
$ rpki-client -vvf rpki-rsync.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.mft
File: 64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.mft (raw, json)
Hash identifier: uCdV0QxDrSGi9R3P7gTjCIeUG/61z/nviSbr3iLPD/s=
Subject key identifier: A8:23:AC:62:B6:3B:C5:9E:05:8D:E8:49:72:74:3F:7B:E7:9F:EE:E4
Authority key identifier: 64:AD:3F:8A:A2:FE:C3:B3:AE:40:8C:3C:80:95:AA:2A:DC:E9:D1:DC
Certificate issuer: /CN=64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC
Certificate serial: 7112CD093DA0321781F2EA524555909D4D25C9D7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.mft
Manifest number: 39
Signing time: Sat 13 Jun 2026 16:19:20 +0000
Manifest this update: Sat 13 Jun 2026 16:14:20 +0000
Manifest next update: Sun 14 Jun 2026 17:48:20 +0000
Files and hashes: 1: 64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.crl (hash: +9GFr0tJOJbKdLFHPgmGkLsqGA2/g/ZpJbU9ok/cdI4=)
2: 3130332e3137352e38322e302f32332d3234203d3e20313338303634.roa (hash: 4mp9oPj+fvhe4l9TyWRWz2Tw0DOZLpJmydY4neUa8S8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.crl
rsync://rpki-rsync.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:12:cd:09:3d:a0:32:17:81:f2:ea:52:45:55:90:9d:4d:25:c9:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC
Validity
Not Before: Jun 13 16:14:20 2026 GMT
Not After : Jun 14 17:48:20 2026 GMT
Subject: CN=A823AC62B63BC59E058DE84972743F7BE79FEEE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7c:c6:9b:0e:61:2e:2a:e1:37:38:13:89:9e:
a7:41:31:ae:b1:38:9d:27:9a:cd:f4:30:0b:d7:a5:
cc:04:7d:da:f2:c6:15:cd:c5:b0:ff:bb:55:59:ae:
9b:99:22:0d:9a:ef:61:36:a2:58:db:26:2c:6d:09:
ac:08:a1:d2:24:2a:9a:6b:e0:8f:d3:26:e7:ab:5f:
0b:f2:49:1e:20:aa:a5:fc:90:1f:1e:04:9a:a2:6c:
7c:74:59:93:0e:dd:60:10:db:03:bc:32:9b:ec:7a:
1f:e0:15:19:1d:d9:fd:d3:bf:86:08:42:88:00:63:
fb:81:a0:ed:a3:3c:8e:96:b9:ff:f4:81:44:7c:31:
3e:ef:40:1c:7d:87:67:df:1c:45:e4:98:ad:7a:46:
81:f8:af:6d:1d:ad:c9:3c:7b:3b:b0:44:3c:fd:be:
b5:1f:c3:84:14:b0:bf:75:40:bd:5c:20:73:f4:bd:
e0:8d:c7:6d:45:16:77:54:7a:2c:4a:b4:93:b4:16:
a8:b1:90:e1:b2:f3:21:ee:96:75:aa:83:1e:a7:0e:
65:07:d4:30:d4:73:69:a0:84:40:7a:3f:3f:45:85:
0e:be:84:ef:0c:bf:15:0c:e1:df:04:ab:09:3d:ff:
c4:14:3c:68:66:7f:b1:2c:40:a5:79:06:5b:f7:86:
12:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:23:AC:62:B6:3B:C5:9E:05:8D:E8:49:72:74:3F:7B:E7:9F:EE:E4
X509v3 Authority Key Identifier:
keyid:64:AD:3F:8A:A2:FE:C3:B3:AE:40:8C:3C:80:95:AA:2A:DC:E9:D1:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:32:de:bf:d0:e8:93:74:94:0e:ad:06:f6:d7:8e:10:09:4d:
41:61:b0:79:c9:d4:89:af:53:06:98:9e:21:87:ae:91:32:fd:
a4:ba:f8:08:7e:df:98:0b:bc:db:66:30:75:c1:36:5a:3a:37:
9e:46:38:ea:28:58:06:da:d1:04:77:f1:15:70:f2:89:ee:b6:
30:a9:5d:8a:72:d7:5c:6e:88:48:53:62:30:bd:d7:80:d0:d6:
5a:66:95:14:01:39:40:d1:fd:4b:88:80:7e:af:e0:34:14:22:
98:be:f1:83:de:fc:a2:8d:ee:d2:4f:d0:6a:21:f0:9b:08:28:
a7:f1:2a:e2:c6:30:15:22:37:f8:65:28:4d:67:d0:d8:3a:7e:
47:3e:84:ff:1c:ab:97:75:85:64:fe:d6:58:8b:60:33:9f:ee:
48:ae:e9:0b:bc:31:4e:a5:c1:b3:3b:96:0c:ac:0e:97:41:fb:
08:91:d9:c5:19:da:95:67:db:fd:f3:7b:b6:26:93:3a:ac:33:
6f:17:67:56:20:e3:eb:93:18:03:fe:a0:f4:5a:9d:50:42:bb:
c0:c9:8c:05:7e:78:b5:a8:63:9b:b1:87:a2:85:16:b4:2c:12:
41:b0:be:3e:30:08:63:1a:1b:df:ff:c9:5e:21:da:88:24:3a:
e0:65:f1:79
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUcRLNCT2gMheB8upSRVWQnU0lydcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjRBRDNGOEFBMkZFQzNCM0FFNDA4QzNDODA5NUFBMkFE
Q0U5RDFEQzAeFw0yNjA2MTMxNjE0MjBaFw0yNjA2MTQxNzQ4MjBaMDMxMTAvBgNV
BAMTKEE4MjNBQzYyQjYzQkM1OUUwNThERTg0OTcyNzQzRjdCRTc5RkVFRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmfMabDmEuKuE3OBOJnqdBMa6x
OJ0nms30MAvXpcwEfdryxhXNxbD/u1VZrpuZIg2a72E2oljbJixtCawIodIkKppr
4I/TJuerXwvySR4gqqX8kB8eBJqibHx0WZMO3WAQ2wO8Mpvseh/gFRkd2f3Tv4YI
QogAY/uBoO2jPI6Wuf/0gUR8MT7vQBx9h2ffHEXkmK16RoH4r20drck8ezuwRDz9
vrUfw4QUsL91QL1cIHP0veCNx21FFndUeixKtJO0FqixkOGy8yHulnWqgx6nDmUH
1DDUc2mghEB6Pz9FhQ6+hO8MvxUM4d8Eqwk9/8QUPGhmf7EsQKV5Blv3hhKtAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUqCOsYrY7xZ4FjehJcnQ/e+ef7uQwHwYDVR0j
BBgwFoAUZK0/iqL+w7OuQIw8gJWqKtzp0dwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZmNhNTQ3ODEtOTY3OC00NzVjLWFjMWItY2Q0YmZjZjVkMGVhLzAvNjRBRDNGOEFB
MkZFQzNCM0FFNDA4QzNDODA5NUFBMkFEQ0U5RDFEQy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82NEFEM0Y4QUEyRkVDM0IzQUU0MDhDM0M4MDk1QUEyQURDRTlE
MURDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmNhNTQ3ODEtOTY3OC00NzVjLWFj
MWItY2Q0YmZjZjVkMGVhLzAvNjRBRDNGOEFBMkZFQzNCM0FFNDA4QzNDODA5NUFB
MkFEQ0U5RDFEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBALgy3r/Q6JN0lA6tBvbXjhAJTUFhsHnJ1Imv
UwaYniGHrpEy/aS6+Ah+35gLvNtmMHXBNlo6N55GOOooWAba0QR38RVw8onutjCp
XYpy11xuiEhTYjC914DQ1lpmlRQBOUDR/UuIgH6v4DQUIpi+8YPe/KKN7tJP0Goh
8JsIKKfxKuLGMBUiN/hlKE1n0Ng6fkc+hP8cq5d1hWT+1liLYDOf7kiu6Qu8MU6l
wbM7lgysDpdB+wiR2cUZ2pVn2/3ze7YmkzqsM28XZ1Yg4+uTGAP+oPRanVBCu8DJ
jAV+eLWoY5uxh6KFFrQsEkGwvj4wCGMaG9//yV4h2ogkOuBl8Xk=
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:43:18 2026 by rpki-client