$ rpki-client -vvf rpki-rsync.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.mft File: 64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.mft (raw, json) Hash identifier: dyW+mVhiAwPY4x4V12MNBu1A1Lh8FCayIO7Hf2ZUTN8= Subject key identifier: EB:6C:54:F5:B0:0F:BF:AB:F0:05:7D:F0:E8:C6:B4:BF:A1:15:BF:BC Authority key identifier: 64:AD:3F:8A:A2:FE:C3:B3:AE:40:8C:3C:80:95:AA:2A:DC:E9:D1:DC Certificate issuer: /CN=64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC Certificate serial: 5194A796CBB7B52BC50EC276A3BBFAD7DF43AA83 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.mft Manifest number: 76 Signing time: Tue 28 Jul 2026 11:31:05 +0000 Manifest this update: Tue 28 Jul 2026 11:26:05 +0000 Manifest next update: Wed 29 Jul 2026 13:22:05 +0000 Files and hashes: 1: 64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.crl (hash: GefrZkNkN1hvP2So3eZNMhg2bFmzNU39hVF4HKW7vlE=) 2: 3130332e3137352e38322e302f32332d3234203d3e20313338303634.roa (hash: 4mp9oPj+fvhe4l9TyWRWz2Tw0DOZLpJmydY4neUa8S8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.crl rsync://rpki-rsync.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 13:22:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:94:a7:96:cb:b7:b5:2b:c5:0e:c2:76:a3:bb:fa:d7:df:43:aa:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC Validity Not Before: Jul 28 11:26:05 2026 GMT Not After : Jul 29 13:22:05 2026 GMT Subject: CN=EB6C54F5B00FBFABF0057DF0E8C6B4BFA115BFBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:82:7a:dc:b8:70:bc:d1:2d:37:c8:97:16:6f: 62:90:d8:7d:66:20:0e:63:70:dd:bc:e5:87:20:37: 83:c1:c4:59:c9:e1:d9:51:ba:66:4e:80:95:c3:18: 91:5b:ea:ee:0b:61:d7:5f:b6:30:58:7a:86:da:37: 92:de:44:91:20:f0:36:d4:f7:44:2d:3f:d8:da:9d: cd:21:3c:5d:da:c7:12:ee:6b:e1:f4:74:d7:27:e2: 25:92:22:df:4e:3e:0d:0e:0f:63:ad:06:fc:03:f8: ee:a5:76:9f:cf:57:40:ed:34:6f:e2:8d:f6:bd:69: 4e:30:5e:27:25:28:a3:56:27:a8:29:5b:c3:e7:5f: e3:2d:ca:c4:01:6e:24:99:9d:a6:d2:1e:da:a1:48: 60:80:5c:b4:72:89:9b:bf:43:1a:52:95:f7:f5:bc: 9b:f3:ff:6d:12:da:06:66:7d:46:d6:bc:ac:5e:c1: a0:93:7e:5a:77:ad:3f:ee:1d:7e:69:51:f6:9d:b4: 75:4f:8e:26:dc:41:23:35:a8:0e:9e:71:c0:a5:a2: 64:0b:b0:7a:58:45:9b:bc:a4:f0:b8:83:32:6d:3b: d2:73:11:55:2b:8b:e2:0d:7f:98:9d:3a:ab:54:c4: 24:ae:91:e5:0b:d7:91:01:d8:02:0e:08:bd:3f:9e: 50:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:6C:54:F5:B0:0F:BF:AB:F0:05:7D:F0:E8:C6:B4:BF:A1:15:BF:BC X509v3 Authority Key Identifier: keyid:64:AD:3F:8A:A2:FE:C3:B3:AE:40:8C:3C:80:95:AA:2A:DC:E9:D1:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:a2:d2:5c:e0:d9:cb:5e:e1:c9:9c:74:47:b5:07:b1:da:88: 75:a6:d2:a3:41:a0:27:0b:e6:5a:21:26:4e:a6:92:29:0c:f3: 66:7f:3b:42:c9:5a:86:cd:34:b7:29:fa:da:9e:33:f4:0a:c4: 7e:e8:60:b9:3b:4f:0a:b6:d1:22:fc:46:96:3b:0b:d3:b3:ac: 37:b2:82:05:df:3c:46:11:ac:14:71:66:e7:1c:ac:c0:88:94: 3b:5f:a7:64:38:48:5a:1e:15:3e:56:bc:fc:81:ce:ba:54:2d: 59:92:1a:4f:1b:95:61:dc:77:5d:b9:70:7d:87:50:de:00:67: bf:22:a3:ea:c5:cd:ae:cd:5a:65:e8:25:36:34:0e:c3:22:0f: f6:cf:23:73:38:d0:1f:19:2e:f3:f4:2b:8b:60:7c:1f:20:44: 59:4a:aa:3e:67:56:9a:79:8a:fb:47:50:a1:79:2b:12:ad:09: 41:eb:bd:35:6a:58:d0:b5:5b:ef:ba:1e:01:62:8a:98:fd:74: 51:2f:aa:5b:77:fb:62:ef:d2:49:1e:d6:16:a4:df:b3:d9:16: f0:81:a0:c8:ec:0f:da:9d:29:ec:e6:57:fa:44:27:da:de:c4: 49:3a:fe:53:c1:45:5c:02:ad:f7:00:48:74:1f:80:a7:9b:e3: 76:06:2b:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUZSnlsu3tSvFDsJ2o7v6199DqoMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRBRDNGOEFBMkZFQzNCM0FFNDA4QzNDODA5NUFBMkFE Q0U5RDFEQzAeFw0yNjA3MjgxMTI2MDVaFw0yNjA3MjkxMzIyMDVaMDMxMTAvBgNV BAMTKEVCNkM1NEY1QjAwRkJGQUJGMDA1N0RGMEU4QzZCNEJGQTExNUJGQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNgnrcuHC80S03yJcWb2KQ2H1m IA5jcN285YcgN4PBxFnJ4dlRumZOgJXDGJFb6u4LYddftjBYeobaN5LeRJEg8DbU 90QtP9janc0hPF3axxLua+H0dNcn4iWSIt9OPg0OD2OtBvwD+O6ldp/PV0DtNG/i jfa9aU4wXiclKKNWJ6gpW8PnX+MtysQBbiSZnabSHtqhSGCAXLRyiZu/QxpSlff1 vJvz/20S2gZmfUbWvKxewaCTflp3rT/uHX5pUfadtHVPjibcQSM1qA6eccClomQL sHpYRZu8pPC4gzJtO9JzEVUri+INf5idOqtUxCSukeUL15EB2AIOCL0/nlDbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU62xU9bAPv6vwBX3w6Ma0v6EVv7wwHwYDVR0j BBgwFoAUZK0/iqL+w7OuQIw8gJWqKtzp0dwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmNhNTQ3ODEtOTY3OC00NzVjLWFjMWItY2Q0YmZjZjVkMGVhLzAvNjRBRDNGOEFB MkZFQzNCM0FFNDA4QzNDODA5NUFBMkFEQ0U5RDFEQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NEFEM0Y4QUEyRkVDM0IzQUU0MDhDM0M4MDk1QUEyQURDRTlE MURDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmNhNTQ3ODEtOTY3OC00NzVjLWFj MWItY2Q0YmZjZjVkMGVhLzAvNjRBRDNGOEFBMkZFQzNCM0FFNDA4QzNDODA5NUFB MkFEQ0U5RDFEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA6i0lzg2cte4cmcdEe1B7HaiHWm0qNBoCcL 5lohJk6mkikM82Z/O0LJWobNNLcp+tqeM/QKxH7oYLk7Twq20SL8RpY7C9OzrDey ggXfPEYRrBRxZuccrMCIlDtfp2Q4SFoeFT5WvPyBzrpULVmSGk8blWHcd125cH2H UN4AZ78io+rFza7NWmXoJTY0DsMiD/bPI3M40B8ZLvP0K4tgfB8gRFlKqj5nVpp5 ivtHUKF5KxKtCUHrvTVqWNC1W++6HgFiipj9dFEvqlt3+2Lv0kke1hak37PZFvCB oMjsD9qdKezmV/pEJ9rexEk6/lPBRVwCrfcASHQfgKeb43YGKx4= -----END CERTIFICATE-----Generated at Wed Jul 29 04:23:46 2026 by rpki-client