$ rpki-client -vvf rpki-rsync.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.mft File: 64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.mft (raw, json) Hash identifier: 2/DjvTXvCC3zB7FiigwOMzBYIHl2z6ertvrmtr9xu7A= Subject key identifier: 35:33:ED:0E:9F:AD:10:EB:FC:6B:D8:6F:7B:31:86:5D:B9:E6:BB:E4 Authority key identifier: 64:AD:3F:8A:A2:FE:C3:B3:AE:40:8C:3C:80:95:AA:2A:DC:E9:D1:DC Certificate issuer: /CN=64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC Certificate serial: 71E405E0E933B1216248E21E5C7B7223309F2DE8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.mft Manifest number: 0E Signing time: Tue 12 May 2026 04:24:15 +0000 Manifest this update: Tue 12 May 2026 04:19:15 +0000 Manifest next update: Wed 13 May 2026 05:11:15 +0000 Files and hashes: 1: 3130332e3137352e38322e302f32332d3234203d3e20313338303634.roa (hash: 4mp9oPj+fvhe4l9TyWRWz2Tw0DOZLpJmydY4neUa8S8=) 2: 64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.crl (hash: 9bnjh5Q7Eeid3rZ0ZWICRfKoux8tTd1tVj0a1m39IDU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.crl rsync://rpki-rsync.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 05:11:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:e4:05:e0:e9:33:b1:21:62:48:e2:1e:5c:7b:72:23:30:9f:2d:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC Validity Not Before: May 12 04:19:15 2026 GMT Not After : May 13 05:11:15 2026 GMT Subject: CN=3533ED0E9FAD10EBFC6BD86F7B31865DB9E6BBE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:70:7a:fd:64:55:bc:51:89:a2:67:4b:57:4d: 64:8b:09:67:2a:6d:20:53:bc:d9:5f:19:83:87:8c: 22:40:4a:11:5b:1c:a4:a8:30:ae:ce:a5:49:1b:b0: 43:3f:8a:61:29:48:7d:a9:73:6d:25:1a:a2:d2:76: 00:ef:24:c4:b8:40:c1:d3:7c:29:6c:ed:95:e3:23: 93:82:c5:67:32:33:a6:94:77:30:3f:27:50:7f:e6: 56:66:ad:b5:48:35:12:30:bf:0a:03:60:0c:b0:28: bd:fc:32:14:9a:4c:34:7f:ba:77:f0:31:83:48:01: e1:96:c4:e4:1c:e4:d1:78:db:98:09:c3:57:1c:88: 34:ee:1c:bf:5e:e6:8e:8e:44:75:47:a1:b4:57:4f: fd:f9:1f:5e:b7:0e:f7:76:64:3e:d5:c8:82:e3:a4: ee:ac:8d:55:5d:27:b1:ba:e0:01:43:32:c9:21:28: be:29:12:74:fb:7e:60:12:0c:ea:92:3d:0e:f1:3f: fb:c0:e6:9e:c1:66:15:90:77:a1:94:8e:b2:f0:c6: 2d:19:b0:16:af:cd:af:34:b4:c9:1c:e0:90:0f:69: 55:4b:67:a2:be:26:70:e8:c6:48:a1:bc:71:05:2a: a2:68:27:78:70:24:d6:10:a6:f4:b0:e9:ac:7a:86: 58:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:33:ED:0E:9F:AD:10:EB:FC:6B:D8:6F:7B:31:86:5D:B9:E6:BB:E4 X509v3 Authority Key Identifier: keyid:64:AD:3F:8A:A2:FE:C3:B3:AE:40:8C:3C:80:95:AA:2A:DC:E9:D1:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:4f:95:d8:16:cc:21:11:2b:20:7e:bd:64:d0:1b:6b:4d:49: ce:d8:0b:d1:76:7b:09:16:a8:2d:eb:83:ab:23:d8:6a:d0:82: 47:c3:31:38:e7:7f:7e:e8:95:5d:90:ee:84:dc:52:03:dc:2c: fc:d2:f5:ef:dc:37:39:5c:56:c3:36:3e:26:49:5a:cb:63:51: f9:8b:92:3a:a9:3e:43:e4:45:27:84:2d:0e:70:f0:01:f5:fb: 87:fb:3b:b2:76:7d:39:96:d1:26:00:3e:09:ac:87:7c:b8:5f: 69:25:3d:a8:6b:b1:58:40:af:78:98:af:2c:c4:9a:2a:b5:ce: e1:48:89:b3:69:54:81:64:39:f2:bd:ec:39:06:52:59:b6:9c: e8:ed:68:8d:47:ff:b2:f2:13:4a:de:4b:cb:83:aa:1f:05:27: b7:7f:61:c0:95:f0:46:d6:2f:bf:38:68:ba:4f:be:60:b1:fc: 06:32:17:37:78:d2:01:cb:12:2f:87:61:d4:21:a5:cf:61:d7: 4d:e7:11:9c:56:72:a4:e4:31:d4:3c:c6:ce:0a:e5:d4:22:4e: 6e:e9:4b:76:5f:c5:09:f8:e1:31:c5:2f:ff:e5:39:9c:62:01: 40:c9:bf:69:d7:fc:30:48:28:ce:9c:0b:84:e6:fd:cc:de:35: b1:97:86:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUceQF4OkzsSFiSOIeXHtyIzCfLegwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRBRDNGOEFBMkZFQzNCM0FFNDA4QzNDODA5NUFBMkFE Q0U5RDFEQzAeFw0yNjA1MTIwNDE5MTVaFw0yNjA1MTMwNTExMTVaMDMxMTAvBgNV BAMTKDM1MzNFRDBFOUZBRDEwRUJGQzZCRDg2RjdCMzE4NjVEQjlFNkJCRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3cHr9ZFW8UYmiZ0tXTWSLCWcq bSBTvNlfGYOHjCJAShFbHKSoMK7OpUkbsEM/imEpSH2pc20lGqLSdgDvJMS4QMHT fCls7ZXjI5OCxWcyM6aUdzA/J1B/5lZmrbVINRIwvwoDYAywKL38MhSaTDR/unfw MYNIAeGWxOQc5NF425gJw1cciDTuHL9e5o6ORHVHobRXT/35H163Dvd2ZD7VyILj pO6sjVVdJ7G64AFDMskhKL4pEnT7fmASDOqSPQ7xP/vA5p7BZhWQd6GUjrLwxi0Z sBavza80tMkc4JAPaVVLZ6K+JnDoxkihvHEFKqJoJ3hwJNYQpvSw6ax6hli5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNTPtDp+tEOv8a9hvezGGXbnmu+QwHwYDVR0j BBgwFoAUZK0/iqL+w7OuQIw8gJWqKtzp0dwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmNhNTQ3ODEtOTY3OC00NzVjLWFjMWItY2Q0YmZjZjVkMGVhLzAvNjRBRDNGOEFB MkZFQzNCM0FFNDA4QzNDODA5NUFBMkFEQ0U5RDFEQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NEFEM0Y4QUEyRkVDM0IzQUU0MDhDM0M4MDk1QUEyQURDRTlE MURDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmNhNTQ3ODEtOTY3OC00NzVjLWFj MWItY2Q0YmZjZjVkMGVhLzAvNjRBRDNGOEFBMkZFQzNCM0FFNDA4QzNDODA5NUFB MkFEQ0U5RDFEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADtPldgWzCERKyB+vWTQG2tNSc7YC9F2ewkW qC3rg6sj2GrQgkfDMTjnf37olV2Q7oTcUgPcLPzS9e/cNzlcVsM2PiZJWstjUfmL kjqpPkPkRSeELQ5w8AH1+4f7O7J2fTmW0SYAPgmsh3y4X2klPahrsVhAr3iYryzE miq1zuFIibNpVIFkOfK97DkGUlm2nOjtaI1H/7LyE0reS8uDqh8FJ7d/YcCV8EbW L784aLpPvmCx/AYyFzd40gHLEi+HYdQhpc9h103nEZxWcqTkMdQ8xs4K5dQiTm7p S3ZfxQn44THFL//lOZxiAUDJv2nX/DBIKM6cC4Tm/czeNbGXhrM= -----END CERTIFICATE-----Generated at Tue May 12 22:39:44 2026 by rpki-client