
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/C36F2B2665674A939F067F495588261F7D4D6F8D.mft
File: C36F2B2665674A939F067F495588261F7D4D6F8D.mft (raw, json)
Hash identifier: 2sTZeKsIni3Oxp3F7NGpCVn15hw4KRHqwYGkRyd/t8E=
Subject key identifier: 1E:DD:E2:35:A4:1F:60:5E:36:5F:62:D3:19:AD:55:5F:46:7C:4B:9F
Authority key identifier: C3:6F:2B:26:65:67:4A:93:9F:06:7F:49:55:88:26:1F:7D:4D:6F:8D
Certificate issuer: /CN=C36F2B2665674A939F067F495588261F7D4D6F8D
Certificate serial: 6BC50E4AEC72B85277AA6E084F9B2A7D2CECBBBA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C36F2B2665674A939F067F495588261F7D4D6F8D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/C36F2B2665674A939F067F495588261F7D4D6F8D.mft
Manifest number: 3B
Signing time: Mon 15 Jun 2026 07:10:03 +0000
Manifest this update: Mon 15 Jun 2026 07:05:03 +0000
Manifest next update: Tue 16 Jun 2026 08:43:03 +0000
Files and hashes: 1: C36F2B2665674A939F067F495588261F7D4D6F8D.crl (hash: d+zQLF4AQ+PrxcYlM0Im0w7dh5PCycEPYAEQDG/oehY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/C36F2B2665674A939F067F495588261F7D4D6F8D.crl
rsync://rpki-rsync.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/C36F2B2665674A939F067F495588261F7D4D6F8D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C36F2B2665674A939F067F495588261F7D4D6F8D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 16 Jun 2026 03:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:c5:0e:4a:ec:72:b8:52:77:aa:6e:08:4f:9b:2a:7d:2c:ec:bb:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C36F2B2665674A939F067F495588261F7D4D6F8D
Validity
Not Before: Jun 15 07:05:03 2026 GMT
Not After : Jun 16 08:43:03 2026 GMT
Subject: CN=1EDDE235A41F605E365F62D319AD555F467C4B9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bd:1f:a1:ca:22:08:cf:ed:65:4a:be:f6:af:
d6:dc:45:20:d5:db:e6:19:d3:ad:6a:15:8b:d9:e9:
d4:a2:ae:e5:4d:07:42:2f:08:fc:5f:b4:dc:9c:17:
cc:f4:5d:6f:2d:1c:e2:7f:c0:a3:1a:2c:f3:88:8f:
4a:35:48:64:61:8b:73:ab:a1:a3:b9:de:02:d6:5d:
71:f4:72:e6:92:31:71:45:c8:90:d3:b7:3b:15:35:
1c:34:fc:f0:09:2b:2c:f0:73:ba:9e:7b:7f:85:5d:
28:88:33:4c:eb:15:34:46:05:17:c9:ec:c5:80:f6:
68:7b:7f:9f:37:3c:9b:6d:5a:a2:8c:c0:72:0b:52:
34:60:47:81:21:69:0d:6b:89:fa:60:87:0d:fe:1c:
ad:44:d4:dd:a6:93:1c:ca:e6:09:52:85:a7:2b:99:
a0:4a:c0:51:a7:5e:48:a3:2d:4f:ea:78:6a:15:08:
bd:d5:d1:c3:8e:72:5e:59:35:a0:dc:73:1c:00:46:
11:0a:a8:2b:c5:e1:84:3a:22:75:f4:f5:35:f9:54:
0a:a1:c9:00:87:b6:c8:2f:05:8d:58:2c:a2:0c:27:
68:e2:cf:85:57:cf:de:79:63:8d:bf:0a:d9:7f:ed:
32:bf:9d:6e:0b:f0:89:3f:0c:1f:ff:40:99:cf:66:
2d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:DD:E2:35:A4:1F:60:5E:36:5F:62:D3:19:AD:55:5F:46:7C:4B:9F
X509v3 Authority Key Identifier:
keyid:C3:6F:2B:26:65:67:4A:93:9F:06:7F:49:55:88:26:1F:7D:4D:6F:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/C36F2B2665674A939F067F495588261F7D4D6F8D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C36F2B2665674A939F067F495588261F7D4D6F8D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/C36F2B2665674A939F067F495588261F7D4D6F8D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:3c:e7:be:78:a3:ed:c0:cd:91:fa:d6:68:8a:7a:40:1c:47:
23:fe:c8:b0:0d:ac:e3:c3:0c:1b:25:a0:29:3a:a7:35:89:f4:
1a:0e:ba:ea:fc:ff:c6:02:cf:da:81:6f:e4:67:d1:32:88:32:
7d:f0:89:cf:1e:d7:26:db:09:e3:e9:eb:11:b1:64:b8:54:72:
29:19:2a:63:8d:39:c9:0d:36:1c:41:ec:b2:4b:bf:6d:aa:bb:
40:cc:50:3f:cf:87:0c:f7:2b:ef:ba:8c:67:14:ec:f5:1d:99:
c5:99:62:9d:0b:d1:3a:17:ae:6a:07:51:9d:26:0f:7f:dc:5c:
10:3d:fd:a3:67:87:31:3d:6f:93:bf:6d:6f:0e:86:fa:47:ad:
47:0f:81:18:ef:64:81:20:26:f8:71:3f:7e:14:00:40:8a:99:
1b:c1:77:21:0e:cf:f9:20:94:ab:6f:82:56:50:6f:e7:35:f5:
35:53:94:04:1d:54:cd:27:44:79:c9:4c:a9:ff:e4:0f:d5:35:
e3:f5:5c:83:9f:4f:0b:5e:1f:8f:3c:fa:26:b3:02:94:0e:7c:
0b:69:b9:fb:af:b2:9c:c3:66:56:13:8d:ce:04:8f:0f:68:01:
36:1e:b5:50:e3:18:99:28:86:d9:94:49:50:ff:f2:9b:71:31:
0f:53:95:51
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUa8UOSuxyuFJ3qm4IT5sqfSzsu7owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzM2RjJCMjY2NTY3NEE5MzlGMDY3RjQ5NTU4ODI2MUY3
RDRENkY4RDAeFw0yNjA2MTUwNzA1MDNaFw0yNjA2MTYwODQzMDNaMDMxMTAvBgNV
BAMTKDFFRERFMjM1QTQxRjYwNUUzNjVGNjJEMzE5QUQ1NTVGNDY3QzRCOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwvR+hyiIIz+1lSr72r9bcRSDV
2+YZ061qFYvZ6dSiruVNB0IvCPxftNycF8z0XW8tHOJ/wKMaLPOIj0o1SGRhi3Or
oaO53gLWXXH0cuaSMXFFyJDTtzsVNRw0/PAJKyzwc7qee3+FXSiIM0zrFTRGBRfJ
7MWA9mh7f583PJttWqKMwHILUjRgR4EhaQ1rifpghw3+HK1E1N2mkxzK5glShacr
maBKwFGnXkijLU/qeGoVCL3V0cOOcl5ZNaDccxwARhEKqCvF4YQ6InX09TX5VAqh
yQCHtsgvBY1YLKIMJ2jiz4VXz955Y42/Ctl/7TK/nW4L8Ik/DB//QJnPZi3zAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUHt3iNaQfYF42X2LTGa1VX0Z8S58wHwYDVR0j
BBgwFoAUw28rJmVnSpOfBn9JVYgmH31Nb40wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YjFjN2U4MzMtNmM1NC00ZTBiLTgzMWMtMWMxYTcxMGNlOGUzLzAvQzM2RjJCMjY2
NTY3NEE5MzlGMDY3RjQ5NTU4ODI2MUY3RDRENkY4RC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DMzZGMkIyNjY1Njc0QTkzOUYwNjdGNDk1NTg4MjYxRjdENEQ2
RjhELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjFjN2U4MzMtNmM1NC00ZTBiLTgz
MWMtMWMxYTcxMGNlOGUzLzAvQzM2RjJCMjY2NTY3NEE5MzlGMDY3RjQ5NTU4ODI2
MUY3RDRENkY4RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFY85754o+3AzZH61miKekAcRyP+yLANrOPD
DBsloCk6pzWJ9BoOuur8/8YCz9qBb+Rn0TKIMn3wic8e1ybbCePp6xGxZLhUcikZ
KmONOckNNhxB7LJLv22qu0DMUD/Phwz3K++6jGcU7PUdmcWZYp0L0ToXrmoHUZ0m
D3/cXBA9/aNnhzE9b5O/bW8OhvpHrUcPgRjvZIEgJvhxP34UAECKmRvBdyEOz/kg
lKtvglZQb+c19TVTlAQdVM0nRHnJTKn/5A/VNeP1XIOfTwteH488+iazApQOfAtp
ufuvspzDZlYTjc4Ejw9oATYetVDjGJkohtmUSVD/8ptxMQ9TlVE=
-----END CERTIFICATE-----
Generated at Mon Jun 15 14:10:43 2026 by rpki-client