$ rpki-client -vvf rpki-rsync.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/07036C5527255D59345E40A173983EEEA0C09FD0.mft File: 07036C5527255D59345E40A173983EEEA0C09FD0.mft (raw, json) Hash identifier: My7bUTUNJHhz4zbsKXfW5/LOCRAgoMy8HXc1x6BCwZ4= Subject key identifier: D4:23:AC:C3:B8:76:11:83:BD:FC:DD:D0:EF:35:EC:3B:03:F0:92:E0 Authority key identifier: 07:03:6C:55:27:25:5D:59:34:5E:40:A1:73:98:3E:EE:A0:C0:9F:D0 Certificate issuer: /CN=07036C5527255D59345E40A173983EEEA0C09FD0 Certificate serial: 25F73340CB2237DD2589A5AF8ADB9673B7A518D5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07036C5527255D59345E40A173983EEEA0C09FD0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/07036C5527255D59345E40A173983EEEA0C09FD0.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 20:26:30 +0000 Manifest this update: Mon 20 Jul 2026 20:21:30 +0000 Manifest next update: Tue 21 Jul 2026 23:23:30 +0000 Files and hashes: 1: 07036C5527255D59345E40A173983EEEA0C09FD0.crl (hash: WFGr86TfhLr2p/ARTVDpZI4aQZzRzB88jrDHuUN9xcU=) 2: 3130332e3137322e3137302e302f32332d3233203d3e20313432333936.roa (hash: xCKI0MCHXup6mIiN8YCHZcQ0nipWKRsEPA9gZhTI18I=) 3: 3130332e3137322e3137312e302f32342d3234203d3e20313432333936.roa (hash: XhiLVWroBIGTKL45UQb8xrlJuP9CTy+d6X2Fb8sJelo=) 4: 3130332e3137322e3137302e302f32342d3234203d3e20313432333936.roa (hash: 4usmrutgY/beqY8KttmIEGM6ND+uj+WPCIUZTt7ix2A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/07036C5527255D59345E40A173983EEEA0C09FD0.crl rsync://rpki-rsync.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/07036C5527255D59345E40A173983EEEA0C09FD0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07036C5527255D59345E40A173983EEEA0C09FD0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 23:23:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:f7:33:40:cb:22:37:dd:25:89:a5:af:8a:db:96:73:b7:a5:18:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07036C5527255D59345E40A173983EEEA0C09FD0 Validity Not Before: Jul 20 20:21:30 2026 GMT Not After : Jul 21 23:23:30 2026 GMT Subject: CN=D423ACC3B8761183BDFCDDD0EF35EC3B03F092E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8b:03:43:5c:f0:22:55:e1:17:2a:2b:29:9f: 69:ee:a4:4f:e6:9e:79:d4:cf:4f:a8:41:2c:da:53: 9a:20:2b:6a:e5:31:a5:dd:c5:f6:52:de:59:8d:30: 4c:43:d0:e5:78:ef:a4:da:cd:ac:4d:25:0a:76:b8: 80:23:61:fc:f0:3c:95:6f:21:ff:dd:fa:e1:61:83: 21:e7:90:3e:94:6e:b0:4c:c1:49:37:4d:03:35:43: a5:6a:28:b4:3c:bd:f2:f9:56:90:51:75:e2:99:5c: 46:a5:41:56:96:9a:7e:32:f2:12:07:01:3e:4f:88: 13:6b:5d:b9:97:b0:91:64:e3:34:f6:36:8d:e5:9f: ec:dc:a3:7e:61:07:b8:aa:24:d6:db:dd:77:67:a9: 9a:d7:de:16:fd:ab:7b:32:81:03:d9:73:a0:87:47: 15:7f:64:5e:f0:6a:f1:68:cb:73:40:f3:43:bb:06: 62:de:f8:ab:9a:26:e1:6e:82:f5:05:d5:d9:a6:4c: 73:02:89:79:f1:63:2a:e7:39:40:ca:99:92:64:a5: a1:08:fe:15:d1:11:f7:3a:7c:32:d7:d6:3c:a9:97: 6b:b8:0e:10:05:f5:b9:04:7d:49:7f:b7:b6:7c:92: bc:36:d9:fa:3a:d7:17:6f:c5:96:6a:8b:42:c4:12: 88:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:23:AC:C3:B8:76:11:83:BD:FC:DD:D0:EF:35:EC:3B:03:F0:92:E0 X509v3 Authority Key Identifier: keyid:07:03:6C:55:27:25:5D:59:34:5E:40:A1:73:98:3E:EE:A0:C0:9F:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/07036C5527255D59345E40A173983EEEA0C09FD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07036C5527255D59345E40A173983EEEA0C09FD0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/07036C5527255D59345E40A173983EEEA0C09FD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:58:19:4e:bb:14:1f:a4:56:a4:ac:ce:50:f0:26:62:69:31: aa:f9:f6:4f:6c:13:f7:9a:3f:7b:fa:31:33:c2:c0:02:55:33: 8d:84:64:66:ce:c8:9f:c3:ec:83:dd:c2:9a:de:e8:cb:9d:c1: fc:24:21:1d:0a:8d:14:d1:8b:f8:99:b1:39:f6:58:e5:fb:a5: c9:ad:1a:94:66:f1:c3:d4:22:ad:08:cf:07:55:14:18:e3:3b: a6:19:01:14:e8:e1:2e:ce:e0:44:ab:e8:7a:2b:ca:b2:15:b3: 4d:2c:2b:7d:7a:73:7d:e4:37:2f:35:45:a6:1d:97:2c:0a:fd: ff:50:17:9e:d6:2d:27:04:1d:c8:7c:08:0d:60:eb:2b:e4:4a: ef:21:05:15:fe:3b:f4:41:7a:8c:98:95:54:0a:c8:b5:8f:eb: 4b:58:9d:3a:d0:5f:e3:8c:eb:25:89:59:40:d1:1c:d2:de:48: fd:cc:1e:e8:ea:4d:42:eb:fb:9c:e1:ac:3f:c5:62:a4:bd:71: 75:68:9d:60:33:8b:c9:fb:c3:4d:90:1f:a5:05:43:90:01:42: 32:a3:2b:da:08:cb:98:3c:54:e2:98:a0:cc:24:c6:51:cf:ad: 74:b4:ee:a0:b8:f5:26:e1:f8:aa:bd:ef:46:93:b1:0b:2c:21: 4d:4c:2f:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJfczQMsiN90liaWvituWc7elGNUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDcwMzZDNTUyNzI1NUQ1OTM0NUU0MEExNzM5ODNFRUVB MEMwOUZEMDAeFw0yNjA3MjAyMDIxMzBaFw0yNjA3MjEyMzIzMzBaMDMxMTAvBgNV BAMTKEQ0MjNBQ0MzQjg3NjExODNCREZDREREMEVGMzVFQzNCMDNGMDkyRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5iwNDXPAiVeEXKispn2nupE/m nnnUz0+oQSzaU5ogK2rlMaXdxfZS3lmNMExD0OV476TazaxNJQp2uIAjYfzwPJVv If/d+uFhgyHnkD6UbrBMwUk3TQM1Q6VqKLQ8vfL5VpBRdeKZXEalQVaWmn4y8hIH AT5PiBNrXbmXsJFk4zT2No3ln+zco35hB7iqJNbb3XdnqZrX3hb9q3sygQPZc6CH RxV/ZF7wavFoy3NA80O7BmLe+KuaJuFugvUF1dmmTHMCiXnxYyrnOUDKmZJkpaEI /hXREfc6fDLX1jypl2u4DhAF9bkEfUl/t7Z8krw22fo61xdvxZZqi0LEEoiVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1COsw7h2EYO9/N3Q7zXsOwPwkuAwHwYDVR0j BBgwFoAUBwNsVSclXVk0XkChc5g+7qDAn9AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjFkYjZjOWItZDhmYy00ZDhjLTgwY2ItZmQyMjQxMjA4ZGRlLzAvMDcwMzZDNTUy NzI1NUQ1OTM0NUU0MEExNzM5ODNFRUVBMEMwOUZEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNzAzNkM1NTI3MjU1RDU5MzQ1RTQwQTE3Mzk4M0VFRUEwQzA5 RkQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjFkYjZjOWItZDhmYy00ZDhjLTgw Y2ItZmQyMjQxMjA4ZGRlLzAvMDcwMzZDNTUyNzI1NUQ1OTM0NUU0MEExNzM5ODNF RUVBMEMwOUZEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJtYGU67FB+kVqSszlDwJmJpMar59k9sE/ea P3v6MTPCwAJVM42EZGbOyJ/D7IPdwpre6MudwfwkIR0KjRTRi/iZsTn2WOX7pcmt GpRm8cPUIq0IzwdVFBjjO6YZARTo4S7O4ESr6HoryrIVs00sK316c33kNy81RaYd lywK/f9QF57WLScEHch8CA1g6yvkSu8hBRX+O/RBeoyYlVQKyLWP60tYnTrQX+OM 6yWJWUDRHNLeSP3MHujqTULr+5zhrD/FYqS9cXVonWAzi8n7w02QH6UFQ5ABQjKj K9oIy5g8VOKYoMwkxlHPrXS07qC49Sbh+Kq970aTsQssIU1MLzc= -----END CERTIFICATE-----Generated at Tue Jul 21 06:50:04 2026 by rpki-client