$ rpki-client -vvvf rpki-rsync.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/636964CD271D2009F5B6D34255EB744F3791245D.mft File: 636964CD271D2009F5B6D34255EB744F3791245D.mft (raw, json) Hash identifier: 8eaIZ/2VKD6w1ck5XibJFYK6XbDXKL/CleEeRpsKi2M= Subject key identifier: 74:C1:CD:E1:C0:72:29:14:D8:E8:8C:D6:55:92:5A:B7:C7:39:89:58 Authority key identifier: 63:69:64:CD:27:1D:20:09:F5:B6:D3:42:55:EB:74:4F:37:91:24:5D Certificate issuer: /CN=636964CD271D2009F5B6D34255EB744F3791245D Certificate serial: 36863C2E5FA111202B0F1FD9CEC9305CDE06C564 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/636964CD271D2009F5B6D34255EB744F3791245D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/636964CD271D2009F5B6D34255EB744F3791245D.mft Manifest number: 0102 Signing time: Mon 09 Nov 2026 15:45:30 +0000 Manifest this update: Mon 09 Nov 2026 15:40:30 +0000 Manifest next update: Tue 10 Nov 2026 15:59:30 +0000 Files and hashes: 1: 3130332e3134332e32342e302f32342d3234203d3e203536323432.roa (hash: CRlStcVLlPbgkaOXZGS+9wEQ7WP2ijdeiyB/zUIWiTs=) 2: 636964CD271D2009F5B6D34255EB744F3791245D.crl (hash: zgR4L2Oca6zHwVUQOvq2EYHOSTx6XsEk8Q/BJ34+GZw=) 3: 3130332e3134332e32352e302f32342d3234203d3e203536323432.roa (hash: aWOLzIn2x5kpaR5z9FtYwftOiGecceuudPRE6v0eVaA=) 4: 3130332e3134332e32342e302f32332d3233203d3e203536323432.roa (hash: 6dvxTqYXa9l0Nvb47oeD7uqupUUpey1d9KPx/TFkWZc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/636964CD271D2009F5B6D34255EB744F3791245D.crl rsync://rpki-rsync.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/636964CD271D2009F5B6D34255EB744F3791245D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/636964CD271D2009F5B6D34255EB744F3791245D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:86:3c:2e:5f:a1:11:20:2b:0f:1f:d9:ce:c9:30:5c:de:06:c5:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=636964CD271D2009F5B6D34255EB744F3791245D Validity Not Before: Nov 9 15:40:30 2026 GMT Not After : Nov 10 15:59:30 2026 GMT Subject: CN=74C1CDE1C0722914D8E88CD655925AB7C7398958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:af:a1:36:61:5b:48:be:06:17:af:af:54:00: fe:1d:35:8c:f1:51:24:3b:b4:31:9f:ab:92:a8:e0: ea:3b:77:89:cd:56:ef:f2:b4:5e:91:df:ba:2f:37: 01:9f:4e:86:6b:0c:15:13:d7:65:fd:36:1f:73:69: e4:de:3c:f1:bd:21:1f:36:5f:6d:52:fb:67:0c:6b: 51:bb:ad:a2:20:fe:43:c2:2f:71:41:9c:f9:55:fc: b1:4a:9d:a6:15:ec:5e:50:d1:ed:7e:89:72:60:7a: 69:88:03:82:fc:08:d6:ce:4e:09:f2:89:7b:a8:7f: 77:49:29:da:16:ce:cb:fd:58:b2:21:03:4e:83:e7: 11:1b:be:35:8e:88:c7:6a:2e:1b:8a:47:dc:a2:39: 14:11:c2:60:cd:63:38:5c:a4:53:a6:25:6c:0c:91: 03:ad:52:a0:25:dc:2e:4c:22:89:16:7c:95:24:53: be:01:8c:32:80:01:be:d4:3f:67:d0:62:47:00:f0: fe:f5:21:5b:b1:e6:03:d5:a5:6c:71:51:e1:ff:ac: 00:90:98:c7:dc:ab:19:e1:ae:54:4c:a5:47:4c:04: a1:59:d5:45:81:7f:10:20:00:30:0c:6c:ec:2f:16: 8d:33:3b:82:da:f3:cf:06:88:53:c2:f4:09:aa:1e: e4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:C1:CD:E1:C0:72:29:14:D8:E8:8C:D6:55:92:5A:B7:C7:39:89:58 X509v3 Authority Key Identifier: keyid:63:69:64:CD:27:1D:20:09:F5:B6:D3:42:55:EB:74:4F:37:91:24:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/636964CD271D2009F5B6D34255EB744F3791245D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/636964CD271D2009F5B6D34255EB744F3791245D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/636964CD271D2009F5B6D34255EB744F3791245D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:07:97:f8:cd:28:86:8c:f6:47:ec:cc:b2:e7:11:60:21:07: a5:14:8c:84:64:32:da:03:33:92:d5:6e:57:04:2e:7f:8d:d8: 73:16:06:03:ee:b4:06:c1:33:74:96:0a:55:18:0d:e8:b7:eb: e3:97:b9:9f:79:51:37:96:a7:48:3f:73:c3:1e:12:39:52:70: df:40:fc:5e:ac:bc:78:12:fe:4e:38:f5:fd:79:d3:cf:94:1a: a7:50:94:75:c3:8d:23:96:64:e9:69:14:3c:99:72:70:a8:44: cd:48:2b:a9:9e:4c:cd:29:1a:05:05:c6:56:00:ee:d0:1c:bc: 0f:14:5f:fa:cd:85:1a:38:69:d4:7b:d3:9c:01:16:ff:90:7f: d4:32:eb:50:69:45:61:83:ce:d5:f5:3c:a9:5b:86:13:f0:b1: f4:23:0f:f1:25:82:10:da:1d:f6:55:70:f8:7c:33:9c:59:31: 8e:2d:a2:34:7f:1b:6a:5a:26:15:53:55:56:7b:80:d1:8c:5a: f4:f2:4e:39:9c:b7:5f:b4:f8:1d:07:61:df:16:f6:e0:ac:c0: f5:d7:70:4d:92:cc:e0:57:b6:25:48:81:90:80:c9:63:13:19: 50:8b:6a:83:42:8b:05:04:08:c2:d5:6d:a8:89:00:53:e7:50: ef:4c:5f:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNoY8Ll+hESArDx/ZzskwXN4GxWQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM2OTY0Q0QyNzFEMjAwOUY1QjZEMzQyNTVFQjc0NEYz NzkxMjQ1RDAeFw0yNjExMDkxNTQwMzBaFw0yNjExMTAxNTU5MzBaMDMxMTAvBgNV BAMTKDc0QzFDREUxQzA3MjI5MTREOEU4OENENjU1OTI1QUI3QzczOTg5NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmr6E2YVtIvgYXr69UAP4dNYzx USQ7tDGfq5Ko4Oo7d4nNVu/ytF6R37ovNwGfToZrDBUT12X9Nh9zaeTePPG9IR82 X21S+2cMa1G7raIg/kPCL3FBnPlV/LFKnaYV7F5Q0e1+iXJgemmIA4L8CNbOTgny iXuof3dJKdoWzsv9WLIhA06D5xEbvjWOiMdqLhuKR9yiORQRwmDNYzhcpFOmJWwM kQOtUqAl3C5MIokWfJUkU74BjDKAAb7UP2fQYkcA8P71IVux5gPVpWxxUeH/rACQ mMfcqxnhrlRMpUdMBKFZ1UWBfxAgADAMbOwvFo0zO4La888GiFPC9AmqHuSFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdMHN4cByKRTY6IzWVZJat8c5iVgwHwYDVR0j BBgwFoAUY2lkzScdIAn1ttNCVet0TzeRJF0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjVjNDAwZDEtOWJiZC00ZTJiLThkNTgtNmY3NDlkYmMzOTJkLzAvNjM2OTY0Q0Qy NzFEMjAwOUY1QjZEMzQyNTVFQjc0NEYzNzkxMjQ1RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MzY5NjRDRDI3MUQyMDA5RjVCNkQzNDI1NUVCNzQ0RjM3OTEy NDVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjVjNDAwZDEtOWJiZC00ZTJiLThk NTgtNmY3NDlkYmMzOTJkLzAvNjM2OTY0Q0QyNzFEMjAwOUY1QjZEMzQyNTVFQjc0 NEYzNzkxMjQ1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKwHl/jNKIaM9kfszLLnEWAhB6UUjIRkMtoD M5LVblcELn+N2HMWBgPutAbBM3SWClUYDei36+OXuZ95UTeWp0g/c8MeEjlScN9A /F6svHgS/k449f1508+UGqdQlHXDjSOWZOlpFDyZcnCoRM1IK6meTM0pGgUFxlYA 7tAcvA8UX/rNhRo4adR705wBFv+Qf9Qy61BpRWGDztX1PKlbhhPwsfQjD/ElghDa HfZVcPh8M5xZMY4tojR/G2paJhVTVVZ7gNGMWvTyTjmct1+0+B0HYd8W9uCswPXX cE2SzOBXtiVIgZCAyWMTGVCLaoNCiwUECMLVbaiJAFPnUO9MXyI= -----END CERTIFICATE-----Generated at Tue Nov 10 01:44:14 2026 by rpki-client