$ rpki-client -vvf rpki-rsync.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.mft File: 64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.mft (raw, json) Hash identifier: 1YBEKuGXClDnO+JBaEZuhwkO5mw1/nt2BOBYb23ZF38= Subject key identifier: 75:AF:0E:F3:A1:4F:A9:BD:03:2C:5A:03:92:22:0F:8C:5C:76:4D:EE Authority key identifier: 64:AD:3F:8A:A2:FE:C3:B3:AE:40:8C:3C:80:95:AA:2A:DC:E9:D1:DC Certificate issuer: /CN=64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC Certificate serial: 7935FA2751FF52A73CD22F815CCB759FD336BB38 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 18:12:00 +0000 Manifest this update: Tue 02 Jun 2026 18:07:00 +0000 Manifest next update: Wed 03 Jun 2026 21:53:00 +0000 Files and hashes: 1: 3130332e3137352e38322e302f32332d3234203d3e20313338303634.roa (hash: 4mp9oPj+fvhe4l9TyWRWz2Tw0DOZLpJmydY4neUa8S8=) 2: 64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.crl (hash: JeOAsLIaZf4xjbuGYL43xW55XQ+1Ty7CPLj0QCvXKSE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.crl rsync://rpki-rsync.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 21:53:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:35:fa:27:51:ff:52:a7:3c:d2:2f:81:5c:cb:75:9f:d3:36:bb:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC Validity Not Before: Jun 2 18:07:00 2026 GMT Not After : Jun 3 21:53:00 2026 GMT Subject: CN=75AF0EF3A14FA9BD032C5A0392220F8C5C764DEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ab:4c:87:4e:41:f6:c1:cd:9d:6a:0b:04:b1: c2:09:fd:ca:51:65:27:9b:e0:28:6c:60:65:8c:4e: 92:39:cb:cb:68:99:9f:a4:a4:f7:fa:86:79:dc:6a: a2:b3:8b:65:c0:fe:61:80:45:c2:2a:2b:95:42:da: ab:c8:b2:ab:0f:c8:1d:6d:94:b9:51:8d:7e:25:aa: c1:b5:76:c1:2f:8d:b1:ab:db:f5:f1:da:46:5a:d0: e1:14:bf:19:7a:d0:89:ce:07:78:62:87:d9:1d:ed: e0:c4:b9:31:e0:fc:79:08:c1:a6:11:e6:fb:db:14: 54:ff:f0:16:da:79:e6:46:5b:52:0c:62:74:c4:5b: cb:15:5d:7a:92:a8:dd:5a:ab:5a:21:88:b4:3c:1f: 0f:83:92:e7:0a:34:3e:6d:d8:44:b4:c7:eb:f0:07: 56:82:6e:8e:a8:de:e8:e5:4b:97:69:ff:3a:4a:f5: 0d:11:e9:c2:84:84:36:65:f3:62:b9:99:fa:d8:bb: 67:ff:b9:26:d5:c8:c7:78:ad:c2:c4:12:4e:b5:b9: bd:e4:55:fa:81:85:ce:95:b1:fc:66:8f:53:d0:ee: 1e:81:62:e1:b9:93:f1:42:0b:f8:ed:97:40:93:85: 27:25:47:4b:45:a8:1f:4e:2c:23:dc:d9:e2:c6:ed: 8d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:AF:0E:F3:A1:4F:A9:BD:03:2C:5A:03:92:22:0F:8C:5C:76:4D:EE X509v3 Authority Key Identifier: keyid:64:AD:3F:8A:A2:FE:C3:B3:AE:40:8C:3C:80:95:AA:2A:DC:E9:D1:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/64AD3F8AA2FEC3B3AE408C3C8095AA2ADCE9D1DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:1c:ac:80:ed:d1:a9:78:56:38:40:92:63:f4:76:79:67:df: be:e7:c0:ef:79:4d:d2:64:f9:80:73:3b:e6:9c:05:d6:5f:31: 5e:c7:7d:ad:b4:d1:6d:22:3b:ac:6f:63:1c:14:31:f0:4f:06: 53:42:07:82:82:27:fd:31:3b:8a:b7:88:f8:73:39:e1:b8:66: 7a:e9:94:74:91:7b:01:5e:7d:e4:a2:07:27:ce:ac:58:38:7a: 11:75:7f:c4:9e:47:7a:85:df:79:d1:8b:b8:a2:90:f0:d6:3f: 34:1d:95:ea:45:a3:85:83:4c:a8:b0:f8:c4:42:4f:13:9c:df: 55:fe:87:e8:eb:ec:87:a3:70:c6:87:48:51:dc:36:f1:e3:fb: 9a:7a:bf:f4:2c:63:96:b0:4b:3b:91:11:12:76:0b:05:94:b6: 76:91:56:b6:92:76:60:49:91:ed:92:0f:3c:0c:0d:64:ad:fd: 69:3e:53:c6:fd:0d:9c:b4:cc:8c:93:cc:61:a6:8b:c9:b8:65: 70:e7:ab:59:56:13:d9:fd:34:63:22:b4:c7:45:21:81:8f:2e: e8:ed:36:2c:87:c1:aa:d1:c9:13:2b:eb:56:98:f7:2e:d8:9e: 6a:a5:4e:79:22:7c:df:f0:c6:cc:cb:38:bf:44:b9:3e:bd:32: be:cd:b0:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeTX6J1H/Uqc80i+BXMt1n9M2uzgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRBRDNGOEFBMkZFQzNCM0FFNDA4QzNDODA5NUFBMkFE Q0U5RDFEQzAeFw0yNjA2MDIxODA3MDBaFw0yNjA2MDMyMTUzMDBaMDMxMTAvBgNV BAMTKDc1QUYwRUYzQTE0RkE5QkQwMzJDNUEwMzkyMjIwRjhDNUM3NjRERUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrq0yHTkH2wc2dagsEscIJ/cpR ZSeb4ChsYGWMTpI5y8tomZ+kpPf6hnncaqKzi2XA/mGARcIqK5VC2qvIsqsPyB1t lLlRjX4lqsG1dsEvjbGr2/Xx2kZa0OEUvxl60InOB3hih9kd7eDEuTHg/HkIwaYR 5vvbFFT/8BbaeeZGW1IMYnTEW8sVXXqSqN1aq1ohiLQ8Hw+DkucKND5t2ES0x+vw B1aCbo6o3ujlS5dp/zpK9Q0R6cKEhDZl82K5mfrYu2f/uSbVyMd4rcLEEk61ub3k VfqBhc6Vsfxmj1PQ7h6BYuG5k/FCC/jtl0CThSclR0tFqB9OLCPc2eLG7Y2jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUda8O86FPqb0DLFoDkiIPjFx2Te4wHwYDVR0j BBgwFoAUZK0/iqL+w7OuQIw8gJWqKtzp0dwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmNhNTQ3ODEtOTY3OC00NzVjLWFjMWItY2Q0YmZjZjVkMGVhLzAvNjRBRDNGOEFB MkZFQzNCM0FFNDA4QzNDODA5NUFBMkFEQ0U5RDFEQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NEFEM0Y4QUEyRkVDM0IzQUU0MDhDM0M4MDk1QUEyQURDRTlE MURDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmNhNTQ3ODEtOTY3OC00NzVjLWFj MWItY2Q0YmZjZjVkMGVhLzAvNjRBRDNGOEFBMkZFQzNCM0FFNDA4QzNDODA5NUFB MkFEQ0U5RDFEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD0crIDt0al4VjhAkmP0dnln377nwO95TdJk +YBzO+acBdZfMV7Hfa200W0iO6xvYxwUMfBPBlNCB4KCJ/0xO4q3iPhzOeG4Znrp lHSRewFefeSiByfOrFg4ehF1f8SeR3qF33nRi7iikPDWPzQdlepFo4WDTKiw+MRC TxOc31X+h+jr7IejcMaHSFHcNvHj+5p6v/QsY5awSzuRERJ2CwWUtnaRVraSdmBJ ke2SDzwMDWSt/Wk+U8b9DZy0zIyTzGGmi8m4ZXDnq1lWE9n9NGMitMdFIYGPLujt NiyHwarRyRMr61aY9y7YnmqlTnkifN/wxszLOL9EuT69Mr7NsMc= -----END CERTIFICATE-----Generated at Wed Jun 3 04:11:40 2026 by rpki-client