$ rpki-client -vvf rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/9635F0724E9717C889D5604679E31DA89F807CC1.mft File: 9635F0724E9717C889D5604679E31DA89F807CC1.mft (raw, json) Hash identifier: scvkuG8JIQOs/TOOYEGy78KmGnr5dDhU/vLhbntntg4= Subject key identifier: C2:34:51:2D:77:AD:43:2B:6B:49:2E:30:01:84:B9:EF:AE:CF:04:EE Authority key identifier: 96:35:F0:72:4E:97:17:C8:89:D5:60:46:79:E3:1D:A8:9F:80:7C:C1 Certificate issuer: /CN=9635F0724E9717C889D5604679E31DA89F807CC1 Certificate serial: 45FCF9A29B24ADDBF1AF3A29FF38076F8CADBBF9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9635F0724E9717C889D5604679E31DA89F807CC1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/9635F0724E9717C889D5604679E31DA89F807CC1.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 18:21:20 +0000 Manifest this update: Tue 16 Jun 2026 18:16:20 +0000 Manifest next update: Wed 17 Jun 2026 18:41:20 +0000 Files and hashes: 1: 3130332e39372e3139392e302f32342d3234203d3e20313530393135.roa (hash: XboM/GVCHUPVqpn45N0upXfql+dI6DpgJ/Slav4V/kE=) 2: 9635F0724E9717C889D5604679E31DA89F807CC1.crl (hash: umxVnVKQbDS50qzR2RIbFxQQkPbYOb2nwZ3hqpc/BX4=) 3: 3130332e39372e3139382e302f32342d3234203d3e20313530393135.roa (hash: 8TsJDUFf5xwZJs6EgPJxyciB9/EWUhvPgtxe1fcDLMI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/9635F0724E9717C889D5604679E31DA89F807CC1.crl rsync://rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/9635F0724E9717C889D5604679E31DA89F807CC1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9635F0724E9717C889D5604679E31DA89F807CC1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 18:41:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:fc:f9:a2:9b:24:ad:db:f1:af:3a:29:ff:38:07:6f:8c:ad:bb:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9635F0724E9717C889D5604679E31DA89F807CC1 Validity Not Before: Jun 16 18:16:20 2026 GMT Not After : Jun 17 18:41:20 2026 GMT Subject: CN=C234512D77AD432B6B492E300184B9EFAECF04EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:dc:da:51:2f:5b:ff:78:83:c9:6f:8b:4c:7e: 3d:31:f1:d6:09:1c:e0:fa:f3:82:7e:fe:b6:36:88: b3:38:05:7a:a6:fd:96:4c:b6:83:f3:fc:30:96:03: 7e:e0:fd:44:d9:5c:b3:93:b9:c2:32:d5:89:76:ef: ca:bc:56:68:df:82:3f:d4:42:f4:f0:be:3e:1c:1e: 1e:b8:7b:43:1d:5a:72:22:bc:09:20:83:59:0a:f0: 94:e3:2c:ef:ce:0a:35:eb:ce:b7:12:6c:a0:4e:a4: e4:cd:52:cd:8e:f1:75:77:55:a1:bc:d4:a1:cd:dc: 10:57:fb:33:23:b5:76:b6:00:13:47:4d:31:94:4a: ec:f8:71:40:9f:99:aa:b2:96:f1:19:40:1b:33:0f: 03:7c:ac:84:46:a9:47:08:f3:8b:74:f1:2a:c3:a8: 7c:1d:26:d7:67:0c:1e:e3:8c:1c:d5:ca:0d:33:46: d8:46:38:cc:95:ac:a6:10:a2:fe:18:ca:5e:e5:6b: 91:7e:57:ab:f1:eb:52:e2:e0:81:a7:1f:c0:83:3d: 17:3d:fc:13:1e:9e:97:cf:3d:05:c2:82:83:f7:d2: 1a:4a:6a:d9:7a:e6:6b:de:03:b9:2c:71:92:43:cd: ed:b7:5d:f0:d4:a7:61:f7:0e:51:1c:6c:2a:20:6b: ab:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:34:51:2D:77:AD:43:2B:6B:49:2E:30:01:84:B9:EF:AE:CF:04:EE X509v3 Authority Key Identifier: keyid:96:35:F0:72:4E:97:17:C8:89:D5:60:46:79:E3:1D:A8:9F:80:7C:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/9635F0724E9717C889D5604679E31DA89F807CC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9635F0724E9717C889D5604679E31DA89F807CC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/9635F0724E9717C889D5604679E31DA89F807CC1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:4a:a6:3c:e3:71:de:a7:2a:cc:e8:76:de:d5:d4:84:b1:f6: 80:e2:b1:68:9b:f1:08:c9:c4:83:c8:3f:14:e9:aa:c2:1d:23: 5c:a7:1d:9f:f6:ae:61:b3:14:7f:39:1d:91:39:c4:ae:03:ab: a3:b3:74:ea:f7:a4:d0:75:30:d9:9e:92:25:b2:98:05:73:21: f6:d5:32:37:6e:d2:71:1b:a6:c7:e9:6b:59:73:5a:97:64:1b: 2d:5a:07:5b:48:a2:23:6c:28:65:57:b9:c2:bd:69:62:8d:89: 4c:69:0e:d9:d0:21:00:b9:71:06:67:ec:e4:80:20:1a:7b:ef: 8c:bf:cd:32:39:17:4c:9a:f5:0b:a8:2d:a5:88:2f:0f:4e:ca: 47:c9:03:6d:79:0f:ee:22:d5:68:61:ed:8e:b5:fb:79:a8:8d: 8a:86:3e:f1:76:73:ef:62:4b:8d:32:8e:64:a1:00:28:8b:4d: 01:51:74:d8:42:7a:93:35:c9:c2:e9:a8:95:3d:08:3a:aa:33: f1:04:48:48:64:08:94:25:7b:16:1d:0c:a3:9c:72:49:dd:72: 04:15:9e:ad:4c:16:35:99:e5:a4:ad:5c:0f:1b:7d:49:2d:77: f9:f3:18:03:7b:42:af:40:f2:24:1d:49:2a:d1:11:12:d2:95: b8:c8:ff:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURfz5opskrdvxrzop/zgHb4ytu/kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTYzNUYwNzI0RTk3MTdDODg5RDU2MDQ2NzlFMzFEQTg5 RjgwN0NDMTAeFw0yNjA2MTYxODE2MjBaFw0yNjA2MTcxODQxMjBaMDMxMTAvBgNV BAMTKEMyMzQ1MTJENzdBRDQzMkI2QjQ5MkUzMDAxODRCOUVGQUVDRjA0RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw3NpRL1v/eIPJb4tMfj0x8dYJ HOD684J+/rY2iLM4BXqm/ZZMtoPz/DCWA37g/UTZXLOTucIy1Yl278q8Vmjfgj/U QvTwvj4cHh64e0MdWnIivAkgg1kK8JTjLO/OCjXrzrcSbKBOpOTNUs2O8XV3VaG8 1KHN3BBX+zMjtXa2ABNHTTGUSuz4cUCfmaqylvEZQBszDwN8rIRGqUcI84t08SrD qHwdJtdnDB7jjBzVyg0zRthGOMyVrKYQov4Yyl7la5F+V6vx61Li4IGnH8CDPRc9 /BMenpfPPQXCgoP30hpKatl65mveA7kscZJDze23XfDUp2H3DlEcbCoga6s/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwjRRLXetQytrSS4wAYS5767PBO4wHwYDVR0j BBgwFoAUljXwck6XF8iJ1WBGeeMdqJ+AfMEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDg0NjNhZDUtMTc0NS00NDNlLWIxNjUtZDE5NGVlZDg5ZTZiLzAvOTYzNUYwNzI0 RTk3MTdDODg5RDU2MDQ2NzlFMzFEQTg5RjgwN0NDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85NjM1RjA3MjRFOTcxN0M4ODlENTYwNDY3OUUzMURBODlGODA3 Q0MxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDg0NjNhZDUtMTc0NS00NDNlLWIx NjUtZDE5NGVlZDg5ZTZiLzAvOTYzNUYwNzI0RTk3MTdDODg5RDU2MDQ2NzlFMzFE QTg5RjgwN0NDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAdKpjzjcd6nKszodt7V1ISx9oDisWib8QjJ xIPIPxTpqsIdI1ynHZ/2rmGzFH85HZE5xK4Dq6OzdOr3pNB1MNmekiWymAVzIfbV Mjdu0nEbpsfpa1lzWpdkGy1aB1tIoiNsKGVXucK9aWKNiUxpDtnQIQC5cQZn7OSA IBp774y/zTI5F0ya9QuoLaWILw9OykfJA215D+4i1Whh7Y61+3mojYqGPvF2c+9i S40yjmShACiLTQFRdNhCepM1ycLpqJU9CDqqM/EESEhkCJQlexYdDKOcckndcgQV nq1MFjWZ5aStXA8bfUktd/nzGAN7Qq9A8iQdSSrRERLSlbjI/8Q= -----END CERTIFICATE-----Generated at Wed Jun 17 12:20:03 2026 by rpki-client