$ rpki-client -vvf rpki-rsync.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/36987F1D265142449AF11F138E84E3AE2398BB71.mft File: 36987F1D265142449AF11F138E84E3AE2398BB71.mft (raw, json) Hash identifier: pNst+mhxH96ZY2i1r+AyxZXxbdpZA9f2WXHydbAyLQA= Subject key identifier: E2:86:98:61:F3:41:D7:68:B4:96:18:D7:1B:91:00:64:DA:0E:F4:7E Authority key identifier: 36:98:7F:1D:26:51:42:44:9A:F1:1F:13:8E:84:E3:AE:23:98:BB:71 Certificate issuer: /CN=36987F1D265142449AF11F138E84E3AE2398BB71 Certificate serial: 41244419D48336885A12261AA7DBDF34F3B6C200 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/36987F1D265142449AF11F138E84E3AE2398BB71.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/36987F1D265142449AF11F138E84E3AE2398BB71.mft Manifest number: 14 Signing time: Sat 16 May 2026 10:21:30 +0000 Manifest this update: Sat 16 May 2026 10:16:30 +0000 Manifest next update: Sun 17 May 2026 12:38:30 +0000 Files and hashes: 1: 36987F1D265142449AF11F138E84E3AE2398BB71.crl (hash: CQnPV7vUmtUljyLcN8e2GlKFMlDNqgJqsczYUzNmdjk=) 2: 323030313a6466343a626430303a3a2f34382d3438203d3e203338343936.roa (hash: Bnl6nUu+xtavXODjc9t+OxHVrv/heBfP+6/XJ45t3VI=) 3: 3130332e3131322e3232332e302f32342d3234203d3e20313337333338.roa (hash: a3+GsbTZLmVRS7NxLcoTxVxS7Q4Y+JKlGjV758bCCgw=) 4: 3130332e3131322e3232332e302f32342d3234203d3e203338343936.roa (hash: GYqQuuT/LudwwxgSc6XR1akIqTm1hPmdsuPIZrL2W/E=) 5: 323030313a6466343a626430303a3a2f34382d3438203d3e20313337333338.roa (hash: svBe8CrZWGOGef404cwoRo2+yXAKzM2eujaije66wpU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/36987F1D265142449AF11F138E84E3AE2398BB71.crl rsync://rpki-rsync.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/36987F1D265142449AF11F138E84E3AE2398BB71.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/36987F1D265142449AF11F138E84E3AE2398BB71.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 May 2026 09:33:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:24:44:19:d4:83:36:88:5a:12:26:1a:a7:db:df:34:f3:b6:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36987F1D265142449AF11F138E84E3AE2398BB71 Validity Not Before: May 16 10:16:30 2026 GMT Not After : May 17 12:38:30 2026 GMT Subject: CN=E2869861F341D768B49618D71B910064DA0EF47E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:db:e1:1c:20:11:55:1b:97:f8:3e:53:7c:0e: f0:55:58:f7:d9:58:c9:fa:51:6b:07:e5:8b:99:3f: 66:d8:e4:b9:fd:3d:25:fe:16:e5:35:67:8d:b6:56: fe:f1:60:9d:b7:e7:7b:ba:34:c6:34:e4:0d:5f:5a: 99:c2:44:09:cb:e1:fe:3c:17:fe:58:01:55:0f:65: a6:4e:72:37:e2:e7:4a:b6:8c:0f:d1:3f:32:c5:41: e5:9d:88:4a:2f:43:2c:2b:20:d4:72:83:5e:e7:c0: a3:0f:88:bf:6c:40:78:3b:7b:70:46:64:9c:bc:55: d8:26:3a:fd:07:46:ac:2f:c0:f9:44:7b:bf:54:9b: 2d:bd:5e:4b:9d:a2:d9:fd:97:4c:04:bd:9f:a8:1d: 22:a0:15:0a:e2:99:58:aa:ce:13:5b:82:44:e2:7d: 60:5a:ea:0b:d8:28:9d:33:fd:78:1b:a0:2a:79:54: 78:8e:8a:5f:d1:7d:d8:8f:cf:fc:3b:11:52:0c:2f: 35:4c:82:46:ed:89:a0:6e:6f:7a:d6:7a:45:ec:7d: dd:13:5a:f3:5d:6b:e6:c9:a9:57:78:b2:96:c8:95: f5:7e:df:1c:25:ce:61:80:1d:ae:02:f6:ce:ae:1b: 61:2e:f9:c3:98:e8:29:6b:5c:b0:31:6a:31:2f:32: e7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:86:98:61:F3:41:D7:68:B4:96:18:D7:1B:91:00:64:DA:0E:F4:7E X509v3 Authority Key Identifier: keyid:36:98:7F:1D:26:51:42:44:9A:F1:1F:13:8E:84:E3:AE:23:98:BB:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/36987F1D265142449AF11F138E84E3AE2398BB71.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/36987F1D265142449AF11F138E84E3AE2398BB71.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/36987F1D265142449AF11F138E84E3AE2398BB71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:30:a0:a7:ea:a9:90:94:de:eb:60:a2:d8:d2:47:35:f6:1c: 5b:09:ac:ea:de:79:17:61:35:4e:eb:8d:c4:e6:b9:8e:df:e0: d8:bf:c2:e7:06:be:3e:bb:35:61:49:01:f5:bb:06:7e:3b:7b: 3e:ef:87:f7:2c:ca:c3:44:5f:5a:ee:cd:7c:84:a6:ae:34:33: 6f:42:1b:fe:de:0d:ac:81:3c:be:c2:0d:95:5b:df:50:6c:9d: 3d:8e:6a:ef:c9:48:f6:09:a8:a3:af:22:cc:ef:21:2a:82:0e: ba:f7:c3:ed:79:13:ac:ae:cf:3d:e2:80:44:c2:4d:d2:de:d0: 75:2b:f4:5e:e2:08:ab:45:6d:a8:dc:d4:d3:b1:da:99:fd:d0: 56:e4:3a:7f:b8:3c:90:7c:f1:a0:35:22:cc:95:d3:d3:7b:e1: 6f:1d:75:2c:be:8c:2a:3b:79:18:d4:a8:99:d6:2e:05:a3:b6: 86:87:28:a9:2f:bf:83:41:c4:60:7e:98:92:ab:46:ef:ef:4b: 1b:0b:20:b4:34:08:85:44:fc:81:7e:c5:28:9d:18:88:26:5b: 85:74:3c:62:e5:93:c3:06:4c:df:2d:ac:32:47:d7:bc:d8:b8: 08:8d:3b:6a:7e:bc:a3:2a:ae:9c:05:e9:c9:7c:80:a6:2a:61: 44:ba:c4:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQSREGdSDNohaEiYap9vfNPO2wgAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY5ODdGMUQyNjUxNDI0NDlBRjExRjEzOEU4NEUzQUUy Mzk4QkI3MTAeFw0yNjA1MTYxMDE2MzBaFw0yNjA1MTcxMjM4MzBaMDMxMTAvBgNV BAMTKEUyODY5ODYxRjM0MUQ3NjhCNDk2MThENzFCOTEwMDY0REEwRUY0N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE2+EcIBFVG5f4PlN8DvBVWPfZ WMn6UWsH5YuZP2bY5Ln9PSX+FuU1Z422Vv7xYJ2353u6NMY05A1fWpnCRAnL4f48 F/5YAVUPZaZOcjfi50q2jA/RPzLFQeWdiEovQywrINRyg17nwKMPiL9sQHg7e3BG ZJy8VdgmOv0HRqwvwPlEe79Umy29Xkudotn9l0wEvZ+oHSKgFQrimViqzhNbgkTi fWBa6gvYKJ0z/XgboCp5VHiOil/RfdiPz/w7EVIMLzVMgkbtiaBub3rWekXsfd0T WvNda+bJqVd4spbIlfV+3xwlzmGAHa4C9s6uG2Eu+cOY6ClrXLAxajEvMueBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4oaYYfNB12i0lhjXG5EAZNoO9H4wHwYDVR0j BBgwFoAUNph/HSZRQkSa8R8TjoTjriOYu3EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDJkNmQwZGYtYzIxZS00OTFjLWIxMTYtNGExZDlhMmM3NGJlLzAvMzY5ODdGMUQy NjUxNDI0NDlBRjExRjEzOEU4NEUzQUUyMzk4QkI3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNjk4N0YxRDI2NTE0MjQ0OUFGMTFGMTM4RTg0RTNBRTIzOThC QjcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDJkNmQwZGYtYzIxZS00OTFjLWIx MTYtNGExZDlhMmM3NGJlLzAvMzY5ODdGMUQyNjUxNDI0NDlBRjExRjEzOEU4NEUz QUUyMzk4QkI3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADowoKfqqZCU3utgotjSRzX2HFsJrOreeRdh NU7rjcTmuY7f4Ni/wucGvj67NWFJAfW7Bn47ez7vh/csysNEX1ruzXyEpq40M29C G/7eDayBPL7CDZVb31BsnT2Oau/JSPYJqKOvIszvISqCDrr3w+15E6yuzz3igETC TdLe0HUr9F7iCKtFbajc1NOx2pn90FbkOn+4PJB88aA1IsyV09N74W8ddSy+jCo7 eRjUqJnWLgWjtoaHKKkvv4NBxGB+mJKrRu/vSxsLILQ0CIVE/IF+xSidGIgmW4V0 PGLlk8MGTN8trDJH17zYuAiNO2p+vKMqrpwF6cl8gKYqYUS6xM8= -----END CERTIFICATE-----Generated at Sat May 16 14:27:10 2026 by rpki-client