$ rpki-client -vvvf rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/65BD8BDB0F0688479A1741E2BD6624408DA567AB.mft File: 65BD8BDB0F0688479A1741E2BD6624408DA567AB.mft (raw, json) Hash identifier: Y4siMqdYBnbvb9MYOPgpGriX9E8Hsq+UU9wMEKn2oxo= Subject key identifier: 96:70:3A:B2:1A:9B:8B:6B:9E:7B:C5:BF:3D:0B:92:B9:9D:5B:38:74 Authority key identifier: 65:BD:8B:DB:0F:06:88:47:9A:17:41:E2:BD:66:24:40:8D:A5:67:AB Certificate issuer: /CN=65BD8BDB0F0688479A1741E2BD6624408DA567AB Certificate serial: 0CBF983A2784274D103FBDEC4A2325B22C7FAEF4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65BD8BDB0F0688479A1741E2BD6624408DA567AB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/65BD8BDB0F0688479A1741E2BD6624408DA567AB.mft Manifest number: C9 Signing time: Tue 29 Sep 2026 13:36:21 +0000 Manifest this update: Tue 29 Sep 2026 13:31:21 +0000 Manifest next update: Wed 30 Sep 2026 17:09:21 +0000 Files and hashes: 1: 3130332e3138302e35382e302f32332d3233203d3e2039333431.roa (hash: 9g7qK44kNZNkc5s9DYu864dbcgLL2OYqPHQVtd+AZyk=) 2: 3130332e3138302e35392e302f32342d3234203d3e2039333431.roa (hash: syfItM1/yGZojD6BnuWKenSP5tC0UxI22EVXiaCRFHk=) 3: 65BD8BDB0F0688479A1741E2BD6624408DA567AB.crl (hash: EYms00D6PsvP17imYzVNduvJPHbITbbKN9Mq1QWPyeE=) 4: 3130332e3138302e35382e302f32342d3234203d3e2039333431.roa (hash: 0M3/iOLfAX/g/90FmWqP3sssBOdbMngP4uNnmAsUyjY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/65BD8BDB0F0688479A1741E2BD6624408DA567AB.crl rsync://rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/65BD8BDB0F0688479A1741E2BD6624408DA567AB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65BD8BDB0F0688479A1741E2BD6624408DA567AB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 08:29:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:bf:98:3a:27:84:27:4d:10:3f:bd:ec:4a:23:25:b2:2c:7f:ae:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65BD8BDB0F0688479A1741E2BD6624408DA567AB Validity Not Before: Sep 29 13:31:21 2026 GMT Not After : Sep 30 17:09:21 2026 GMT Subject: CN=96703AB21A9B8B6B9E7BC5BF3D0B92B99D5B3874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d2:bc:d0:90:77:f8:19:9a:61:17:13:8c:b7: 69:e8:c4:88:3a:4d:65:c1:b8:c0:5c:5b:d5:6b:aa: 31:bd:d2:ca:62:05:ea:4a:8c:9d:e0:f3:98:93:8a: 91:a1:38:ce:21:a9:5f:48:0a:47:59:d0:d4:f9:34: 5a:df:65:07:22:70:0c:c6:48:cf:30:da:70:d5:94: 87:7a:b4:3b:8d:7d:bc:09:a9:2b:7a:bf:7a:82:b3: 00:ad:68:d1:8d:7d:48:5a:f4:56:96:74:b5:e6:7b: 01:f6:0c:79:df:32:32:03:d1:29:26:5d:0e:27:51: 17:3c:55:fe:28:67:fa:e2:f6:44:7b:78:6c:fa:4c: 8b:d2:53:c1:1e:d2:17:5c:1e:16:bf:32:23:ca:b8: 82:c7:a4:d9:72:f0:c3:38:2f:55:4c:37:99:53:1c: 0e:21:3e:70:29:00:eb:f3:7a:bc:cd:a9:0c:fa:f0: f8:a1:bb:8b:66:72:ef:f7:ba:d8:da:ca:32:b5:7b: 92:fe:46:ac:78:cd:e1:4a:29:ea:f7:42:48:58:f3: 89:48:1c:87:35:9f:77:5f:68:44:f0:7d:6b:ae:e8: 19:44:97:d0:65:fe:06:86:8f:86:78:ee:0e:1d:de: 9a:fd:4e:fa:fa:00:02:3a:48:83:9a:d0:fd:71:08: 2f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:70:3A:B2:1A:9B:8B:6B:9E:7B:C5:BF:3D:0B:92:B9:9D:5B:38:74 X509v3 Authority Key Identifier: keyid:65:BD:8B:DB:0F:06:88:47:9A:17:41:E2:BD:66:24:40:8D:A5:67:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/65BD8BDB0F0688479A1741E2BD6624408DA567AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65BD8BDB0F0688479A1741E2BD6624408DA567AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/65BD8BDB0F0688479A1741E2BD6624408DA567AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:d9:3f:fa:9b:48:84:76:78:f0:43:89:1e:d6:5a:2c:74:c6: e6:3e:48:b7:dc:23:69:26:5a:52:10:0c:cd:85:bc:a1:0c:ab: 25:0e:c9:fa:3c:42:f9:c2:30:d3:8d:b0:15:a4:53:1e:fc:ac: 81:f4:f2:7a:7d:e7:88:29:34:64:b0:ed:fe:5c:c8:02:8d:c0: 52:fd:ec:b0:7d:c9:e9:4b:0b:1a:b0:17:55:84:1b:36:e6:38: ad:72:79:c4:8f:ec:63:d6:d7:aa:b6:1e:38:8d:99:00:34:8a: d7:f8:0a:da:b4:1a:65:4a:8a:08:8e:bf:b9:65:15:99:ea:6f: e4:cc:fa:b9:e3:0e:f0:02:0f:80:fb:f2:85:45:c9:1c:41:d0: d4:43:31:ad:9f:79:8a:5d:20:65:b5:6a:cc:8d:d2:db:00:b4: 20:f6:ee:92:9f:57:b9:f5:48:54:bf:f4:3f:00:64:20:d3:59: 08:ff:68:ce:9e:be:cc:99:71:0c:bc:cc:5d:c5:10:80:18:0f: 50:b2:e2:6a:33:ea:98:c4:cc:5b:8b:b6:f0:02:e7:3e:94:73: c0:b5:5d:fb:75:85:68:4b:3e:44:53:4e:5f:73:25:c5:a3:8b: 62:d6:61:98:92:4f:aa:19:1a:b5:a9:e7:5b:f6:6a:11:21:40: f7:f8:a9:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDL+YOieEJ00QP73sSiMlsix/rvQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVCRDhCREIwRjA2ODg0NzlBMTc0MUUyQkQ2NjI0NDA4 REE1NjdBQjAeFw0yNjA5MjkxMzMxMjFaFw0yNjA5MzAxNzA5MjFaMDMxMTAvBgNV BAMTKDk2NzAzQUIyMUE5QjhCNkI5RTdCQzVCRjNEMEI5MkI5OUQ1QjM4NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+0rzQkHf4GZphFxOMt2noxIg6 TWXBuMBcW9VrqjG90spiBepKjJ3g85iTipGhOM4hqV9ICkdZ0NT5NFrfZQcicAzG SM8w2nDVlId6tDuNfbwJqSt6v3qCswCtaNGNfUha9FaWdLXmewH2DHnfMjID0Skm XQ4nURc8Vf4oZ/ri9kR7eGz6TIvSU8Ee0hdcHha/MiPKuILHpNly8MM4L1VMN5lT HA4hPnApAOvzerzNqQz68Pihu4tmcu/3utjayjK1e5L+Rqx4zeFKKer3QkhY84lI HIc1n3dfaETwfWuu6BlEl9Bl/gaGj4Z47g4d3pr9Tvr6AAI6SIOa0P1xCC8NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlnA6shqbi2uee8W/PQuSuZ1bOHQwHwYDVR0j BBgwFoAUZb2L2w8GiEeaF0HivWYkQI2lZ6swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTcxYTg0N2QtMjUzMS00ZDdmLTkyNDEtOTc3Nzg1MDYwNWQ2LzAvNjVCRDhCREIw RjA2ODg0NzlBMTc0MUUyQkQ2NjI0NDA4REE1NjdBQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NUJEOEJEQjBGMDY4ODQ3OUExNzQxRTJCRDY2MjQ0MDhEQTU2 N0FCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTcxYTg0N2QtMjUzMS00ZDdmLTky NDEtOTc3Nzg1MDYwNWQ2LzAvNjVCRDhCREIwRjA2ODg0NzlBMTc0MUUyQkQ2NjI0 NDA4REE1NjdBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABzZP/qbSIR2ePBDiR7WWix0xuY+SLfcI2km WlIQDM2FvKEMqyUOyfo8QvnCMNONsBWkUx78rIH08np954gpNGSw7f5cyAKNwFL9 7LB9yelLCxqwF1WEGzbmOK1yecSP7GPW16q2HjiNmQA0itf4Ctq0GmVKigiOv7ll FZnqb+TM+rnjDvACD4D78oVFyRxB0NRDMa2feYpdIGW1asyN0tsAtCD27pKfV7n1 SFS/9D8AZCDTWQj/aM6evsyZcQy8zF3FEIAYD1Cy4moz6pjEzFuLtvAC5z6Uc8C1 Xft1hWhLPkRTTl9zJcWji2LWYZiST6oZGrWp51v2ahEhQPf4qas= -----END CERTIFICATE-----Generated at Tue Sep 29 20:23:57 2026 by rpki-client