$ rpki-client -vvf rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.mft File: A65A7370A28DA71B1C11B89E09D51753C498246D.mft (raw, json) Hash identifier: 4TF4q+/UfddylAbjwJzoNnKxtROEnbkCjxPTC8i71sU= Subject key identifier: F6:65:4D:DF:6C:7C:D0:C9:4C:4B:89:FA:68:9C:CD:2C:46:C6:3A:78 Authority key identifier: A6:5A:73:70:A2:8D:A7:1B:1C:11:B8:9E:09:D5:17:53:C4:98:24:6D Certificate issuer: /CN=A65A7370A28DA71B1C11B89E09D51753C498246D Certificate serial: 5DFA266C7D0974F4525266A5AE55AE03480C0F0E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/A65A7370A28DA71B1C11B89E09D51753C498246D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.mft Manifest number: 0E Signing time: Tue 12 May 2026 05:15:30 +0000 Manifest this update: Tue 12 May 2026 05:10:30 +0000 Manifest next update: Wed 13 May 2026 08:41:30 +0000 Files and hashes: 1: A65A7370A28DA71B1C11B89E09D51753C498246D.crl (hash: Gd39QOT7ztBrFd+gFSDWse3aLk0enI2XBBYEhFcfTRI=) 2: 3135312e3135382e37352e302f32342d3234203d3e20313331343534.roa (hash: Ho6tdl1he9FR1/62MiqnACr306KYnR/YSxoabj/m7M4=) 3: 3135312e3135382e37342e302f32342d3234203d3e20313331343534.roa (hash: yLjPOFhKt4noRbzRL2MIGaluRq2L7M9f6uyh5pKU9Ec=) 4: 3135312e3135382e37342e302f32332d3233203d3e20313331343534.roa (hash: kTQiZ7hK+M7BbCy/GwseyxlIaws4BXvafRAJzzRJxhc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.crl rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/3/A65A7370A28DA71B1C11B89E09D51753C498246D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 08:41:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:fa:26:6c:7d:09:74:f4:52:52:66:a5:ae:55:ae:03:48:0c:0f:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A65A7370A28DA71B1C11B89E09D51753C498246D Validity Not Before: May 12 05:10:30 2026 GMT Not After : May 13 08:41:30 2026 GMT Subject: CN=F6654DDF6C7CD0C94C4B89FA689CCD2C46C63A78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:35:a8:c8:ed:6f:c8:92:07:a0:74:56:f9:0a: 8b:c6:da:5e:77:af:aa:15:92:91:c5:7a:59:d0:9f: cd:41:c4:a9:87:d6:38:3c:54:03:40:71:66:d9:26: f4:f9:ae:ce:99:14:10:44:17:ca:ed:09:5e:f8:de: 83:3c:f6:ea:96:42:6e:64:78:b5:8b:72:10:79:2c: 58:1e:64:2c:5a:77:3a:89:a3:e4:47:a8:71:ea:21: 48:3e:0e:ed:2f:f3:0b:a5:b7:78:74:4a:ad:33:87: 0e:ef:f5:8a:61:70:45:24:be:84:8b:57:ab:3a:2b: 1e:90:5c:ed:ff:ea:1d:f6:58:4b:bd:0f:b7:d1:cb: 89:07:db:9e:0e:f3:62:55:70:40:0f:53:ca:45:0d: bd:45:a5:28:4b:54:6a:eb:11:3b:70:50:13:60:9e: 90:e9:d1:23:91:c3:28:2a:36:8c:c3:5f:23:3f:01: 20:ed:5f:d5:c8:3a:39:2d:3c:22:b8:31:94:f6:11: f0:d7:ff:35:d9:38:7e:7f:5b:27:63:17:05:77:ef: 22:d0:63:b3:30:6e:d3:8d:94:53:bc:cf:ee:80:42: 1d:f5:cc:56:ca:9f:a0:3b:57:04:d4:1b:9e:d0:85: d0:0f:e6:56:7c:b2:d6:95:f4:07:76:97:13:c6:d6: a0:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:65:4D:DF:6C:7C:D0:C9:4C:4B:89:FA:68:9C:CD:2C:46:C6:3A:78 X509v3 Authority Key Identifier: keyid:A6:5A:73:70:A2:8D:A7:1B:1C:11:B8:9E:09:D5:17:53:C4:98:24:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/A65A7370A28DA71B1C11B89E09D51753C498246D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:09:d8:d4:8e:4c:5a:39:2c:da:7e:6d:92:31:5e:50:b7:38: a7:72:b3:d7:0d:50:bb:5d:85:8f:57:38:52:32:1b:5b:6a:5f: bc:d6:d8:e4:3c:d0:bb:e0:fa:cd:74:41:41:13:c5:82:f8:8b: 22:9a:0a:4a:1f:ba:89:99:ec:a2:b8:14:2a:8f:c7:cd:43:52: 1b:86:62:e2:ce:0b:fc:8a:1a:08:13:03:36:a5:66:51:bb:ae: f6:c1:a2:00:1a:8c:2d:e6:6f:78:31:02:9d:1e:67:cc:ce:e2: 60:8e:cb:ff:79:70:1e:4f:40:c0:a4:4b:ee:ae:c2:c6:de:43: cb:04:2d:33:3d:ed:f7:6a:5d:1e:81:22:f3:f0:54:ea:02:6e: 58:af:e7:9f:6a:4c:d1:2f:a4:9c:c9:8f:18:50:77:98:24:a9: 97:5b:57:41:32:20:29:e1:aa:bd:d1:e7:94:2d:1b:f3:1b:79: 1c:45:19:89:67:ce:fa:ea:86:14:cf:62:8e:41:ac:85:ae:47: ed:de:26:23:3e:bb:2c:d8:1a:07:c5:29:1b:31:21:84:4b:74: ab:83:10:9f:a0:be:aa:a7:b5:c7:de:95:a4:6a:14:04:94:3a: 0e:4a:23:5a:2e:b2:e4:1c:69:e4:4e:a6:3e:78:30:11:49:2c: d0:1b:15:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXfombH0JdPRSUmalrlWuA0gMDw4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY1QTczNzBBMjhEQTcxQjFDMTFCODlFMDlENTE3NTND NDk4MjQ2RDAeFw0yNjA1MTIwNTEwMzBaFw0yNjA1MTMwODQxMzBaMDMxMTAvBgNV BAMTKEY2NjU0RERGNkM3Q0QwQzk0QzRCODlGQTY4OUNDRDJDNDZDNjNBNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZNajI7W/IkgegdFb5CovG2l53 r6oVkpHFelnQn81BxKmH1jg8VANAcWbZJvT5rs6ZFBBEF8rtCV743oM89uqWQm5k eLWLchB5LFgeZCxadzqJo+RHqHHqIUg+Du0v8wult3h0Sq0zhw7v9YphcEUkvoSL V6s6Kx6QXO3/6h32WEu9D7fRy4kH254O82JVcEAPU8pFDb1FpShLVGrrETtwUBNg npDp0SORwygqNozDXyM/ASDtX9XIOjktPCK4MZT2EfDX/zXZOH5/WydjFwV37yLQ Y7MwbtONlFO8z+6AQh31zFbKn6A7VwTUG57QhdAP5lZ8staV9Ad2lxPG1qB9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9mVN32x80MlMS4n6aJzNLEbGOngwHwYDVR0j BBgwFoAUplpzcKKNpxscEbieCdUXU8SYJG0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmVmMTZmMzEtNjBjZS00N2E3LWFlOGQtNWEyOGM1MTFjOTQ3LzEvQTY1QTczNzBB MjhEQTcxQjFDMTFCODlFMDlENTE3NTNDNDk4MjQ2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMy9BNjVBNzM3MEEyOERBNzFCMUMxMUI4OUUwOUQ1MTc1M0M0OTgy NDZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmVmMTZmMzEtNjBjZS00N2E3LWFl OGQtNWEyOGM1MTFjOTQ3LzEvQTY1QTczNzBBMjhEQTcxQjFDMTFCODlFMDlENTE3 NTNDNDk4MjQ2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD8J2NSOTFo5LNp+bZIxXlC3OKdys9cNULtd hY9XOFIyG1tqX7zW2OQ80Lvg+s10QUETxYL4iyKaCkofuomZ7KK4FCqPx81DUhuG YuLOC/yKGggTAzalZlG7rvbBogAajC3mb3gxAp0eZ8zO4mCOy/95cB5PQMCkS+6u wsbeQ8sELTM97fdqXR6BIvPwVOoCbliv559qTNEvpJzJjxhQd5gkqZdbV0EyICnh qr3R55QtG/MbeRxFGYlnzvrqhhTPYo5BrIWuR+3eJiM+uyzYGgfFKRsxIYRLdKuD EJ+gvqqntcfelaRqFASUOg5KI1ousuQcaeROpj54MBFJLNAbFUw= -----END CERTIFICATE-----Generated at Wed May 13 02:12:15 2026 by rpki-client