84:d1:f2:45:ec:42:c0:b7:c7: fb:d6:8f:70:33:b2:e4:41:3c:b4:f9:02:2b:09:84:6b:5f:ca: 7d:87:0a:52:e5:0c:f0:96:7d:8f:83:6b:53:91:f5:d1:f7:58: 35:19:c6:77:09:79:12:64:b2:51:35:25:de:00:95:8f:bc:1d: d1:12:f0:db:03:b4:90:af:da:ca:4f:5c:f4:a1:59:d1:2e:0a: 5f:83:02:a6:be:66:35:e1:15:20:1c:7f:83:2e:d2:1b:ff:6f: 81:e8:2c:62:fa:ef:f3:fc:76:55:a8:c3:40:97:5e:45:db:ed: 74:ea:c2:1b:3e:cc:e4:d9:de:a0:1d:51:6e:e6:0a:6a:dd:58: 36:75:3e:85:b7:21:c9:05:8c:35:42:b6:df:67:8b:32:76:56: 96:d2:23:ee:fa:5e:3b:25:5a:3f:05:ea:ee:90:6d:ce:2b:0f: 51:db:7f:1b:36:8d:28:ac:22:87:28:14:28:ce:1c:6f:dd:cd: 32:ac:99:93:2f:ba:34:5b:c5:d9:80:b4:7e:01:30:99:4e:f1: 2e:b3:bc:43:c9:f5:32:b6:ad:d1:81:48:8a:50:9a:2f:cb:a7: c8:96:02:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbqkAeQSMHamQ0w738s8C1hUAK2MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM2RjJCMjY2NTY3NEE5MzlGMDY3RjQ5NTU4ODI2MUY3 RDRENkY4RDAeFw0yNjExMTUwNTA1MzdaFw0yNjExMTYwNTQ0MzdaMDMxMTAvBgNV BAMTKDY3MDYzOUEyNTc1QjFEODAzRkM5NUU0NTJGN0FGNjAyMDE4OUQ4OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs2NVYpenuFFKrRyMH+wlgAoSh maqOcOUyISj0Vc1DHZ2JWdt0xr6OYjxxm89m4387+YwBB5o6UZHmYwgs6q5kXZ69 EmMLKtf+FoTzAOi59K8hi3V+ARHTahbXSAqQVENjv9GDte0nKAJoTeGXz8qg2hcM 1RGZt6Ixp1f76zy4J8Y4/2Dpt8pGp1VEM7uyQ8f5lGZdX+ZZxSLdHDFYfz9Lp4mE l4r2tTBkfCCPmKNQJU16XnidHUKboZGaDfE2p618KRH1sGkCBxwwJgJu91g25iD4 LjQIj0YGHwtRR9OTZHwuYKIwjNqvGI+KG9JjEynW+khUB/mSTuGFzskU+cQpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZwY5oldbHYA/yV5FL3r2AgGJ2J8wHwYDVR0j BBgwFoAUw28rJmVnSpOfBn9JVYgmH31Nb40wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjFjN2U4MzMtNmM1NC00ZTBiLTgzMWMtMWMxYTcxMGNlOGUzLzAvQzM2RjJCMjY2 NTY3NEE5MzlGMDY3RjQ5NTU4ODI2MUY3RDRENkY4RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMzZGMkIyNjY1Njc0QTkzOUYwNjdGNDk1NTg4MjYxRjdENEQ2 RjhELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjFjN2U4MzMtNmM1NC00ZTBiLTgz MWMtMWMxYTcxMGNlOGUzLzAvQzM2RjJCMjY2NTY3NEE5MzlGMDY3RjQ5NTU4ODI2 MUY3RDRENkY4RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ2vtux80/9SCYco1dtW/O0SH4MmYRzU92W7 MITR8kXsQsC3x/vWj3AzsuRBPLT5AisJhGtfyn2HClLlDPCWfY+Da1OR9dH3WDUZ xncJeRJkslE1Jd4AlY+8HdES8NsDtJCv2spPXPShWdEuCl+DAqa+ZjXhFSAcf4Mu 0hv/b4HoLGL67/P8dlWow0CXXkXb7XTqwhs+zOTZ3qAdUW7mCmrdWDZ1PoW3IckF jDVCtt9nizJ2VpbSI+76XjslWj8F6u6Qbc4rD1Hbfxs2jSisIocoFCjOHG/dzTKs mZMvujRbxdmAtH4BMJlO8S6zvEPJ9TK2rdGBSIpQmi/Lp8iWAqQ= -----END CERTIFICATE-----Generated at Sun Nov 15 18:22:04 2026 by rpki-client