$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.mft File: 64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.mft (raw, json) Hash identifier: I0vwrlH2S+uVE0Zq7L5Yz0VBMELqMt3MfItwLv1V7S0= Subject key identifier: BC:E2:03:B9:1E:C2:6A:49:76:81:8D:71:5E:C3:E1:11:81:FE:1D:BE Authority key identifier: 64:AD:3F:8A:A2:FE:C3:B3:AE:40:8C:3C:80:95:AA:2A:DC:E9:D1:DC Certificate issuer: /CN=64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC Certificate serial: 7C9F00ED8771E69B0483B0D8809E82B9D24388CB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.mft Manifest number: A7 Signing time: Thu 03 Sep 2026 06:30:43 +0000 Manifest this update: Thu 03 Sep 2026 06:25:43 +0000 Manifest next update: Fri 04 Sep 2026 06:59:43 +0000 Files and hashes: 1: 64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.crl (hash: og5vWfxJ6FNeQboSk/224hPTUcaXRGsmiyb3T5x1pNM=) 2: 3130332e3137352e38322e302f32332d3234203d3e20313338303634.roa (hash: 4mp9oPj+fvhe4l9TyWRWz2Tw0DOZLpJmydY4neUa8S8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.crl rsync://rpki-rsync.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 06:59:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:9f:00:ed:87:71:e6:9b:04:83:b0:d8:80:9e:82:b9:d2:43:88:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC Validity Not Before: Sep 3 06:25:43 2026 GMT Not After : Sep 4 06:59:43 2026 GMT Subject: CN=BCE203B91EC26A4976818D715EC3E11181FE1DBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ec:f7:9c:c4:95:38:5a:c4:bd:96:a2:eb:c8: af:00:b4:31:9f:9e:97:04:27:05:ab:b6:70:c8:98: 48:21:67:48:72:75:99:10:c9:b4:5b:47:84:34:9c: 7f:94:90:34:a0:32:8d:9f:9c:77:95:65:17:00:a9: 5d:74:41:87:fe:d2:d8:c7:1f:1d:29:15:d5:35:00: a8:08:ca:06:78:42:0c:40:47:ab:1e:69:c4:3d:57: 04:27:1f:a5:fe:f0:4b:e6:92:88:bd:f7:ba:11:26: 7c:5a:17:c0:c3:58:74:7d:2b:32:5f:7e:f4:a0:55: db:9f:0c:d9:73:8d:fa:9e:13:da:66:f1:5b:20:a1: 7e:13:29:ac:36:11:7e:2a:d6:2f:65:e2:2c:cc:3f: bb:9f:a8:27:47:bb:4f:df:0e:a4:8b:bd:02:c6:b1: 38:2b:45:b7:ab:c8:a7:3c:d8:9c:6f:cb:09:c4:69: 09:a2:74:54:10:bf:4f:38:33:fc:8f:cf:b3:57:84: 79:3e:38:41:65:95:26:8c:87:e5:a5:a3:ba:80:74: b4:db:de:77:29:66:e1:78:e9:a6:20:82:01:84:e3: 9b:2c:d0:1a:15:09:8d:a4:b8:66:ee:c6:30:00:a6: 01:46:58:28:53:09:03:b6:1b:d0:36:09:82:ba:35: 0c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:E2:03:B9:1E:C2:6A:49:76:81:8D:71:5E:C3:E1:11:81:FE:1D:BE X509v3 Authority Key Identifier: keyid:64:AD:3F:8A:A2:FE:C3:B3:AE:40:8C:3C:80:95:AA:2A:DC:E9:D1:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:1a:3b:82:38:a4:2d:3c:f6:45:98:88:44:6e:95:a0:3d:50: d5:4b:30:70:97:0c:94:82:59:1e:ad:38:f2:8f:c8:f0:7e:89: f3:90:38:18:c5:7e:07:e3:11:e0:d4:7d:ba:59:f4:9a:ec:52: b6:28:e0:5b:80:8d:64:82:57:d6:6e:d9:9a:9a:82:b1:2c:f4: 10:cc:cf:d7:c9:51:54:04:2d:21:06:c6:d1:32:cb:f3:9c:eb: ae:7e:b8:0f:fb:49:a7:bd:29:71:1d:8b:d6:4c:ea:95:f6:e7: 07:ea:5e:f3:62:99:9f:3f:55:c2:66:4f:2d:d5:bb:85:0f:72: a2:16:a1:93:df:61:d0:f2:0a:fb:8f:de:6a:f5:ec:60:27:25: a9:92:3f:aa:7c:3e:08:bd:37:7e:c7:84:71:d4:4d:d5:9d:61: 40:56:81:59:6e:d8:61:c4:ae:34:6e:ed:53:e6:b4:d4:cb:a2: a6:8a:3c:ec:f1:44:63:47:ed:6e:1b:98:15:b5:51:f0:a2:a7: c3:8d:f2:80:d6:ae:9e:30:52:66:dd:2f:a3:90:c5:fd:b0:92: f0:80:2e:2e:74:ea:14:27:c8:b2:db:c9:8b:33:8d:0f:0d:a0: 36:d4:79:23:26:d5:48:fd:4c:26:42:ba:a6:a4:8b:09:36:69: be:d2:c2:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfJ8A7Ydx5psEg7DYgJ6CudJDiMswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRBRDNGOEFBMkZFQzNCM0FFNDA4QzNDODA5NUFBMkFE Q0U5RDFEQzAeFw0yNjA5MDMwNjI1NDNaFw0yNjA5MDQwNjU5NDNaMDMxMTAvBgNV BAMTKEJDRTIwM0I5MUVDMjZBNDk3NjgxOEQ3MTVFQzNFMTExODFGRTFEQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK7PecxJU4WsS9lqLryK8AtDGf npcEJwWrtnDImEghZ0hydZkQybRbR4Q0nH+UkDSgMo2fnHeVZRcAqV10QYf+0tjH Hx0pFdU1AKgIygZ4QgxAR6seacQ9VwQnH6X+8Evmkoi997oRJnxaF8DDWHR9KzJf fvSgVdufDNlzjfqeE9pm8VsgoX4TKaw2EX4q1i9l4izMP7ufqCdHu0/fDqSLvQLG sTgrRberyKc82JxvywnEaQmidFQQv084M/yPz7NXhHk+OEFllSaMh+Wlo7qAdLTb 3ncpZuF46aYgggGE45ss0BoVCY2kuGbuxjAApgFGWChTCQO2G9A2CYK6NQwXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvOIDuR7Cakl2gY1xXsPhEYH+Hb4wHwYDVR0j BBgwFoAUZK0/iqL+w7OuQIw8gJWqKtzp0dwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmNhNTQ3ODEtOTY3OC00NzVjLWFjMWItY2Q0YmZjZjVkMGVhLzAvNjRBRDNGOEFB MkZFQzNCM0FFNDA4QzNDODA5NUFBMkFEQ0U5RDFEQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NEFEM0Y4QUEyRkVDM0IzQUU0MDhDM0M4MDk1QUEyQURDRTlE MURDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmNhNTQ3ODEtOTY3OC00NzVjLWFj MWItY2Q0YmZjZjVkMGVhLzAvNjRBRDNGOEFBMkZFQzNCM0FFNDA4QzNDODA5NUFB MkFEQ0U5RDFEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFsaO4I4pC089kWYiERulaA9UNVLMHCXDJSC WR6tOPKPyPB+ifOQOBjFfgfjEeDUfbpZ9JrsUrYo4FuAjWSCV9Zu2ZqagrEs9BDM z9fJUVQELSEGxtEyy/Oc665+uA/7Sae9KXEdi9ZM6pX25wfqXvNimZ8/VcJmTy3V u4UPcqIWoZPfYdDyCvuP3mr17GAnJamSP6p8Pgi9N37HhHHUTdWdYUBWgVlu2GHE rjRu7VPmtNTLoqaKPOzxRGNH7W4bmBW1UfCip8ON8oDWrp4wUmbdL6OQxf2wkvCA Li506hQnyLLbyYszjQ8NoDbUeSMm1Uj9TCZCuqakiwk2ab7Swtg= -----END CERTIFICATE-----Generated at Thu Sep 3 12:34:58 2026 by rpki-client