$ rpki-client -vvf rpki-rsync.idnic.net/repo/e7042190-62de-4c7b-b3a2-7b15de27e5dc/0/36E426816DDAEB8BE08D8A8210459EC65295BFEA.mft File: 36E426816DDAEB8BE08D8A8210459EC65295BFEA.mft (raw, json) Hash identifier: 3k0tDTpGSPc/yuLv9veie+58h6Dihx0jxtZB0JAtDr4= Subject key identifier: 05:76:8A:56:2C:AB:95:16:52:4D:B5:56:67:B9:58:73:BE:32:18:F1 Authority key identifier: 36:E4:26:81:6D:DA:EB:8B:E0:8D:8A:82:10:45:9E:C6:52:95:BF:EA Certificate issuer: /CN=36E426816DDAEB8BE08D8A8210459EC65295BFEA Certificate serial: 490F45C212C460A19AE711BA6E0D5A1C649F9527 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/36E426816DDAEB8BE08D8A8210459EC65295BFEA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e7042190-62de-4c7b-b3a2-7b15de27e5dc/0/36E426816DDAEB8BE08D8A8210459EC65295BFEA.mft Manifest number: 41 Signing time: Sat 20 Jun 2026 04:50:41 +0000 Manifest this update: Sat 20 Jun 2026 04:45:41 +0000 Manifest next update: Sun 21 Jun 2026 08:12:41 +0000 Files and hashes: 1: 36E426816DDAEB8BE08D8A8210459EC65295BFEA.crl (hash: 3LcUEXU7YPvfBCqCqB97y5fA3ISXyBRz+jhvMKQiZA0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e7042190-62de-4c7b-b3a2-7b15de27e5dc/0/36E426816DDAEB8BE08D8A8210459EC65295BFEA.crl rsync://rpki-rsync.idnic.net/repo/e7042190-62de-4c7b-b3a2-7b15de27e5dc/0/36E426816DDAEB8BE08D8A8210459EC65295BFEA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/36E426816DDAEB8BE08D8A8210459EC65295BFEA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 07:28:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:0f:45:c2:12:c4:60:a1:9a:e7:11:ba:6e:0d:5a:1c:64:9f:95:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36E426816DDAEB8BE08D8A8210459EC65295BFEA Validity Not Before: Jun 20 04:45:41 2026 GMT Not After : Jun 21 08:12:41 2026 GMT Subject: CN=05768A562CAB9516524DB55667B95873BE3218F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ad:fa:a3:8f:bc:56:c3:29:cb:8a:29:78:4c: 70:76:5f:42:ff:6b:b2:a1:41:51:a2:7c:04:3f:ed: 4a:1c:f1:89:f7:a5:92:c4:02:37:6c:50:0c:ce:b7: 2b:be:39:01:43:9f:2b:19:ee:ec:43:c1:49:78:49: 92:37:bf:ac:a8:77:3c:78:82:0b:10:8e:55:e9:98: 1f:ad:24:4b:87:77:ff:50:e3:da:e5:6c:af:f8:66: 3a:3f:b7:1b:57:77:69:c4:50:dd:a7:8a:93:27:80: 1c:5c:3c:46:9e:17:97:c5:94:ac:ae:60:ed:ba:50: 82:8b:3a:3b:00:e7:f0:a2:13:5b:36:97:c5:f3:19: d5:b4:64:33:7d:ae:ea:47:58:9a:a4:78:48:f1:3d: 76:10:65:bc:4a:7e:94:0b:bc:7c:7d:4d:ca:24:3d: fc:7a:79:14:84:4d:0d:0f:ee:7e:67:b1:ca:0a:54: 19:30:91:c6:a9:7d:0f:37:3e:e9:bc:57:ab:97:2b: 0f:ec:b5:73:63:af:80:2b:4f:e8:d7:0e:e7:89:93: c2:5b:43:c4:c2:a1:70:06:1c:c2:d7:e2:fc:fe:c4: 8a:87:b4:0e:29:35:18:fc:5a:be:59:23:54:1a:d2: 33:59:67:6c:42:a9:c8:6e:bd:5d:bc:85:2e:83:de: d2:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:76:8A:56:2C:AB:95:16:52:4D:B5:56:67:B9:58:73:BE:32:18:F1 X509v3 Authority Key Identifier: keyid:36:E4:26:81:6D:DA:EB:8B:E0:8D:8A:82:10:45:9E:C6:52:95:BF:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e7042190-62de-4c7b-b3a2-7b15de27e5dc/0/36E426816DDAEB8BE08D8A8210459EC65295BFEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/36E426816DDAEB8BE08D8A8210459EC65295BFEA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e7042190-62de-4c7b-b3a2-7b15de27e5dc/0/36E426816DDAEB8BE08D8A8210459EC65295BFEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:c4:e1:53:48:db:80:8a:24:b1:ce:3c:84:8c:d4:6b:e5:33: 7d:31:a7:ca:39:e2:ae:19:a7:4a:58:7a:5c:3a:e9:a7:55:2f: dd:67:c7:f8:8f:19:1d:40:bd:2d:4a:ba:da:85:1c:88:56:7d: 16:f3:90:67:8f:98:71:62:d6:48:76:7d:32:91:f3:d3:f5:69: e6:9f:87:eb:1c:cc:db:93:7a:80:d8:d2:1e:20:19:11:b9:40: c7:9c:f9:3d:de:1a:33:f0:48:94:4a:87:9e:09:1c:39:26:d4: ca:ce:2a:93:eb:f0:f4:4b:3d:21:71:19:94:91:2c:52:e4:f1: 49:df:ad:d7:2f:48:3e:5e:e6:76:5d:3f:70:ce:2e:53:18:29: 21:43:21:cf:c1:bf:35:bf:6b:c5:04:1e:89:76:29:1a:1b:06: b4:16:ad:ab:59:a0:4b:a2:b0:be:3e:4c:40:92:71:0e:da:6b: 9a:36:06:d3:86:9b:a6:da:ed:67:29:47:6c:90:8d:02:3e:7b: a1:d7:d7:a3:dd:f8:1f:0b:af:9d:a1:cc:6e:e1:ff:32:6a:c2: d1:cf:a3:69:18:79:41:ad:c6:6a:26:70:5e:71:0d:6d:22:7a: e9:64:9f:5b:98:a5:e9:fd:5f:8c:f6:95:1e:93:a9:84:95:1d: 2a:68:b0:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSQ9FwhLEYKGa5xG6bg1aHGSflScwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzZFNDI2ODE2RERBRUI4QkUwOEQ4QTgyMTA0NTlFQzY1 Mjk1QkZFQTAeFw0yNjA2MjAwNDQ1NDFaFw0yNjA2MjEwODEyNDFaMDMxMTAvBgNV BAMTKDA1NzY4QTU2MkNBQjk1MTY1MjREQjU1NjY3Qjk1ODczQkUzMjE4RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCprfqjj7xWwynLiil4THB2X0L/ a7KhQVGifAQ/7Uoc8Yn3pZLEAjdsUAzOtyu+OQFDnysZ7uxDwUl4SZI3v6yodzx4 ggsQjlXpmB+tJEuHd/9Q49rlbK/4Zjo/txtXd2nEUN2nipMngBxcPEaeF5fFlKyu YO26UIKLOjsA5/CiE1s2l8XzGdW0ZDN9rupHWJqkeEjxPXYQZbxKfpQLvHx9Tcok Pfx6eRSETQ0P7n5nscoKVBkwkcapfQ83Pum8V6uXKw/stXNjr4ArT+jXDueJk8Jb Q8TCoXAGHMLX4vz+xIqHtA4pNRj8Wr5ZI1Qa0jNZZ2xCqchuvV28hS6D3tKPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBXaKViyrlRZSTbVWZ7lYc74yGPEwHwYDVR0j BBgwFoAUNuQmgW3a64vgjYqCEEWexlKVv+owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTcwNDIxOTAtNjJkZS00YzdiLWIzYTItN2IxNWRlMjdlNWRjLzAvMzZFNDI2ODE2 RERBRUI4QkUwOEQ4QTgyMTA0NTlFQzY1Mjk1QkZFQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zNkU0MjY4MTZEREFFQjhCRTA4RDhBODIxMDQ1OUVDNjUyOTVC RkVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTcwNDIxOTAtNjJkZS00YzdiLWIz YTItN2IxNWRlMjdlNWRjLzAvMzZFNDI2ODE2RERBRUI4QkUwOEQ4QTgyMTA0NTlF QzY1Mjk1QkZFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKrE4VNI24CKJLHOPISM1GvlM30xp8o54q4Z p0pYelw66adVL91nx/iPGR1AvS1KutqFHIhWfRbzkGePmHFi1kh2fTKR89P1aeaf h+sczNuTeoDY0h4gGRG5QMec+T3eGjPwSJRKh54JHDkm1MrOKpPr8PRLPSFxGZSR LFLk8UnfrdcvSD5e5nZdP3DOLlMYKSFDIc/BvzW/a8UEHol2KRobBrQWratZoEui sL4+TECScQ7aa5o2BtOGm6ba7WcpR2yQjQI+e6HX16Pd+B8Lr52hzG7h/zJqwtHP o2kYeUGtxmomcF5xDW0ieulkn1uYpen9X4z2lR6TqYSVHSposMQ= -----END CERTIFICATE-----Generated at Sat Jun 20 09:16:53 2026 by rpki-client