$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.mft File: 3D36B37BDE25595112D2BB921B7F36C6A161CBA1.mft (raw, json) Hash identifier: Jjlfq/dQL7vvI41OOeagPELl2tA1SV3fFmR/PfrRIxA= Subject key identifier: AB:5B:27:46:4A:12:03:1C:07:C4:19:2E:7F:E2:BF:BF:C1:93:3D:41 Authority key identifier: 3D:36:B3:7B:DE:25:59:51:12:D2:BB:92:1B:7F:36:C6:A1:61:CB:A1 Certificate issuer: /CN=3D36B37BDE25595112D2BB921B7F36C6A161CBA1 Certificate serial: 186C6D494DEAE18BA2DEDE147610AB2FBF9FC7EB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 14:34:29 +0000 Manifest this update: Tue 22 Sep 2026 14:29:29 +0000 Manifest next update: Wed 23 Sep 2026 15:49:29 +0000 Files and hashes: 1: 3D36B37BDE25595112D2BB921B7F36C6A161CBA1.crl (hash: fomdakNrXHIR/cMbzQOofgruxL9rTozaOrzE+OcAUzY=) 2: 3130332e3130392e32362e302f32342d3234203d3e20313337333131.roa (hash: Doi0z4NEkGv6RXLNnraqWYaR8sRBho22P+RDGrr47z8=) 3: 3130332e3130392e32352e302f32342d3234203d3e20313337333131.roa (hash: hSf4M6pKMLscH8R7TfP9AjqFEoXEdb3myJnr9z/AlaE=) 4: 3130332e3130392e32342e302f32342d3234203d3e20313337333131.roa (hash: yRTCL3qqZl+3vfyw12FbHiGh+XgdfssrTdi86LJj3XA=) 5: 3130332e3130392e32372e302f32342d3234203d3e20313337333131.roa (hash: G6e1r3DRuRea+xhgobcaC8YJTmew1ogfm81bEXCrCm0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.crl rsync://rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 15:49:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:6c:6d:49:4d:ea:e1:8b:a2:de:de:14:76:10:ab:2f:bf:9f:c7:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D36B37BDE25595112D2BB921B7F36C6A161CBA1 Validity Not Before: Sep 22 14:29:29 2026 GMT Not After : Sep 23 15:49:29 2026 GMT Subject: CN=AB5B27464A12031C07C4192E7FE2BFBFC1933D41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:bf:fa:0d:97:89:23:fa:10:ea:2b:75:fb:23: cf:ac:23:7d:62:88:11:ea:be:36:a7:1a:67:22:95: dd:a8:68:10:df:68:1e:ec:57:cd:8c:9a:29:97:f8: 88:ca:a4:b9:3c:c0:15:a7:15:ce:8d:fd:cd:e2:ca: 43:26:e9:51:ba:48:af:54:f1:c3:98:af:b1:47:f7: 98:b8:31:91:2d:d6:50:cf:7f:2e:c6:0b:c0:44:5a: a1:4c:db:9d:87:e2:c1:e9:b6:ef:b0:50:b8:e5:33: 48:51:ed:1c:1f:ce:4e:0e:31:67:6b:6b:58:2e:51: 15:e8:75:b8:bc:38:bb:67:d8:49:96:dd:bc:60:ba: f4:1b:c4:c9:9e:5a:86:54:cc:11:ce:e2:c5:5c:ec: 72:2d:86:3d:6b:d9:c0:7d:d4:1a:7a:a9:aa:07:74: 42:54:1d:00:74:6f:ff:1c:13:ab:a8:18:31:e5:71: 3a:4c:1a:c9:45:41:c7:1f:29:bb:13:cf:3f:c4:ee: 91:63:94:c2:5c:a5:d0:46:6a:54:b2:fa:df:30:8a: 77:9a:29:7f:68:f2:fd:db:51:97:a3:3a:5a:d7:c3: aa:cb:53:f0:84:ef:4d:d4:a5:7c:96:b0:ba:8b:93: ec:6e:8a:ea:6b:91:49:04:80:83:91:79:68:66:68: 16:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:5B:27:46:4A:12:03:1C:07:C4:19:2E:7F:E2:BF:BF:C1:93:3D:41 X509v3 Authority Key Identifier: keyid:3D:36:B3:7B:DE:25:59:51:12:D2:BB:92:1B:7F:36:C6:A1:61:CB:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:dd:4f:ec:9f:07:c6:07:55:97:ed:a6:0d:ac:70:08:25:f4: b2:44:6a:d0:90:fe:3e:62:87:a7:61:9b:a7:a5:8d:02:59:ab: 2e:54:94:e7:6c:9f:46:88:44:42:6a:aa:2e:22:9d:19:b7:09: f0:4d:98:95:5a:d3:2d:cd:e0:09:2a:fe:ef:65:c8:f1:a4:42: d0:7f:50:4c:f3:1c:af:99:73:db:77:6a:8d:97:e5:34:eb:e0: 70:03:63:b6:c6:47:9b:d1:3a:2a:ae:29:34:59:05:52:de:19: 88:d3:9d:2e:b6:f3:7e:9f:a0:b8:7d:03:d8:11:50:b7:73:83: 11:9f:b4:88:7b:d1:ba:54:c2:06:85:a1:14:4f:25:d4:be:7f: 0e:fa:db:75:7e:76:8b:6e:45:bc:77:3f:95:1b:2b:8d:65:aa: f4:f8:dd:cc:c1:b9:b6:40:e1:32:95:b4:36:48:95:f4:fa:f5: 1a:b7:3f:2f:77:8e:46:76:49:23:16:1d:98:64:1a:ae:44:1a: e5:91:6a:11:c4:04:49:0c:79:ba:ec:59:d0:0a:31:01:81:77: 5e:9f:a7:1a:90:95:86:25:fe:94:cd:77:7e:5f:d1:c7:a0:8d: 65:10:ed:8e:2f:f7:3d:bf:ac:3f:db:be:ae:b8:b1:6d:64:1d: df:09:a3:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGGxtSU3q4Yui3t4UdhCrL7+fx+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0QzNkIzN0JERTI1NTk1MTEyRDJCQjkyMUI3RjM2QzZB MTYxQ0JBMTAeFw0yNjA5MjIxNDI5MjlaFw0yNjA5MjMxNTQ5MjlaMDMxMTAvBgNV BAMTKEFCNUIyNzQ2NEExMjAzMUMwN0M0MTkyRTdGRTJCRkJGQzE5MzNENDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgv/oNl4kj+hDqK3X7I8+sI31i iBHqvjanGmcild2oaBDfaB7sV82MmimX+IjKpLk8wBWnFc6N/c3iykMm6VG6SK9U 8cOYr7FH95i4MZEt1lDPfy7GC8BEWqFM252H4sHptu+wULjlM0hR7Rwfzk4OMWdr a1guURXodbi8OLtn2EmW3bxguvQbxMmeWoZUzBHO4sVc7HIthj1r2cB91Bp6qaoH dEJUHQB0b/8cE6uoGDHlcTpMGslFQccfKbsTzz/E7pFjlMJcpdBGalSy+t8winea KX9o8v3bUZejOlrXw6rLU/CE703UpXyWsLqLk+xuiuprkUkEgIOReWhmaBZ5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq1snRkoSAxwHxBkuf+K/v8GTPUEwHwYDVR0j BBgwFoAUPTaze94lWVES0ruSG382xqFhy6EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDgzNWNiNGEtMmZiOS00MGQ3LWIxNTUtZGNjZTdjYjAwMjkzLzAvM0QzNkIzN0JE RTI1NTk1MTEyRDJCQjkyMUI3RjM2QzZBMTYxQ0JBMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRDM2QjM3QkRFMjU1OTUxMTJEMkJCOTIxQjdGMzZDNkExNjFD QkExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDgzNWNiNGEtMmZiOS00MGQ3LWIx NTUtZGNjZTdjYjAwMjkzLzAvM0QzNkIzN0JERTI1NTk1MTEyRDJCQjkyMUI3RjM2 QzZBMTYxQ0JBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF/dT+yfB8YHVZftpg2scAgl9LJEatCQ/j5i h6dhm6eljQJZqy5UlOdsn0aIREJqqi4inRm3CfBNmJVa0y3N4Akq/u9lyPGkQtB/ UEzzHK+Zc9t3ao2X5TTr4HADY7bGR5vROiquKTRZBVLeGYjTnS62836foLh9A9gR ULdzgxGftIh70bpUwgaFoRRPJdS+fw7623V+dotuRbx3P5UbK41lqvT43czBubZA 4TKVtDZIlfT69Rq3Py93jkZ2SSMWHZhkGq5EGuWRahHEBEkMebrsWdAKMQGBd16f pxqQlYYl/pTNd35f0cegjWUQ7Y4v9z2/rD/bvq64sW1kHd8Jo4k= -----END CERTIFICATE-----Generated at Tue Sep 22 22:28:44 2026 by rpki-client