$ rpki-client -vvf rpki-rsync.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/07036C5527255D59345E40A173983EEEA0C09FD0.mft File: 07036C5527255D59345E40A173983EEEA0C09FD0.mft (raw, json) Hash identifier: 8+jnRQKnv51DzmskXtMz2YF/awbRS7fNHlDzFoM+6Q8= Subject key identifier: 51:8E:C4:A0:C9:E9:5D:4D:3D:85:F9:10:47:DC:6F:03:04:B3:B9:AE Authority key identifier: 07:03:6C:55:27:25:5D:59:34:5E:40:A1:73:98:3E:EE:A0:C0:9F:D0 Certificate issuer: /CN=07036C5527255D59345E40A173983EEEA0C09FD0 Certificate serial: 187CE1C32F77A0560CAD65654C7E3400BC3B0FA2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07036C5527255D59345E40A173983EEEA0C09FD0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/07036C5527255D59345E40A173983EEEA0C09FD0.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 08:40:43 +0000 Manifest this update: Tue 02 Jun 2026 08:35:43 +0000 Manifest next update: Wed 03 Jun 2026 12:22:43 +0000 Files and hashes: 1: 3130332e3137322e3137312e302f32342d3234203d3e20313432333936.roa (hash: XhiLVWroBIGTKL45UQb8xrlJuP9CTy+d6X2Fb8sJelo=) 2: 3130332e3137322e3137302e302f32332d3233203d3e20313432333936.roa (hash: xCKI0MCHXup6mIiN8YCHZcQ0nipWKRsEPA9gZhTI18I=) 3: 3130332e3137322e3137302e302f32342d3234203d3e20313432333936.roa (hash: 4usmrutgY/beqY8KttmIEGM6ND+uj+WPCIUZTt7ix2A=) 4: 07036C5527255D59345E40A173983EEEA0C09FD0.crl (hash: 7zXt/b4eaCNFLpX59syeaUzcIUeBTd7+mYOXLUoIdJQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/07036C5527255D59345E40A173983EEEA0C09FD0.crl rsync://rpki-rsync.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/07036C5527255D59345E40A173983EEEA0C09FD0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07036C5527255D59345E40A173983EEEA0C09FD0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:7c:e1:c3:2f:77:a0:56:0c:ad:65:65:4c:7e:34:00:bc:3b:0f:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07036C5527255D59345E40A173983EEEA0C09FD0 Validity Not Before: Jun 2 08:35:43 2026 GMT Not After : Jun 3 12:22:43 2026 GMT Subject: CN=518EC4A0C9E95D4D3D85F91047DC6F0304B3B9AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fd:0c:46:9c:23:bf:f2:f2:53:cd:28:b3:9e: 37:67:5c:b5:b3:64:62:19:7f:31:84:d4:23:ba:3b: 3f:f0:99:37:c8:09:80:45:9a:a1:6b:5a:62:e6:50: 50:2b:a7:fb:ce:56:4d:47:4e:76:4f:69:86:d1:8a: 80:b0:e5:d9:88:b2:7d:78:c5:f9:fd:56:6c:52:e0: 2e:15:ee:82:d0:88:8d:cb:1e:a0:4c:51:b1:ac:95: ad:03:a4:24:78:a6:fe:a7:b5:87:a9:de:f3:6b:a5: 02:fc:64:12:c8:91:ba:31:54:b5:d8:1f:9c:d8:e1: 81:fb:e9:8d:80:fa:73:ee:3e:08:bc:cf:11:5d:b5: cd:55:9d:21:8c:7f:9f:31:5f:f2:40:53:cc:b7:76: 08:13:69:b0:61:ee:42:08:74:af:74:00:ef:26:f7: e4:f3:d8:5e:39:8c:db:ed:7b:13:11:24:cc:6d:71: e3:2e:b7:01:53:77:dd:7a:dd:df:5d:47:f2:11:72: 9c:62:5f:69:ac:b3:8e:46:a8:15:c8:b4:93:52:19: 0f:e1:94:a0:ef:ae:c5:7f:51:88:e8:f9:08:9d:cf: 71:48:a9:c6:a4:86:54:df:5a:3c:49:ed:4e:24:12: 43:c8:97:4f:9b:40:a1:aa:13:86:20:25:12:32:63: 79:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:8E:C4:A0:C9:E9:5D:4D:3D:85:F9:10:47:DC:6F:03:04:B3:B9:AE X509v3 Authority Key Identifier: keyid:07:03:6C:55:27:25:5D:59:34:5E:40:A1:73:98:3E:EE:A0:C0:9F:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/07036C5527255D59345E40A173983EEEA0C09FD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07036C5527255D59345E40A173983EEEA0C09FD0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/07036C5527255D59345E40A173983EEEA0C09FD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:8c:9f:31:d7:61:52:79:34:9f:9f:e7:91:8a:44:06:6b:f1: e6:43:6d:10:48:66:90:a6:2d:64:11:35:e3:af:65:02:98:a5: 1c:72:5f:f2:e4:1d:40:1b:75:ac:78:a4:91:3e:eb:5f:93:79: a4:58:4d:f7:16:94:86:e4:a9:8f:2a:dc:87:35:27:b3:f5:7b: e7:57:89:3e:98:b3:22:fe:b4:a2:5b:3e:b3:1a:c3:37:a1:cc: ff:f5:29:b7:18:7c:94:4e:a3:f1:09:b1:1c:2b:44:52:80:ea: db:90:cc:10:06:fe:89:9d:1a:18:00:bf:de:1b:2a:93:f7:44: b3:20:58:35:c9:28:a2:ac:50:3b:43:a7:4f:fb:86:31:e3:cc: 3f:d5:03:a2:2d:d9:5a:a5:3a:f4:b2:54:ad:80:66:63:3e:ef: 4d:84:ad:c1:e9:c8:b9:36:07:09:79:df:73:d4:37:8a:94:98: 1a:37:57:a3:a5:bc:cb:11:ec:46:cf:60:66:04:6a:06:a2:72: c8:e7:be:62:9e:f5:8f:87:ef:86:49:eb:b1:27:1a:f9:83:c9: 7d:bf:fa:e4:4c:04:44:dc:4e:e2:14:f9:1f:1d:b3:ec:d1:11: 27:c6:a9:cc:11:20:69:bf:3c:d1:08:b5:e6:a8:25:39:27:e0: ae:73:31:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGHzhwy93oFYMrWVlTH40ALw7D6IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDcwMzZDNTUyNzI1NUQ1OTM0NUU0MEExNzM5ODNFRUVB MEMwOUZEMDAeFw0yNjA2MDIwODM1NDNaFw0yNjA2MDMxMjIyNDNaMDMxMTAvBgNV BAMTKDUxOEVDNEEwQzlFOTVENEQzRDg1RjkxMDQ3REM2RjAzMDRCM0I5QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5/QxGnCO/8vJTzSiznjdnXLWz ZGIZfzGE1CO6Oz/wmTfICYBFmqFrWmLmUFArp/vOVk1HTnZPaYbRioCw5dmIsn14 xfn9VmxS4C4V7oLQiI3LHqBMUbGsla0DpCR4pv6ntYep3vNrpQL8ZBLIkboxVLXY H5zY4YH76Y2A+nPuPgi8zxFdtc1VnSGMf58xX/JAU8y3dggTabBh7kIIdK90AO8m 9+Tz2F45jNvtexMRJMxtceMutwFTd9163d9dR/IRcpxiX2mss45GqBXItJNSGQ/h lKDvrsV/UYjo+Qidz3FIqcakhlTfWjxJ7U4kEkPIl0+bQKGqE4YgJRIyY3kVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUY7EoMnpXU09hfkQR9xvAwSzua4wHwYDVR0j BBgwFoAUBwNsVSclXVk0XkChc5g+7qDAn9AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjFkYjZjOWItZDhmYy00ZDhjLTgwY2ItZmQyMjQxMjA4ZGRlLzAvMDcwMzZDNTUy NzI1NUQ1OTM0NUU0MEExNzM5ODNFRUVBMEMwOUZEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNzAzNkM1NTI3MjU1RDU5MzQ1RTQwQTE3Mzk4M0VFRUEwQzA5 RkQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjFkYjZjOWItZDhmYy00ZDhjLTgw Y2ItZmQyMjQxMjA4ZGRlLzAvMDcwMzZDNTUyNzI1NUQ1OTM0NUU0MEExNzM5ODNF RUVBMEMwOUZEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK6MnzHXYVJ5NJ+f55GKRAZr8eZDbRBIZpCm LWQRNeOvZQKYpRxyX/LkHUAbdax4pJE+61+TeaRYTfcWlIbkqY8q3Ic1J7P1e+dX iT6YsyL+tKJbPrMawzehzP/1KbcYfJROo/EJsRwrRFKA6tuQzBAG/omdGhgAv94b KpP3RLMgWDXJKKKsUDtDp0/7hjHjzD/VA6It2VqlOvSyVK2AZmM+702ErcHpyLk2 Bwl533PUN4qUmBo3V6OlvMsR7EbPYGYEagaicsjnvmKe9Y+H74ZJ67EnGvmDyX2/ +uRMBETcTuIU+R8ds+zRESfGqcwRIGm/PNEIteaoJTkn4K5zMQk= -----END CERTIFICATE-----Generated at Wed Jun 3 03:42:42 2026 by rpki-client