$ rpki-client -vvf rpki-rsync.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.mft File: 64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.mft (raw, json) Hash identifier: UWaM9AnxUX6gpbNJ2kxAWcNZwMSyCZU5v5+bmQTHgd8= Subject key identifier: AC:8B:87:E5:BB:0B:11:CE:15:E1:02:17:47:14:74:1F:F2:8C:C8:99 Authority key identifier: 64:AD:3F:8A:A2:FE:C3:B3:AE:40:8C:3C:80:95:AA:2A:DC:E9:D1:DC Certificate issuer: /CN=64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC Certificate serial: 4604399FB6C67C7BE1C7A4F9FCB86AD63392C50F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.mft Manifest number: 70 Signing time: Thu 23 Jul 2026 22:57:53 +0000 Manifest this update: Thu 23 Jul 2026 22:52:53 +0000 Manifest next update: Fri 24 Jul 2026 23:18:53 +0000 Files and hashes: 1: 64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.crl (hash: 3mBsqpqW5M6Hz3Mwl0QcBG+1CGjXapnQJjVdPjatMjc=) 2: 3130332e3137352e38322e302f32332d3234203d3e20313338303634.roa (hash: 4mp9oPj+fvhe4l9TyWRWz2Tw0DOZLpJmydY4neUa8S8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.crl rsync://rpki-rsync.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 23:18:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:04:39:9f:b6:c6:7c:7b:e1:c7:a4:f9:fc:b8:6a:d6:33:92:c5:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC Validity Not Before: Jul 23 22:52:53 2026 GMT Not After : Jul 24 23:18:53 2026 GMT Subject: CN=AC8B87E5BB0B11CE15E102174714741FF28CC899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:95:55:2f:72:dd:9b:1e:60:6c:3d:32:7c:a8: 8d:d8:b9:75:d2:c4:c9:b3:37:bc:2e:1b:43:8e:b4: 6b:88:b8:c8:65:1e:55:15:ea:48:ba:9b:4f:e7:94: a6:83:06:7e:17:e8:27:00:26:0f:57:00:2f:1a:87: 6f:9c:c9:a0:04:f9:61:1b:dd:48:17:0d:fe:34:5a: cd:9f:cd:8f:26:95:15:3f:60:b1:fd:25:0e:10:92: 3a:d2:da:5a:17:cf:e9:8e:50:5d:19:24:9b:b2:92: ad:ef:71:b9:fb:99:60:57:47:ee:9e:8c:fe:3e:f8: 00:26:dd:93:7b:90:1b:07:67:15:3b:51:c8:d7:9c: c7:18:4b:81:9f:c3:db:88:4f:97:07:bc:d7:ee:38: fe:c0:0c:d6:ef:1f:f1:fa:d8:99:c3:9d:ab:c1:a5: 72:51:f9:ce:d6:e8:e9:fb:5d:b3:40:2b:aa:ff:93: 14:58:df:1d:49:9b:16:cb:4c:17:2e:e8:51:2f:88: 2d:5e:c3:f7:3d:64:02:4f:1f:42:b2:6d:2c:27:fb: c4:a9:ca:29:9a:c7:33:80:d1:9b:3d:bd:d4:38:58: 00:3a:e2:96:3e:1b:8b:5f:8a:1b:ed:81:59:06:15: 64:c5:76:46:c2:37:20:d1:35:f6:88:4a:ec:f0:80: 86:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:8B:87:E5:BB:0B:11:CE:15:E1:02:17:47:14:74:1F:F2:8C:C8:99 X509v3 Authority Key Identifier: keyid:64:AD:3F:8A:A2:FE:C3:B3:AE:40:8C:3C:80:95:AA:2A:DC:E9:D1:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:83:5b:81:d5:37:7e:9c:0c:16:eb:ee:8e:b9:e8:4f:bd:44: 2c:8f:38:21:42:bc:02:3c:01:4e:a9:ef:f6:61:c5:ca:a6:92: f8:d7:d7:5a:57:44:5a:de:0e:82:88:58:90:96:6c:77:ac:66: 22:e6:78:23:b6:2f:fc:ca:13:2d:b1:2e:dc:88:47:86:61:3c: 54:c7:ef:3b:80:85:59:54:d7:31:53:5b:fd:38:51:7c:36:aa: 2b:76:a6:ab:82:05:e6:8d:1d:c1:a9:32:5d:1e:59:95:75:be: 3f:6e:16:6d:f1:d4:2f:ed:1a:f1:5e:06:9e:06:95:25:1b:02: 7d:76:91:5b:32:d9:68:a3:ef:75:08:7a:04:2d:64:11:4c:07: 96:f5:b8:16:40:6f:6a:7a:ac:19:59:78:c8:38:2e:b4:2e:d3: 22:2a:37:ca:4f:02:84:df:3e:d8:8c:f9:65:20:b1:59:20:85: 67:b8:d8:e5:e6:b0:c6:89:34:ce:74:d3:18:2b:e9:43:7d:0a: e7:15:6a:dd:b2:36:d8:fd:26:22:bd:1f:61:fb:5a:bc:4f:e7: 20:1e:e8:f2:4c:e9:bc:71:47:f1:f9:07:65:94:dd:d3:98:ba: 07:90:67:58:18:c2:74:2e:ac:11:c9:58:48:c0:2e:08:dc:8f: 24:3d:05:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURgQ5n7bGfHvhx6T5/Lhq1jOSxQ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRBRDNGOEFBMkZFQzNCM0FFNDA4QzNDODA5NUFBMkFE Q0U5RDFEQzAeFw0yNjA3MjMyMjUyNTNaFw0yNjA3MjQyMzE4NTNaMDMxMTAvBgNV BAMTKEFDOEI4N0U1QkIwQjExQ0UxNUUxMDIxNzQ3MTQ3NDFGRjI4Q0M4OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrlVUvct2bHmBsPTJ8qI3YuXXS xMmzN7wuG0OOtGuIuMhlHlUV6ki6m0/nlKaDBn4X6CcAJg9XAC8ah2+cyaAE+WEb 3UgXDf40Ws2fzY8mlRU/YLH9JQ4QkjrS2loXz+mOUF0ZJJuykq3vcbn7mWBXR+6e jP4++AAm3ZN7kBsHZxU7UcjXnMcYS4Gfw9uIT5cHvNfuOP7ADNbvH/H62JnDnavB pXJR+c7W6On7XbNAK6r/kxRY3x1JmxbLTBcu6FEviC1ew/c9ZAJPH0KybSwn+8Sp yimaxzOA0Zs9vdQ4WAA64pY+G4tfihvtgVkGFWTFdkbCNyDRNfaISuzwgIanAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrIuH5bsLEc4V4QIXRxR0H/KMyJkwHwYDVR0j BBgwFoAUZK0/iqL+w7OuQIw8gJWqKtzp0dwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmNhNTQ3ODEtOTY3OC00NzVjLWFjMWItY2Q0YmZjZjVkMGVhLzAvNjRBRDNGOEFB MkZFQzNCM0FFNDA4QzNDODA5NUFBMkFEQ0U5RDFEQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NEFEM0Y4QUEyRkVDM0IzQUU0MDhDM0M4MDk1QUEyQURDRTlE MURDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmNhNTQ3ODEtOTY3OC00NzVjLWFj MWItY2Q0YmZjZjVkMGVhLzAvNjRBRDNGOEFBMkZFQzNCM0FFNDA4QzNDODA5NUFB MkFEQ0U5RDFEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALGDW4HVN36cDBbr7o656E+9RCyPOCFCvAI8 AU6p7/ZhxcqmkvjX11pXRFreDoKIWJCWbHesZiLmeCO2L/zKEy2xLtyIR4ZhPFTH 7zuAhVlU1zFTW/04UXw2qit2pquCBeaNHcGpMl0eWZV1vj9uFm3x1C/tGvFeBp4G lSUbAn12kVsy2Wij73UIegQtZBFMB5b1uBZAb2p6rBlZeMg4LrQu0yIqN8pPAoTf PtiM+WUgsVkghWe42OXmsMaJNM500xgr6UN9CucVat2yNtj9JiK9H2H7WrxP5yAe 6PJM6bxxR/H5B2WU3dOYugeQZ1gYwnQurBHJWEjALgjcjyQ9BRM= -----END CERTIFICATE-----Generated at Fri Jul 24 02:31:03 2026 by rpki-client