$ rpki-client -vvf rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/65BD8BDB0F0688479A1741E2BD6624408DA567AB.mft File: 65BD8BDB0F0688479A1741E2BD6624408DA567AB.mft (raw, json) Hash identifier: EIA35DqJn2dxKVfPsx+IB2Cvkail8BJv3IrP8I2Q6wI= Subject key identifier: A0:C7:9B:6D:1B:FD:76:89:46:06:23:1D:DB:9C:A2:75:DE:D5:50:F6 Authority key identifier: 65:BD:8B:DB:0F:06:88:47:9A:17:41:E2:BD:66:24:40:8D:A5:67:AB Certificate issuer: /CN=65BD8BDB0F0688479A1741E2BD6624408DA567AB Certificate serial: 335F46B608AE36424C34570F07CA3B53CE76C0C6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65BD8BDB0F0688479A1741E2BD6624408DA567AB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/65BD8BDB0F0688479A1741E2BD6624408DA567AB.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:20:09 +0000 Manifest this update: Tue 12 May 2026 19:15:09 +0000 Manifest next update: Wed 13 May 2026 21:20:09 +0000 Files and hashes: 1: 3130332e3138302e35392e302f32342d3234203d3e2039333431.roa (hash: syfItM1/yGZojD6BnuWKenSP5tC0UxI22EVXiaCRFHk=) 2: 65BD8BDB0F0688479A1741E2BD6624408DA567AB.crl (hash: ffq4Kwe6zz0tmh+oZT0cIZMg1oYoieu8Vo89mbespkY=) 3: 3130332e3138302e35382e302f32332d3233203d3e2039333431.roa (hash: 9g7qK44kNZNkc5s9DYu864dbcgLL2OYqPHQVtd+AZyk=) 4: 3130332e3138302e35382e302f32342d3234203d3e2039333431.roa (hash: 0M3/iOLfAX/g/90FmWqP3sssBOdbMngP4uNnmAsUyjY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/65BD8BDB0F0688479A1741E2BD6624408DA567AB.crl rsync://rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/65BD8BDB0F0688479A1741E2BD6624408DA567AB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65BD8BDB0F0688479A1741E2BD6624408DA567AB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:20:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:5f:46:b6:08:ae:36:42:4c:34:57:0f:07:ca:3b:53:ce:76:c0:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65BD8BDB0F0688479A1741E2BD6624408DA567AB Validity Not Before: May 12 19:15:09 2026 GMT Not After : May 13 21:20:09 2026 GMT Subject: CN=A0C79B6D1BFD76894606231DDB9CA275DED550F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:97:46:95:43:e1:4d:c5:e3:89:d8:0f:19:0f: d8:d9:4e:e6:f4:17:da:61:22:0e:07:5d:47:6d:0b: 1c:21:55:bd:d6:5b:8c:4a:2d:c7:5a:86:57:ea:47: 33:c5:37:ff:25:12:e2:1b:ea:c0:c4:60:5a:4e:c2: e1:08:61:72:7d:c6:93:c6:a9:e0:22:70:f3:82:a3: 46:9b:6e:d1:a4:85:00:00:9b:d3:e2:f4:67:83:e6: 76:33:28:31:94:51:ee:7c:50:5c:3d:02:36:ce:73: de:6e:b2:dd:4a:8a:1c:26:74:e8:4a:ae:f9:74:96: 9c:ae:5d:10:62:6a:7e:c4:3c:07:03:18:94:26:2a: a3:e5:a8:75:33:e3:2b:31:67:47:5d:e5:b0:5e:98: 7c:14:9b:12:c9:c7:0e:ff:e9:08:b6:94:1b:e3:ff: ec:89:9c:11:39:4d:f8:41:4b:4a:8b:e9:b5:20:51: ac:f5:8c:35:62:ea:76:8b:28:60:f1:58:0f:50:ef: fb:e5:4a:8c:65:4a:cb:65:56:05:fd:4d:57:3d:f6: 1d:62:20:cc:79:5f:59:cf:db:b0:7a:b9:d2:4d:3e: d4:02:25:4a:22:97:3f:1b:e0:b2:8c:a1:44:49:d0: 15:eb:c4:d9:a1:f1:de:2d:4d:f5:e2:a0:2a:52:a6: 1c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:C7:9B:6D:1B:FD:76:89:46:06:23:1D:DB:9C:A2:75:DE:D5:50:F6 X509v3 Authority Key Identifier: keyid:65:BD:8B:DB:0F:06:88:47:9A:17:41:E2:BD:66:24:40:8D:A5:67:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/65BD8BDB0F0688479A1741E2BD6624408DA567AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65BD8BDB0F0688479A1741E2BD6624408DA567AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/65BD8BDB0F0688479A1741E2BD6624408DA567AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:e9:aa:10:dd:39:bf:90:4f:75:4a:cd:0d:7e:49:a8:fd:ec: 5d:e2:51:38:7e:c2:a6:7d:fa:12:60:c7:78:f0:47:2b:42:f7: 7e:ab:59:a6:8e:68:2a:10:ba:ba:cd:ac:d5:d0:60:51:c5:62: 04:d9:b1:6c:65:9d:20:c8:b5:be:0d:94:7f:90:ae:31:81:20: 1e:88:22:fa:24:56:56:b3:c1:44:28:2e:a9:d1:b7:72:92:1f: 53:3c:19:4a:dd:31:ec:20:ad:c4:42:71:85:ca:f8:f1:fd:2c: 31:0f:b4:e0:84:42:5c:b2:02:eb:98:4a:ae:40:6d:a0:cb:81: a9:38:90:48:98:bc:72:73:cd:e7:a3:42:e8:01:8b:6e:41:00: cf:ff:d0:28:3b:f0:67:7d:07:b8:b0:f9:1f:97:ae:84:57:31: f2:83:eb:30:bd:b0:20:ac:ad:6b:11:07:92:95:c8:e8:cf:80: be:35:01:63:2e:34:41:94:8c:9b:e4:e0:f3:e6:ac:57:c5:9e: 1f:35:c6:fe:fd:d2:c7:55:9c:43:18:13:bc:1f:dd:c4:8e:b8: f9:1c:71:0a:4f:90:f0:ec:82:c0:75:74:9e:59:dd:c7:16:ba: fd:42:2c:a2:ed:2e:29:6c:39:91:af:02:f8:26:20:13:7d:de: 5b:1f:cf:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM19GtgiuNkJMNFcPB8o7U852wMYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVCRDhCREIwRjA2ODg0NzlBMTc0MUUyQkQ2NjI0NDA4 REE1NjdBQjAeFw0yNjA1MTIxOTE1MDlaFw0yNjA1MTMyMTIwMDlaMDMxMTAvBgNV BAMTKEEwQzc5QjZEMUJGRDc2ODk0NjA2MjMxRERCOUNBMjc1REVENTUwRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4l0aVQ+FNxeOJ2A8ZD9jZTub0 F9phIg4HXUdtCxwhVb3WW4xKLcdahlfqRzPFN/8lEuIb6sDEYFpOwuEIYXJ9xpPG qeAicPOCo0abbtGkhQAAm9Pi9GeD5nYzKDGUUe58UFw9AjbOc95ust1KihwmdOhK rvl0lpyuXRBian7EPAcDGJQmKqPlqHUz4ysxZ0dd5bBemHwUmxLJxw7/6Qi2lBvj /+yJnBE5TfhBS0qL6bUgUaz1jDVi6naLKGDxWA9Q7/vlSoxlSstlVgX9TVc99h1i IMx5X1nP27B6udJNPtQCJUoilz8b4LKMoURJ0BXrxNmh8d4tTfXioCpSphy3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoMebbRv9dolGBiMd25yidd7VUPYwHwYDVR0j BBgwFoAUZb2L2w8GiEeaF0HivWYkQI2lZ6swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTcxYTg0N2QtMjUzMS00ZDdmLTkyNDEtOTc3Nzg1MDYwNWQ2LzAvNjVCRDhCREIw RjA2ODg0NzlBMTc0MUUyQkQ2NjI0NDA4REE1NjdBQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NUJEOEJEQjBGMDY4ODQ3OUExNzQxRTJCRDY2MjQ0MDhEQTU2 N0FCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTcxYTg0N2QtMjUzMS00ZDdmLTky NDEtOTc3Nzg1MDYwNWQ2LzAvNjVCRDhCREIwRjA2ODg0NzlBMTc0MUUyQkQ2NjI0 NDA4REE1NjdBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJDpqhDdOb+QT3VKzQ1+Saj97F3iUTh+wqZ9 +hJgx3jwRytC936rWaaOaCoQurrNrNXQYFHFYgTZsWxlnSDItb4NlH+QrjGBIB6I IvokVlazwUQoLqnRt3KSH1M8GUrdMewgrcRCcYXK+PH9LDEPtOCEQlyyAuuYSq5A baDLgak4kEiYvHJzzeejQugBi25BAM//0Cg78Gd9B7iw+R+XroRXMfKD6zC9sCCs rWsRB5KVyOjPgL41AWMuNEGUjJvk4PPmrFfFnh81xv790sdVnEMYE7wf3cSOuPkc cQpPkPDsgsB1dJ5Z3ccWuv1CLKLtLilsOZGvAvgmIBN93lsfz94= -----END CERTIFICATE-----Generated at Wed May 13 12:06:41 2026 by rpki-client