$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.mft File: 3D36B37BDE25595112D2BB921B7F36C6A161CBA1.mft (raw, json) Hash identifier: T14cnUkYEESgtSz0aRLKBp8IS4+rOZ1zCbmE4skU4/U= Subject key identifier: 4F:2D:65:0E:7D:A1:03:DE:6D:22:5D:45:3E:FB:1B:C1:AA:0C:72:65 Authority key identifier: 3D:36:B3:7B:DE:25:59:51:12:D2:BB:92:1B:7F:36:C6:A1:61:CB:A1 Certificate issuer: /CN=3D36B37BDE25595112D2BB921B7F36C6A161CBA1 Certificate serial: 69EECD07CA4402D8760B25F53428E7CFC38B6DFD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 07:51:04 +0000 Manifest this update: Wed 23 Sep 2026 07:46:04 +0000 Manifest next update: Thu 24 Sep 2026 08:40:04 +0000 Files and hashes: 1: 3130332e3130392e32362e302f32342d3234203d3e20313337333131.roa (hash: Doi0z4NEkGv6RXLNnraqWYaR8sRBho22P+RDGrr47z8=) 2: 3130332e3130392e32372e302f32342d3234203d3e20313337333131.roa (hash: G6e1r3DRuRea+xhgobcaC8YJTmew1ogfm81bEXCrCm0=) 3: 3130332e3130392e32352e302f32342d3234203d3e20313337333131.roa (hash: hSf4M6pKMLscH8R7TfP9AjqFEoXEdb3myJnr9z/AlaE=) 4: 3D36B37BDE25595112D2BB921B7F36C6A161CBA1.crl (hash: 1V/tobDX5F25igI2QGKPD5nrLNLcBM6Aa7mbXnxrWp8=) 5: 3130332e3130392e32342e302f32342d3234203d3e20313337333131.roa (hash: yRTCL3qqZl+3vfyw12FbHiGh+XgdfssrTdi86LJj3XA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.crl rsync://rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 05:37:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:ee:cd:07:ca:44:02:d8:76:0b:25:f5:34:28:e7:cf:c3:8b:6d:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D36B37BDE25595112D2BB921B7F36C6A161CBA1 Validity Not Before: Sep 23 07:46:04 2026 GMT Not After : Sep 24 08:40:04 2026 GMT Subject: CN=4F2D650E7DA103DE6D225D453EFB1BC1AA0C7265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ac:35:b5:2f:98:b6:22:ac:5a:c5:60:88:76: 11:54:61:76:8e:bf:6e:0e:92:59:ed:bd:79:bb:3e: c8:3f:80:73:c0:39:2a:ef:f3:05:5a:3e:26:6c:ff: b6:1e:d1:1a:2e:50:45:28:af:32:02:cb:ab:fe:d5: 1a:1f:da:f0:84:c6:79:0c:f8:63:47:08:17:4b:03: be:41:fa:94:90:4c:c3:1f:e3:cc:a0:36:8f:a4:4b: 23:0a:b6:25:8a:74:f3:a9:02:f8:eb:bc:0c:45:45: 17:a0:bb:55:a8:55:25:d2:1f:b7:26:05:cf:8c:7c: 18:cf:ac:41:3e:44:6c:f8:79:13:36:3c:26:0d:0c: 2c:92:e7:b2:58:4b:a1:70:dd:94:45:c0:ea:1b:33: f8:c2:bd:d1:c9:48:fd:59:cb:de:73:8a:09:30:e5: 83:42:0c:d2:8b:f3:7a:40:ad:4d:1f:63:21:7a:c5: 3c:12:89:ea:7d:d6:48:46:a3:cb:7d:5b:09:9c:a1: 51:6a:7a:03:8a:b8:6e:53:8a:1c:ec:95:10:ff:59: 65:cd:22:ba:dd:00:84:a1:e9:d3:33:3b:23:31:b7: 3c:ed:36:e6:3e:7e:2a:05:66:d2:d0:45:6d:31:6a: 4f:e0:a6:24:9c:9a:db:1c:ce:b2:1e:01:54:c3:51: d4:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:2D:65:0E:7D:A1:03:DE:6D:22:5D:45:3E:FB:1B:C1:AA:0C:72:65 X509v3 Authority Key Identifier: keyid:3D:36:B3:7B:DE:25:59:51:12:D2:BB:92:1B:7F:36:C6:A1:61:CB:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:dc:2d:f8:c5:cc:de:0b:78:f0:dc:e8:fe:ef:de:11:14:a8: 3a:51:cf:7f:79:fb:ac:1f:61:13:bb:00:3a:b5:83:5f:34:52: ae:d2:88:35:9a:48:91:76:a0:ea:39:7d:ea:d3:e7:82:bf:49: 14:e8:92:d3:f5:9e:ae:28:0e:b4:a1:00:99:59:45:06:ce:79: 2b:ec:ab:04:39:4d:05:2f:fa:de:e1:64:67:fb:4b:ee:46:93: c5:5a:e0:6f:11:28:e2:43:2e:a5:c8:37:30:bb:d7:35:ba:eb: ae:0c:a2:b5:84:56:a6:45:b3:3c:61:cf:0d:80:f1:08:3c:50: e4:8f:e9:79:fa:54:a5:9c:d1:01:f2:61:4f:fd:1c:ce:18:04: 85:40:93:e9:44:0a:3e:92:b4:5b:e1:1d:6e:ac:09:68:af:f1: 96:43:b0:3d:22:02:5b:45:27:47:e4:9d:90:ac:1c:2a:f8:f9: 15:b0:2a:8d:ee:a6:69:03:fa:ce:a7:9f:68:31:7e:5e:6b:13: 64:b6:3f:6d:ce:f4:13:fa:9c:e1:ab:ba:63:75:f8:7e:13:7b: 0c:ab:dd:85:fa:ee:38:27:c6:18:b2:e4:60:a4:ea:fd:7b:be: 89:1a:14:8f:dd:67:42:7b:f5:4b:e5:ce:5a:6e:cc:c1:68:ff: a1:dd:62:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUae7NB8pEAth2CyX1NCjnz8OLbf0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0QzNkIzN0JERTI1NTk1MTEyRDJCQjkyMUI3RjM2QzZB MTYxQ0JBMTAeFw0yNjA5MjMwNzQ2MDRaFw0yNjA5MjQwODQwMDRaMDMxMTAvBgNV BAMTKDRGMkQ2NTBFN0RBMTAzREU2RDIyNUQ0NTNFRkIxQkMxQUEwQzcyNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1rDW1L5i2IqxaxWCIdhFUYXaO v24OklntvXm7Psg/gHPAOSrv8wVaPiZs/7Ye0RouUEUorzICy6v+1Rof2vCExnkM +GNHCBdLA75B+pSQTMMf48ygNo+kSyMKtiWKdPOpAvjrvAxFRRegu1WoVSXSH7cm Bc+MfBjPrEE+RGz4eRM2PCYNDCyS57JYS6Fw3ZRFwOobM/jCvdHJSP1Zy95zigkw 5YNCDNKL83pArU0fYyF6xTwSiep91khGo8t9WwmcoVFqegOKuG5TihzslRD/WWXN IrrdAISh6dMzOyMxtzztNuY+fioFZtLQRW0xak/gpiScmtsczrIeAVTDUdTZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTy1lDn2hA95tIl1FPvsbwaoMcmUwHwYDVR0j BBgwFoAUPTaze94lWVES0ruSG382xqFhy6EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDgzNWNiNGEtMmZiOS00MGQ3LWIxNTUtZGNjZTdjYjAwMjkzLzAvM0QzNkIzN0JE RTI1NTk1MTEyRDJCQjkyMUI3RjM2QzZBMTYxQ0JBMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRDM2QjM3QkRFMjU1OTUxMTJEMkJCOTIxQjdGMzZDNkExNjFD QkExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDgzNWNiNGEtMmZiOS00MGQ3LWIx NTUtZGNjZTdjYjAwMjkzLzAvM0QzNkIzN0JERTI1NTk1MTEyRDJCQjkyMUI3RjM2 QzZBMTYxQ0JBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ/cLfjFzN4LePDc6P7v3hEUqDpRz395+6wf YRO7ADq1g180Uq7SiDWaSJF2oOo5ferT54K/SRToktP1nq4oDrShAJlZRQbOeSvs qwQ5TQUv+t7hZGf7S+5Gk8Va4G8RKOJDLqXINzC71zW6664MorWEVqZFszxhzw2A 8Qg8UOSP6Xn6VKWc0QHyYU/9HM4YBIVAk+lECj6StFvhHW6sCWiv8ZZDsD0iAltF J0fknZCsHCr4+RWwKo3upmkD+s6nn2gxfl5rE2S2P23O9BP6nOGrumN1+H4Tewyr 3YX67jgnxhiy5GCk6v17vokaFI/dZ0J79UvlzlpuzMFo/6HdYhg= -----END CERTIFICATE-----Generated at Wed Sep 23 09:56:57 2026 by rpki-client