
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/af6f8cba-cd23-409a-8b49-7730cf2dd754/0/36C462EB10EFBCE11E6F03911233B5BCFB97C399.mft
File: 36C462EB10EFBCE11E6F03911233B5BCFB97C399.mft (raw, json)
Hash identifier: pQ5cy5WaMxW5nKXwHTurJYjv3j+l6wufFs0PymubU8Y=
Subject key identifier: 48:C8:56:EF:5D:42:1C:BA:33:07:FA:11:34:50:5E:FE:B1:76:3D:CE
Authority key identifier: 36:C4:62:EB:10:EF:BC:E1:1E:6F:03:91:12:33:B5:BC:FB:97:C3:99
Certificate issuer: /CN=36C462EB10EFBCE11E6F03911233B5BCFB97C399
Certificate serial: 611ADC9AA8CEBC659881081D31B4D695FD4F1C89
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/36C462EB10EFBCE11E6F03911233B5BCFB97C399.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/af6f8cba-cd23-409a-8b49-7730cf2dd754/0/36C462EB10EFBCE11E6F03911233B5BCFB97C399.mft
Manifest number: 26
Signing time: Sun 25 Oct 2026 21:43:55 +0000
Manifest this update: Sun 25 Oct 2026 21:38:55 +0000
Manifest next update: Tue 27 Oct 2026 00:21:55 +0000
Files and hashes: 1: 3139382e31352e32352e302f32342d3234203d3e20313432323634.roa (hash: zqg63PzFpvnHisK0vME07RPDLgK5KqQVtr6YJH2qfqs=)
2: 36C462EB10EFBCE11E6F03911233B5BCFB97C399.crl (hash: iJ9bGnvv/J/Z5l9+VipPMCl+EXP2uJUDiMXkhHCL5fQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/af6f8cba-cd23-409a-8b49-7730cf2dd754/0/36C462EB10EFBCE11E6F03911233B5BCFB97C399.crl
rsync://rpki-rsync.idnic.net/repo/af6f8cba-cd23-409a-8b49-7730cf2dd754/0/36C462EB10EFBCE11E6F03911233B5BCFB97C399.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/36C462EB10EFBCE11E6F03911233B5BCFB97C399.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Oct 2026 00:21:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:1a:dc:9a:a8:ce:bc:65:98:81:08:1d:31:b4:d6:95:fd:4f:1c:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36C462EB10EFBCE11E6F03911233B5BCFB97C399
Validity
Not Before: Oct 25 21:38:55 2026 GMT
Not After : Oct 27 00:21:55 2026 GMT
Subject: CN=48C856EF5D421CBA3307FA1134505EFEB1763DCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:03:5c:b4:8a:31:60:9a:6c:e4:8d:49:57:55:
31:ef:9c:f4:62:91:58:ec:0b:02:f2:2b:03:e5:0f:
60:76:0e:eb:d2:e1:7f:9c:2a:77:53:0e:cf:c6:50:
74:53:41:7a:e4:24:42:29:90:61:34:2d:cb:5d:97:
1b:b5:79:e1:db:fc:89:44:dc:8a:59:b1:55:eb:9c:
5a:ae:9d:58:4b:c7:1f:39:d7:5e:ae:04:ee:0c:3e:
1d:95:94:71:36:6c:79:03:9c:75:54:03:2e:c9:4d:
83:e6:89:62:05:c0:38:fd:a4:94:97:70:16:8e:63:
02:6b:5f:57:42:27:7d:01:d7:c0:d7:bb:8a:74:db:
af:af:a8:76:7d:8d:16:9e:d6:60:1e:7b:2d:6c:9c:
1f:3d:5f:18:41:90:5f:ce:b4:c7:cd:e5:bc:52:2d:
f3:19:69:8c:c0:ba:34:df:d6:b4:a0:29:e4:07:98:
9a:cb:5c:c5:94:9c:a8:9d:66:8c:97:dd:5a:4e:79:
3c:bb:1e:de:b8:31:1d:dc:6d:3a:c0:9a:70:55:66:
87:d2:f2:6d:0e:25:d9:f6:04:24:f1:89:d5:10:56:
c8:77:25:73:81:d7:68:78:8d:6a:f0:38:18:e6:8b:
34:e1:ba:17:c3:4e:5f:58:b0:c6:8d:d1:8e:7c:0a:
25:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C8:56:EF:5D:42:1C:BA:33:07:FA:11:34:50:5E:FE:B1:76:3D:CE
X509v3 Authority Key Identifier:
keyid:36:C4:62:EB:10:EF:BC:E1:1E:6F:03:91:12:33:B5:BC:FB:97:C3:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/af6f8cba-cd23-409a-8b49-7730cf2dd754/0/36C462EB10EFBCE11E6F03911233B5BCFB97C399.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/36C462EB10EFBCE11E6F03911233B5BCFB97C399.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/af6f8cba-cd23-409a-8b49-7730cf2dd754/0/36C462EB10EFBCE11E6F03911233B5BCFB97C399.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:0e:d6:53:0e:93:c4:0a:4d:2c:36:e5:56:5c:fb:38:2e:e7:
e6:f1:6d:e8:7a:bb:a1:b5:3a:8b:d6:b7:35:8b:bd:dd:53:35:
79:e9:f9:83:58:2f:e1:d9:e7:81:cc:7b:e2:05:ff:65:11:a8:
4c:75:c3:bd:d6:2c:25:d1:6f:95:83:2c:24:25:39:cc:ab:f6:
b4:68:dc:78:06:dd:4c:0a:d0:54:1a:62:b0:f0:f4:36:07:8b:
6c:5c:ac:89:43:cf:ae:1e:bc:af:86:bf:1a:d9:aa:6f:18:a4:
e5:f9:a1:e3:bd:4f:09:e0:f4:80:c8:04:04:ab:12:14:30:af:
56:85:9e:6a:dd:fd:23:57:40:52:e7:ef:96:da:35:8f:aa:dd:
c7:c8:85:d9:6d:04:73:64:95:fa:d0:41:9e:8f:68:33:6a:88:
8d:61:bc:14:e9:5e:7e:aa:6b:36:5e:63:99:46:4f:39:13:04:
54:74:78:8e:aa:c0:7c:94:df:3e:66:f8:0f:08:dd:d1:44:f1:
14:c4:5e:9a:3d:ae:c0:b3:e7:6b:57:90:d0:32:41:70:0f:73:
9c:c8:3b:4d:79:ef:2b:ca:ed:09:ac:51:72:0f:5a:f7:f4:91:
55:e6:fe:99:3b:54:72:c4:74:55:a7:d1:9f:e5:df:b3:53:92:
c7:07:c4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:56:27 2026 by rpki-client