$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/C36F2B2665674A939F067F495588261F7D4D6F8D.mft File: C36F2B2665674A939F067F495588261F7D4D6F8D.mft (raw, json) Hash identifier: FQY9G3IVDEAIqWcFYSq/lifR1bPz6/jSnRKBeS+v0Fw= Subject key identifier: AC:71:1D:2A:69:67:97:7D:90:F1:47:39:F9:60:F8:F2:89:03:18:35 Authority key identifier: C3:6F:2B:26:65:67:4A:93:9F:06:7F:49:55:88:26:1F:7D:4D:6F:8D Certificate issuer: /CN=C36F2B2665674A939F067F495588261F7D4D6F8D Certificate serial: 31B8B9398E9C9BA392C1EB0BBA582F396EA6C31A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C36F2B2665674A939F067F495588261F7D4D6F8D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/C36F2B2665674A939F067F495588261F7D4D6F8D.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 06:57:10 +0000 Manifest this update: Thu 17 Sep 2026 06:52:10 +0000 Manifest next update: Fri 18 Sep 2026 09:24:10 +0000 Files and hashes: 1: C36F2B2665674A939F067F495588261F7D4D6F8D.crl (hash: sODst00ZU+D8E2d5CyeoaT6o9R2Uz03roxd+Atz64MI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/C36F2B2665674A939F067F495588261F7D4D6F8D.crl rsync://rpki-rsync.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/C36F2B2665674A939F067F495588261F7D4D6F8D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C36F2B2665674A939F067F495588261F7D4D6F8D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:24:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:b8:b9:39:8e:9c:9b:a3:92:c1:eb:0b:ba:58:2f:39:6e:a6:c3:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C36F2B2665674A939F067F495588261F7D4D6F8D Validity Not Before: Sep 17 06:52:10 2026 GMT Not After : Sep 18 09:24:10 2026 GMT Subject: CN=AC711D2A6967977D90F14739F960F8F289031835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fe:17:31:e8:bf:6b:fa:b8:62:a2:49:38:e2: 43:79:86:91:f5:b0:e2:3f:86:8b:58:91:99:bc:90: 34:25:7d:d4:d0:67:2f:7d:f7:b7:3d:74:f0:8c:7e: 4e:a1:be:bd:b5:03:2d:69:c3:f9:ee:ea:27:d0:9e: 03:51:ef:b5:ed:c5:1f:d1:24:ea:24:cd:7c:6e:7e: e5:0c:79:b9:5f:f6:dc:7a:af:b7:31:e4:df:f0:30: 83:36:9c:f2:78:7c:64:cc:11:16:12:15:bc:94:67: 1f:e6:53:80:68:64:72:4c:88:2b:f9:88:83:62:2b: b8:eb:aa:5f:d5:b8:4a:5d:9d:0e:e1:37:7a:0f:0a: 61:66:12:9f:c6:69:4e:db:fa:91:b9:87:50:70:3d: eb:4c:38:85:d0:fc:f3:5a:76:ae:a0:66:d3:97:d9: 0a:01:0f:96:2b:88:9f:29:1a:30:38:b2:14:6a:5c: 03:c1:dc:bd:a1:94:7d:c3:3d:9e:17:73:01:1f:97: d4:c3:4a:1a:2c:d8:21:e8:2b:ea:be:ad:60:8e:ac: 3d:a0:e2:8a:c7:22:14:3c:f1:e3:28:46:d7:a7:50: 26:92:5b:f1:3d:11:9c:37:56:aa:27:42:47:a1:b5: d5:5b:85:91:0a:c6:29:8f:09:36:ea:5d:e7:1f:cc: 3f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:71:1D:2A:69:67:97:7D:90:F1:47:39:F9:60:F8:F2:89:03:18:35 X509v3 Authority Key Identifier: keyid:C3:6F:2B:26:65:67:4A:93:9F:06:7F:49:55:88:26:1F:7D:4D:6F:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/C36F2B2665674A939F067F495588261F7D4D6F8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C36F2B2665674A939F067F495588261F7D4D6F8D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/C36F2B2665674A939F067F495588261F7D4D6F8D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:ad:ff:ae:7a:f8:2a:85:ea:bf:30:41:47:45:ad:37:40:a5: 08:a5:a1:a5:c0:e2:c0:fc:9a:70:bf:de:8d:05:26:48:b0:48: 23:24:d2:51:b1:04:1a:bf:f1:70:14:a3:a8:f6:96:38:a8:ab: 46:5e:f3:05:ee:41:d9:28:aa:db:ca:10:8d:59:bd:e2:60:08: c2:b1:db:93:f2:cf:37:1d:21:d0:56:fe:b7:e3:12:d1:de:5d: 39:76:b4:e9:6d:7b:c9:ba:b6:e9:1c:de:f5:fa:a4:a1:ad:75: f1:7a:54:65:da:f6:ab:d0:77:7a:1f:ff:e5:df:cb:89:ed:66: 12:f9:e7:c4:b5:88:1d:7d:9d:e7:98:77:1b:e2:04:cf:3a:25: 0a:e5:4d:ec:8f:00:13:1f:f1:04:66:ab:c4:ce:3d:65:92:cb: 74:1a:ea:5d:56:15:ed:bf:b8:c8:8c:1a:21:4a:54:58:19:09: f8:5e:5a:37:53:2d:99:6c:1f:79:00:58:10:ce:7b:f0:ba:1f: bb:f0:c8:31:8d:5c:d1:67:1b:c2:c5:14:e2:0a:68:27:8e:a1: ce:14:17:09:92:09:1d:08:a4:e7:a0:90:4f:66:e4:75:6b:57: 81:c0:a3:96:fc:a7:98:0a:7c:76:aa:85:20:79:84:f7:42:2a: ee:08:71:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMbi5OY6cm6OSwesLulgvOW6mwxowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM2RjJCMjY2NTY3NEE5MzlGMDY3RjQ5NTU4ODI2MUY3 RDRENkY4RDAeFw0yNjA5MTcwNjUyMTBaFw0yNjA5MTgwOTI0MTBaMDMxMTAvBgNV BAMTKEFDNzExRDJBNjk2Nzk3N0Q5MEYxNDczOUY5NjBGOEYyODkwMzE4MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8/hcx6L9r+rhiokk44kN5hpH1 sOI/hotYkZm8kDQlfdTQZy9997c9dPCMfk6hvr21Ay1pw/nu6ifQngNR77XtxR/R JOokzXxufuUMeblf9tx6r7cx5N/wMIM2nPJ4fGTMERYSFbyUZx/mU4BoZHJMiCv5 iINiK7jrql/VuEpdnQ7hN3oPCmFmEp/GaU7b+pG5h1BwPetMOIXQ/PNadq6gZtOX 2QoBD5YriJ8pGjA4shRqXAPB3L2hlH3DPZ4XcwEfl9TDShos2CHoK+q+rWCOrD2g 4orHIhQ88eMoRtenUCaSW/E9EZw3VqonQkehtdVbhZEKximPCTbqXecfzD9fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrHEdKmlnl32Q8Uc5+WD48okDGDUwHwYDVR0j BBgwFoAUw28rJmVnSpOfBn9JVYgmH31Nb40wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjFjN2U4MzMtNmM1NC00ZTBiLTgzMWMtMWMxYTcxMGNlOGUzLzAvQzM2RjJCMjY2 NTY3NEE5MzlGMDY3RjQ5NTU4ODI2MUY3RDRENkY4RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMzZGMkIyNjY1Njc0QTkzOUYwNjdGNDk1NTg4MjYxRjdENEQ2 RjhELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjFjN2U4MzMtNmM1NC00ZTBiLTgz MWMtMWMxYTcxMGNlOGUzLzAvQzM2RjJCMjY2NTY3NEE5MzlGMDY3RjQ5NTU4ODI2 MUY3RDRENkY4RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB6t/656+CqF6r8wQUdFrTdApQiloaXA4sD8 mnC/3o0FJkiwSCMk0lGxBBq/8XAUo6j2ljioq0Ze8wXuQdkoqtvKEI1ZveJgCMKx 25PyzzcdIdBW/rfjEtHeXTl2tOlte8m6tukc3vX6pKGtdfF6VGXa9qvQd3of/+Xf y4ntZhL558S1iB19neeYdxviBM86JQrlTeyPABMf8QRmq8TOPWWSy3Qa6l1WFe2/ uMiMGiFKVFgZCfheWjdTLZlsH3kAWBDOe/C6H7vwyDGNXNFnG8LFFOIKaCeOoc4U FwmSCR0IpOegkE9m5HVrV4HAo5b8p5gKfHaqhSB5hPdCKu4Icec= -----END CERTIFICATE-----Generated at Thu Sep 17 14:26:25 2026 by rpki-client