$ rpki-client -vvvf rpki-rsync.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/636964CD271D2009F5B6D34255EB744F3791245D.mft File: 636964CD271D2009F5B6D34255EB744F3791245D.mft (raw, json) Hash identifier: X95l0Vypo75QYi5JEmEiR5F1KuZchvqjOtENbkDqkPA= Subject key identifier: E3:A2:81:31:56:84:C3:89:EF:93:74:20:1A:6C:F4:FE:9F:47:CC:A8 Authority key identifier: 63:69:64:CD:27:1D:20:09:F5:B6:D3:42:55:EB:74:4F:37:91:24:5D Certificate issuer: /CN=636964CD271D2009F5B6D34255EB744F3791245D Certificate serial: 57890A25A061D628F90ECC86C9A681689DBAF714 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/636964CD271D2009F5B6D34255EB744F3791245D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/636964CD271D2009F5B6D34255EB744F3791245D.mft Manifest number: C3 Signing time: Wed 23 Sep 2026 08:31:47 +0000 Manifest this update: Wed 23 Sep 2026 08:26:47 +0000 Manifest next update: Thu 24 Sep 2026 08:33:47 +0000 Files and hashes: 1: 636964CD271D2009F5B6D34255EB744F3791245D.crl (hash: 6QT4xipsm+i3R8Ykq+DEHRkW9NhL9AB83XIAH1TNkgU=) 2: 3130332e3134332e32342e302f32332d3233203d3e203536323432.roa (hash: 6dvxTqYXa9l0Nvb47oeD7uqupUUpey1d9KPx/TFkWZc=) 3: 3130332e3134332e32342e302f32342d3234203d3e203536323432.roa (hash: CRlStcVLlPbgkaOXZGS+9wEQ7WP2ijdeiyB/zUIWiTs=) 4: 3130332e3134332e32352e302f32342d3234203d3e203536323432.roa (hash: aWOLzIn2x5kpaR5z9FtYwftOiGecceuudPRE6v0eVaA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/636964CD271D2009F5B6D34255EB744F3791245D.crl rsync://rpki-rsync.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/636964CD271D2009F5B6D34255EB744F3791245D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/636964CD271D2009F5B6D34255EB744F3791245D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 08:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:89:0a:25:a0:61:d6:28:f9:0e:cc:86:c9:a6:81:68:9d:ba:f7:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=636964CD271D2009F5B6D34255EB744F3791245D Validity Not Before: Sep 23 08:26:47 2026 GMT Not After : Sep 24 08:33:47 2026 GMT Subject: CN=E3A281315684C389EF9374201A6CF4FE9F47CCA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c6:1f:c1:25:66:71:a2:ad:a3:6c:4d:29:c7: 42:44:d7:61:fb:cc:8c:be:88:f2:43:69:b4:6e:1f: db:01:84:6e:00:fb:50:4f:9a:f8:43:c9:4e:7d:db: 4e:0c:8a:1c:d4:4e:4c:0c:23:6d:82:ae:f3:ca:4e: 13:80:41:7b:c3:e3:8c:5a:f1:d6:cf:60:a8:d5:4f: 3c:42:36:ae:58:c3:e2:5d:cc:d1:11:ea:a1:e1:0c: 13:d8:39:9d:fa:1e:03:02:c1:5b:ec:ce:62:96:89: c9:e1:1f:39:25:b4:ea:8b:5f:18:7c:dc:c9:2c:e8: 77:ae:92:7e:d8:11:76:7e:29:e3:1b:93:38:7a:5b: 18:6c:e1:d5:69:62:7d:59:9a:a8:c4:18:b7:0b:02: 73:e8:d9:7c:58:73:17:a2:4f:1a:25:26:42:9d:89: f3:45:a9:ac:38:90:11:d3:79:29:ee:46:87:2a:a1: 6e:ba:1e:dd:0b:7a:00:3b:4b:65:27:33:04:39:10: ba:4a:30:12:1a:c6:a8:d2:e2:f4:ee:2e:34:bc:c5: 5b:bd:08:3f:6a:2f:36:5e:e7:3f:9d:b7:70:f3:ed: db:fc:6e:f7:ee:e1:23:88:0c:f9:b9:59:9a:04:fa: 3a:ea:5c:59:8a:61:b4:b1:d1:94:50:73:90:6e:36: eb:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:A2:81:31:56:84:C3:89:EF:93:74:20:1A:6C:F4:FE:9F:47:CC:A8 X509v3 Authority Key Identifier: keyid:63:69:64:CD:27:1D:20:09:F5:B6:D3:42:55:EB:74:4F:37:91:24:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/636964CD271D2009F5B6D34255EB744F3791245D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/636964CD271D2009F5B6D34255EB744F3791245D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/636964CD271D2009F5B6D34255EB744F3791245D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:34:00:0c:42:98:df:ee:98:68:1e:29:9e:03:f8:07:f1:53: 96:44:1d:62:00:da:b3:0f:d5:a5:65:09:0a:ef:52:07:af:9a: b7:09:9f:09:4f:94:a8:8d:ea:a2:26:3d:df:19:a8:70:7a:2b: b5:85:42:37:09:c2:17:5b:bd:c5:6e:4d:98:55:1a:7d:42:5e: a9:ce:9c:fd:3d:92:c1:1f:37:b6:9a:6d:74:d3:71:ef:1d:71: 1e:0b:cb:c1:66:4a:84:e3:d9:af:ef:38:3d:8e:f2:32:20:80: aa:8c:70:79:e6:8f:df:ba:bd:f3:6b:c0:26:bf:e4:83:50:9c: d2:8e:79:69:16:f5:f8:b8:13:53:21:97:83:e2:78:17:56:37: f8:c0:3b:95:69:73:36:4c:84:1f:c7:3c:0e:a6:7d:4b:6f:df: 7d:a3:fe:71:94:1c:e8:c9:bb:f9:04:9d:f1:0c:91:83:8a:3c: d2:5d:25:e4:05:12:ba:9c:e7:86:09:46:61:7e:de:e8:12:5d: f8:e9:6b:e8:c1:12:25:45:5a:21:ab:81:9a:3f:f6:64:c6:68: 14:06:f1:81:23:d8:43:4a:eb:32:b8:03:6e:c2:6a:bf:3e:02: 2d:f4:2b:60:33:af:58:29:2a:92:fe:57:87:18:05:b4:66:3b: fe:c7:45:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV4kKJaBh1ij5DsyGyaaBaJ269xQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM2OTY0Q0QyNzFEMjAwOUY1QjZEMzQyNTVFQjc0NEYz NzkxMjQ1RDAeFw0yNjA5MjMwODI2NDdaFw0yNjA5MjQwODMzNDdaMDMxMTAvBgNV BAMTKEUzQTI4MTMxNTY4NEMzODlFRjkzNzQyMDFBNkNGNEZFOUY0N0NDQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7xh/BJWZxoq2jbE0px0JE12H7 zIy+iPJDabRuH9sBhG4A+1BPmvhDyU59204MihzUTkwMI22CrvPKThOAQXvD44xa 8dbPYKjVTzxCNq5Yw+JdzNER6qHhDBPYOZ36HgMCwVvszmKWicnhHzkltOqLXxh8 3Mks6Heukn7YEXZ+KeMbkzh6Wxhs4dVpYn1ZmqjEGLcLAnPo2XxYcxeiTxolJkKd ifNFqaw4kBHTeSnuRocqoW66Ht0LegA7S2UnMwQ5ELpKMBIaxqjS4vTuLjS8xVu9 CD9qLzZe5z+dt3Dz7dv8bvfu4SOIDPm5WZoE+jrqXFmKYbSx0ZRQc5BuNustAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU46KBMVaEw4nvk3QgGmz0/p9HzKgwHwYDVR0j BBgwFoAUY2lkzScdIAn1ttNCVet0TzeRJF0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjVjNDAwZDEtOWJiZC00ZTJiLThkNTgtNmY3NDlkYmMzOTJkLzAvNjM2OTY0Q0Qy NzFEMjAwOUY1QjZEMzQyNTVFQjc0NEYzNzkxMjQ1RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MzY5NjRDRDI3MUQyMDA5RjVCNkQzNDI1NUVCNzQ0RjM3OTEy NDVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjVjNDAwZDEtOWJiZC00ZTJiLThk NTgtNmY3NDlkYmMzOTJkLzAvNjM2OTY0Q0QyNzFEMjAwOUY1QjZEMzQyNTVFQjc0 NEYzNzkxMjQ1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFs0AAxCmN/umGgeKZ4D+AfxU5ZEHWIA2rMP 1aVlCQrvUgevmrcJnwlPlKiN6qImPd8ZqHB6K7WFQjcJwhdbvcVuTZhVGn1CXqnO nP09ksEfN7aabXTTce8dcR4Ly8FmSoTj2a/vOD2O8jIggKqMcHnmj9+6vfNrwCa/ 5INQnNKOeWkW9fi4E1Mhl4PieBdWN/jAO5VpczZMhB/HPA6mfUtv332j/nGUHOjJ u/kEnfEMkYOKPNJdJeQFErqc54YJRmF+3ugSXfjpa+jBEiVFWiGrgZo/9mTGaBQG 8YEj2ENK6zK4A27Car8+Ai30K2Azr1gpKpL+V4cYBbRmO/7HRRg= -----END CERTIFICATE-----Generated at Thu Sep 24 00:21:18 2026 by rpki-client