$ rpki-client -vvf rpki-rsync.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/36987F1D265142449AF11F138E84E3AE2398BB71.mft File: 36987F1D265142449AF11F138E84E3AE2398BB71.mft (raw, json) Hash identifier: g+U9kz+5uItcCMIze5kKvlOpTXkM55AQf3BW1KebjIw= Subject key identifier: 05:BD:94:A5:0A:CD:43:D2:0C:70:8E:D8:A1:AD:8C:81:0C:4E:BB:25 Authority key identifier: 36:98:7F:1D:26:51:42:44:9A:F1:1F:13:8E:84:E3:AE:23:98:BB:71 Certificate issuer: /CN=36987F1D265142449AF11F138E84E3AE2398BB71 Certificate serial: 0DE4C1F24965979CDDD465DC6E0779A3C5AB882B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/36987F1D265142449AF11F138E84E3AE2398BB71.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/36987F1D265142449AF11F138E84E3AE2398BB71.mft Manifest number: 3A Signing time: Sun 14 Jun 2026 04:43:38 +0000 Manifest this update: Sun 14 Jun 2026 04:38:38 +0000 Manifest next update: Mon 15 Jun 2026 05:01:38 +0000 Files and hashes: 1: 3130332e3131322e3232332e302f32342d3234203d3e20313337333338.roa (hash: a3+GsbTZLmVRS7NxLcoTxVxS7Q4Y+JKlGjV758bCCgw=) 2: 36987F1D265142449AF11F138E84E3AE2398BB71.crl (hash: 2faf/3ZryOisg9xoAddXgxSRtFygoDqqWNpK1v9zUf0=) 3: 3130332e3131322e3232332e302f32342d3234203d3e203338343936.roa (hash: GYqQuuT/LudwwxgSc6XR1akIqTm1hPmdsuPIZrL2W/E=) 4: 323030313a6466343a626430303a3a2f34382d3438203d3e20313337333338.roa (hash: svBe8CrZWGOGef404cwoRo2+yXAKzM2eujaije66wpU=) 5: 323030313a6466343a626430303a3a2f34382d3438203d3e203338343936.roa (hash: Bnl6nUu+xtavXODjc9t+OxHVrv/heBfP+6/XJ45t3VI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/36987F1D265142449AF11F138E84E3AE2398BB71.crl rsync://rpki-rsync.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/36987F1D265142449AF11F138E84E3AE2398BB71.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/36987F1D265142449AF11F138E84E3AE2398BB71.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Jun 2026 05:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:e4:c1:f2:49:65:97:9c:dd:d4:65:dc:6e:07:79:a3:c5:ab:88:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36987F1D265142449AF11F138E84E3AE2398BB71 Validity Not Before: Jun 14 04:38:38 2026 GMT Not After : Jun 15 05:01:38 2026 GMT Subject: CN=05BD94A50ACD43D20C708ED8A1AD8C810C4EBB25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4b:61:3d:53:33:e8:98:db:5b:83:31:5a:c3: aa:3d:26:05:fd:07:65:3b:ca:8f:5e:c0:07:4d:d5: 7c:a0:f5:91:a1:26:ed:00:0f:d1:33:37:84:c5:b1: fd:ec:97:01:11:43:3e:f2:5b:b1:1c:3a:67:db:38: e9:c1:67:88:8f:37:95:f4:bc:20:a1:78:85:51:01: 30:0b:bd:f4:0f:ee:ac:f2:89:9e:02:2d:53:0c:a3: 98:69:ba:d0:69:34:9d:7c:3e:2a:33:04:69:5c:02: 7e:79:6f:ea:28:a1:9f:f8:ef:7b:75:92:4c:7e:97: e1:0c:03:12:0d:b8:7e:59:85:09:f0:97:1b:7c:1b: 6c:ee:e8:14:df:ad:e3:55:6e:dc:90:aa:29:1f:fe: 0e:3d:06:5b:c7:59:e5:0a:94:fd:cb:76:a8:f4:f2: be:bf:c9:37:d0:ce:63:d9:bd:9c:f1:5c:22:d8:fa: 4d:54:f5:10:35:4c:c0:94:ac:98:85:29:d1:1b:2f: 9e:1b:7b:13:c3:93:cc:73:98:5f:26:de:fb:5c:df: 83:31:9e:fc:e8:ee:ce:a5:93:5f:ca:94:e6:7a:b6: 7d:16:94:19:5e:67:c2:ec:d9:58:58:2e:28:8e:81: 25:7b:fb:83:cc:a1:0d:71:14:b4:75:4e:45:44:69: 1c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:BD:94:A5:0A:CD:43:D2:0C:70:8E:D8:A1:AD:8C:81:0C:4E:BB:25 X509v3 Authority Key Identifier: keyid:36:98:7F:1D:26:51:42:44:9A:F1:1F:13:8E:84:E3:AE:23:98:BB:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/36987F1D265142449AF11F138E84E3AE2398BB71.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/36987F1D265142449AF11F138E84E3AE2398BB71.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/36987F1D265142449AF11F138E84E3AE2398BB71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:60:7e:b1:80:99:48:09:0a:56:82:13:ef:17:c4:d0:36:47: 2c:5e:fe:61:09:b4:02:de:27:ae:4f:86:98:b4:ac:9d:7f:21: 50:2e:fd:e9:9b:4e:0a:51:54:24:86:9f:95:ad:c7:9b:64:50: 0e:8c:d7:ae:25:e8:f3:be:4b:12:81:f9:94:9f:f5:86:b1:91: d8:e0:ba:6a:78:b8:e0:40:2f:6f:d4:22:93:84:74:ad:16:9a: bc:83:94:9f:c2:84:9d:87:af:3a:77:57:65:db:e5:50:10:86: 05:59:b2:bf:cf:22:ac:b8:82:bf:d6:42:ff:89:cc:2b:d6:7e: fc:c9:a4:0e:43:7e:c7:5c:60:5f:fe:54:05:26:54:c5:27:bc: e3:e9:b8:ea:75:e1:db:aa:2c:13:a4:e0:e7:f0:93:d3:30:38: 7a:c4:55:89:80:df:0b:73:be:f9:1f:df:99:d7:86:8b:86:26: f4:37:86:82:4f:9c:16:d8:93:6e:80:be:c9:98:83:51:48:87: 36:3c:96:77:5d:e6:4a:2c:50:41:26:da:a1:54:a6:f4:f5:b7: 2d:0e:09:14:d2:b7:28:f5:68:f5:6a:d9:c4:a8:72:ad:66:7f: b2:97:49:30:72:07:d4:27:a7:e4:91:a9:13:43:f2:82:70:29: b7:15:32:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDeTB8klll5zd1GXcbgd5o8WriCswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY5ODdGMUQyNjUxNDI0NDlBRjExRjEzOEU4NEUzQUUy Mzk4QkI3MTAeFw0yNjA2MTQwNDM4MzhaFw0yNjA2MTUwNTAxMzhaMDMxMTAvBgNV BAMTKDA1QkQ5NEE1MEFDRDQzRDIwQzcwOEVEOEExQUQ4QzgxMEM0RUJCMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmS2E9UzPomNtbgzFaw6o9JgX9 B2U7yo9ewAdN1Xyg9ZGhJu0AD9EzN4TFsf3slwERQz7yW7EcOmfbOOnBZ4iPN5X0 vCCheIVRATALvfQP7qzyiZ4CLVMMo5hputBpNJ18PiozBGlcAn55b+oooZ/473t1 kkx+l+EMAxINuH5ZhQnwlxt8G2zu6BTfreNVbtyQqikf/g49BlvHWeUKlP3Ldqj0 8r6/yTfQzmPZvZzxXCLY+k1U9RA1TMCUrJiFKdEbL54bexPDk8xzmF8m3vtc34Mx nvzo7s6lk1/KlOZ6tn0WlBleZ8Ls2VhYLiiOgSV7+4PMoQ1xFLR1TkVEaRwnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBb2UpQrNQ9IMcI7Yoa2MgQxOuyUwHwYDVR0j BBgwFoAUNph/HSZRQkSa8R8TjoTjriOYu3EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDJkNmQwZGYtYzIxZS00OTFjLWIxMTYtNGExZDlhMmM3NGJlLzAvMzY5ODdGMUQy NjUxNDI0NDlBRjExRjEzOEU4NEUzQUUyMzk4QkI3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNjk4N0YxRDI2NTE0MjQ0OUFGMTFGMTM4RTg0RTNBRTIzOThC QjcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDJkNmQwZGYtYzIxZS00OTFjLWIx MTYtNGExZDlhMmM3NGJlLzAvMzY5ODdGMUQyNjUxNDI0NDlBRjExRjEzOEU4NEUz QUUyMzk4QkI3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKhgfrGAmUgJClaCE+8XxNA2Ryxe/mEJtALe J65Phpi0rJ1/IVAu/embTgpRVCSGn5Wtx5tkUA6M164l6PO+SxKB+ZSf9Yaxkdjg ump4uOBAL2/UIpOEdK0WmryDlJ/ChJ2Hrzp3V2Xb5VAQhgVZsr/PIqy4gr/WQv+J zCvWfvzJpA5DfsdcYF/+VAUmVMUnvOPpuOp14duqLBOk4Ofwk9MwOHrEVYmA3wtz vvkf35nXhouGJvQ3hoJPnBbYk26AvsmYg1FIhzY8lndd5kosUEEm2qFUpvT1ty0O CRTStyj1aPVq2cSocq1mf7KXSTByB9Qnp+SRqRND8oJwKbcVMuQ= -----END CERTIFICATE-----Generated at Sun Jun 14 12:17:42 2026 by rpki-client