$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/36987F1D265142449AF11F138E84E3AE2398BB71.mft File: 36987F1D265142449AF11F138E84E3AE2398BB71.mft (raw, json) Hash identifier: Ql6gISI/ekYExUezVjCKdHooMWwQqWQueTOpX8tlcSA= Subject key identifier: 32:81:D3:5E:E1:3A:63:96:B0:15:E6:4E:00:20:C0:42:27:EA:E6:75 Authority key identifier: 36:98:7F:1D:26:51:42:44:9A:F1:1F:13:8E:84:E3:AE:23:98:BB:71 Certificate issuer: /CN=36987F1D265142449AF11F138E84E3AE2398BB71 Certificate serial: 508EEFF94890C4BD20B81DCC9CBAE3B4801C6231 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/36987F1D265142449AF11F138E84E3AE2398BB71.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/36987F1D265142449AF11F138E84E3AE2398BB71.mft Manifest number: EB Signing time: Sun 25 Oct 2026 16:47:39 +0000 Manifest this update: Sun 25 Oct 2026 16:42:39 +0000 Manifest next update: Mon 26 Oct 2026 18:56:39 +0000 Files and hashes: 1: 3130332e3131322e3232332e302f32342d3234203d3e203338343936.roa (hash: GYqQuuT/LudwwxgSc6XR1akIqTm1hPmdsuPIZrL2W/E=) 2: 323030313a6466343a626430303a3a2f34382d3438203d3e203338343936.roa (hash: Bnl6nUu+xtavXODjc9t+OxHVrv/heBfP+6/XJ45t3VI=) 3: 36987F1D265142449AF11F138E84E3AE2398BB71.crl (hash: //u16q5DH4QBEHnr/eTaHTUQwADXmMdh3yWPOxCE0Gc=) 4: 3130332e3131322e3232332e302f32342d3234203d3e20313337333338.roa (hash: a3+GsbTZLmVRS7NxLcoTxVxS7Q4Y+JKlGjV758bCCgw=) 5: 323030313a6466343a626430303a3a2f34382d3438203d3e20313337333338.roa (hash: svBe8CrZWGOGef404cwoRo2+yXAKzM2eujaije66wpU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/36987F1D265142449AF11F138E84E3AE2398BB71.crl rsync://rpki-rsync.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/36987F1D265142449AF11F138E84E3AE2398BB71.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/36987F1D265142449AF11F138E84E3AE2398BB71.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:8e:ef:f9:48:90:c4:bd:20:b8:1d:cc:9c:ba:e3:b4:80:1c:62:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36987F1D265142449AF11F138E84E3AE2398BB71 Validity Not Before: Oct 25 16:42:39 2026 GMT Not After : Oct 26 18:56:39 2026 GMT Subject: CN=3281D35EE13A6396B015E64E0020C04227EAE675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f0:35:b8:1e:b5:1a:fa:93:c4:af:99:6f:8d: 8c:39:8f:41:d6:73:d1:ab:89:12:ef:8a:34:e6:d2: b1:40:7a:41:ac:65:31:f7:34:5d:5b:eb:b0:be:41: 96:28:18:6d:84:cc:da:15:34:44:51:46:d7:f2:c8: f3:cf:cf:81:74:fd:f7:f0:84:b8:fd:16:16:60:34: d2:3b:e4:42:82:e5:13:a6:20:36:54:b8:17:c5:03: 7a:0e:30:52:cc:6e:d8:1f:a2:1c:a5:bd:29:c3:d1: ca:f6:af:22:0e:a0:cf:3d:80:0c:69:d1:cf:08:1c: b9:b4:d0:14:b3:e4:22:fc:55:fe:f2:ae:e5:05:d8: 4e:70:34:7c:19:0f:5d:04:10:90:f7:fa:4e:e7:ce: 96:c3:9c:e8:88:a1:76:73:1a:e9:36:8c:a2:8c:ce: 4b:56:a0:f8:c1:d2:87:ab:a3:de:18:0f:4e:69:95: d6:8d:01:59:51:5a:1e:5e:08:5d:f6:ba:ec:7a:ce: 09:39:d7:30:fe:b2:b8:78:6f:62:b4:f4:03:4f:13: 29:c8:7c:e3:00:09:66:d5:fa:d4:19:e3:1c:b8:43: f6:dc:b4:88:ac:14:41:44:33:ae:ae:15:c3:92:b0: 31:95:44:8c:de:91:3d:11:ed:4b:01:97:79:b9:6a: 0e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:81:D3:5E:E1:3A:63:96:B0:15:E6:4E:00:20:C0:42:27:EA:E6:75 X509v3 Authority Key Identifier: keyid:36:98:7F:1D:26:51:42:44:9A:F1:1F:13:8E:84:E3:AE:23:98:BB:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/36987F1D265142449AF11F138E84E3AE2398BB71.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/36987F1D265142449AF11F138E84E3AE2398BB71.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/36987F1D265142449AF11F138E84E3AE2398BB71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:e6:ac:25:02:28:9e:2b:42:5e:c3:10:1d:72:ea:ce:97:89: 88:b4:38:03:96:72:49:bc:ad:a2:d2:ab:e6:d8:78:ff:bf:7a: b3:dc:75:08:77:21:16:8c:a9:fa:6a:da:1f:e7:45:ad:81:0c: 0b:38:ea:7e:10:af:2b:a6:07:75:5a:58:ef:dc:1f:2b:d1:bb: 65:2a:36:b6:de:bf:67:a7:58:b9:4e:ea:38:17:a5:af:42:10: 13:32:b4:db:ef:b0:ff:17:c8:fd:46:ee:f9:3d:ef:18:2f:15: 87:37:30:7a:54:5e:9c:dd:13:51:22:ef:52:15:cc:2f:9f:16: 8f:c1:5a:31:bc:1a:17:63:02:ea:18:92:22:91:bb:e7:36:cb: 19:76:78:66:68:97:2f:11:cf:69:51:cb:e8:46:65:1a:cc:11: 15:63:c8:18:0d:18:a8:f1:88:d7:29:f9:19:0b:00:e4:cb:38: 2d:98:0f:c4:13:9a:ea:6c:b1:20:f6:d9:28:aa:fd:bc:24:07: d7:f1:c2:2d:40:c1:a9:b3:3c:24:34:53:32:dc:b7:58:b0:6a: 04:44:bf:d9:6b:6d:c2:bb:8a:67:df:30:d8:27:54:f3:69:b6: d0:f7:80:d2:b1:95:5e:da:18:d6:5c:48:26:aa:98:28:78:1b: 26:ba:b3:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUI7v+UiQxL0guB3MnLrjtIAcYjEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY5ODdGMUQyNjUxNDI0NDlBRjExRjEzOEU4NEUzQUUy Mzk4QkI3MTAeFw0yNjEwMjUxNjQyMzlaFw0yNjEwMjYxODU2MzlaMDMxMTAvBgNV BAMTKDMyODFEMzVFRTEzQTYzOTZCMDE1RTY0RTAwMjBDMDQyMjdFQUU2NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk8DW4HrUa+pPEr5lvjYw5j0HW c9GriRLvijTm0rFAekGsZTH3NF1b67C+QZYoGG2EzNoVNERRRtfyyPPPz4F0/ffw hLj9FhZgNNI75EKC5ROmIDZUuBfFA3oOMFLMbtgfohylvSnD0cr2ryIOoM89gAxp 0c8IHLm00BSz5CL8Vf7yruUF2E5wNHwZD10EEJD3+k7nzpbDnOiIoXZzGuk2jKKM zktWoPjB0oero94YD05pldaNAVlRWh5eCF32uux6zgk51zD+srh4b2K09ANPEynI fOMACWbV+tQZ4xy4Q/bctIisFEFEM66uFcOSsDGVRIzekT0R7UsBl3m5ag7PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMoHTXuE6Y5awFeZOACDAQifq5nUwHwYDVR0j BBgwFoAUNph/HSZRQkSa8R8TjoTjriOYu3EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDJkNmQwZGYtYzIxZS00OTFjLWIxMTYtNGExZDlhMmM3NGJlLzAvMzY5ODdGMUQy NjUxNDI0NDlBRjExRjEzOEU4NEUzQUUyMzk4QkI3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNjk4N0YxRDI2NTE0MjQ0OUFGMTFGMTM4RTg0RTNBRTIzOThC QjcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDJkNmQwZGYtYzIxZS00OTFjLWIx MTYtNGExZDlhMmM3NGJlLzAvMzY5ODdGMUQyNjUxNDI0NDlBRjExRjEzOEU4NEUz QUUyMzk4QkI3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHTmrCUCKJ4rQl7DEB1y6s6XiYi0OAOWckm8 raLSq+bYeP+/erPcdQh3IRaMqfpq2h/nRa2BDAs46n4QryumB3VaWO/cHyvRu2Uq Nrbev2enWLlO6jgXpa9CEBMytNvvsP8XyP1G7vk97xgvFYc3MHpUXpzdE1Ei71IV zC+fFo/BWjG8GhdjAuoYkiKRu+c2yxl2eGZoly8Rz2lRy+hGZRrMERVjyBgNGKjx iNcp+RkLAOTLOC2YD8QTmupssSD22Siq/bwkB9fxwi1AwamzPCQ0UzLct1iwagRE v9lrbcK7imffMNgnVPNpttD3gNKxlV7aGNZcSCaqmCh4Gya6s18= -----END CERTIFICATE-----Generated at Sun Oct 25 23:26:44 2026 by rpki-client