$ rpki-client -vvf rpki-rsync.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/36987F1D265142449AF11F138E84E3AE2398BB71.mft File: 36987F1D265142449AF11F138E84E3AE2398BB71.mft (raw, json) Hash identifier: phO6Bj1SxRT9NuONbdnbhK+Rn7x8LH5KfMlefPNMBJg= Subject key identifier: 4E:86:E5:FE:BD:30:16:05:CC:FA:D0:2D:5D:47:52:87:97:CD:30:CC Authority key identifier: 36:98:7F:1D:26:51:42:44:9A:F1:1F:13:8E:84:E3:AE:23:98:BB:71 Certificate issuer: /CN=36987F1D265142449AF11F138E84E3AE2398BB71 Certificate serial: 5C470DCCBC27E024BAF5F88138F187A407902C6C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/36987F1D265142449AF11F138E84E3AE2398BB71.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/36987F1D265142449AF11F138E84E3AE2398BB71.mft Manifest number: 62 Signing time: Tue 14 Jul 2026 02:42:50 +0000 Manifest this update: Tue 14 Jul 2026 02:37:50 +0000 Manifest next update: Wed 15 Jul 2026 04:18:50 +0000 Files and hashes: 1: 36987F1D265142449AF11F138E84E3AE2398BB71.crl (hash: LQwYyA1rOUqc3Y3IhdEQyEmn//N8vhMKs44YsRKOCjw=) 2: 3130332e3131322e3232332e302f32342d3234203d3e203338343936.roa (hash: GYqQuuT/LudwwxgSc6XR1akIqTm1hPmdsuPIZrL2W/E=) 3: 323030313a6466343a626430303a3a2f34382d3438203d3e203338343936.roa (hash: Bnl6nUu+xtavXODjc9t+OxHVrv/heBfP+6/XJ45t3VI=) 4: 323030313a6466343a626430303a3a2f34382d3438203d3e20313337333338.roa (hash: svBe8CrZWGOGef404cwoRo2+yXAKzM2eujaije66wpU=) 5: 3130332e3131322e3232332e302f32342d3234203d3e20313337333338.roa (hash: a3+GsbTZLmVRS7NxLcoTxVxS7Q4Y+JKlGjV758bCCgw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/36987F1D265142449AF11F138E84E3AE2398BB71.crl rsync://rpki-rsync.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/36987F1D265142449AF11F138E84E3AE2398BB71.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/36987F1D265142449AF11F138E84E3AE2398BB71.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 04:18:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:47:0d:cc:bc:27:e0:24:ba:f5:f8:81:38:f1:87:a4:07:90:2c:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36987F1D265142449AF11F138E84E3AE2398BB71 Validity Not Before: Jul 14 02:37:50 2026 GMT Not After : Jul 15 04:18:50 2026 GMT Subject: CN=4E86E5FEBD301605CCFAD02D5D47528797CD30CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:72:c1:71:25:b7:5a:81:ab:e4:5c:ca:31:52: e5:64:dd:1f:03:49:02:1f:76:5c:6b:46:97:32:99: 77:bf:e4:46:f5:bf:e7:1d:d0:25:ea:5a:5a:b7:91: 3c:36:fa:75:04:d3:52:35:0b:67:df:9e:39:04:2a: c9:ae:f7:d2:a7:c7:f0:9a:8d:f3:a0:2a:b7:ee:25: 27:c5:9f:c0:59:d9:99:6f:5e:6b:68:d3:52:fe:c7: c4:a4:3d:e5:17:78:6b:a2:fe:b8:75:01:fe:a7:b8: 63:6a:da:37:b3:4f:47:0c:03:c0:16:55:c1:cb:36: bc:4b:6c:af:59:e3:05:11:a3:f2:c2:cc:75:a6:3d: d9:46:10:43:63:04:5e:31:66:58:20:64:e5:93:9b: 1a:e9:64:c3:a8:33:ce:86:c3:71:bb:20:3a:97:86: 01:0d:d0:22:e4:69:b1:16:bc:e1:41:98:9f:cb:3a: cd:a6:59:8c:b8:71:56:be:72:fe:ba:53:52:8e:0c: e0:f2:ba:99:79:40:14:a7:4a:25:f6:43:67:f5:dd: e2:09:c8:29:51:d1:7f:e8:a4:01:4e:90:83:23:b4: 19:30:d0:2e:27:41:5d:47:30:98:50:ae:82:c5:45: 59:6f:bd:64:46:fa:82:17:23:72:a4:48:84:9e:2f: 6a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:86:E5:FE:BD:30:16:05:CC:FA:D0:2D:5D:47:52:87:97:CD:30:CC X509v3 Authority Key Identifier: keyid:36:98:7F:1D:26:51:42:44:9A:F1:1F:13:8E:84:E3:AE:23:98:BB:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/36987F1D265142449AF11F138E84E3AE2398BB71.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/36987F1D265142449AF11F138E84E3AE2398BB71.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/36987F1D265142449AF11F138E84E3AE2398BB71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:3d:7c:37:1b:5f:4d:0a:da:14:93:76:19:10:99:79:93:f0: e5:06:52:80:6d:08:58:b6:cf:5c:e2:4d:c4:db:e3:35:3d:df: 28:15:f4:bd:8a:69:a0:90:32:dd:3e:b1:6b:47:a3:82:ac:79: 30:1a:14:a1:95:7a:df:c0:48:c3:d5:c0:0e:8a:18:3e:0b:13: b2:14:f1:c4:86:a6:82:a0:7f:72:d7:55:77:ef:42:1b:2b:26: 13:be:c2:15:e1:d8:85:d0:24:8b:c6:a1:c4:63:2c:a8:1b:0d: b9:5c:8c:af:c4:03:20:41:b6:e8:75:6a:27:4d:50:ad:5f:81: a0:ff:7a:ed:22:6c:b5:fd:0f:c7:c9:26:e8:3b:6a:a9:9d:f3: e8:59:6b:dc:58:4f:f1:2d:21:24:73:74:11:c5:8c:36:c9:04: 85:dd:d2:b3:0b:fd:f1:d7:da:40:26:ec:d5:4c:ab:ca:bd:35: 80:62:72:e8:84:35:e3:06:4f:71:aa:0e:3f:4b:5a:cb:4d:3f: 6e:ec:b6:e7:ae:5d:00:3e:c9:20:83:14:da:09:4d:ff:fa:87: 69:d2:06:12:c9:43:82:52:96:13:4f:ec:5b:8e:5e:aa:91:24: df:2e:53:4f:ad:a6:c6:d6:6d:8d:66:5a:1d:2c:08:7f:d5:df: a9:bc:e1:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXEcNzLwn4CS69fiBOPGHpAeQLGwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY5ODdGMUQyNjUxNDI0NDlBRjExRjEzOEU4NEUzQUUy Mzk4QkI3MTAeFw0yNjA3MTQwMjM3NTBaFw0yNjA3MTUwNDE4NTBaMDMxMTAvBgNV BAMTKDRFODZFNUZFQkQzMDE2MDVDQ0ZBRDAyRDVENDc1Mjg3OTdDRDMwQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5csFxJbdagavkXMoxUuVk3R8D SQIfdlxrRpcymXe/5Eb1v+cd0CXqWlq3kTw2+nUE01I1C2ffnjkEKsmu99Knx/Ca jfOgKrfuJSfFn8BZ2ZlvXmto01L+x8SkPeUXeGui/rh1Af6nuGNq2jezT0cMA8AW VcHLNrxLbK9Z4wURo/LCzHWmPdlGEENjBF4xZlggZOWTmxrpZMOoM86Gw3G7IDqX hgEN0CLkabEWvOFBmJ/LOs2mWYy4cVa+cv66U1KODODyupl5QBSnSiX2Q2f13eIJ yClR0X/opAFOkIMjtBkw0C4nQV1HMJhQroLFRVlvvWRG+oIXI3KkSISeL2ptAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTobl/r0wFgXM+tAtXUdSh5fNMMwwHwYDVR0j BBgwFoAUNph/HSZRQkSa8R8TjoTjriOYu3EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDJkNmQwZGYtYzIxZS00OTFjLWIxMTYtNGExZDlhMmM3NGJlLzAvMzY5ODdGMUQy NjUxNDI0NDlBRjExRjEzOEU4NEUzQUUyMzk4QkI3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNjk4N0YxRDI2NTE0MjQ0OUFGMTFGMTM4RTg0RTNBRTIzOThC QjcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDJkNmQwZGYtYzIxZS00OTFjLWIx MTYtNGExZDlhMmM3NGJlLzAvMzY5ODdGMUQyNjUxNDI0NDlBRjExRjEzOEU4NEUz QUUyMzk4QkI3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAA9fDcbX00K2hSTdhkQmXmT8OUGUoBtCFi2 z1ziTcTb4zU93ygV9L2KaaCQMt0+sWtHo4KseTAaFKGVet/ASMPVwA6KGD4LE7IU 8cSGpoKgf3LXVXfvQhsrJhO+whXh2IXQJIvGocRjLKgbDblcjK/EAyBBtuh1aidN UK1fgaD/eu0ibLX9D8fJJug7aqmd8+hZa9xYT/EtISRzdBHFjDbJBIXd0rML/fHX 2kAm7NVMq8q9NYBicuiENeMGT3GqDj9LWstNP27stueuXQA+ySCDFNoJTf/6h2nS BhLJQ4JSlhNP7FuOXqqRJN8uU0+tpsbWbY1mWh0sCH/V36m84U4= -----END CERTIFICATE-----Generated at Tue Jul 14 08:26:48 2026 by rpki-client