$ rpki-client -vvf rpki-rsync.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/636964CD271D2009F5B6D34255EB744F3791245D.mft File: 636964CD271D2009F5B6D34255EB744F3791245D.mft (raw, json) Hash identifier: RfEx+Abx0lIBfr1OyoJEPrFtmfqVADywRpYiKkaRi1k= Subject key identifier: 81:1D:1F:0E:D6:34:A2:D5:25:C4:89:5F:E2:F3:0E:A5:D9:5E:34:C6 Authority key identifier: 63:69:64:CD:27:1D:20:09:F5:B6:D3:42:55:EB:74:4F:37:91:24:5D Certificate issuer: /CN=636964CD271D2009F5B6D34255EB744F3791245D Certificate serial: 2BD00D040384C0B5A9C4817CD9D52ED71F6C35BB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/636964CD271D2009F5B6D34255EB744F3791245D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/636964CD271D2009F5B6D34255EB744F3791245D.mft Manifest number: 0F Signing time: Tue 12 May 2026 10:36:37 +0000 Manifest this update: Tue 12 May 2026 10:31:37 +0000 Manifest next update: Wed 13 May 2026 11:10:37 +0000 Files and hashes: 1: 3130332e3134332e32342e302f32332d3233203d3e203536323432.roa (hash: 6dvxTqYXa9l0Nvb47oeD7uqupUUpey1d9KPx/TFkWZc=) 2: 636964CD271D2009F5B6D34255EB744F3791245D.crl (hash: /K/iC63ZBPRZ5PtYz6DxVL9cbmqJKx+3veBpxPwYUwY=) 3: 3130332e3134332e32352e302f32342d3234203d3e203536323432.roa (hash: aWOLzIn2x5kpaR5z9FtYwftOiGecceuudPRE6v0eVaA=) 4: 3130332e3134332e32342e302f32342d3234203d3e203536323432.roa (hash: CRlStcVLlPbgkaOXZGS+9wEQ7WP2ijdeiyB/zUIWiTs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/636964CD271D2009F5B6D34255EB744F3791245D.crl rsync://rpki-rsync.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/636964CD271D2009F5B6D34255EB744F3791245D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/636964CD271D2009F5B6D34255EB744F3791245D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:d0:0d:04:03:84:c0:b5:a9:c4:81:7c:d9:d5:2e:d7:1f:6c:35:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=636964CD271D2009F5B6D34255EB744F3791245D Validity Not Before: May 12 10:31:37 2026 GMT Not After : May 13 11:10:37 2026 GMT Subject: CN=811D1F0ED634A2D525C4895FE2F30EA5D95E34C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d6:61:dd:a2:a0:4c:4b:53:b6:15:93:69:0d: 8a:f0:58:eb:e7:05:ab:38:f7:62:6c:c8:36:76:c6: 00:88:6a:51:59:e8:71:bd:47:82:29:4e:ea:ba:0a: 32:76:5a:8b:e5:18:1e:95:97:bf:73:80:43:ca:f4: 74:9d:e1:5c:9b:eb:0a:c3:7e:fb:93:20:6c:18:62: bd:c0:29:7a:53:ee:7f:8f:18:48:2a:20:a5:96:90: 0f:69:db:eb:1f:64:f8:9b:7e:39:18:e6:08:4a:0b: 1e:29:d7:5a:d6:7f:cc:93:58:89:7f:64:17:fa:68: c0:fc:1c:dc:7c:2c:22:5a:35:b8:0d:aa:23:6c:bf: d6:eb:a5:7a:09:ba:70:e2:b0:4a:38:21:03:25:df: 48:6c:01:0a:e4:d0:c9:79:3e:c8:c2:64:2e:ee:ce: e6:de:70:0a:a2:d0:f3:91:fe:6b:70:36:83:52:a8: 41:9f:90:46:01:0c:fe:f1:b6:f8:29:c7:28:7f:9d: 2c:66:1d:ba:56:05:95:61:ef:aa:5e:3d:79:dc:b7: 1f:86:70:f7:44:c9:4c:f9:20:20:88:0e:70:50:df: 7f:b4:c9:ee:89:b9:82:15:e9:a6:58:e5:9a:c4:3c: cf:9f:7c:e7:1c:ba:f2:20:d1:59:5c:d3:47:fd:f8: 83:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:1D:1F:0E:D6:34:A2:D5:25:C4:89:5F:E2:F3:0E:A5:D9:5E:34:C6 X509v3 Authority Key Identifier: keyid:63:69:64:CD:27:1D:20:09:F5:B6:D3:42:55:EB:74:4F:37:91:24:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/636964CD271D2009F5B6D34255EB744F3791245D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/636964CD271D2009F5B6D34255EB744F3791245D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/636964CD271D2009F5B6D34255EB744F3791245D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:c3:64:09:ad:2c:99:a9:e3:f6:3b:ab:44:49:c5:d1:e3:aa: 20:f6:9e:da:d8:ae:c7:13:de:cb:0e:17:69:88:21:ae:91:0f: b0:99:1e:b5:16:21:e7:53:a4:11:15:43:99:2d:81:66:c4:6d: 76:35:16:02:89:6d:28:d8:58:f4:ee:5b:06:db:05:64:2e:db: 1a:a5:a0:f6:55:70:67:28:87:11:62:60:bf:31:f4:d4:08:c1: ba:60:cb:be:d0:f2:62:1d:ba:8f:af:b0:82:9b:cc:3b:73:7d: 4e:01:96:fd:c4:18:e3:b4:10:cf:69:df:53:f0:10:36:5b:7f: c7:1d:a4:58:22:f8:8f:99:2c:99:15:bf:c9:bc:3c:6a:fe:b7: 3b:50:72:4c:2b:dd:6d:03:25:b9:d0:8c:c8:73:bc:b2:83:ae: 83:88:d1:d4:08:ce:e2:fb:76:c3:b2:8a:56:e5:77:a7:5a:d4: 72:23:00:46:c0:78:d2:f2:47:d3:a5:24:11:b9:04:9b:45:54: 9a:a2:f7:a2:55:b0:b4:c4:63:c0:0c:1e:4e:a1:95:59:56:d4: 30:cb:33:63:ca:47:31:6c:d8:db:44:65:58:9f:ef:b8:e8:dc: 55:29:32:c3:9d:e8:70:89:2e:61:1f:64:53:84:20:88:e0:b5: c2:29:67:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK9ANBAOEwLWpxIF82dUu1x9sNbswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM2OTY0Q0QyNzFEMjAwOUY1QjZEMzQyNTVFQjc0NEYz NzkxMjQ1RDAeFw0yNjA1MTIxMDMxMzdaFw0yNjA1MTMxMTEwMzdaMDMxMTAvBgNV BAMTKDgxMUQxRjBFRDYzNEEyRDUyNUM0ODk1RkUyRjMwRUE1RDk1RTM0QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK1mHdoqBMS1O2FZNpDYrwWOvn Bas492JsyDZ2xgCIalFZ6HG9R4IpTuq6CjJ2WovlGB6Vl79zgEPK9HSd4Vyb6wrD fvuTIGwYYr3AKXpT7n+PGEgqIKWWkA9p2+sfZPibfjkY5ghKCx4p11rWf8yTWIl/ ZBf6aMD8HNx8LCJaNbgNqiNsv9brpXoJunDisEo4IQMl30hsAQrk0Ml5PsjCZC7u zubecAqi0POR/mtwNoNSqEGfkEYBDP7xtvgpxyh/nSxmHbpWBZVh76pePXnctx+G cPdEyUz5ICCIDnBQ33+0ye6JuYIV6aZY5ZrEPM+ffOccuvIg0Vlc00f9+IPVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgR0fDtY0otUlxIlf4vMOpdleNMYwHwYDVR0j BBgwFoAUY2lkzScdIAn1ttNCVet0TzeRJF0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjVjNDAwZDEtOWJiZC00ZTJiLThkNTgtNmY3NDlkYmMzOTJkLzAvNjM2OTY0Q0Qy NzFEMjAwOUY1QjZEMzQyNTVFQjc0NEYzNzkxMjQ1RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MzY5NjRDRDI3MUQyMDA5RjVCNkQzNDI1NUVCNzQ0RjM3OTEy NDVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjVjNDAwZDEtOWJiZC00ZTJiLThk NTgtNmY3NDlkYmMzOTJkLzAvNjM2OTY0Q0QyNzFEMjAwOUY1QjZEMzQyNTVFQjc0 NEYzNzkxMjQ1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFrDZAmtLJmp4/Y7q0RJxdHjqiD2ntrYrscT 3ssOF2mIIa6RD7CZHrUWIedTpBEVQ5ktgWbEbXY1FgKJbSjYWPTuWwbbBWQu2xql oPZVcGcohxFiYL8x9NQIwbpgy77Q8mIduo+vsIKbzDtzfU4Blv3EGOO0EM9p31Pw EDZbf8cdpFgi+I+ZLJkVv8m8PGr+tztQckwr3W0DJbnQjMhzvLKDroOI0dQIzuL7 dsOyilbld6da1HIjAEbAeNLyR9OlJBG5BJtFVJqi96JVsLTEY8AMHk6hlVlW1DDL M2PKRzFs2NtEZVif77jo3FUpMsOd6HCJLmEfZFOEIIjgtcIpZ0s= -----END CERTIFICATE-----Generated at Tue May 12 23:55:05 2026 by rpki-client