$ rpki-client -vvf rpki-rsync.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/636964CD271D2009F5B6D34255EB744F3791245D.mft File: 636964CD271D2009F5B6D34255EB744F3791245D.mft (raw, json) Hash identifier: iNeE4exISCvBRpdoNVGg//oTkCc8QCbAGgKkLmlEk2E= Subject key identifier: 9C:2D:76:E7:69:17:6B:8F:C1:C2:DF:8B:27:48:CF:DA:E1:FD:DC:B5 Authority key identifier: 63:69:64:CD:27:1D:20:09:F5:B6:D3:42:55:EB:74:4F:37:91:24:5D Certificate issuer: /CN=636964CD271D2009F5B6D34255EB744F3791245D Certificate serial: 6804290C13201C73DD96FDDF2002A16E565FF961 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/636964CD271D2009F5B6D34255EB744F3791245D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/636964CD271D2009F5B6D34255EB744F3791245D.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 19:07:12 +0000 Manifest this update: Tue 16 Jun 2026 19:02:12 +0000 Manifest next update: Wed 17 Jun 2026 21:30:12 +0000 Files and hashes: 1: 3130332e3134332e32342e302f32332d3233203d3e203536323432.roa (hash: 6dvxTqYXa9l0Nvb47oeD7uqupUUpey1d9KPx/TFkWZc=) 2: 3130332e3134332e32352e302f32342d3234203d3e203536323432.roa (hash: aWOLzIn2x5kpaR5z9FtYwftOiGecceuudPRE6v0eVaA=) 3: 636964CD271D2009F5B6D34255EB744F3791245D.crl (hash: CIl61AsiL4NnZXH4vgB6qyjYVfT1Ur2ybtN/v5hSIVk=) 4: 3130332e3134332e32342e302f32342d3234203d3e203536323432.roa (hash: CRlStcVLlPbgkaOXZGS+9wEQ7WP2ijdeiyB/zUIWiTs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/636964CD271D2009F5B6D34255EB744F3791245D.crl rsync://rpki-rsync.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/636964CD271D2009F5B6D34255EB744F3791245D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/636964CD271D2009F5B6D34255EB744F3791245D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 21:30:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:04:29:0c:13:20:1c:73:dd:96:fd:df:20:02:a1:6e:56:5f:f9:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=636964CD271D2009F5B6D34255EB744F3791245D Validity Not Before: Jun 16 19:02:12 2026 GMT Not After : Jun 17 21:30:12 2026 GMT Subject: CN=9C2D76E769176B8FC1C2DF8B2748CFDAE1FDDCB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:df:01:e7:39:c1:66:80:a7:9f:2d:a9:fc:50: 1e:e3:ef:2c:6b:a3:b7:d8:dc:db:99:5e:8c:9a:29: d8:a8:2a:45:38:8d:d7:5c:67:e3:12:d7:b2:58:54: 15:4f:2d:3f:b4:65:1a:b3:c7:d0:35:9a:30:86:14: 0a:71:06:91:fe:1e:19:5d:63:89:3c:51:1d:88:c3: ee:a4:c8:16:c7:51:55:da:31:52:db:5a:dc:8d:48: 07:d3:0e:be:40:0a:04:08:9f:74:f6:0d:24:1f:c5: f0:64:f9:64:2f:3f:97:23:fd:f5:a7:d0:32:a0:fd: 42:dd:ab:26:a4:01:ca:4b:54:c4:75:b9:d3:ff:9a: 29:5a:2a:00:57:ab:5d:c2:57:5d:df:6f:3f:6b:1d: d4:eb:05:a6:50:e4:9a:38:4a:03:6e:d9:fa:1b:a7: f9:31:43:0c:f5:e9:56:c4:dc:d1:29:15:f1:c3:0d: 9c:b8:34:5b:70:4c:f4:07:9f:16:4b:a7:4d:fe:56: a0:be:a4:b8:7a:f5:da:30:87:51:a3:3b:df:2d:93: 5a:ba:34:1f:cf:fb:a7:36:93:62:ee:6a:04:a7:b2: bb:14:be:f3:1c:dd:59:8d:5e:34:f6:eb:be:2f:fc: 81:c9:fc:78:99:04:58:5f:9b:57:48:fc:59:70:3b: 11:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:2D:76:E7:69:17:6B:8F:C1:C2:DF:8B:27:48:CF:DA:E1:FD:DC:B5 X509v3 Authority Key Identifier: keyid:63:69:64:CD:27:1D:20:09:F5:B6:D3:42:55:EB:74:4F:37:91:24:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/636964CD271D2009F5B6D34255EB744F3791245D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/636964CD271D2009F5B6D34255EB744F3791245D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/636964CD271D2009F5B6D34255EB744F3791245D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:33:64:eb:28:ea:a7:bb:74:4c:2b:18:16:08:fd:3c:ec:58: 6d:3d:3a:89:f7:78:6a:ed:d6:eb:e3:e5:44:92:4c:d5:38:4a: 33:00:32:f4:04:29:f2:71:ec:86:08:73:1b:98:c9:98:2d:a3: f7:2c:49:7e:06:b2:68:d0:96:0c:b6:d9:20:04:26:95:23:2f: 2e:e2:77:0e:e0:4a:60:3d:e6:9d:06:d2:d6:71:f2:36:c7:41: c8:42:02:47:9d:b0:22:0e:ce:d9:6f:22:d4:8f:f0:78:e6:f7: 09:e2:8a:31:2c:e1:df:b2:37:c4:66:57:cd:dd:79:8a:c6:ba: f1:be:93:bd:20:bd:62:f0:11:52:aa:66:44:f3:78:a4:95:e9: 50:44:a3:e9:48:16:65:6a:ca:67:7d:55:99:3f:9d:46:95:fb: 6c:dd:3e:39:21:d1:e9:d6:23:cc:57:a5:94:b9:92:0f:62:94: 1d:44:8c:18:e1:a2:05:63:52:16:0b:99:d6:cf:a0:f4:f9:7f: 3c:92:b3:dd:19:1e:15:95:e0:6d:58:cf:57:e0:48:31:74:5a: 79:ae:86:cd:4b:9b:3c:78:09:d3:c6:09:99:e3:2e:43:72:21: 78:a8:28:cd:6a:34:8f:89:ef:aa:8c:4b:ff:ba:3c:37:04:05: 07:a3:4e:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaAQpDBMgHHPdlv3fIAKhblZf+WEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM2OTY0Q0QyNzFEMjAwOUY1QjZEMzQyNTVFQjc0NEYz NzkxMjQ1RDAeFw0yNjA2MTYxOTAyMTJaFw0yNjA2MTcyMTMwMTJaMDMxMTAvBgNV BAMTKDlDMkQ3NkU3NjkxNzZCOEZDMUMyREY4QjI3NDhDRkRBRTFGRERDQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb3wHnOcFmgKefLan8UB7j7yxr o7fY3NuZXoyaKdioKkU4jddcZ+MS17JYVBVPLT+0ZRqzx9A1mjCGFApxBpH+Hhld Y4k8UR2Iw+6kyBbHUVXaMVLbWtyNSAfTDr5ACgQIn3T2DSQfxfBk+WQvP5cj/fWn 0DKg/ULdqyakAcpLVMR1udP/milaKgBXq13CV13fbz9rHdTrBaZQ5Jo4SgNu2fob p/kxQwz16VbE3NEpFfHDDZy4NFtwTPQHnxZLp03+VqC+pLh69dowh1GjO98tk1q6 NB/P+6c2k2LuagSnsrsUvvMc3VmNXjT2674v/IHJ/HiZBFhfm1dI/FlwOxFlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnC1252kXa4/Bwt+LJ0jP2uH93LUwHwYDVR0j BBgwFoAUY2lkzScdIAn1ttNCVet0TzeRJF0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjVjNDAwZDEtOWJiZC00ZTJiLThkNTgtNmY3NDlkYmMzOTJkLzAvNjM2OTY0Q0Qy NzFEMjAwOUY1QjZEMzQyNTVFQjc0NEYzNzkxMjQ1RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MzY5NjRDRDI3MUQyMDA5RjVCNkQzNDI1NUVCNzQ0RjM3OTEy NDVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjVjNDAwZDEtOWJiZC00ZTJiLThk NTgtNmY3NDlkYmMzOTJkLzAvNjM2OTY0Q0QyNzFEMjAwOUY1QjZEMzQyNTVFQjc0 NEYzNzkxMjQ1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADQzZOso6qe7dEwrGBYI/TzsWG09Oon3eGrt 1uvj5USSTNU4SjMAMvQEKfJx7IYIcxuYyZgto/csSX4GsmjQlgy22SAEJpUjLy7i dw7gSmA95p0G0tZx8jbHQchCAkedsCIOztlvItSP8Hjm9wniijEs4d+yN8RmV83d eYrGuvG+k70gvWLwEVKqZkTzeKSV6VBEo+lIFmVqymd9VZk/nUaV+2zdPjkh0enW I8xXpZS5kg9ilB1EjBjhogVjUhYLmdbPoPT5fzySs90ZHhWV4G1Yz1fgSDF0Wnmu hs1Lmzx4CdPGCZnjLkNyIXioKM1qNI+J76qMS/+6PDcEBQejTnw= -----END CERTIFICATE-----Generated at Wed Jun 17 10:53:18 2026 by rpki-client