$ rpki-client -vvvf rpki-rsync.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/064B9E28C1AE598921210EB5E94CAE9E89533533.mft File: 064B9E28C1AE598921210EB5E94CAE9E89533533.mft (raw, json) Hash identifier: KsuPdCPxGcP7eFbjMqM2T773XaNCuZyRAexE5zin9xI= Subject key identifier: A6:2E:BF:76:01:48:C0:EE:17:E7:4B:DE:8E:49:EE:F7:72:1E:B4:69 Authority key identifier: 06:4B:9E:28:C1:AE:59:89:21:21:0E:B5:E9:4C:AE:9E:89:53:35:33 Certificate issuer: /CN=064B9E28C1AE598921210EB5E94CAE9E89533533 Certificate serial: 300960E868FFB1EDC8E71992F9EDE6206193EB3E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/064B9E28C1AE598921210EB5E94CAE9E89533533.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/064B9E28C1AE598921210EB5E94CAE9E89533533.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 16:46:29 +0000 Manifest this update: Thu 24 Sep 2026 16:41:29 +0000 Manifest next update: Fri 25 Sep 2026 17:47:29 +0000 Files and hashes: 1: 064B9E28C1AE598921210EB5E94CAE9E89533533.crl (hash: ZUAwCjF+j6YGED0JwIJna5hJn3NzWG1fKu5haWor3hQ=) 2: 3130332e3135382e3132382e302f32332d3234203d3e203338333230.roa (hash: rh0sBxj81btPPODPu5P0eEgRgLm8ewf9kn1GsH7FYgE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/064B9E28C1AE598921210EB5E94CAE9E89533533.crl rsync://rpki-rsync.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/064B9E28C1AE598921210EB5E94CAE9E89533533.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/064B9E28C1AE598921210EB5E94CAE9E89533533.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:09:60:e8:68:ff:b1:ed:c8:e7:19:92:f9:ed:e6:20:61:93:eb:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=064B9E28C1AE598921210EB5E94CAE9E89533533 Validity Not Before: Sep 24 16:41:29 2026 GMT Not After : Sep 25 17:47:29 2026 GMT Subject: CN=A62EBF760148C0EE17E74BDE8E49EEF7721EB469 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:df:74:a6:34:20:9c:aa:66:9c:2c:74:00:bd: da:01:5e:a5:ef:3b:2f:fc:d6:f2:89:99:89:9b:f4: e8:3f:30:74:68:40:e5:87:89:79:e1:ae:a3:ef:88: bb:f5:34:f7:ff:d8:b6:ac:5e:90:1f:08:1c:9c:a8: 5a:27:e0:83:d3:b1:2d:81:e0:f3:9e:21:0f:fd:ce: 32:dc:c7:7a:d1:0e:1b:d6:78:17:00:93:72:be:dd: 9d:e7:7d:67:1e:ca:d1:a4:77:4f:7a:a9:23:2f:75: 2d:b3:b6:b7:22:db:38:bc:05:2e:06:d1:fc:42:c7: e5:dc:18:ce:72:36:ca:55:69:81:f4:ca:f2:12:79: a6:48:4c:12:97:23:7d:04:03:4f:74:9b:66:11:38: 94:1a:93:18:7d:0f:ba:5f:c5:9f:92:0c:90:d7:fb: 64:13:e2:2d:5b:57:1c:6a:08:9b:e5:fe:97:51:2f: ce:43:c9:6a:c7:fb:ef:72:37:26:02:9d:04:57:66: 0e:1b:7e:2f:31:b6:98:e6:0a:89:9b:34:6c:54:c7: 06:49:d9:b0:0b:78:f1:bf:57:2c:8c:95:18:6b:07: e8:39:b3:0a:d8:47:db:90:73:e4:a1:26:89:e8:31: 14:55:71:cb:c5:c4:84:63:9d:68:af:05:48:65:12: 17:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:2E:BF:76:01:48:C0:EE:17:E7:4B:DE:8E:49:EE:F7:72:1E:B4:69 X509v3 Authority Key Identifier: keyid:06:4B:9E:28:C1:AE:59:89:21:21:0E:B5:E9:4C:AE:9E:89:53:35:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/064B9E28C1AE598921210EB5E94CAE9E89533533.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/064B9E28C1AE598921210EB5E94CAE9E89533533.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/13f0a83c-2bc0-42a5-a4ae-11a53882df10/0/064B9E28C1AE598921210EB5E94CAE9E89533533.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:5a:3a:90:92:9c:78:e1:bd:17:e1:fa:50:79:fd:93:63:eb: 87:f8:ef:b8:f0:0a:3c:24:38:6e:9e:21:b2:47:52:6a:c6:96: 4c:82:07:20:0d:a3:4d:38:3f:6f:74:df:8a:d2:22:e4:26:95: 30:05:1d:7e:9b:02:05:41:ac:31:88:2a:34:25:36:4a:6b:b4: 9e:d7:07:9c:94:f4:1d:a5:8d:0b:e3:3f:53:bb:69:7e:eb:c5: 99:d1:f4:ee:2f:8b:b7:5a:c1:5f:42:cd:7e:5b:e3:26:a4:9d: 67:0d:8d:81:bd:b7:7c:8c:b6:b1:fa:63:1e:ca:67:b1:de:ce: 82:78:eb:fa:de:78:81:b8:1c:02:dd:58:81:2f:85:b9:51:97: 31:2a:b5:b0:56:f9:d1:ac:22:b2:f6:15:de:8c:f7:b6:68:8a: 1b:a8:04:9d:97:45:46:f4:b6:4b:a4:40:34:e3:e7:3d:4b:f8: 93:80:57:01:39:77:c1:71:65:84:af:4c:b6:ab:b5:38:d9:47: 1d:65:8b:42:e8:f3:c6:8a:84:84:d5:39:46:a8:0f:c9:93:5c: 2f:ac:97:1d:0c:53:3f:c6:81:9e:68:93:a3:a8:73:d6:5a:b6: 1e:4e:54:ce:4f:69:de:14:88:8d:20:e0:eb:83:d1:5a:85:3d: 24:1c:4d:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMAlg6Gj/se3I5xmS+e3mIGGT6z4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY0QjlFMjhDMUFFNTk4OTIxMjEwRUI1RTk0Q0FFOUU4 OTUzMzUzMzAeFw0yNjA5MjQxNjQxMjlaFw0yNjA5MjUxNzQ3MjlaMDMxMTAvBgNV BAMTKEE2MkVCRjc2MDE0OEMwRUUxN0U3NEJERThFNDlFRUY3NzIxRUI0NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW33SmNCCcqmacLHQAvdoBXqXv Oy/81vKJmYmb9Og/MHRoQOWHiXnhrqPviLv1NPf/2LasXpAfCBycqFon4IPTsS2B 4POeIQ/9zjLcx3rRDhvWeBcAk3K+3Z3nfWceytGkd096qSMvdS2ztrci2zi8BS4G 0fxCx+XcGM5yNspVaYH0yvISeaZITBKXI30EA090m2YROJQakxh9D7pfxZ+SDJDX +2QT4i1bVxxqCJvl/pdRL85DyWrH++9yNyYCnQRXZg4bfi8xtpjmCombNGxUxwZJ 2bALePG/VyyMlRhrB+g5swrYR9uQc+ShJonoMRRVccvFxIRjnWivBUhlEhexAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpi6/dgFIwO4X50vejknu93IetGkwHwYDVR0j BBgwFoAUBkueKMGuWYkhIQ616UyunolTNTMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTNmMGE4M2MtMmJjMC00MmE1LWE0YWUtMTFhNTM4ODJkZjEwLzAvMDY0QjlFMjhD MUFFNTk4OTIxMjEwRUI1RTk0Q0FFOUU4OTUzMzUzMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNjRCOUUyOEMxQUU1OTg5MjEyMTBFQjVFOTRDQUU5RTg5NTMz NTMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTNmMGE4M2MtMmJjMC00MmE1LWE0 YWUtMTFhNTM4ODJkZjEwLzAvMDY0QjlFMjhDMUFFNTk4OTIxMjEwRUI1RTk0Q0FF OUU4OTUzMzUzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKlaOpCSnHjhvRfh+lB5/ZNj64f477jwCjwk OG6eIbJHUmrGlkyCByANo004P29034rSIuQmlTAFHX6bAgVBrDGIKjQlNkprtJ7X B5yU9B2ljQvjP1O7aX7rxZnR9O4vi7dawV9CzX5b4yaknWcNjYG9t3yMtrH6Yx7K Z7HezoJ46/reeIG4HALdWIEvhblRlzEqtbBW+dGsIrL2Fd6M97ZoihuoBJ2XRUb0 tkukQDTj5z1L+JOAVwE5d8FxZYSvTLartTjZRx1li0Lo88aKhITVOUaoD8mTXC+s lx0MUz/GgZ5ok6Ooc9Zath5OVM5Pad4UiI0g4OuD0VqFPSQcTT4= -----END CERTIFICATE-----Generated at Thu Sep 24 21:57:38 2026 by rpki-client