$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.mft File: 64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.mft (raw, json) Hash identifier: 5UdmY8WxUmAj0r1MtsN+MI2RkG0pdTQLzbW15Nueb9I= Subject key identifier: 31:B1:D7:79:53:B5:E9:AF:4F:A2:EB:4A:32:41:D5:9F:79:FB:83:39 Authority key identifier: 64:AD:3F:8A:A2:FE:C3:B3:AE:40:8C:3C:80:95:AA:2A:DC:E9:D1:DC Certificate issuer: /CN=64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC Certificate serial: 0848603C472F30CF8D5717926FD7AE8E9199C0C8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 13:22:23 +0000 Manifest this update: Thu 24 Sep 2026 13:17:23 +0000 Manifest next update: Fri 25 Sep 2026 16:37:23 +0000 Files and hashes: 1: 3130332e3137352e38322e302f32332d3234203d3e20313338303634.roa (hash: 4mp9oPj+fvhe4l9TyWRWz2Tw0DOZLpJmydY4neUa8S8=) 2: 64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.crl (hash: Bzyz6JRDN5nacnWNyakkKzLonipCY/NljscQjb/9MIg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.crl rsync://rpki-rsync.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:48:60:3c:47:2f:30:cf:8d:57:17:92:6f:d7:ae:8e:91:99:c0:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC Validity Not Before: Sep 24 13:17:23 2026 GMT Not After : Sep 25 16:37:23 2026 GMT Subject: CN=31B1D77953B5E9AF4FA2EB4A3241D59F79FB8339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2a:ac:50:ec:4b:68:c9:c8:ad:1b:43:17:1f: 6a:bb:bc:09:53:5e:a7:5f:92:a8:5d:a6:e7:b4:73: f7:63:2b:1d:fe:50:9e:19:ec:bb:8c:ff:95:69:b8: b8:b0:ad:ae:6a:6e:c9:b9:65:a7:e3:aa:0e:0e:f0: 7e:5b:1e:f7:0a:5a:49:bf:2f:f4:e8:2a:2f:f6:96: f9:0a:73:cd:9d:a6:8a:78:39:b9:94:ac:33:b4:71: f3:19:65:e1:ed:93:9c:52:98:b2:65:8c:20:ea:34: 5d:b2:7d:69:f9:4b:5f:bf:54:7e:29:7a:cc:2c:4f: 59:b8:95:ea:81:ff:b4:25:1e:05:81:53:94:cf:98: f8:6e:89:21:27:27:3a:68:c4:64:cc:03:49:00:01: 66:04:94:7a:60:23:f9:8f:8d:54:23:d2:c2:cb:cb: 19:1c:e2:44:90:01:84:24:d8:4e:eb:5e:54:3c:38: 11:2f:36:a8:36:99:94:ce:2d:da:0e:50:aa:0e:17: 10:91:e8:df:4d:59:63:ae:65:17:1f:06:a1:aa:c8: 23:e8:c0:9b:47:22:a6:9e:7f:3b:4d:d4:fb:a8:64: 61:2b:36:c1:18:ad:6c:51:d9:ec:39:da:19:95:15: c8:cc:6c:c6:c4:c8:f1:46:13:97:ad:c6:6b:c4:ec: 62:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:B1:D7:79:53:B5:E9:AF:4F:A2:EB:4A:32:41:D5:9F:79:FB:83:39 X509v3 Authority Key Identifier: keyid:64:AD:3F:8A:A2:FE:C3:B3:AE:40:8C:3C:80:95:AA:2A:DC:E9:D1:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:7a:ec:d7:98:ca:74:f1:98:e9:ac:00:25:81:c8:bb:64:57: 5d:e7:3c:89:25:7a:44:e9:cc:f9:b4:13:8e:cb:9a:6c:3f:cd: 18:26:28:f7:1b:c3:56:56:43:f5:b6:28:43:52:e0:fd:6f:3f: 04:9a:9e:e8:b6:6f:00:4e:9e:6e:e4:d6:b9:29:8b:48:b2:42: 85:6a:b2:78:85:26:90:f3:7f:6b:0f:61:4d:42:21:08:33:31: c6:24:50:9b:e3:89:13:57:fe:59:54:62:b3:84:bf:34:b7:3f: 77:4a:ae:a6:8d:63:14:5b:4d:a6:5f:f2:80:f8:1d:1d:ce:a0: f4:56:93:54:4f:da:92:06:01:1f:26:1d:d7:25:8c:4b:0c:be: 9a:05:73:69:78:96:04:17:18:a2:ee:e1:5f:09:23:3a:13:8e: 12:5e:4c:9e:56:9a:b1:70:07:5a:07:36:60:ec:34:72:8a:c3: 98:b6:02:f6:ac:95:ec:11:6a:96:ea:94:7a:2a:cc:b1:c2:2c: 6b:ec:33:34:53:a2:54:11:99:64:98:b6:3d:18:8a:3c:23:b0: df:a6:08:04:88:33:f5:1a:08:1d:a4:b5:4c:27:81:c1:10:3e: 44:e5:0f:bb:48:db:c2:f4:4d:fb:cd:e5:a0:f0:60:78:0a:f3: e7:5a:32:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCEhgPEcvMM+NVxeSb9eujpGZwMgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRBRDNGOEFBMkZFQzNCM0FFNDA4QzNDODA5NUFBMkFE Q0U5RDFEQzAeFw0yNjA5MjQxMzE3MjNaFw0yNjA5MjUxNjM3MjNaMDMxMTAvBgNV BAMTKDMxQjFENzc5NTNCNUU5QUY0RkEyRUI0QTMyNDFENTlGNzlGQjgzMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2KqxQ7EtoycitG0MXH2q7vAlT Xqdfkqhdpue0c/djKx3+UJ4Z7LuM/5VpuLiwra5qbsm5Zafjqg4O8H5bHvcKWkm/ L/ToKi/2lvkKc82dpop4ObmUrDO0cfMZZeHtk5xSmLJljCDqNF2yfWn5S1+/VH4p eswsT1m4leqB/7QlHgWBU5TPmPhuiSEnJzpoxGTMA0kAAWYElHpgI/mPjVQj0sLL yxkc4kSQAYQk2E7rXlQ8OBEvNqg2mZTOLdoOUKoOFxCR6N9NWWOuZRcfBqGqyCPo wJtHIqaefztN1PuoZGErNsEYrWxR2ew52hmVFcjMbMbEyPFGE5etxmvE7GLFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMbHXeVO16a9PoutKMkHVn3n7gzkwHwYDVR0j BBgwFoAUZK0/iqL+w7OuQIw8gJWqKtzp0dwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmNhNTQ3ODEtOTY3OC00NzVjLWFjMWItY2Q0YmZjZjVkMGVhLzAvNjRBRDNGOEFB MkZFQzNCM0FFNDA4QzNDODA5NUFBMkFEQ0U5RDFEQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NEFEM0Y4QUEyRkVDM0IzQUU0MDhDM0M4MDk1QUEyQURDRTlE MURDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmNhNTQ3ODEtOTY3OC00NzVjLWFj MWItY2Q0YmZjZjVkMGVhLzAvNjRBRDNGOEFBMkZFQzNCM0FFNDA4QzNDODA5NUFB MkFEQ0U5RDFEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE967NeYynTxmOmsACWByLtkV13nPIklekTp zPm0E47Lmmw/zRgmKPcbw1ZWQ/W2KENS4P1vPwSanui2bwBOnm7k1rkpi0iyQoVq sniFJpDzf2sPYU1CIQgzMcYkUJvjiRNX/llUYrOEvzS3P3dKrqaNYxRbTaZf8oD4 HR3OoPRWk1RP2pIGAR8mHdcljEsMvpoFc2l4lgQXGKLu4V8JIzoTjhJeTJ5WmrFw B1oHNmDsNHKKw5i2AvaslewRapbqlHoqzLHCLGvsMzRTolQRmWSYtj0YijwjsN+m CASIM/UaCB2ktUwngcEQPkTlD7tI28L0TfvN5aDwYHgK8+daMpo= -----END CERTIFICATE-----Generated at Fri Sep 25 00:15:28 2026 by rpki-client