$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.mft File: F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.mft (raw, json) Hash identifier: TQLnf2PkJNFtLfBXOgOXabH2sRMgaNUzg0iGAjKKhtk= Subject key identifier: C3:10:64:0F:D7:9D:48:69:68:3F:5A:9D:5B:29:A0:E1:D0:90:3D:E8 Authority key identifier: F0:36:C2:8E:B7:9F:3E:EA:FE:68:70:FD:FB:62:F2:85:8E:A8:D4:91 Certificate issuer: /CN=F036C28EB79F3EEAFE6870FDFB62F2858EA8D491 Certificate serial: 354B423632215B1CCF3119498F4D8625E8ABAAD8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 22:36:57 +0000 Manifest this update: Wed 16 Sep 2026 22:31:57 +0000 Manifest next update: Fri 18 Sep 2026 02:02:57 +0000 Files and hashes: 1: 3130332e32302e38382e302f32342d3234203d3e20313530313837.roa (hash: stKJlVY4X9Us0gcPWRVnra1On9usS4UIj80SOb9p2sg=) 2: F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.crl (hash: F5LIvQa2Y5paHYsCp4vIb5sbpnmhwQoHOqGKaBw3HkE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.crl rsync://rpki-rsync.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 02:02:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:4b:42:36:32:21:5b:1c:cf:31:19:49:8f:4d:86:25:e8:ab:aa:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F036C28EB79F3EEAFE6870FDFB62F2858EA8D491 Validity Not Before: Sep 16 22:31:57 2026 GMT Not After : Sep 18 02:02:57 2026 GMT Subject: CN=C310640FD79D4869683F5A9D5B29A0E1D0903DE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e0:4b:bf:e1:37:b1:b3:0b:10:66:16:11:9b: 9f:f3:14:23:c7:61:e8:aa:1a:03:c9:d0:6f:12:ad: d9:c2:ba:75:61:f6:b2:99:83:40:2b:e1:a7:0c:af: cb:a4:ba:3a:a7:51:4e:5a:65:60:97:54:c9:8c:4a: 20:32:d4:de:ef:e4:9e:5f:f1:fe:69:eb:72:77:b1: 9f:3e:57:1f:23:94:4e:d8:31:ac:59:d1:3c:c2:9c: 12:d5:fc:36:bd:c6:7c:b9:48:2b:6a:13:9e:44:b6: ac:e5:a2:be:7a:8e:bb:19:cc:48:d7:36:c3:67:71: 99:ad:97:11:e0:bf:f1:bc:66:2d:2b:2f:31:35:4b: 71:e2:d0:62:76:ee:e2:2b:f4:f1:8a:61:97:20:f5: d8:47:47:6d:cb:09:49:a3:dd:2c:61:13:86:d7:b2: 5e:cf:d3:d9:c6:a7:f7:e1:b5:7a:ac:ca:3a:98:a4: 33:62:f5:6e:56:bc:52:11:29:e9:db:19:f1:54:7d: c2:5a:5a:ef:64:dc:63:7b:2e:7f:7f:85:6a:6c:fa: ac:5c:5d:2d:3c:db:22:cb:33:5b:b4:6e:92:3a:8c: 61:a0:c0:23:13:a7:41:0b:c4:76:00:7a:24:ad:96: 03:5b:91:25:60:d8:ae:9e:d7:92:0f:2c:3e:21:45: fa:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:10:64:0F:D7:9D:48:69:68:3F:5A:9D:5B:29:A0:E1:D0:90:3D:E8 X509v3 Authority Key Identifier: keyid:F0:36:C2:8E:B7:9F:3E:EA:FE:68:70:FD:FB:62:F2:85:8E:A8:D4:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/F036C28EB79F3EEAFE6870FDFB62F2858EA8D491.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:9c:13:8f:69:d0:4e:19:5e:49:e3:cf:19:90:26:a5:22:c9: 22:19:3f:8d:54:59:f3:50:e7:8c:58:fe:2b:41:a0:6e:ba:01: 46:24:13:80:49:d3:87:f5:83:cd:b3:80:a5:8e:9f:f7:dc:26: a9:49:49:af:d6:8a:2d:ed:48:a7:94:33:a2:50:40:25:12:ae: 9b:df:ec:09:62:3f:c7:2e:84:f9:90:28:88:93:3e:a6:59:6f: 1c:80:c4:b0:52:bf:ed:bf:33:05:48:cc:f9:7b:91:af:c0:c5: 09:4b:dd:77:c7:5f:82:33:57:45:c2:13:ed:e6:dd:bd:ff:d3: 27:73:25:31:61:a0:31:9b:d9:fd:75:1e:fd:b2:b9:a7:ac:96: 54:ac:4a:ad:ad:16:89:73:57:30:39:d0:cd:21:da:e9:f4:a4: 14:c7:36:a3:10:c3:a9:c3:1b:4d:b7:b6:c5:b5:d6:f6:3f:84: 93:09:f6:29:9c:53:1a:46:1a:22:ce:b8:21:7c:e0:82:21:7d: ad:64:42:09:13:67:b0:60:80:67:29:68:bd:a0:f4:2d:a9:21: 74:fa:45:89:52:66:c4:90:dc:09:83:47:83:7f:9c:f8:22:9c: d1:25:f4:6c:21:66:c4:e2:19:3c:b4:9f:e0:fc:61:f1:34:6e: c7:62:75:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNUtCNjIhWxzPMRlJj02GJeirqtgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjAzNkMyOEVCNzlGM0VFQUZFNjg3MEZERkI2MkYyODU4 RUE4RDQ5MTAeFw0yNjA5MTYyMjMxNTdaFw0yNjA5MTgwMjAyNTdaMDMxMTAvBgNV BAMTKEMzMTA2NDBGRDc5RDQ4Njk2ODNGNUE5RDVCMjlBMEUxRDA5MDNERTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe4Eu/4TexswsQZhYRm5/zFCPH YeiqGgPJ0G8SrdnCunVh9rKZg0Ar4acMr8ukujqnUU5aZWCXVMmMSiAy1N7v5J5f 8f5p63J3sZ8+Vx8jlE7YMaxZ0TzCnBLV/Da9xny5SCtqE55Etqzlor56jrsZzEjX NsNncZmtlxHgv/G8Zi0rLzE1S3Hi0GJ27uIr9PGKYZcg9dhHR23LCUmj3SxhE4bX sl7P09nGp/fhtXqsyjqYpDNi9W5WvFIRKenbGfFUfcJaWu9k3GN7Ln9/hWps+qxc XS082yLLM1u0bpI6jGGgwCMTp0ELxHYAeiStlgNbkSVg2K6e15IPLD4hRfodAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwxBkD9edSGloP1qdWymg4dCQPegwHwYDVR0j BBgwFoAU8DbCjrefPur+aHD9+2LyhY6o1JEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWZjYzFlZjYtNzY5Zi00YWFmLTlkMTQtMmU1YjE1YTZmZjIzLzAvRjAzNkMyOEVC NzlGM0VFQUZFNjg3MEZERkI2MkYyODU4RUE4RDQ5MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GMDM2QzI4RUI3OUYzRUVBRkU2ODcwRkRGQjYyRjI4NThFQThE NDkxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWZjYzFlZjYtNzY5Zi00YWFmLTlk MTQtMmU1YjE1YTZmZjIzLzAvRjAzNkMyOEVCNzlGM0VFQUZFNjg3MEZERkI2MkYy ODU4RUE4RDQ5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHKcE49p0E4ZXknjzxmQJqUiySIZP41UWfNQ 54xY/itBoG66AUYkE4BJ04f1g82zgKWOn/fcJqlJSa/Wii3tSKeUM6JQQCUSrpvf 7AliP8cuhPmQKIiTPqZZbxyAxLBSv+2/MwVIzPl7ka/AxQlL3XfHX4IzV0XCE+3m 3b3/0ydzJTFhoDGb2f11Hv2yuaesllSsSq2tFolzVzA50M0h2un0pBTHNqMQw6nD G023tsW11vY/hJMJ9imcUxpGGiLOuCF84IIhfa1kQgkTZ7BggGcpaL2g9C2pIXT6 RYlSZsSQ3AmDR4N/nPginNEl9GwhZsTiGTy0n+D8YfE0bsdidcM= -----END CERTIFICATE-----Generated at Thu Sep 17 09:15:12 2026 by rpki-client