$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e7042190-62de-4c7b-b3a2-7b15de27e5dc/0/36E426816DDAEB8BE08D8A8210459EC65295BFEA.mft File: 36E426816DDAEB8BE08D8A8210459EC65295BFEA.mft (raw, json) Hash identifier: CYrmXFaonQyVXDYaoPmFtxTAQkzjagpU3lQbY017sx0= Subject key identifier: 1B:18:5D:2F:E8:1A:AB:48:FD:B7:A4:BA:B6:6F:48:08:48:64:46:32 Authority key identifier: 36:E4:26:81:6D:DA:EB:8B:E0:8D:8A:82:10:45:9E:C6:52:95:BF:EA Certificate issuer: /CN=36E426816DDAEB8BE08D8A8210459EC65295BFEA Certificate serial: 4A11272554AB53CDC7571AE5A7C2EF794526DB91 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/36E426816DDAEB8BE08D8A8210459EC65295BFEA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e7042190-62de-4c7b-b3a2-7b15de27e5dc/0/36E426816DDAEB8BE08D8A8210459EC65295BFEA.mft Manifest number: BC Signing time: Mon 21 Sep 2026 00:57:40 +0000 Manifest this update: Mon 21 Sep 2026 00:52:40 +0000 Manifest next update: Tue 22 Sep 2026 02:06:40 +0000 Files and hashes: 1: 36E426816DDAEB8BE08D8A8210459EC65295BFEA.crl (hash: UA31KEx0bzRAM4B/L5alSqnub2J2Xeo4zDljO/YwF8Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e7042190-62de-4c7b-b3a2-7b15de27e5dc/0/36E426816DDAEB8BE08D8A8210459EC65295BFEA.crl rsync://rpki-rsync.idnic.net/repo/e7042190-62de-4c7b-b3a2-7b15de27e5dc/0/36E426816DDAEB8BE08D8A8210459EC65295BFEA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/36E426816DDAEB8BE08D8A8210459EC65295BFEA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 02:06:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:11:27:25:54:ab:53:cd:c7:57:1a:e5:a7:c2:ef:79:45:26:db:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36E426816DDAEB8BE08D8A8210459EC65295BFEA Validity Not Before: Sep 21 00:52:40 2026 GMT Not After : Sep 22 02:06:40 2026 GMT Subject: CN=1B185D2FE81AAB48FDB7A4BAB66F480848644632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ad:48:84:a9:76:41:0b:cd:c8:c1:b7:2f:2f: 63:43:31:b8:a6:83:41:5c:9a:fa:d0:40:4d:3b:f2: c8:78:d0:74:1a:88:2a:fa:50:f7:22:30:d6:c9:3c: 55:57:8e:4e:bd:73:fd:fe:71:76:80:8a:8a:84:a5: ef:a1:c9:3d:75:52:ab:c5:a3:95:54:6c:26:6b:1a: e8:32:f2:ff:2d:02:2c:35:49:c3:17:8f:96:7b:7f: 01:fe:32:4e:89:5b:c6:b9:a8:d2:97:65:96:6f:50: d0:d9:34:aa:22:a7:13:21:d7:08:a1:e4:69:fc:a1: d8:00:33:81:34:a5:80:12:f4:95:a3:be:3b:58:18: 56:31:78:f6:e0:03:eb:3a:86:01:6c:5f:c7:3e:43: 47:59:b7:d3:16:10:3c:a1:b4:15:72:52:00:f4:ab: 6f:75:f2:13:b7:e6:8d:92:61:f2:9a:a9:89:96:26: 5e:66:d0:9b:b0:9f:29:ca:3b:38:94:54:c3:d2:72: fe:ff:ee:00:a4:2e:5a:8c:b3:b3:3a:48:9f:74:58: 06:d8:ef:ea:b5:c4:08:bb:ec:f4:70:f1:10:3a:b3: ea:d7:ab:94:17:2f:57:db:83:c5:79:49:2d:b0:68: 06:0f:46:e7:64:c7:b5:0e:e3:3d:0c:00:95:e8:31: 37:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:18:5D:2F:E8:1A:AB:48:FD:B7:A4:BA:B6:6F:48:08:48:64:46:32 X509v3 Authority Key Identifier: keyid:36:E4:26:81:6D:DA:EB:8B:E0:8D:8A:82:10:45:9E:C6:52:95:BF:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e7042190-62de-4c7b-b3a2-7b15de27e5dc/0/36E426816DDAEB8BE08D8A8210459EC65295BFEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/36E426816DDAEB8BE08D8A8210459EC65295BFEA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e7042190-62de-4c7b-b3a2-7b15de27e5dc/0/36E426816DDAEB8BE08D8A8210459EC65295BFEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:fe:86:47:aa:07:fa:96:63:78:4a:7f:40:b6:bb:8a:bf:32: 07:a8:26:6f:a1:d1:d2:46:2e:53:83:48:54:d6:0d:46:70:d8: fd:b8:a7:0f:82:f4:7f:d8:0d:7e:82:ba:6d:11:ff:88:e7:93: 72:20:4a:92:f3:3c:4c:f2:31:62:c4:3b:58:94:f0:c3:d1:d8: 59:53:c7:32:64:10:93:41:4b:ae:5a:e9:86:03:ab:d1:59:b9: 95:ab:28:5f:9f:28:f4:20:7e:55:f0:27:23:43:d8:fe:17:66: d9:61:e6:1e:d7:7e:7e:3d:31:b2:da:fb:96:5e:ba:3f:79:9c: 48:3c:55:70:df:6d:e9:db:72:9e:9c:49:d1:a2:21:85:75:89: 4a:f2:44:5b:b2:d1:d1:8e:0e:e4:df:e4:37:e2:0f:2e:cb:dd: f3:da:3f:0d:e9:8d:76:f1:75:27:b6:83:49:df:4d:ac:13:44: 15:79:02:e6:16:0e:31:84:c7:56:62:7c:34:f9:e5:69:d6:f4: ab:27:36:ae:da:26:c1:84:47:68:ad:37:7d:ba:03:2e:ba:78: 9d:31:8d:6d:6e:d3:69:79:17:76:e6:26:51:62:3b:6e:85:2d: 31:bc:a2:e8:c9:c0:9e:3f:1e:e8:5d:c6:4f:8b:ae:4a:a5:e4: d8:f3:4b:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUShEnJVSrU83HVxrlp8LveUUm25EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzZFNDI2ODE2RERBRUI4QkUwOEQ4QTgyMTA0NTlFQzY1 Mjk1QkZFQTAeFw0yNjA5MjEwMDUyNDBaFw0yNjA5MjIwMjA2NDBaMDMxMTAvBgNV BAMTKDFCMTg1RDJGRTgxQUFCNDhGREI3QTRCQUI2NkY0ODA4NDg2NDQ2MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNrUiEqXZBC83IwbcvL2NDMbim g0FcmvrQQE078sh40HQaiCr6UPciMNbJPFVXjk69c/3+cXaAioqEpe+hyT11UqvF o5VUbCZrGugy8v8tAiw1ScMXj5Z7fwH+Mk6JW8a5qNKXZZZvUNDZNKoipxMh1wih 5Gn8odgAM4E0pYAS9JWjvjtYGFYxePbgA+s6hgFsX8c+Q0dZt9MWEDyhtBVyUgD0 q2918hO35o2SYfKaqYmWJl5m0JuwnynKOziUVMPScv7/7gCkLlqMs7M6SJ90WAbY 7+q1xAi77PRw8RA6s+rXq5QXL1fbg8V5SS2waAYPRudkx7UO4z0MAJXoMTf9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGxhdL+gaq0j9t6S6tm9ICEhkRjIwHwYDVR0j BBgwFoAUNuQmgW3a64vgjYqCEEWexlKVv+owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTcwNDIxOTAtNjJkZS00YzdiLWIzYTItN2IxNWRlMjdlNWRjLzAvMzZFNDI2ODE2 RERBRUI4QkUwOEQ4QTgyMTA0NTlFQzY1Mjk1QkZFQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNkU0MjY4MTZEREFFQjhCRTA4RDhBODIxMDQ1OUVDNjUyOTVC RkVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTcwNDIxOTAtNjJkZS00YzdiLWIz YTItN2IxNWRlMjdlNWRjLzAvMzZFNDI2ODE2RERBRUI4QkUwOEQ4QTgyMTA0NTlF QzY1Mjk1QkZFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEv+hkeqB/qWY3hKf0C2u4q/MgeoJm+h0dJG LlODSFTWDUZw2P24pw+C9H/YDX6Cum0R/4jnk3IgSpLzPEzyMWLEO1iU8MPR2FlT xzJkEJNBS65a6YYDq9FZuZWrKF+fKPQgflXwJyND2P4XZtlh5h7Xfn49MbLa+5Ze uj95nEg8VXDfbenbcp6cSdGiIYV1iUryRFuy0dGODuTf5DfiDy7L3fPaPw3pjXbx dSe2g0nfTawTRBV5AuYWDjGEx1ZifDT55WnW9KsnNq7aJsGER2itN326Ay66eJ0x jW1u02l5F3bmJlFiO26FLTG8oujJwJ4/Huhdxk+Lrkql5NjzS0Q= -----END CERTIFICATE-----Generated at Mon Sep 21 09:55:36 2026 by rpki-client