$ rpki-client -vvvf rpki-rsync.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/064B9E28C1AE598921210EB5E94CAE9E89533533.mft File: 064B9E28C1AE598921210EB5E94CAE9E89533533.mft (raw, json) Hash identifier: nrBZ8Yx6CFV4J/CY0ogG+vGgrfrkpUfVkbi+VuRpJKU= Subject key identifier: 09:62:2B:3D:CE:0D:E0:EA:32:ED:BF:67:6F:AC:F2:60:8A:A7:17:0D Authority key identifier: 06:4B:9E:28:C1:AE:59:89:21:21:0E:B5:E9:4C:AE:9E:89:53:35:33 Certificate issuer: /CN=064B9E28C1AE598921210EB5E94CAE9E89533533 Certificate serial: 1947C3FFD396AB04EFAE21E3D98D5D561713A6BF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/064B9E28C1AE598921210EB5E94CAE9E89533533.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/064B9E28C1AE598921210EB5E94CAE9E89533533.mft Manifest number: C8 Signing time: Mon 28 Sep 2026 05:11:30 +0000 Manifest this update: Mon 28 Sep 2026 05:06:30 +0000 Manifest next update: Tue 29 Sep 2026 05:25:30 +0000 Files and hashes: 1: 064B9E28C1AE598921210EB5E94CAE9E89533533.crl (hash: 8w2nTf70M9KUwmgBDnDXN5kN5gt0y6i5OLoPAiAUTZU=) 2: 3130332e3135382e3132382e302f32332d3234203d3e203338333230.roa (hash: rh0sBxj81btPPODPu5P0eEgRgLm8ewf9kn1GsH7FYgE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/064B9E28C1AE598921210EB5E94CAE9E89533533.crl rsync://rpki-rsync.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/064B9E28C1AE598921210EB5E94CAE9E89533533.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/064B9E28C1AE598921210EB5E94CAE9E89533533.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 05:25:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:47:c3:ff:d3:96:ab:04:ef:ae:21:e3:d9:8d:5d:56:17:13:a6:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=064B9E28C1AE598921210EB5E94CAE9E89533533 Validity Not Before: Sep 28 05:06:30 2026 GMT Not After : Sep 29 05:25:30 2026 GMT Subject: CN=09622B3DCE0DE0EA32EDBF676FACF2608AA7170D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:28:e9:0b:88:91:b2:fd:e7:c0:b7:49:45:5f: d2:c6:d0:0d:ae:a3:42:cb:70:73:ee:5b:32:3b:8c: 02:3f:cc:97:34:f4:8a:61:43:29:f2:27:4c:d7:cc: 98:52:1c:c5:8c:a9:09:eb:a4:6a:06:a5:27:c1:ff: 91:4f:89:bb:fc:80:b0:d3:fb:33:5a:b9:11:9e:3d: ef:20:77:7a:5f:33:98:b1:13:72:b3:2f:aa:0b:b0: f6:ac:36:3f:12:0d:4b:73:59:ae:4f:b8:84:1d:2c: 4e:ed:b1:99:c4:b6:a4:a8:f8:c8:c4:81:7c:52:8f: 24:6a:cf:63:a6:d1:be:36:9e:39:6a:c0:9c:2f:a4: 75:60:97:09:74:19:91:0a:48:28:45:05:f9:d2:91: 15:77:b0:c9:ef:9b:de:2c:da:eb:77:82:15:53:ae: 74:57:e0:c7:a0:a1:98:2c:99:73:2f:86:33:99:16: 33:15:23:2e:6f:14:e9:a2:f1:24:c5:4a:d6:2b:b2: 04:f2:52:cc:f6:68:36:d1:71:54:39:20:22:9f:21: 5d:cf:36:17:21:15:e4:31:96:44:58:35:b7:58:3a: 6e:cc:68:04:97:17:a9:93:67:4a:85:ce:a9:b4:11: 48:12:2e:6c:c8:00:a6:8e:f3:53:ee:21:9f:f0:31: 5d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:62:2B:3D:CE:0D:E0:EA:32:ED:BF:67:6F:AC:F2:60:8A:A7:17:0D X509v3 Authority Key Identifier: keyid:06:4B:9E:28:C1:AE:59:89:21:21:0E:B5:E9:4C:AE:9E:89:53:35:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/064B9E28C1AE598921210EB5E94CAE9E89533533.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/064B9E28C1AE598921210EB5E94CAE9E89533533.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/064B9E28C1AE598921210EB5E94CAE9E89533533.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:90:f5:ce:6f:26:7f:dc:fa:0d:cd:bb:a6:5b:95:2d:4c:75: 4c:07:18:d8:cb:61:69:58:aa:38:2f:e8:4d:8a:df:55:47:07: d9:a7:b3:8f:6c:e8:db:da:3f:a0:f9:34:cd:c3:0f:8c:86:59: 6e:48:2f:b0:9a:6f:b4:03:e7:e0:eb:0f:3b:e5:a2:ad:d5:02: a2:b1:a2:66:25:95:1d:98:3e:11:0b:83:1f:9d:a3:bd:d0:32: 61:91:d4:92:b0:f3:84:6c:84:c6:c3:c5:c8:71:38:cb:ee:f9: 6d:d2:8f:e7:26:1c:11:32:16:54:6e:61:22:09:48:64:41:d8: bb:5a:46:9a:c8:a5:cf:49:26:d1:27:f6:84:79:8e:13:c6:bc: 2e:0b:de:14:82:7b:e9:66:bd:3b:2a:b6:d3:6a:ce:e7:4e:1e: 68:f2:c7:b3:2f:69:bc:e3:36:6b:46:af:95:6e:ff:f8:88:ee: 57:8e:6f:6a:e7:ad:f0:ef:73:00:c2:34:2a:9b:82:f6:51:b7: 98:39:90:0c:dd:63:68:81:95:7a:da:f2:96:42:b4:49:4e:38: 72:be:97:1f:cd:3c:b5:c1:9a:e8:2d:15:42:7f:b4:c4:61:13: ea:8c:ec:37:97:ab:30:fe:8b:55:14:55:36:a2:ff:62:63:91: d7:b9:34:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGUfD/9OWqwTvriHj2Y1dVhcTpr8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY0QjlFMjhDMUFFNTk4OTIxMjEwRUI1RTk0Q0FFOUU4 OTUzMzUzMzAeFw0yNjA5MjgwNTA2MzBaFw0yNjA5MjkwNTI1MzBaMDMxMTAvBgNV BAMTKDA5NjIyQjNEQ0UwREUwRUEzMkVEQkY2NzZGQUNGMjYwOEFBNzE3MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeKOkLiJGy/efAt0lFX9LG0A2u o0LLcHPuWzI7jAI/zJc09IphQynyJ0zXzJhSHMWMqQnrpGoGpSfB/5FPibv8gLDT +zNauRGePe8gd3pfM5ixE3KzL6oLsPasNj8SDUtzWa5PuIQdLE7tsZnEtqSo+MjE gXxSjyRqz2Om0b42njlqwJwvpHVglwl0GZEKSChFBfnSkRV3sMnvm94s2ut3ghVT rnRX4MegoZgsmXMvhjOZFjMVIy5vFOmi8STFStYrsgTyUsz2aDbRcVQ5ICKfIV3P NhchFeQxlkRYNbdYOm7MaASXF6mTZ0qFzqm0EUgSLmzIAKaO81PuIZ/wMV0tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCWIrPc4N4Ooy7b9nb6zyYIqnFw0wHwYDVR0j BBgwFoAUBkueKMGuWYkhIQ616UyunolTNTMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTNmMGE4M2MtMmJjMC00MmE1LWE0YWUtMTFhNTM4ODJkZjEwLzAvMDY0QjlFMjhD MUFFNTk4OTIxMjEwRUI1RTk0Q0FFOUU4OTUzMzUzMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNjRCOUUyOEMxQUU1OTg5MjEyMTBFQjVFOTRDQUU5RTg5NTMz NTMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTNmMGE4M2MtMmJjMC00MmE1LWE0 YWUtMTFhNTM4ODJkZjEwLzAvMDY0QjlFMjhDMUFFNTk4OTIxMjEwRUI1RTk0Q0FF OUU4OTUzMzUzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC+Q9c5vJn/c+g3Nu6ZblS1MdUwHGNjLYWlY qjgv6E2K31VHB9mns49s6NvaP6D5NM3DD4yGWW5IL7Cab7QD5+DrDzvloq3VAqKx omYllR2YPhELgx+do73QMmGR1JKw84RshMbDxchxOMvu+W3Sj+cmHBEyFlRuYSIJ SGRB2LtaRprIpc9JJtEn9oR5jhPGvC4L3hSCe+lmvTsqttNqzudOHmjyx7Mvabzj NmtGr5Vu//iI7leOb2rnrfDvcwDCNCqbgvZRt5g5kAzdY2iBlXra8pZCtElOOHK+ lx/NPLXBmugtFUJ/tMRhE+qM7DeXqzD+i1UUVTai/2Jjkde5NBY= -----END CERTIFICATE-----Generated at Mon Sep 28 19:52:12 2026 by rpki-client