$ rpki-client -vvvf rpki-rsync.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/636964CD271D2009F5B6D34255EB744F3791245D.mft File: 636964CD271D2009F5B6D34255EB744F3791245D.mft (raw, json) Hash identifier: Px8U9n+RlequdbOUdOXe51UOnJKTZ9zrlbiPKgiJmr8= Subject key identifier: 14:3C:0D:D4:A3:CE:8C:7B:4A:F0:B7:8F:D3:95:4D:CF:16:12:D9:6E Authority key identifier: 63:69:64:CD:27:1D:20:09:F5:B6:D3:42:55:EB:74:4F:37:91:24:5D Certificate issuer: /CN=636964CD271D2009F5B6D34255EB744F3791245D Certificate serial: 3718E2EF09881414D2D460D0551FE2C28734841C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/636964CD271D2009F5B6D34255EB744F3791245D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/636964CD271D2009F5B6D34255EB744F3791245D.mft Manifest number: BF Signing time: Sun 20 Sep 2026 09:59:34 +0000 Manifest this update: Sun 20 Sep 2026 09:54:34 +0000 Manifest next update: Mon 21 Sep 2026 11:17:34 +0000 Files and hashes: 1: 3130332e3134332e32342e302f32332d3233203d3e203536323432.roa (hash: 6dvxTqYXa9l0Nvb47oeD7uqupUUpey1d9KPx/TFkWZc=) 2: 3130332e3134332e32352e302f32342d3234203d3e203536323432.roa (hash: aWOLzIn2x5kpaR5z9FtYwftOiGecceuudPRE6v0eVaA=) 3: 636964CD271D2009F5B6D34255EB744F3791245D.crl (hash: GnD9cuOdBv6I6omr//6YaV+WKPKXlV/7na0jlCEALGQ=) 4: 3130332e3134332e32342e302f32342d3234203d3e203536323432.roa (hash: CRlStcVLlPbgkaOXZGS+9wEQ7WP2ijdeiyB/zUIWiTs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/636964CD271D2009F5B6D34255EB744F3791245D.crl rsync://rpki-rsync.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/636964CD271D2009F5B6D34255EB744F3791245D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/636964CD271D2009F5B6D34255EB744F3791245D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 11:17:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:18:e2:ef:09:88:14:14:d2:d4:60:d0:55:1f:e2:c2:87:34:84:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=636964CD271D2009F5B6D34255EB744F3791245D Validity Not Before: Sep 20 09:54:34 2026 GMT Not After : Sep 21 11:17:34 2026 GMT Subject: CN=143C0DD4A3CE8C7B4AF0B78FD3954DCF1612D96E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:13:f9:80:61:a1:f7:3a:65:d0:4e:7c:55:3c: f8:d5:02:7f:44:c2:de:f1:e7:ca:c2:e9:66:91:61: e6:83:3d:10:31:c8:52:1f:b2:18:5f:6a:eb:b0:89: 2a:55:5e:59:4a:07:39:05:b7:9a:4e:bd:7e:64:86: 67:54:16:ed:b8:3a:2d:73:c9:ed:2e:22:b2:09:b0: f1:7b:9c:66:c2:8d:b0:f6:b8:b5:f5:42:6f:85:b4: e0:96:64:56:12:44:2f:73:13:0a:0b:ec:89:e1:f0: c7:59:d2:cf:6d:28:7c:e8:6f:0e:f5:72:b1:89:01: 27:eb:80:7f:55:28:9f:b7:2b:5d:1e:09:f6:da:87: c1:a5:c1:3e:75:19:c9:b3:e5:4c:7a:fb:db:eb:dd: e2:a6:b0:ca:e9:c5:5c:8d:cf:ad:f7:47:c9:1e:5a: 67:79:8d:2c:6f:9d:f0:01:ff:4a:a1:f3:09:5a:8d: 2f:71:85:c7:00:b4:6d:5b:d5:8d:aa:7f:03:fc:90: d3:a1:5c:11:08:11:56:4e:33:0b:71:a7:3d:ae:ca: e8:15:9c:70:b0:fb:b2:cf:99:2c:bc:72:a1:fc:87: 4b:92:9a:1c:58:35:1b:ff:46:5a:f6:2b:22:5c:7e: 35:dd:d1:80:90:86:f0:26:7c:d4:27:c8:36:3e:02: 09:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:3C:0D:D4:A3:CE:8C:7B:4A:F0:B7:8F:D3:95:4D:CF:16:12:D9:6E X509v3 Authority Key Identifier: keyid:63:69:64:CD:27:1D:20:09:F5:B6:D3:42:55:EB:74:4F:37:91:24:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/636964CD271D2009F5B6D34255EB744F3791245D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/636964CD271D2009F5B6D34255EB744F3791245D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/636964CD271D2009F5B6D34255EB744F3791245D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:7e:80:b5:ad:39:90:0a:bf:dd:3a:31:7e:5a:cf:19:97:9d: 77:e6:5a:c0:51:37:c2:ce:42:56:39:6d:e2:a3:e5:9f:9c:73: f4:05:7b:06:73:9e:0a:ba:c5:50:b2:a8:ab:6c:d1:fb:7f:c8: a1:e1:fd:3c:1a:4e:c6:26:64:4c:dd:6d:7f:2d:60:7f:5f:89: 69:a8:8a:ae:74:46:36:95:e3:a0:c8:f5:f6:29:46:d5:da:6a: 90:e6:c0:d4:e5:f8:d8:12:d4:e2:24:b5:b4:e1:2f:fd:c8:f2: 6c:e9:dd:12:ed:95:af:78:06:c6:e9:7d:a4:c1:59:dc:ff:ce: f3:75:c1:8f:bb:22:9f:12:d3:01:e2:e8:67:2c:ff:18:7b:0a: e9:ba:2f:fd:3c:b0:43:35:85:fa:11:5e:18:3f:89:04:5d:9c: 4d:d8:0f:57:1e:89:a8:9c:b9:46:a8:31:12:d9:60:40:d6:77: 84:c6:c8:db:69:02:fd:9c:6e:32:5c:1a:99:1c:fb:cb:9c:85: ad:db:f0:ec:3e:98:a2:48:ae:32:d9:0f:77:28:19:a2:0e:1b: bd:7c:d4:a0:0d:1c:eb:b4:d5:d4:65:b7:29:d5:ca:a6:32:17: e2:74:74:1d:ec:4f:48:47:3f:6a:e6:71:22:91:de:0f:b5:6f: c6:bb:77:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNxji7wmIFBTS1GDQVR/iwoc0hBwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM2OTY0Q0QyNzFEMjAwOUY1QjZEMzQyNTVFQjc0NEYz NzkxMjQ1RDAeFw0yNjA5MjAwOTU0MzRaFw0yNjA5MjExMTE3MzRaMDMxMTAvBgNV BAMTKDE0M0MwREQ0QTNDRThDN0I0QUYwQjc4RkQzOTU0RENGMTYxMkQ5NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4E/mAYaH3OmXQTnxVPPjVAn9E wt7x58rC6WaRYeaDPRAxyFIfshhfauuwiSpVXllKBzkFt5pOvX5khmdUFu24Oi1z ye0uIrIJsPF7nGbCjbD2uLX1Qm+FtOCWZFYSRC9zEwoL7Inh8MdZ0s9tKHzobw71 crGJASfrgH9VKJ+3K10eCfbah8GlwT51Gcmz5Ux6+9vr3eKmsMrpxVyNz633R8ke Wmd5jSxvnfAB/0qh8wlajS9xhccAtG1b1Y2qfwP8kNOhXBEIEVZOMwtxpz2uyugV nHCw+7LPmSy8cqH8h0uSmhxYNRv/Rlr2KyJcfjXd0YCQhvAmfNQnyDY+AgmlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFDwN1KPOjHtK8LeP05VNzxYS2W4wHwYDVR0j BBgwFoAUY2lkzScdIAn1ttNCVet0TzeRJF0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjVjNDAwZDEtOWJiZC00ZTJiLThkNTgtNmY3NDlkYmMzOTJkLzAvNjM2OTY0Q0Qy NzFEMjAwOUY1QjZEMzQyNTVFQjc0NEYzNzkxMjQ1RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MzY5NjRDRDI3MUQyMDA5RjVCNkQzNDI1NUVCNzQ0RjM3OTEy NDVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjVjNDAwZDEtOWJiZC00ZTJiLThk NTgtNmY3NDlkYmMzOTJkLzAvNjM2OTY0Q0QyNzFEMjAwOUY1QjZEMzQyNTVFQjc0 NEYzNzkxMjQ1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA1+gLWtOZAKv906MX5azxmXnXfmWsBRN8LO QlY5beKj5Z+cc/QFewZzngq6xVCyqKts0ft/yKHh/TwaTsYmZEzdbX8tYH9fiWmo iq50RjaV46DI9fYpRtXaapDmwNTl+NgS1OIktbThL/3I8mzp3RLtla94BsbpfaTB Wdz/zvN1wY+7Ip8S0wHi6Gcs/xh7Cum6L/08sEM1hfoRXhg/iQRdnE3YD1ceiaic uUaoMRLZYEDWd4TGyNtpAv2cbjJcGpkc+8ucha3b8Ow+mKJIrjLZD3coGaIOG718 1KANHOu01dRltynVyqYyF+J0dB3sT0hHP2rmcSKR3g+1b8a7d5U= -----END CERTIFICATE-----Generated at Mon Sep 21 03:17:53 2026 by rpki-client