$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.mft File: 3D36B37BDE25595112D2BB921B7F36C6A161CBA1.mft (raw, json) Hash identifier: QEt4dO3YIZgy8jJon2caYgxbmwzc4pbJtInjAuzwE3U= Subject key identifier: 03:77:83:71:D7:E2:10:D7:3B:CB:97:47:19:E5:3F:9D:F5:A8:B2:FA Authority key identifier: 3D:36:B3:7B:DE:25:59:51:12:D2:BB:92:1B:7F:36:C6:A1:61:CB:A1 Certificate issuer: /CN=3D36B37BDE25595112D2BB921B7F36C6A161CBA1 Certificate serial: 6B37B424AD0F60D2F759B8041F503DD92F58046E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.mft Manifest number: E9 Signing time: Fri 23 Oct 2026 18:16:52 +0000 Manifest this update: Fri 23 Oct 2026 18:11:52 +0000 Manifest next update: Sat 24 Oct 2026 19:03:52 +0000 Files and hashes: 1: 3130332e3130392e32362e302f32342d3234203d3e20313337333131.roa (hash: Doi0z4NEkGv6RXLNnraqWYaR8sRBho22P+RDGrr47z8=) 2: 3130332e3130392e32372e302f32342d3234203d3e20313337333131.roa (hash: G6e1r3DRuRea+xhgobcaC8YJTmew1ogfm81bEXCrCm0=) 3: 3130332e3130392e32352e302f32342d3234203d3e20313337333131.roa (hash: hSf4M6pKMLscH8R7TfP9AjqFEoXEdb3myJnr9z/AlaE=) 4: 3D36B37BDE25595112D2BB921B7F36C6A161CBA1.crl (hash: QU7f89OwhnsJ6tn1wpP/7eUBbo4X3cKIoEXWT7dTpBo=) 5: 3130332e3130392e32342e302f32342d3234203d3e20313337333131.roa (hash: yRTCL3qqZl+3vfyw12FbHiGh+XgdfssrTdi86LJj3XA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.crl rsync://rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Oct 2026 19:03:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:37:b4:24:ad:0f:60:d2:f7:59:b8:04:1f:50:3d:d9:2f:58:04:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D36B37BDE25595112D2BB921B7F36C6A161CBA1 Validity Not Before: Oct 23 18:11:52 2026 GMT Not After : Oct 24 19:03:52 2026 GMT Subject: CN=03778371D7E210D73BCB974719E53F9DF5A8B2FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:37:27:5d:8e:37:9a:cc:f5:38:43:26:56:df: 78:e4:3a:fb:3b:ad:7f:ba:78:47:2b:79:4c:a8:1f: 65:31:80:95:a3:42:3f:97:40:f5:be:47:41:a8:fb: e5:0a:37:6e:de:08:1a:36:21:85:20:8b:98:33:99: bc:14:a9:50:f5:ef:85:88:c2:2e:f1:f1:6e:65:c8: 7c:4d:a8:93:7a:17:e4:db:ef:1a:02:2f:9d:e1:7b: af:0c:3d:7e:db:c4:4a:31:6f:51:96:d5:e0:3b:c1: 51:97:ff:50:51:a3:29:6a:75:68:0b:c3:9c:a8:84: 70:23:f4:19:00:2b:73:7e:19:30:b3:8c:7d:7f:35: 0b:6e:2e:88:d5:8a:ff:83:b8:9c:af:ca:ac:48:dd: 91:43:ff:2f:be:e3:7c:91:16:70:f4:00:e6:02:3b: e8:9b:9f:fd:e0:3c:c9:43:4d:b2:78:57:c1:58:dc: f7:30:dc:b8:47:43:02:d9:71:86:f7:27:96:00:dc: f3:44:0d:52:f8:4e:72:88:dc:43:88:b7:50:51:50: b4:fe:ea:1f:ce:b8:7b:1a:15:5c:d3:42:cd:b1:f1: 4c:db:0c:5c:48:5e:26:45:fb:28:da:08:e8:24:95: 3e:36:ff:43:78:ee:0b:7e:e7:d8:45:f4:05:03:9f: f1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:77:83:71:D7:E2:10:D7:3B:CB:97:47:19:E5:3F:9D:F5:A8:B2:FA X509v3 Authority Key Identifier: keyid:3D:36:B3:7B:DE:25:59:51:12:D2:BB:92:1B:7F:36:C6:A1:61:CB:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:69:30:2e:a6:75:e8:5e:d2:9a:e8:44:46:12:33:bb:b6:b0: 8f:4f:f9:17:99:76:7e:2c:62:72:1f:84:ce:e8:11:a9:90:28: d9:c4:db:dc:2a:42:02:b0:66:d9:a5:d5:e9:13:d5:e2:73:ac: 1b:fd:69:82:94:a5:10:96:03:d6:ce:e5:c0:35:25:dc:f2:44: d2:83:1d:0f:aa:67:58:fc:ed:24:b8:b3:c9:ce:32:8e:73:d1: 61:62:fb:64:e6:04:bf:cd:67:27:b6:26:ba:53:1e:8c:f0:e7: 9e:ce:35:8c:dd:88:a0:31:7d:57:a2:e5:95:6d:1a:25:f1:ee: 06:a8:78:a0:49:70:94:87:82:d6:e8:f0:47:ea:23:a3:92:c4: 9c:9f:ee:13:94:c4:49:7c:e2:7e:03:79:f2:55:bf:fa:80:d7: 45:3e:ca:ca:3c:5d:b4:78:43:28:a9:6b:c3:76:2e:fb:fb:e9: e8:f0:92:d6:3c:29:c1:ed:48:07:3a:c8:2b:26:d1:b9:94:ea: f8:09:8b:7d:33:01:d0:57:1b:c4:ea:12:7a:10:f4:65:80:85: b3:39:75:74:65:7b:d9:b1:d1:60:12:bb:66:a2:ec:28:13:f2: fa:87:ab:5c:06:83:d5:f5:18:d4:b2:87:a3:8b:97:e7:d2:f2: 89:a3:e7:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaze0JK0PYNL3WbgEH1A92S9YBG4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0QzNkIzN0JERTI1NTk1MTEyRDJCQjkyMUI3RjM2QzZB MTYxQ0JBMTAeFw0yNjEwMjMxODExNTJaFw0yNjEwMjQxOTAzNTJaMDMxMTAvBgNV BAMTKDAzNzc4MzcxRDdFMjEwRDczQkNCOTc0NzE5RTUzRjlERjVBOEIyRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRNyddjjeazPU4QyZW33jkOvs7 rX+6eEcreUyoH2UxgJWjQj+XQPW+R0Go++UKN27eCBo2IYUgi5gzmbwUqVD174WI wi7x8W5lyHxNqJN6F+Tb7xoCL53he68MPX7bxEoxb1GW1eA7wVGX/1BRoylqdWgL w5yohHAj9BkAK3N+GTCzjH1/NQtuLojViv+DuJyvyqxI3ZFD/y++43yRFnD0AOYC O+ibn/3gPMlDTbJ4V8FY3Pcw3LhHQwLZcYb3J5YA3PNEDVL4TnKI3EOIt1BRULT+ 6h/OuHsaFVzTQs2x8UzbDFxIXiZF+yjaCOgklT42/0N47gt+59hF9AUDn/FRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA3eDcdfiENc7y5dHGeU/nfWosvowHwYDVR0j BBgwFoAUPTaze94lWVES0ruSG382xqFhy6EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDgzNWNiNGEtMmZiOS00MGQ3LWIxNTUtZGNjZTdjYjAwMjkzLzAvM0QzNkIzN0JE RTI1NTk1MTEyRDJCQjkyMUI3RjM2QzZBMTYxQ0JBMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRDM2QjM3QkRFMjU1OTUxMTJEMkJCOTIxQjdGMzZDNkExNjFD QkExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDgzNWNiNGEtMmZiOS00MGQ3LWIx NTUtZGNjZTdjYjAwMjkzLzAvM0QzNkIzN0JERTI1NTk1MTEyRDJCQjkyMUI3RjM2 QzZBMTYxQ0JBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGFpMC6mdehe0proREYSM7u2sI9P+ReZdn4s YnIfhM7oEamQKNnE29wqQgKwZtml1ekT1eJzrBv9aYKUpRCWA9bO5cA1JdzyRNKD HQ+qZ1j87SS4s8nOMo5z0WFi+2TmBL/NZye2JrpTHozw557ONYzdiKAxfVei5ZVt GiXx7gaoeKBJcJSHgtbo8EfqI6OSxJyf7hOUxEl84n4DefJVv/qA10U+yso8XbR4 Qyipa8N2Lvv76ejwktY8KcHtSAc6yCsm0bmU6vgJi30zAdBXG8TqEnoQ9GWAhbM5 dXRle9mx0WASu2ai7CgT8vqHq1wGg9X1GNSyh6OLl+fS8omj5+4= -----END CERTIFICATE-----Generated at Sat Oct 24 10:14:21 2026 by rpki-client