$ rpki-client -vvf rpki-rsync.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/36987F1D265142449AF11F138E84E3AE2398BB71.mft File: 36987F1D265142449AF11F138E84E3AE2398BB71.mft (raw, json) Hash identifier: DfEpHm5zfACozBPUc9RXanab4l45pSh9S44aLnQNgtM= Subject key identifier: 70:12:16:D2:3A:7F:2B:F5:79:09:54:C4:97:F7:05:24:69:C2:77:21 Authority key identifier: 36:98:7F:1D:26:51:42:44:9A:F1:1F:13:8E:84:E3:AE:23:98:BB:71 Certificate issuer: /CN=36987F1D265142449AF11F138E84E3AE2398BB71 Certificate serial: 3EE6F805D3409C0B5941F3B98382EA295749EB1E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/36987F1D265142449AF11F138E84E3AE2398BB71.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/36987F1D265142449AF11F138E84E3AE2398BB71.mft Manifest number: 76 Signing time: Wed 29 Jul 2026 02:44:29 +0000 Manifest this update: Wed 29 Jul 2026 02:39:29 +0000 Manifest next update: Thu 30 Jul 2026 06:38:29 +0000 Files and hashes: 1: 323030313a6466343a626430303a3a2f34382d3438203d3e203338343936.roa (hash: Bnl6nUu+xtavXODjc9t+OxHVrv/heBfP+6/XJ45t3VI=) 2: 323030313a6466343a626430303a3a2f34382d3438203d3e20313337333338.roa (hash: svBe8CrZWGOGef404cwoRo2+yXAKzM2eujaije66wpU=) 3: 36987F1D265142449AF11F138E84E3AE2398BB71.crl (hash: IkP38SbSiEe+YwnCNqsZCzByXYJqeaCrfB4lFOlPIlY=) 4: 3130332e3131322e3232332e302f32342d3234203d3e203338343936.roa (hash: GYqQuuT/LudwwxgSc6XR1akIqTm1hPmdsuPIZrL2W/E=) 5: 3130332e3131322e3232332e302f32342d3234203d3e20313337333338.roa (hash: a3+GsbTZLmVRS7NxLcoTxVxS7Q4Y+JKlGjV758bCCgw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/36987F1D265142449AF11F138E84E3AE2398BB71.crl rsync://rpki-rsync.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/36987F1D265142449AF11F138E84E3AE2398BB71.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/36987F1D265142449AF11F138E84E3AE2398BB71.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 06:38:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:e6:f8:05:d3:40:9c:0b:59:41:f3:b9:83:82:ea:29:57:49:eb:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36987F1D265142449AF11F138E84E3AE2398BB71 Validity Not Before: Jul 29 02:39:29 2026 GMT Not After : Jul 30 06:38:29 2026 GMT Subject: CN=701216D23A7F2BF5790954C497F7052469C27721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:70:9c:52:bf:8b:01:d4:a9:3a:b9:a8:1c:9c: 60:8c:92:3c:69:09:67:31:35:64:cb:cc:23:84:bc: 81:9c:04:ee:f3:28:2e:ac:64:90:55:f3:92:d9:93: c4:34:93:79:90:91:dd:89:6b:3b:58:2a:a9:74:e4: 21:b4:69:20:ae:c4:2f:c1:98:07:6f:8b:26:b9:9e: 59:29:65:fe:26:23:7d:3e:df:00:23:ae:7b:5a:3b: 23:8e:c1:a9:87:4d:b2:42:36:52:d1:43:51:2e:00: fb:c8:82:58:62:cc:20:80:55:04:a9:22:4e:a5:04: 0c:07:38:4c:d6:fd:39:7b:e0:c8:72:ed:59:c4:72: 8a:a7:eb:06:22:35:9c:9d:37:2d:a6:ba:c3:72:8d: e1:9b:87:73:15:f8:b4:72:7d:64:42:c0:2a:8d:1e: b9:87:6e:fc:23:d6:28:c2:4d:06:a3:2f:a4:47:7a: 01:f8:30:61:80:0c:3a:25:05:ec:00:12:6f:d9:7f: 33:89:7c:41:bc:c4:c4:c5:af:94:3d:0f:a9:19:f6: e8:a7:08:c6:d7:5b:90:06:cc:77:eb:42:00:db:ab: 37:fe:72:c3:2e:5a:13:df:c9:c0:68:92:73:31:52: bd:7c:75:f3:54:db:37:81:4e:8c:62:b2:0f:a1:64: 57:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:12:16:D2:3A:7F:2B:F5:79:09:54:C4:97:F7:05:24:69:C2:77:21 X509v3 Authority Key Identifier: keyid:36:98:7F:1D:26:51:42:44:9A:F1:1F:13:8E:84:E3:AE:23:98:BB:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/36987F1D265142449AF11F138E84E3AE2398BB71.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/36987F1D265142449AF11F138E84E3AE2398BB71.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/36987F1D265142449AF11F138E84E3AE2398BB71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:b7:66:19:af:19:fd:72:c4:81:ca:1d:22:2a:dc:7e:08:83: cb:e3:8d:e8:71:ed:4e:be:c9:b7:ef:e9:7f:d5:be:5d:3d:52: b8:6f:b8:94:27:41:20:13:43:a6:ce:2a:b1:03:52:c9:64:27: 4e:d9:62:3c:6f:63:57:42:fd:1e:03:41:55:0d:f2:81:2b:48: 12:38:bb:87:7c:30:a9:69:8e:85:1c:f4:1a:ba:e8:d8:3d:79: 51:0b:24:58:87:cb:66:3b:25:d3:62:92:f6:48:74:bc:8c:0e: 8d:1e:bf:1b:e8:26:3d:7d:b1:2e:bb:7d:d1:f5:e6:8b:31:fd: d0:45:b4:db:96:c6:4d:df:0b:be:66:b2:87:89:a4:eb:76:c0: 9c:3b:a5:59:a8:76:a1:80:ab:2a:00:c0:3e:41:ab:c2:ff:2d: 53:5b:97:10:ef:fc:80:23:7d:f9:80:10:69:e8:9f:49:9c:a5: 64:66:5d:40:23:b5:f1:a5:0f:da:b7:89:24:a2:df:19:e3:21: f9:1d:5b:fd:1a:ad:a1:29:52:b2:a7:d8:2a:34:c1:a2:73:c8: e3:e6:5b:95:ce:eb:62:f6:15:be:7f:2b:21:ae:30:b1:5e:14: f5:e3:85:88:1a:c5:69:21:6f:d1:11:97:12:3f:34:54:5c:19: 20:20:a3:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPub4BdNAnAtZQfO5g4LqKVdJ6x4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY5ODdGMUQyNjUxNDI0NDlBRjExRjEzOEU4NEUzQUUy Mzk4QkI3MTAeFw0yNjA3MjkwMjM5MjlaFw0yNjA3MzAwNjM4MjlaMDMxMTAvBgNV BAMTKDcwMTIxNkQyM0E3RjJCRjU3OTA5NTRDNDk3RjcwNTI0NjlDMjc3MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCycJxSv4sB1Kk6uagcnGCMkjxp CWcxNWTLzCOEvIGcBO7zKC6sZJBV85LZk8Q0k3mQkd2JaztYKql05CG0aSCuxC/B mAdviya5nlkpZf4mI30+3wAjrntaOyOOwamHTbJCNlLRQ1EuAPvIglhizCCAVQSp Ik6lBAwHOEzW/Tl74Mhy7VnEcoqn6wYiNZydNy2musNyjeGbh3MV+LRyfWRCwCqN HrmHbvwj1ijCTQajL6RHegH4MGGADDolBewAEm/ZfzOJfEG8xMTFr5Q9D6kZ9uin CMbXW5AGzHfrQgDbqzf+csMuWhPfycBoknMxUr18dfNU2zeBToxisg+hZFetAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcBIW0jp/K/V5CVTEl/cFJGnCdyEwHwYDVR0j BBgwFoAUNph/HSZRQkSa8R8TjoTjriOYu3EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDJkNmQwZGYtYzIxZS00OTFjLWIxMTYtNGExZDlhMmM3NGJlLzAvMzY5ODdGMUQy NjUxNDI0NDlBRjExRjEzOEU4NEUzQUUyMzk4QkI3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNjk4N0YxRDI2NTE0MjQ0OUFGMTFGMTM4RTg0RTNBRTIzOThC QjcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDJkNmQwZGYtYzIxZS00OTFjLWIx MTYtNGExZDlhMmM3NGJlLzAvMzY5ODdGMUQyNjUxNDI0NDlBRjExRjEzOEU4NEUz QUUyMzk4QkI3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADS3ZhmvGf1yxIHKHSIq3H4Ig8vjjehx7U6+ ybfv6X/Vvl09UrhvuJQnQSATQ6bOKrEDUslkJ07ZYjxvY1dC/R4DQVUN8oErSBI4 u4d8MKlpjoUc9Bq66Ng9eVELJFiHy2Y7JdNikvZIdLyMDo0evxvoJj19sS67fdH1 5osx/dBFtNuWxk3fC75msoeJpOt2wJw7pVmodqGAqyoAwD5Bq8L/LVNblxDv/IAj ffmAEGnon0mcpWRmXUAjtfGlD9q3iSSi3xnjIfkdW/0araEpUrKn2Co0waJzyOPm W5XO62L2Fb5/KyGuMLFeFPXjhYgaxWkhb9ERlxI/NFRcGSAgo0I= -----END CERTIFICATE-----Generated at Wed Jul 29 18:28:27 2026 by rpki-client