$ rpki-client -vvf rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.mft File: 3D36B37BDE25595112D2BB921B7F36C6A161CBA1.mft (raw, json) Hash identifier: s4h0IzCS0Pw1ga3/ISz1nJ2f9ZER6pczRcKxutLksL4= Subject key identifier: 95:A2:E4:CD:77:28:D2:EB:9B:1A:94:0B:76:94:4B:9B:9A:93:DE:17 Authority key identifier: 3D:36:B3:7B:DE:25:59:51:12:D2:BB:92:1B:7F:36:C6:A1:61:CB:A1 Certificate issuer: /CN=3D36B37BDE25595112D2BB921B7F36C6A161CBA1 Certificate serial: 26491C4B8241395B8B6F4748AA876794D0B40AC6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 02:12:29 +0000 Manifest this update: Sat 20 Jun 2026 02:07:29 +0000 Manifest next update: Sun 21 Jun 2026 04:08:29 +0000 Files and hashes: 1: 3130332e3130392e32352e302f32342d3234203d3e20313337333131.roa (hash: hSf4M6pKMLscH8R7TfP9AjqFEoXEdb3myJnr9z/AlaE=) 2: 3130332e3130392e32362e302f32342d3234203d3e20313337333131.roa (hash: Doi0z4NEkGv6RXLNnraqWYaR8sRBho22P+RDGrr47z8=) 3: 3130332e3130392e32342e302f32342d3234203d3e20313337333131.roa (hash: yRTCL3qqZl+3vfyw12FbHiGh+XgdfssrTdi86LJj3XA=) 4: 3130332e3130392e32372e302f32342d3234203d3e20313337333131.roa (hash: G6e1r3DRuRea+xhgobcaC8YJTmew1ogfm81bEXCrCm0=) 5: 3D36B37BDE25595112D2BB921B7F36C6A161CBA1.crl (hash: hpIeYqe2jWQ3eOjk0g9UgV2TC9YxJv2LbTNoMmLWrLI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.crl rsync://rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 04:08:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:49:1c:4b:82:41:39:5b:8b:6f:47:48:aa:87:67:94:d0:b4:0a:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D36B37BDE25595112D2BB921B7F36C6A161CBA1 Validity Not Before: Jun 20 02:07:29 2026 GMT Not After : Jun 21 04:08:29 2026 GMT Subject: CN=95A2E4CD7728D2EB9B1A940B76944B9B9A93DE17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:46:8f:5e:95:c5:44:89:81:2d:07:8a:31:50: 74:b4:36:db:6c:be:ae:84:fe:84:69:b5:19:be:84: 7e:b0:35:47:bd:55:92:2c:12:f8:3a:48:87:f9:a4: ef:ce:9a:2c:20:0f:2f:dc:40:1e:fa:e8:b0:9f:1f: f9:1d:0e:b9:08:0e:9c:e0:23:b9:5d:84:ef:0f:df: 76:fa:69:a9:89:68:f7:ea:85:da:7a:c3:e5:26:87: 70:be:3a:5f:a5:35:6d:6c:6a:50:d3:38:31:cf:e2: 5a:75:89:8a:97:8d:1a:a2:af:25:08:f7:26:d9:87: 42:7c:35:f0:14:e8:66:d4:52:06:86:10:5b:8a:ac: cd:bc:38:10:fe:20:a8:5b:9a:df:43:0e:98:e9:3e: 5a:02:aa:cd:b2:ca:e5:cf:f5:d7:08:49:e7:49:39: e0:e6:81:51:0a:06:93:68:d7:27:41:ab:f1:09:a3: bd:b6:e4:e1:83:62:8a:37:58:ed:0c:3e:25:d7:35: b0:06:88:38:3a:02:22:51:5b:1e:ed:05:b8:6c:4c: a1:f1:00:b4:c3:24:ac:66:14:33:24:07:ec:e2:be: d5:eb:4d:d4:6e:e6:4a:be:d8:64:6d:53:85:9e:e0: 70:ea:34:9f:db:92:c0:d1:b0:fe:d7:5d:16:2d:0b: 27:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:A2:E4:CD:77:28:D2:EB:9B:1A:94:0B:76:94:4B:9B:9A:93:DE:17 X509v3 Authority Key Identifier: keyid:3D:36:B3:7B:DE:25:59:51:12:D2:BB:92:1B:7F:36:C6:A1:61:CB:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:17:12:4a:50:c6:36:1c:e4:19:f3:6d:1e:ab:0b:67:45:9a: e1:9e:0b:6b:2f:5e:fa:61:4a:21:c2:ca:b3:4d:eb:4f:7b:4b: 60:9b:3a:73:c4:b6:f2:c5:03:5c:2e:15:e5:6a:ff:e1:5c:4b: c2:c5:57:9e:73:14:94:8d:6e:49:e0:a0:c9:0a:d8:52:69:1a: 85:83:82:fd:06:f9:ad:ff:47:be:54:e4:ad:fd:56:c7:d4:85: d0:fd:53:aa:80:db:5d:ae:43:f1:54:b4:4a:52:4a:86:42:7c: 03:ee:5e:09:1b:0f:b9:fd:93:fd:47:51:79:ea:32:98:f9:3f: 85:21:6c:8f:8d:e1:58:4c:eb:5a:37:9c:e7:82:35:24:83:61: 72:ad:a2:53:e5:64:33:4f:28:fd:f1:38:64:f7:34:1f:34:0b: 78:4e:1f:ac:67:1b:4d:d2:cf:93:23:f2:b4:26:f7:d9:4a:be: 1c:12:17:0d:3a:8b:6b:31:8c:c7:d1:c9:e6:a4:4f:15:58:c5: 38:14:ee:72:54:72:9b:5c:07:c6:e8:fa:bf:58:00:2f:5f:18: bf:24:50:2d:44:92:8e:e3:52:b1:76:72:72:c8:f8:78:ec:16: 4e:72:20:8f:2b:63:47:fb:1e:4a:72:8b:52:9a:ef:52:d7:08: 88:92:9d:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJkkcS4JBOVuLb0dIqodnlNC0CsYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0QzNkIzN0JERTI1NTk1MTEyRDJCQjkyMUI3RjM2QzZB MTYxQ0JBMTAeFw0yNjA2MjAwMjA3MjlaFw0yNjA2MjEwNDA4MjlaMDMxMTAvBgNV BAMTKDk1QTJFNENENzcyOEQyRUI5QjFBOTQwQjc2OTQ0QjlCOUE5M0RFMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFRo9elcVEiYEtB4oxUHS0Ntts vq6E/oRptRm+hH6wNUe9VZIsEvg6SIf5pO/OmiwgDy/cQB766LCfH/kdDrkIDpzg I7ldhO8P33b6aamJaPfqhdp6w+Umh3C+Ol+lNW1salDTODHP4lp1iYqXjRqiryUI 9ybZh0J8NfAU6GbUUgaGEFuKrM28OBD+IKhbmt9DDpjpPloCqs2yyuXP9dcISedJ OeDmgVEKBpNo1ydBq/EJo7225OGDYoo3WO0MPiXXNbAGiDg6AiJRWx7tBbhsTKHx ALTDJKxmFDMkB+zivtXrTdRu5kq+2GRtU4We4HDqNJ/bksDRsP7XXRYtCyclAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlaLkzXco0uubGpQLdpRLm5qT3hcwHwYDVR0j BBgwFoAUPTaze94lWVES0ruSG382xqFhy6EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDgzNWNiNGEtMmZiOS00MGQ3LWIxNTUtZGNjZTdjYjAwMjkzLzAvM0QzNkIzN0JE RTI1NTk1MTEyRDJCQjkyMUI3RjM2QzZBMTYxQ0JBMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zRDM2QjM3QkRFMjU1OTUxMTJEMkJCOTIxQjdGMzZDNkExNjFD QkExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDgzNWNiNGEtMmZiOS00MGQ3LWIx NTUtZGNjZTdjYjAwMjkzLzAvM0QzNkIzN0JERTI1NTk1MTEyRDJCQjkyMUI3RjM2 QzZBMTYxQ0JBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIQXEkpQxjYc5BnzbR6rC2dFmuGeC2svXvph SiHCyrNN6097S2CbOnPEtvLFA1wuFeVq/+FcS8LFV55zFJSNbkngoMkK2FJpGoWD gv0G+a3/R75U5K39VsfUhdD9U6qA212uQ/FUtEpSSoZCfAPuXgkbD7n9k/1HUXnq Mpj5P4UhbI+N4VhM61o3nOeCNSSDYXKtolPlZDNPKP3xOGT3NB80C3hOH6xnG03S z5Mj8rQm99lKvhwSFw06i2sxjMfRyeakTxVYxTgU7nJUcptcB8bo+r9YAC9fGL8k UC1Eko7jUrF2cnLI+HjsFk5yII8rY0f7Hkpyi1Ka71LXCIiSnXA= -----END CERTIFICATE-----Generated at Sat Jun 20 09:35:01 2026 by rpki-client