$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.mft File: 64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.mft (raw, json) Hash identifier: +wK+DB7GF94L1lPafDxCvbmoHRKkm9MPQuKI790G7zM= Subject key identifier: AA:3D:07:DC:BF:E2:07:EF:45:20:11:81:4B:55:07:6A:C9:D8:14:DE Authority key identifier: 64:AD:3F:8A:A2:FE:C3:B3:AE:40:8C:3C:80:95:AA:2A:DC:E9:D1:DC Certificate issuer: /CN=64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC Certificate serial: 1E87BA6987AECBBCD47DD18F56A8850E5CA4A742 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.mft Manifest number: BE Signing time: Sun 20 Sep 2026 15:56:43 +0000 Manifest this update: Sun 20 Sep 2026 15:51:43 +0000 Manifest next update: Mon 21 Sep 2026 19:11:43 +0000 Files and hashes: 1: 3130332e3137352e38322e302f32332d3234203d3e20313338303634.roa (hash: 4mp9oPj+fvhe4l9TyWRWz2Tw0DOZLpJmydY4neUa8S8=) 2: 64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.crl (hash: noq9nqlXd/NnCfnf6b718sbVA87tt/WbXFjCaxnttAI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.crl rsync://rpki-rsync.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 19:11:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:87:ba:69:87:ae:cb:bc:d4:7d:d1:8f:56:a8:85:0e:5c:a4:a7:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC Validity Not Before: Sep 20 15:51:43 2026 GMT Not After : Sep 21 19:11:43 2026 GMT Subject: CN=AA3D07DCBFE207EF452011814B55076AC9D814DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:48:30:9b:76:18:fc:bb:48:99:ff:af:f3:7a: e5:41:c7:f0:2d:07:de:94:dc:25:9c:ee:d6:46:f7: d5:6e:93:6c:43:e0:3f:e7:73:04:8c:f9:9e:71:7c: 0b:29:51:f1:a7:20:e7:8e:85:63:ac:06:85:5c:d1: 5f:a1:23:49:dc:ef:ac:3e:c8:e2:21:3d:16:82:57: 24:82:b2:aa:cd:35:5e:89:91:66:8e:52:46:33:34: 00:0c:ee:72:76:76:c4:ae:77:7e:59:00:39:6e:20: 20:9a:5a:b8:6e:f9:a7:18:e4:1e:72:99:f3:ec:ee: 17:0c:d9:a5:98:64:19:e8:77:f1:f2:42:ee:5c:2f: 33:d4:6b:08:7e:b5:ab:59:41:5f:ca:de:09:66:7d: c9:6e:cc:c4:c6:a9:f3:41:48:62:3d:f8:1e:0b:a7: 9c:cb:8d:da:26:13:5c:36:8c:f6:d1:5e:18:54:69: a8:06:8f:03:f3:c2:4a:45:28:41:3b:8a:d9:25:41: 1f:f4:2d:8b:94:07:a0:0d:1a:03:e7:e0:80:41:e8: 07:c7:7a:b4:c0:bf:1a:6a:b9:36:bb:87:8f:71:9d: ed:04:5e:02:8c:7d:85:f3:a5:5c:07:42:87:58:b4: 18:16:4f:1b:ef:de:bc:34:a0:74:0e:e0:0a:a3:d6: 94:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:3D:07:DC:BF:E2:07:EF:45:20:11:81:4B:55:07:6A:C9:D8:14:DE X509v3 Authority Key Identifier: keyid:64:AD:3F:8A:A2:FE:C3:B3:AE:40:8C:3C:80:95:AA:2A:DC:E9:D1:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:5a:a8:16:41:10:ce:35:77:2d:a0:b9:5b:cf:0a:d9:60:96: f0:f8:01:22:34:db:ad:5e:b4:be:3e:8c:2a:ea:51:e3:81:2c: 2a:79:f8:3d:c5:43:93:1e:7d:2a:61:03:05:8f:dd:32:51:39: 4b:40:2e:73:a3:ab:19:7e:f7:bd:36:a5:52:c6:4d:ee:49:d0: ee:a9:b2:ff:6e:c5:de:e0:a9:87:3f:db:76:32:6d:ff:13:19: a3:8a:a7:2a:1f:54:87:5e:0b:b3:75:14:b0:35:33:42:53:09: 48:54:da:65:3b:03:f8:6c:ac:38:41:ec:ad:c9:77:97:5b:85: fb:7d:5a:b9:11:6f:ea:d5:9c:23:0d:12:a3:25:ff:45:6c:a1: 23:00:ae:a0:33:77:8a:0a:65:cb:77:f3:7c:b9:9c:2b:9c:dd: cd:bd:19:44:07:90:e4:22:2a:89:b1:e4:61:0f:e9:e1:12:52: 7b:c8:f2:b1:26:12:eb:00:4e:a2:43:8e:91:f5:37:19:51:c6: d1:ca:50:97:93:d5:59:c2:a6:04:f4:85:38:a5:02:54:53:e7: 58:07:b0:bf:46:ae:e3:48:a8:29:3c:38:45:1f:5a:42:db:d9: f1:85:ab:70:ef:d9:74:0d:92:8f:44:2b:d5:c5:66:13:9d:80: 81:ac:4f:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHoe6aYeuy7zUfdGPVqiFDlykp0IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRBRDNGOEFBMkZFQzNCM0FFNDA4QzNDODA5NUFBMkFE Q0U5RDFEQzAeFw0yNjA5MjAxNTUxNDNaFw0yNjA5MjExOTExNDNaMDMxMTAvBgNV BAMTKEFBM0QwN0RDQkZFMjA3RUY0NTIwMTE4MTRCNTUwNzZBQzlEODE0REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGSDCbdhj8u0iZ/6/zeuVBx/At B96U3CWc7tZG99Vuk2xD4D/ncwSM+Z5xfAspUfGnIOeOhWOsBoVc0V+hI0nc76w+ yOIhPRaCVySCsqrNNV6JkWaOUkYzNAAM7nJ2dsSud35ZADluICCaWrhu+acY5B5y mfPs7hcM2aWYZBnod/HyQu5cLzPUawh+tatZQV/K3glmfcluzMTGqfNBSGI9+B4L p5zLjdomE1w2jPbRXhhUaagGjwPzwkpFKEE7itklQR/0LYuUB6ANGgPn4IBB6AfH erTAvxpquTa7h49xne0EXgKMfYXzpVwHQodYtBgWTxvv3rw0oHQO4Aqj1pTlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqj0H3L/iB+9FIBGBS1UHasnYFN4wHwYDVR0j BBgwFoAUZK0/iqL+w7OuQIw8gJWqKtzp0dwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmNhNTQ3ODEtOTY3OC00NzVjLWFjMWItY2Q0YmZjZjVkMGVhLzAvNjRBRDNGOEFB MkZFQzNCM0FFNDA4QzNDODA5NUFBMkFEQ0U5RDFEQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NEFEM0Y4QUEyRkVDM0IzQUU0MDhDM0M4MDk1QUEyQURDRTlE MURDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmNhNTQ3ODEtOTY3OC00NzVjLWFj MWItY2Q0YmZjZjVkMGVhLzAvNjRBRDNGOEFBMkZFQzNCM0FFNDA4QzNDODA5NUFB MkFEQ0U5RDFEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGtaqBZBEM41dy2guVvPCtlglvD4ASI0261e tL4+jCrqUeOBLCp5+D3FQ5MefSphAwWP3TJROUtALnOjqxl+9702pVLGTe5J0O6p sv9uxd7gqYc/23Yybf8TGaOKpyofVIdeC7N1FLA1M0JTCUhU2mU7A/hsrDhB7K3J d5dbhft9WrkRb+rVnCMNEqMl/0VsoSMArqAzd4oKZct383y5nCuc3c29GUQHkOQi Komx5GEP6eESUnvI8rEmEusATqJDjpH1NxlRxtHKUJeT1VnCpgT0hTilAlRT51gH sL9GruNIqCk8OEUfWkLb2fGFq3Dv2XQNko9EK9XFZhOdgIGsTxw= -----END CERTIFICATE-----Generated at Mon Sep 21 13:45:44 2026 by rpki-client