$ rpki-client -vvf rpki-rsync.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/636964CD271D2009F5B6D34255EB744F3791245D.mft File: 636964CD271D2009F5B6D34255EB744F3791245D.mft (raw, json) Hash identifier: yojG7xrUIcItGFH7INp/Tzmdf9Alsu58c3tT2DDZ3fo= Subject key identifier: CC:96:69:FB:57:65:E4:7F:8B:97:5D:E3:F6:7A:F4:4D:74:6E:C1:4C Authority key identifier: 63:69:64:CD:27:1D:20:09:F5:B6:D3:42:55:EB:74:4F:37:91:24:5D Certificate issuer: /CN=636964CD271D2009F5B6D34255EB744F3791245D Certificate serial: 671F330E4F12A00F9FB1FEB4CEC7AF4B33AFEA34 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/636964CD271D2009F5B6D34255EB744F3791245D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/636964CD271D2009F5B6D34255EB744F3791245D.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 12:25:25 +0000 Manifest this update: Tue 02 Jun 2026 12:20:25 +0000 Manifest next update: Wed 03 Jun 2026 16:02:25 +0000 Files and hashes: 1: 3130332e3134332e32342e302f32342d3234203d3e203536323432.roa (hash: CRlStcVLlPbgkaOXZGS+9wEQ7WP2ijdeiyB/zUIWiTs=) 2: 3130332e3134332e32342e302f32332d3233203d3e203536323432.roa (hash: 6dvxTqYXa9l0Nvb47oeD7uqupUUpey1d9KPx/TFkWZc=) 3: 636964CD271D2009F5B6D34255EB744F3791245D.crl (hash: mD1ljKRT5MU5s2UdZ/nPLkcAcWBia01jQkZ7iLuM78o=) 4: 3130332e3134332e32352e302f32342d3234203d3e203536323432.roa (hash: aWOLzIn2x5kpaR5z9FtYwftOiGecceuudPRE6v0eVaA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/636964CD271D2009F5B6D34255EB744F3791245D.crl rsync://rpki-rsync.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/636964CD271D2009F5B6D34255EB744F3791245D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/636964CD271D2009F5B6D34255EB744F3791245D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 16:02:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:1f:33:0e:4f:12:a0:0f:9f:b1:fe:b4:ce:c7:af:4b:33:af:ea:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=636964CD271D2009F5B6D34255EB744F3791245D Validity Not Before: Jun 2 12:20:25 2026 GMT Not After : Jun 3 16:02:25 2026 GMT Subject: CN=CC9669FB5765E47F8B975DE3F67AF44D746EC14C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b1:8c:50:48:e4:a0:1e:76:b7:c4:dd:28:04: 5d:6c:bd:87:b5:7c:24:25:db:d1:4c:d9:98:49:ce: f0:21:98:03:12:d2:44:99:fa:1f:db:84:e5:a9:6c: f6:bf:6c:4b:8a:af:4f:f3:18:a4:5e:b8:19:84:06: c0:9a:f0:81:bc:c5:6c:50:3f:8a:14:dd:67:a2:e9: c8:61:52:92:99:14:4c:5c:84:cb:43:ee:b9:15:17: 53:1f:ad:e6:4a:03:16:08:f8:1e:e7:06:d2:f0:e7: aa:14:14:d8:16:e2:0b:f2:5a:a6:81:5a:62:28:b4: b2:19:67:e6:d2:d5:ab:e1:cb:ca:0e:45:4c:ba:21: ca:c5:25:9a:c4:aa:79:d8:16:bb:0f:bf:fa:79:bc: c0:7f:bc:48:f6:1f:0f:95:8b:00:1a:50:d7:bd:1a: c4:90:96:17:d1:83:68:d7:8b:ae:c8:06:b2:aa:f6: c4:14:8c:77:35:e2:8a:ab:da:b7:fa:cf:83:7c:93: c6:ef:1e:17:b9:b8:24:46:27:62:a6:11:e2:c9:ce: c5:92:a1:f6:71:53:c8:52:ad:99:c9:29:b1:37:ac: 37:55:44:c1:52:67:54:cd:13:4e:a6:a6:5a:bb:32: 4f:24:ed:51:eb:91:4a:0e:40:e1:ef:2a:a3:cc:11: 11:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:96:69:FB:57:65:E4:7F:8B:97:5D:E3:F6:7A:F4:4D:74:6E:C1:4C X509v3 Authority Key Identifier: keyid:63:69:64:CD:27:1D:20:09:F5:B6:D3:42:55:EB:74:4F:37:91:24:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/636964CD271D2009F5B6D34255EB744F3791245D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/636964CD271D2009F5B6D34255EB744F3791245D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/636964CD271D2009F5B6D34255EB744F3791245D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:cd:56:88:00:62:bd:f1:8c:20:11:6b:e8:4f:ef:c2:6c:37: 2f:7d:8d:6c:b8:45:ca:ba:ae:f0:48:b2:da:2d:58:83:38:56: 61:79:f4:4c:6b:60:27:5e:6b:66:3f:9b:26:03:c5:8c:24:47: 57:aa:88:52:cc:6a:0d:77:1d:90:4e:e0:c1:e7:c7:38:35:35: 7b:c2:f5:8c:1c:74:26:53:70:5f:ba:ef:f9:e8:03:6f:f2:ca: d1:a3:af:9d:29:0e:04:ea:ad:f2:39:40:14:b2:46:72:e7:d8: f1:94:78:ff:e9:0b:62:4a:ef:25:c5:04:2b:8f:79:2b:d0:4a: 02:46:e7:3f:ad:08:58:1e:b4:4e:54:ed:d0:ac:c3:b4:dd:52: 6d:f6:31:6e:1a:80:d6:dd:3f:ec:2d:f1:ef:00:84:f4:7c:b5: ab:28:d5:b9:e8:f7:7d:0c:38:d3:e7:03:06:74:a2:97:05:f5: ea:17:f6:35:fc:3e:87:62:1c:6e:7e:d4:e8:a5:12:6e:88:77: ed:80:a0:de:d8:c6:e6:96:fd:5f:f4:8b:6f:c7:8d:08:c0:05: 1d:00:b5:62:7c:af:7a:38:34:0d:69:07:5d:8c:df:98:c3:fd: cb:9c:ff:8d:8f:58:e3:11:6c:5e:47:db:53:5b:92:02:93:08: 83:f9:2c:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZx8zDk8SoA+fsf60zsevSzOv6jQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM2OTY0Q0QyNzFEMjAwOUY1QjZEMzQyNTVFQjc0NEYz NzkxMjQ1RDAeFw0yNjA2MDIxMjIwMjVaFw0yNjA2MDMxNjAyMjVaMDMxMTAvBgNV BAMTKENDOTY2OUZCNTc2NUU0N0Y4Qjk3NURFM0Y2N0FGNDRENzQ2RUMxNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3sYxQSOSgHna3xN0oBF1svYe1 fCQl29FM2ZhJzvAhmAMS0kSZ+h/bhOWpbPa/bEuKr0/zGKReuBmEBsCa8IG8xWxQ P4oU3Wei6chhUpKZFExchMtD7rkVF1MfreZKAxYI+B7nBtLw56oUFNgW4gvyWqaB WmIotLIZZ+bS1avhy8oORUy6IcrFJZrEqnnYFrsPv/p5vMB/vEj2Hw+ViwAaUNe9 GsSQlhfRg2jXi67IBrKq9sQUjHc14oqr2rf6z4N8k8bvHhe5uCRGJ2KmEeLJzsWS ofZxU8hSrZnJKbE3rDdVRMFSZ1TNE06mplq7Mk8k7VHrkUoOQOHvKqPMEREdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzJZp+1dl5H+Ll13j9nr0TXRuwUwwHwYDVR0j BBgwFoAUY2lkzScdIAn1ttNCVet0TzeRJF0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjVjNDAwZDEtOWJiZC00ZTJiLThkNTgtNmY3NDlkYmMzOTJkLzAvNjM2OTY0Q0Qy NzFEMjAwOUY1QjZEMzQyNTVFQjc0NEYzNzkxMjQ1RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MzY5NjRDRDI3MUQyMDA5RjVCNkQzNDI1NUVCNzQ0RjM3OTEy NDVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjVjNDAwZDEtOWJiZC00ZTJiLThk NTgtNmY3NDlkYmMzOTJkLzAvNjM2OTY0Q0QyNzFEMjAwOUY1QjZEMzQyNTVFQjc0 NEYzNzkxMjQ1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKXNVogAYr3xjCARa+hP78JsNy99jWy4Rcq6 rvBIstotWIM4VmF59ExrYCdea2Y/myYDxYwkR1eqiFLMag13HZBO4MHnxzg1NXvC 9YwcdCZTcF+67/noA2/yytGjr50pDgTqrfI5QBSyRnLn2PGUeP/pC2JK7yXFBCuP eSvQSgJG5z+tCFgetE5U7dCsw7TdUm32MW4agNbdP+wt8e8AhPR8taso1bno930M ONPnAwZ0opcF9eoX9jX8PodiHG5+1OilEm6Id+2AoN7YxuaW/V/0i2/HjQjABR0A tWJ8r3o4NA1pB12M35jD/cuc/42PWOMRbF5H21NbkgKTCIP5LHc= -----END CERTIFICATE-----Generated at Wed Jun 3 03:50:00 2026 by rpki-client