$ rpki-client -vvf rpki-rsync.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/636964CD271D2009F5B6D34255EB744F3791245D.mft File: 636964CD271D2009F5B6D34255EB744F3791245D.mft (raw, json) Hash identifier: 9k6C6vsC7WPj6c6ZrpedJxAdTJz9sU2Yb4QlXtWtIqo= Subject key identifier: 8D:5E:D5:2E:E3:8F:81:CF:CE:55:AC:29:C9:B3:99:08:6A:FD:65:77 Authority key identifier: 63:69:64:CD:27:1D:20:09:F5:B6:D3:42:55:EB:74:4F:37:91:24:5D Certificate issuer: /CN=636964CD271D2009F5B6D34255EB744F3791245D Certificate serial: 0AAF208F0F22A7BE71CF4B7643556C971E76ECC1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/636964CD271D2009F5B6D34255EB744F3791245D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/636964CD271D2009F5B6D34255EB744F3791245D.mft Manifest number: 7D Signing time: Sun 02 Aug 2026 03:06:15 +0000 Manifest this update: Sun 02 Aug 2026 03:01:15 +0000 Manifest next update: Mon 03 Aug 2026 05:25:15 +0000 Files and hashes: 1: 636964CD271D2009F5B6D34255EB744F3791245D.crl (hash: kvhQ4eBGkbQK1ReWlGv1xyCzlROF7jds85qTdw7trBc=) 2: 3130332e3134332e32352e302f32342d3234203d3e203536323432.roa (hash: aWOLzIn2x5kpaR5z9FtYwftOiGecceuudPRE6v0eVaA=) 3: 3130332e3134332e32342e302f32332d3233203d3e203536323432.roa (hash: 6dvxTqYXa9l0Nvb47oeD7uqupUUpey1d9KPx/TFkWZc=) 4: 3130332e3134332e32342e302f32342d3234203d3e203536323432.roa (hash: CRlStcVLlPbgkaOXZGS+9wEQ7WP2ijdeiyB/zUIWiTs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/636964CD271D2009F5B6D34255EB744F3791245D.crl rsync://rpki-rsync.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/636964CD271D2009F5B6D34255EB744F3791245D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/636964CD271D2009F5B6D34255EB744F3791245D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 05:25:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:af:20:8f:0f:22:a7:be:71:cf:4b:76:43:55:6c:97:1e:76:ec:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=636964CD271D2009F5B6D34255EB744F3791245D Validity Not Before: Aug 2 03:01:15 2026 GMT Not After : Aug 3 05:25:15 2026 GMT Subject: CN=8D5ED52EE38F81CFCE55AC29C9B399086AFD6577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9c:ca:71:b6:f6:61:20:2c:04:fc:ea:b3:29: 08:b4:48:6e:63:29:3b:58:38:bc:d1:03:86:fb:64: 8d:d1:36:f7:65:39:a0:44:23:f0:ac:87:d0:f0:69: a1:97:52:93:e3:59:d8:d4:bc:9e:60:e0:94:40:ec: 0a:aa:07:88:d1:7a:9f:94:c7:55:e2:48:a1:65:f0: ca:0d:fa:62:98:a8:79:86:8c:6d:12:8c:d9:a6:82: dc:26:e8:6f:bc:93:61:9c:14:c3:9c:d3:19:31:6a: 52:db:42:5a:09:0f:e8:19:87:63:0e:74:eb:31:cf: e9:cf:d4:df:36:f5:7e:f7:5a:22:77:f1:9c:de:56: 76:5c:47:cb:ec:b8:49:0a:2c:04:80:ae:7f:b7:4f: 5f:43:dc:70:66:6e:ad:58:b6:15:f6:0d:40:b4:5a: 4d:12:6d:cb:ab:de:fd:38:bf:2e:c1:fe:b7:94:0b: 5d:91:03:08:63:a5:58:24:f8:85:33:ef:0c:12:8c: 51:f0:8b:a7:17:ad:0a:92:3d:f3:a2:de:75:63:aa: dd:55:0a:e3:47:96:0d:c3:bb:0c:4f:f2:1d:36:44: e2:2b:a4:a0:79:a4:60:d3:f8:d7:bb:db:17:64:e0: da:2d:22:11:63:1d:fe:e5:7d:6b:34:31:1e:0b:f2: 7f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:5E:D5:2E:E3:8F:81:CF:CE:55:AC:29:C9:B3:99:08:6A:FD:65:77 X509v3 Authority Key Identifier: keyid:63:69:64:CD:27:1D:20:09:F5:B6:D3:42:55:EB:74:4F:37:91:24:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/636964CD271D2009F5B6D34255EB744F3791245D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/636964CD271D2009F5B6D34255EB744F3791245D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/636964CD271D2009F5B6D34255EB744F3791245D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:e0:07:20:d5:6a:bf:85:84:63:23:fd:75:82:e5:bf:b2:6d: 75:8b:fd:49:f1:aa:e1:79:cb:12:36:ee:ab:94:f5:14:ad:12: 8b:7e:2c:6f:3c:5d:70:05:1f:26:8b:45:22:f6:e4:6b:78:2b: 78:4f:86:48:5f:0c:8e:21:8a:e7:ab:23:0f:36:68:3b:2f:53: 53:9a:bb:a5:7b:c3:01:43:5f:81:4f:8e:3e:5f:24:75:ce:20: ff:e0:7e:d9:fc:b6:df:7c:1e:dd:2f:05:03:51:ea:82:76:80: eb:2d:93:c0:f3:c2:c5:43:28:8c:72:a0:74:41:cc:e9:8c:d9: 27:12:8f:c8:f3:5e:5b:2f:9e:f3:8a:0c:aa:50:ce:7c:39:17: 4d:b0:48:58:ea:2b:2f:d6:9e:a4:6f:6c:12:19:90:13:a1:20: b1:f3:a7:d7:ae:dd:6b:43:85:c9:1d:41:10:7e:31:69:ef:2a: 53:aa:ae:83:3c:e7:b7:01:ac:2c:3d:3c:de:63:a9:0d:e2:51: 27:44:a7:6c:7b:a2:44:3c:90:a8:5e:73:22:f9:36:ad:55:8d: 57:ed:a1:3a:23:31:02:5d:3f:81:fe:88:87:c9:04:67:47:c3: 44:6c:c6:5b:eb:4f:59:76:6e:a6:51:25:7f:fa:0d:f1:ac:96: 05:fd:c7:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCq8gjw8ip75xz0t2Q1Vslx527MEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM2OTY0Q0QyNzFEMjAwOUY1QjZEMzQyNTVFQjc0NEYz NzkxMjQ1RDAeFw0yNjA4MDIwMzAxMTVaFw0yNjA4MDMwNTI1MTVaMDMxMTAvBgNV BAMTKDhENUVENTJFRTM4RjgxQ0ZDRTU1QUMyOUM5QjM5OTA4NkFGRDY1NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVnMpxtvZhICwE/OqzKQi0SG5j KTtYOLzRA4b7ZI3RNvdlOaBEI/Csh9DwaaGXUpPjWdjUvJ5g4JRA7AqqB4jRep+U x1XiSKFl8MoN+mKYqHmGjG0SjNmmgtwm6G+8k2GcFMOc0xkxalLbQloJD+gZh2MO dOsxz+nP1N829X73WiJ38ZzeVnZcR8vsuEkKLASArn+3T19D3HBmbq1YthX2DUC0 Wk0Sbcur3v04vy7B/reUC12RAwhjpVgk+IUz7wwSjFHwi6cXrQqSPfOi3nVjqt1V CuNHlg3DuwxP8h02ROIrpKB5pGDT+Ne72xdk4NotIhFjHf7lfWs0MR4L8n8/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjV7VLuOPgc/OVawpybOZCGr9ZXcwHwYDVR0j BBgwFoAUY2lkzScdIAn1ttNCVet0TzeRJF0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjVjNDAwZDEtOWJiZC00ZTJiLThkNTgtNmY3NDlkYmMzOTJkLzAvNjM2OTY0Q0Qy NzFEMjAwOUY1QjZEMzQyNTVFQjc0NEYzNzkxMjQ1RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MzY5NjRDRDI3MUQyMDA5RjVCNkQzNDI1NUVCNzQ0RjM3OTEy NDVELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjVjNDAwZDEtOWJiZC00ZTJiLThk NTgtNmY3NDlkYmMzOTJkLzAvNjM2OTY0Q0QyNzFEMjAwOUY1QjZEMzQyNTVFQjc0 NEYzNzkxMjQ1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACPgByDVar+FhGMj/XWC5b+ybXWL/UnxquF5 yxI27quU9RStEot+LG88XXAFHyaLRSL25Gt4K3hPhkhfDI4hiuerIw82aDsvU1Oa u6V7wwFDX4FPjj5fJHXOIP/gftn8tt98Ht0vBQNR6oJ2gOstk8DzwsVDKIxyoHRB zOmM2ScSj8jzXlsvnvOKDKpQznw5F02wSFjqKy/WnqRvbBIZkBOhILHzp9eu3WtD hckdQRB+MWnvKlOqroM857cBrCw9PN5jqQ3iUSdEp2x7okQ8kKhecyL5Nq1VjVft oTojMQJdP4H+iIfJBGdHw0RsxlvrT1l2bqZRJX/6DfGslgX9x3o= -----END CERTIFICATE-----Generated at Sun Aug 2 15:50:07 2026 by rpki-client