$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.mft File: 64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.mft (raw, json) Hash identifier: 5yKAfmfkdHWMtqy+fR4mvB73uthu6SOWLcCebrLh6j0= Subject key identifier: D7:7C:AB:CA:C6:9F:6A:8C:4A:D0:9A:4F:01:3C:ED:43:92:78:16:B1 Authority key identifier: 64:AD:3F:8A:A2:FE:C3:B3:AE:40:8C:3C:80:95:AA:2A:DC:E9:D1:DC Certificate issuer: /CN=64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC Certificate serial: 55FD98A93274A5D884E26DC0F54898F878A7241F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.mft Manifest number: FF Signing time: Sun 08 Nov 2026 21:11:56 +0000 Manifest this update: Sun 08 Nov 2026 21:06:56 +0000 Manifest next update: Mon 09 Nov 2026 23:14:56 +0000 Files and hashes: 1: 3130332e3137352e38322e302f32332d3234203d3e20313338303634.roa (hash: 4mp9oPj+fvhe4l9TyWRWz2Tw0DOZLpJmydY4neUa8S8=) 2: 64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.crl (hash: IH/vTXcwRyqPQtCTXsMmBiam9oI/TTxqpKgbHNlkp9o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.crl rsync://rpki-rsync.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 23:14:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:fd:98:a9:32:74:a5:d8:84:e2:6d:c0:f5:48:98:f8:78:a7:24:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC Validity Not Before: Nov 8 21:06:56 2026 GMT Not After : Nov 9 23:14:56 2026 GMT Subject: CN=D77CABCAC69F6A8C4AD09A4F013CED43927816B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:33:43:a6:49:09:17:b8:d7:54:00:45:9b:78: f4:f7:4d:bc:df:bf:12:55:ce:be:94:ea:55:a6:85: 35:a6:92:c8:45:93:f1:a9:73:03:59:88:02:65:d1: 3b:3d:22:ff:97:9a:b4:37:cb:14:87:ef:29:c4:25: 8d:dc:b1:79:4b:b9:e8:18:f6:fd:c6:85:19:ec:46: cb:da:54:fd:d1:75:33:a9:90:5e:0f:18:17:ef:03: ed:50:86:99:e7:eb:f9:b2:f0:f8:d3:ce:26:33:6e: 00:94:19:53:94:82:65:1f:2c:f6:02:ea:d0:bb:13: c1:78:49:f0:ca:9d:f6:4d:de:b3:2e:cc:19:8d:f6: 2f:b2:ac:70:72:58:16:68:b2:10:fc:c5:73:3a:35: a5:3b:4c:19:b5:81:4b:9c:0c:5b:4f:3e:4f:ef:c4: 5a:1c:9b:d5:84:fa:62:ed:b7:8c:fe:4f:7f:a2:fe: 1a:93:7d:05:f0:f9:a6:3d:2e:5d:05:05:19:78:79: 77:f7:96:2f:cd:7f:b6:dd:7c:ea:27:cd:6b:27:ca: af:3e:e3:d5:14:20:56:eb:16:0c:c4:80:c7:ff:81: 50:83:38:dc:8b:d4:e8:a3:52:bc:76:7a:b6:9b:90: ad:50:1a:20:50:71:3b:53:4a:2e:53:1f:8b:6b:c6: 3a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:7C:AB:CA:C6:9F:6A:8C:4A:D0:9A:4F:01:3C:ED:43:92:78:16:B1 X509v3 Authority Key Identifier: keyid:64:AD:3F:8A:A2:FE:C3:B3:AE:40:8C:3C:80:95:AA:2A:DC:E9:D1:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:7d:45:62:0e:37:eb:ce:72:40:7a:57:3b:35:0e:00:7c:b1: ae:6d:46:d8:c7:93:5a:09:4b:c0:5f:2b:26:64:94:8d:8a:b0: 49:33:73:94:d2:a4:ac:c6:36:09:1e:bf:bd:29:cf:06:cd:f2: 93:ed:5b:89:c5:fb:8d:7f:b7:ba:c6:25:76:cb:e2:39:26:cd: 8a:06:c9:a0:b8:7f:28:6b:0d:25:48:1b:a6:49:66:f6:a3:33: 36:ac:3f:b7:6c:21:b7:df:30:41:12:d8:bc:b5:1e:e0:ca:2b: cf:2c:41:eb:9d:bc:5a:f6:4f:bc:df:f2:45:51:91:9f:6a:4d: fa:70:de:e0:cf:9b:6d:43:6f:36:d4:08:7e:f1:77:50:ae:62: 09:eb:fc:a6:44:cd:74:b5:0f:23:59:a7:f9:33:b7:a6:14:94: 29:84:c4:02:47:0d:8b:ac:64:35:90:d4:79:3b:b3:81:8f:15: 4f:5f:a2:a0:f0:39:98:ca:c9:a9:2c:55:ab:46:66:1b:2c:13: ec:d8:6e:a7:cb:a6:64:89:91:04:57:34:85:81:e5:49:2e:85: 7d:e3:d8:d4:d3:2f:67:f7:02:7f:5b:d9:54:15:9f:35:c1:f6: 38:9b:45:30:3d:aa:04:0b:f0:2c:55:7b:bd:e1:4e:fb:bb:77: ac:68:c8:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVf2YqTJ0pdiE4m3A9UiY+HinJB8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRBRDNGOEFBMkZFQzNCM0FFNDA4QzNDODA5NUFBMkFE Q0U5RDFEQzAeFw0yNjExMDgyMTA2NTZaFw0yNjExMDkyMzE0NTZaMDMxMTAvBgNV BAMTKEQ3N0NBQkNBQzY5RjZBOEM0QUQwOUE0RjAxM0NFRDQzOTI3ODE2QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKM0OmSQkXuNdUAEWbePT3Tbzf vxJVzr6U6lWmhTWmkshFk/GpcwNZiAJl0Ts9Iv+XmrQ3yxSH7ynEJY3csXlLuegY 9v3GhRnsRsvaVP3RdTOpkF4PGBfvA+1Qhpnn6/my8PjTziYzbgCUGVOUgmUfLPYC 6tC7E8F4SfDKnfZN3rMuzBmN9i+yrHByWBZoshD8xXM6NaU7TBm1gUucDFtPPk/v xFocm9WE+mLtt4z+T3+i/hqTfQXw+aY9Ll0FBRl4eXf3li/Nf7bdfOonzWsnyq8+ 49UUIFbrFgzEgMf/gVCDONyL1OijUrx2erabkK1QGiBQcTtTSi5TH4trxjoXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU13yrysafaoxK0JpPATztQ5J4FrEwHwYDVR0j BBgwFoAUZK0/iqL+w7OuQIw8gJWqKtzp0dwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmNhNTQ3ODEtOTY3OC00NzVjLWFjMWItY2Q0YmZjZjVkMGVhLzAvNjRBRDNGOEFB MkZFQzNCM0FFNDA4QzNDODA5NUFBMkFEQ0U5RDFEQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NEFEM0Y4QUEyRkVDM0IzQUU0MDhDM0M4MDk1QUEyQURDRTlE MURDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmNhNTQ3ODEtOTY3OC00NzVjLWFj MWItY2Q0YmZjZjVkMGVhLzAvNjRBRDNGOEFBMkZFQzNCM0FFNDA4QzNDODA5NUFB MkFEQ0U5RDFEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACx9RWION+vOckB6Vzs1DgB8sa5tRtjHk1oJ S8BfKyZklI2KsEkzc5TSpKzGNgkev70pzwbN8pPtW4nF+41/t7rGJXbL4jkmzYoG yaC4fyhrDSVIG6ZJZvajMzasP7dsIbffMEES2Ly1HuDKK88sQeudvFr2T7zf8kVR kZ9qTfpw3uDPm21DbzbUCH7xd1CuYgnr/KZEzXS1DyNZp/kzt6YUlCmExAJHDYus ZDWQ1Hk7s4GPFU9foqDwOZjKyaksVatGZhssE+zYbqfLpmSJkQRXNIWB5UkuhX3j 2NTTL2f3An9b2VQVnzXB9jibRTA9qgQL8CxVe73hTvu7d6xoyFU= -----END CERTIFICATE-----Generated at Mon Nov 9 17:21:22 2026 by rpki-client