$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/36987F1D265142449AF11F138E84E3AE2398BB71.mft File: 36987F1D265142449AF11F138E84E3AE2398BB71.mft (raw, json) Hash identifier: veEDj03zhd1iyATBtGBPmazrsB0HL1GI+C0xzfNLKZc= Subject key identifier: 2B:51:19:57:09:15:7B:C5:DC:DE:28:4A:4E:AB:D0:5C:B8:D1:A0:29 Authority key identifier: 36:98:7F:1D:26:51:42:44:9A:F1:1F:13:8E:84:E3:AE:23:98:BB:71 Certificate issuer: /CN=36987F1D265142449AF11F138E84E3AE2398BB71 Certificate serial: 67AE47512D50F89199D6A4D5D7D93FF988ECDCCC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/36987F1D265142449AF11F138E84E3AE2398BB71.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/36987F1D265142449AF11F138E84E3AE2398BB71.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 18:30:28 +0000 Manifest this update: Wed 02 Sep 2026 18:25:28 +0000 Manifest next update: Thu 03 Sep 2026 21:11:28 +0000 Files and hashes: 1: 36987F1D265142449AF11F138E84E3AE2398BB71.crl (hash: lPcfNb03J3bpJuIv2w2daFcxdoLsuf57bz8U4hb+xXY=) 2: 3130332e3131322e3232332e302f32342d3234203d3e20313337333338.roa (hash: a3+GsbTZLmVRS7NxLcoTxVxS7Q4Y+JKlGjV758bCCgw=) 3: 323030313a6466343a626430303a3a2f34382d3438203d3e203338343936.roa (hash: Bnl6nUu+xtavXODjc9t+OxHVrv/heBfP+6/XJ45t3VI=) 4: 323030313a6466343a626430303a3a2f34382d3438203d3e20313337333338.roa (hash: svBe8CrZWGOGef404cwoRo2+yXAKzM2eujaije66wpU=) 5: 3130332e3131322e3232332e302f32342d3234203d3e203338343936.roa (hash: GYqQuuT/LudwwxgSc6XR1akIqTm1hPmdsuPIZrL2W/E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/36987F1D265142449AF11F138E84E3AE2398BB71.crl rsync://rpki-rsync.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/36987F1D265142449AF11F138E84E3AE2398BB71.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/36987F1D265142449AF11F138E84E3AE2398BB71.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:11:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:ae:47:51:2d:50:f8:91:99:d6:a4:d5:d7:d9:3f:f9:88:ec:dc:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36987F1D265142449AF11F138E84E3AE2398BB71 Validity Not Before: Sep 2 18:25:28 2026 GMT Not After : Sep 3 21:11:28 2026 GMT Subject: CN=2B51195709157BC5DCDE284A4EABD05CB8D1A029 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:87:f3:e0:66:14:67:c5:cc:73:52:04:43:8a: 22:58:3c:83:88:8d:ad:27:26:1f:b5:38:1b:06:24: 54:d9:86:ff:7a:81:d4:78:a4:1e:6c:0e:fa:fe:ad: 52:c0:fb:aa:83:fe:75:ea:64:6b:a6:9d:82:b6:99: f5:ab:3a:8b:0a:6b:e3:00:8e:2c:d1:99:53:ab:69: 2c:55:46:61:50:44:d2:16:59:70:3c:f9:0b:ef:ec: 37:73:59:04:42:d6:4b:00:cf:de:a2:0f:7c:11:b3: 31:e9:0b:6c:4f:f7:fa:5a:16:2c:2c:14:a6:c0:5b: 0f:dc:be:56:57:1d:b8:b5:cb:9f:7d:f5:a0:bb:01: f6:5c:6f:88:87:44:42:d2:40:d3:91:f3:ec:28:28: f4:a9:25:4d:7d:cf:ea:28:4d:c2:e5:5f:3e:f8:24: 8a:82:51:1c:29:1d:96:41:69:c4:d1:b2:4d:ad:bf: 94:ca:b0:fb:e2:fd:63:63:17:af:37:0b:d1:9b:1e: be:7b:86:c3:4a:4c:30:68:c9:54:67:c3:80:fc:28: 1a:80:ca:26:11:12:f6:91:07:e4:a9:51:20:12:42: fc:83:2b:c7:eb:92:85:eb:0f:55:83:69:22:6b:31: 53:e7:22:4d:b3:7e:a6:d9:5a:8f:0a:a9:66:6a:47: 28:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:51:19:57:09:15:7B:C5:DC:DE:28:4A:4E:AB:D0:5C:B8:D1:A0:29 X509v3 Authority Key Identifier: keyid:36:98:7F:1D:26:51:42:44:9A:F1:1F:13:8E:84:E3:AE:23:98:BB:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/36987F1D265142449AF11F138E84E3AE2398BB71.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/36987F1D265142449AF11F138E84E3AE2398BB71.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/36987F1D265142449AF11F138E84E3AE2398BB71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:ed:db:ba:a3:7c:29:ab:38:9d:1a:1e:df:ad:51:4c:6d:3a: c6:93:4e:89:c2:a8:f1:3e:cf:64:2e:99:6d:34:0a:ed:97:0c: 2a:f7:c4:fd:49:60:b5:fa:8e:01:d9:ff:9f:7d:37:da:3d:d6: 46:45:43:30:7b:34:a3:6b:51:4b:58:7a:16:ab:da:69:27:6c: 86:ba:91:69:a5:de:40:86:2b:85:72:f4:d9:71:c2:66:09:b5: d0:02:2c:56:67:05:2c:74:9e:36:ed:2a:a7:45:ca:6a:69:bf: 7b:0e:43:8d:a8:84:94:69:07:75:b8:df:70:cd:ae:49:38:da: 33:87:b1:96:4d:e2:3c:a3:87:2e:75:46:9d:a2:b5:b6:14:ed: 3d:5c:00:73:f5:65:f4:3c:c1:84:7e:19:21:e1:78:db:8c:a9: 78:1d:ac:b5:9b:ff:f2:8e:7f:68:0d:67:9f:b0:b5:69:26:62: 07:ee:8e:05:b5:fa:c1:7c:2c:ad:1d:53:0e:b2:8e:5b:e3:70: 89:b8:6d:9c:ce:53:0b:d8:73:66:9d:21:84:93:72:94:a2:5b: 4b:10:f6:92:a2:53:5c:48:a1:5a:3f:b2:1f:df:50:a2:8f:16: 3b:bb:1c:3e:89:31:07:f4:19:41:d1:87:d6:fd:df:b6:4f:ea: 4e:e2:e5:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ65HUS1Q+JGZ1qTV19k/+Yjs3MwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY5ODdGMUQyNjUxNDI0NDlBRjExRjEzOEU4NEUzQUUy Mzk4QkI3MTAeFw0yNjA5MDIxODI1MjhaFw0yNjA5MDMyMTExMjhaMDMxMTAvBgNV BAMTKDJCNTExOTU3MDkxNTdCQzVEQ0RFMjg0QTRFQUJEMDVDQjhEMUEwMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClh/PgZhRnxcxzUgRDiiJYPIOI ja0nJh+1OBsGJFTZhv96gdR4pB5sDvr+rVLA+6qD/nXqZGumnYK2mfWrOosKa+MA jizRmVOraSxVRmFQRNIWWXA8+Qvv7DdzWQRC1ksAz96iD3wRszHpC2xP9/paFiws FKbAWw/cvlZXHbi1y5999aC7AfZcb4iHRELSQNOR8+woKPSpJU19z+ooTcLlXz74 JIqCURwpHZZBacTRsk2tv5TKsPvi/WNjF683C9GbHr57hsNKTDBoyVRnw4D8KBqA yiYREvaRB+SpUSASQvyDK8frkoXrD1WDaSJrMVPnIk2zfqbZWo8KqWZqRyhRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK1EZVwkVe8Xc3ihKTqvQXLjRoCkwHwYDVR0j BBgwFoAUNph/HSZRQkSa8R8TjoTjriOYu3EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDJkNmQwZGYtYzIxZS00OTFjLWIxMTYtNGExZDlhMmM3NGJlLzAvMzY5ODdGMUQy NjUxNDI0NDlBRjExRjEzOEU4NEUzQUUyMzk4QkI3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNjk4N0YxRDI2NTE0MjQ0OUFGMTFGMTM4RTg0RTNBRTIzOThC QjcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDJkNmQwZGYtYzIxZS00OTFjLWIx MTYtNGExZDlhMmM3NGJlLzAvMzY5ODdGMUQyNjUxNDI0NDlBRjExRjEzOEU4NEUz QUUyMzk4QkI3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHXt27qjfCmrOJ0aHt+tUUxtOsaTTonCqPE+ z2QumW00Cu2XDCr3xP1JYLX6jgHZ/599N9o91kZFQzB7NKNrUUtYehar2mknbIa6 kWml3kCGK4Vy9NlxwmYJtdACLFZnBSx0njbtKqdFymppv3sOQ42ohJRpB3W433DN rkk42jOHsZZN4jyjhy51Rp2itbYU7T1cAHP1ZfQ8wYR+GSHheNuMqXgdrLWb//KO f2gNZ5+wtWkmYgfujgW1+sF8LK0dUw6yjlvjcIm4bZzOUwvYc2adIYSTcpSiW0sQ 9pKiU1xIoVo/sh/fUKKPFju7HD6JMQf0GUHRh9b937ZP6k7i5WQ= -----END CERTIFICATE-----Generated at Thu Sep 3 07:59:14 2026 by rpki-client