$ rpki-client -vvvf rpki-rsync.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/07036C5527255D59345E40A173983EEEA0C09FD0.mft File: 07036C5527255D59345E40A173983EEEA0C09FD0.mft (raw, json) Hash identifier: 4n+Uja4IbILkb7bn+FPIEp0uYrfwvw6TuqvGL4RRz88= Subject key identifier: 44:D2:5D:8D:39:C4:CB:E5:F0:F2:6C:35:44:66:AC:67:EE:A7:1B:2A Authority key identifier: 07:03:6C:55:27:25:5D:59:34:5E:40:A1:73:98:3E:EE:A0:C0:9F:D0 Certificate issuer: /CN=07036C5527255D59345E40A173983EEEA0C09FD0 Certificate serial: 2EB3D215B0B45A0615DFDB58630C63E01610EA09 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07036C5527255D59345E40A173983EEEA0C09FD0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/07036C5527255D59345E40A173983EEEA0C09FD0.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 19:58:47 +0000 Manifest this update: Wed 16 Sep 2026 19:53:47 +0000 Manifest next update: Thu 17 Sep 2026 22:00:47 +0000 Files and hashes: 1: 3130332e3137322e3137302e302f32342d3234203d3e20313432333936.roa (hash: 4usmrutgY/beqY8KttmIEGM6ND+uj+WPCIUZTt7ix2A=) 2: 07036C5527255D59345E40A173983EEEA0C09FD0.crl (hash: oPoQFqWFZSSxs0F3ZFbqxv8KFSkP2QuUQGR9ZdGmklA=) 3: 3130332e3137322e3137312e302f32342d3234203d3e20313432333936.roa (hash: XhiLVWroBIGTKL45UQb8xrlJuP9CTy+d6X2Fb8sJelo=) 4: 3130332e3137322e3137302e302f32332d3233203d3e20313432333936.roa (hash: xCKI0MCHXup6mIiN8YCHZcQ0nipWKRsEPA9gZhTI18I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/07036C5527255D59345E40A173983EEEA0C09FD0.crl rsync://rpki-rsync.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/07036C5527255D59345E40A173983EEEA0C09FD0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07036C5527255D59345E40A173983EEEA0C09FD0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 22:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:b3:d2:15:b0:b4:5a:06:15:df:db:58:63:0c:63:e0:16:10:ea:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07036C5527255D59345E40A173983EEEA0C09FD0 Validity Not Before: Sep 16 19:53:47 2026 GMT Not After : Sep 17 22:00:47 2026 GMT Subject: CN=44D25D8D39C4CBE5F0F26C354466AC67EEA71B2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:99:15:f8:53:b4:4a:ee:43:22:81:de:4c:b4: ce:2b:86:76:a4:51:b8:18:be:dd:20:34:bd:bf:5d: 47:03:94:75:eb:5a:45:e3:ba:f3:f5:71:61:3a:ee: 8c:07:dc:5c:c9:a9:81:dd:fb:d4:fd:a0:82:dc:f3: 37:16:82:32:67:dc:83:54:3e:47:dd:33:01:08:d3: e9:47:dc:b6:95:82:37:d9:52:a7:4d:a5:c0:43:3f: 8b:b9:7c:d7:08:f7:a3:b1:09:cd:3c:d0:68:2e:9d: 15:56:e2:97:25:99:70:ff:7f:87:d6:fc:79:ff:0d: a8:39:5e:15:1f:fb:06:3a:5b:07:0e:25:ce:37:cf: 3c:26:a6:8f:73:e1:5f:8d:e2:7b:fc:53:87:92:bc: cf:79:4a:fc:64:22:d1:8d:b3:00:09:59:df:a0:3a: f1:14:66:b1:88:ff:6b:eb:0d:f4:4a:ae:26:17:34: c2:81:c2:63:1e:4d:7e:de:a6:66:39:1b:50:66:f4: 63:c4:a4:e5:6a:7c:01:a3:dc:ed:29:be:aa:7a:ae: 02:c9:df:d5:d2:3c:7a:c3:4c:e0:fa:16:dd:cc:c8: ca:d2:9e:3d:9a:35:e1:7b:e6:52:4d:4b:03:2f:d6: 62:bf:9c:1f:68:72:4f:33:79:bd:0f:6e:3e:77:94: f1:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:D2:5D:8D:39:C4:CB:E5:F0:F2:6C:35:44:66:AC:67:EE:A7:1B:2A X509v3 Authority Key Identifier: keyid:07:03:6C:55:27:25:5D:59:34:5E:40:A1:73:98:3E:EE:A0:C0:9F:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/07036C5527255D59345E40A173983EEEA0C09FD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07036C5527255D59345E40A173983EEEA0C09FD0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/07036C5527255D59345E40A173983EEEA0C09FD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:35:fe:90:03:b1:83:e2:ac:30:db:de:cd:08:d3:52:80:0e: 6e:47:5c:3a:06:8a:a0:d7:f6:1f:f5:73:15:94:74:83:63:91: 3f:57:e2:6a:a5:9b:cd:58:5a:31:da:2b:c0:76:34:c1:10:0e: fe:8f:eb:ca:c1:0c:ca:16:32:fd:5e:ef:e7:88:6c:38:f4:61: fc:84:80:6d:cf:2e:e4:b0:78:1e:79:0e:8e:16:82:22:03:55: 62:08:32:30:4c:55:81:9d:39:a4:f7:65:44:76:ce:8a:42:a6: 84:b7:e5:34:cb:cc:9e:8e:a6:6b:fb:7b:da:6e:2d:ac:b6:50: 30:75:fc:4b:05:25:e0:6c:64:e5:75:b4:2c:c0:4d:56:3c:9d: 6e:47:b1:e7:1a:0d:e0:8f:8d:35:0d:4f:51:a6:b2:f1:fe:09: b5:60:c6:e0:70:78:ff:7f:06:b6:0b:2d:6f:18:8a:8a:50:33: cc:ed:44:54:7d:28:08:91:1e:b5:8f:38:38:fd:b0:a1:45:c8: 28:6c:27:26:6a:8a:f8:c0:20:64:5c:e4:00:ec:d9:37:4e:87: ed:ad:f1:4f:97:40:21:f7:33:2f:18:c0:55:66:3e:a6:ae:72: 40:83:a0:e7:aa:6d:5e:08:fa:d7:79:6a:e0:25:78:1c:8a:7a: 91:09:c7:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULrPSFbC0WgYV39tYYwxj4BYQ6gkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDcwMzZDNTUyNzI1NUQ1OTM0NUU0MEExNzM5ODNFRUVB MEMwOUZEMDAeFw0yNjA5MTYxOTUzNDdaFw0yNjA5MTcyMjAwNDdaMDMxMTAvBgNV BAMTKDQ0RDI1RDhEMzlDNENCRTVGMEYyNkMzNTQ0NjZBQzY3RUVBNzFCMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7mRX4U7RK7kMigd5MtM4rhnak UbgYvt0gNL2/XUcDlHXrWkXjuvP1cWE67owH3FzJqYHd+9T9oILc8zcWgjJn3INU PkfdMwEI0+lH3LaVgjfZUqdNpcBDP4u5fNcI96OxCc080GgunRVW4pclmXD/f4fW /Hn/Dag5XhUf+wY6WwcOJc43zzwmpo9z4V+N4nv8U4eSvM95SvxkItGNswAJWd+g OvEUZrGI/2vrDfRKriYXNMKBwmMeTX7epmY5G1Bm9GPEpOVqfAGj3O0pvqp6rgLJ 39XSPHrDTOD6Ft3MyMrSnj2aNeF75lJNSwMv1mK/nB9ock8zeb0Pbj53lPF3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURNJdjTnEy+Xw8mw1RGasZ+6nGyowHwYDVR0j BBgwFoAUBwNsVSclXVk0XkChc5g+7qDAn9AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjFkYjZjOWItZDhmYy00ZDhjLTgwY2ItZmQyMjQxMjA4ZGRlLzAvMDcwMzZDNTUy NzI1NUQ1OTM0NUU0MEExNzM5ODNFRUVBMEMwOUZEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNzAzNkM1NTI3MjU1RDU5MzQ1RTQwQTE3Mzk4M0VFRUEwQzA5 RkQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjFkYjZjOWItZDhmYy00ZDhjLTgw Y2ItZmQyMjQxMjA4ZGRlLzAvMDcwMzZDNTUyNzI1NUQ1OTM0NUU0MEExNzM5ODNF RUVBMEMwOUZEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEg1/pADsYPirDDb3s0I01KADm5HXDoGiqDX 9h/1cxWUdINjkT9X4mqlm81YWjHaK8B2NMEQDv6P68rBDMoWMv1e7+eIbDj0YfyE gG3PLuSweB55Do4WgiIDVWIIMjBMVYGdOaT3ZUR2zopCpoS35TTLzJ6Opmv7e9pu Lay2UDB1/EsFJeBsZOV1tCzATVY8nW5HsecaDeCPjTUNT1GmsvH+CbVgxuBweP9/ BrYLLW8YiopQM8ztRFR9KAiRHrWPODj9sKFFyChsJyZqivjAIGRc5ADs2TdOh+2t 8U+XQCH3My8YwFVmPqauckCDoOeqbV4I+td5auAleByKepEJxyA= -----END CERTIFICATE-----Generated at Thu Sep 17 12:40:45 2026 by rpki-client