$ rpki-client -vvf rpki-rsync.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/65177A3236E4CDE9DEABA6D24D81798C0342B359.mft File: 65177A3236E4CDE9DEABA6D24D81798C0342B359.mft (raw, json) Hash identifier: URBy99Ja+ArBUWdflt8WXRcr/zLP85BMu21t7PIUrK4= Subject key identifier: 15:44:3F:D7:06:02:20:AB:73:8E:58:5B:ED:5A:1D:70:A8:3A:A8:3C Authority key identifier: 65:17:7A:32:36:E4:CD:E9:DE:AB:A6:D2:4D:81:79:8C:03:42:B3:59 Certificate issuer: /CN=65177A3236E4CDE9DEABA6D24D81798C0342B359 Certificate serial: 42FFE2450B4D49513DE7F27E671F38D32052EB5A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65177A3236E4CDE9DEABA6D24D81798C0342B359.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/65177A3236E4CDE9DEABA6D24D81798C0342B359.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:46:07 +0000 Manifest this update: Tue 12 May 2026 19:41:07 +0000 Manifest next update: Wed 13 May 2026 23:00:07 +0000 Files and hashes: 1: 3130332e3134362e3134342e302f32342d3234203d3e20313530313836.roa (hash: lVbFef/6mdjInFTMm3cO34cZeIrGM0mKpOLsVw5+rAw=) 2: 3130332e3134362e3134352e302f32342d3234203d3e20313530313836.roa (hash: dc+32akDqD+whWWKGoW6auMBb4nmyq1TxJGgB+DF/Mw=) 3: 65177A3236E4CDE9DEABA6D24D81798C0342B359.crl (hash: ZqZu2JUmi81jR8ZLaH3oYbI7cqn4PscPLnY252YDMPA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/65177A3236E4CDE9DEABA6D24D81798C0342B359.crl rsync://rpki-rsync.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/65177A3236E4CDE9DEABA6D24D81798C0342B359.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65177A3236E4CDE9DEABA6D24D81798C0342B359.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:ff:e2:45:0b:4d:49:51:3d:e7:f2:7e:67:1f:38:d3:20:52:eb:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65177A3236E4CDE9DEABA6D24D81798C0342B359 Validity Not Before: May 12 19:41:07 2026 GMT Not After : May 13 23:00:07 2026 GMT Subject: CN=15443FD7060220AB738E585BED5A1D70A83AA83C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9e:7a:93:d3:7b:cb:21:6f:37:72:29:f3:3e: 94:a3:91:3e:ef:28:ab:57:61:0b:ff:ed:3a:15:64: b1:22:b5:e9:14:a7:03:1a:1e:47:4d:99:4f:79:c4: e3:f7:38:ba:f7:73:07:6f:15:51:d3:3e:b8:96:85: cd:1f:e2:64:50:94:88:37:11:bf:c4:73:3f:c0:16: 2b:db:4a:31:2e:26:ae:72:79:3f:77:47:b6:26:43: 4d:02:fa:b9:2e:79:9a:7c:67:d4:29:b8:9b:c0:c7: 2f:6b:82:fe:71:91:56:9d:28:b1:e2:18:a9:68:61: c1:52:c7:64:54:c5:2c:e5:f7:37:ac:a0:db:66:10: fa:25:43:27:34:a4:f5:1b:9c:28:68:1c:58:d2:70: f7:e3:5d:0f:a9:44:eb:0e:27:63:a9:a4:74:fa:a5: 11:f8:90:6d:68:72:63:98:1a:79:d7:61:72:fa:01: d2:fb:00:62:02:03:97:38:ad:08:88:d7:4c:cd:9e: 55:47:8a:fa:fe:83:e9:83:73:bc:f0:61:a5:9f:2f: f6:c1:b5:2c:61:a6:31:70:b3:b1:1e:e0:08:34:54: 1d:dc:e3:46:c3:13:e4:09:68:9a:97:29:a2:1c:6c: af:b3:a5:1e:67:a0:29:2b:3a:5b:d3:4b:9c:68:bc: 76:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:44:3F:D7:06:02:20:AB:73:8E:58:5B:ED:5A:1D:70:A8:3A:A8:3C X509v3 Authority Key Identifier: keyid:65:17:7A:32:36:E4:CD:E9:DE:AB:A6:D2:4D:81:79:8C:03:42:B3:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/65177A3236E4CDE9DEABA6D24D81798C0342B359.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65177A3236E4CDE9DEABA6D24D81798C0342B359.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/65177A3236E4CDE9DEABA6D24D81798C0342B359.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:4d:ac:35:dc:0d:88:81:b9:14:f0:b6:a8:f0:14:79:25:c1: 9c:14:20:49:7e:25:c8:f6:0e:aa:5b:13:cd:06:95:bc:d1:72: 12:c0:0f:af:9f:09:da:8a:66:43:ce:82:9c:39:a0:6c:6e:36: d6:b7:3e:bc:98:72:de:af:63:55:c1:69:09:c6:bf:bc:e6:0e: 16:a3:bf:a2:78:21:5b:b0:12:a6:f7:3c:00:9b:d3:f6:58:67: 44:1e:1c:b8:22:65:25:97:f2:de:4f:67:85:29:c8:ac:eb:89: 12:08:77:33:f5:ae:28:58:bf:39:15:96:d2:ce:c4:72:8d:9c: 64:04:e2:4c:6b:a4:fb:bb:35:ab:8a:eb:9a:36:0a:5b:e7:69: a4:4d:a8:44:50:0a:f8:47:9a:51:24:9f:02:48:db:e1:34:e6: 90:10:40:5f:10:e9:1f:eb:35:95:08:ed:21:a6:f1:37:fa:2c: 41:db:17:27:2b:61:b6:1e:3e:53:ee:c1:7a:dc:d0:cb:25:ae: a0:aa:49:c5:1c:57:4c:16:d9:f6:3d:9c:a8:9e:d6:3c:f9:b5: 5f:0b:ad:67:d8:e5:ec:db:1d:ca:26:29:88:46:e0:54:18:70: 48:52:e1:21:5c:18:6b:bc:98:5e:9d:34:30:a3:92:d2:91:91: 51:e3:6e:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQv/iRQtNSVE95/J+Zx840yBS61owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjUxNzdBMzIzNkU0Q0RFOURFQUJBNkQyNEQ4MTc5OEMw MzQyQjM1OTAeFw0yNjA1MTIxOTQxMDdaFw0yNjA1MTMyMzAwMDdaMDMxMTAvBgNV BAMTKDE1NDQzRkQ3MDYwMjIwQUI3MzhFNTg1QkVENUExRDcwQTgzQUE4M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8nnqT03vLIW83cinzPpSjkT7v KKtXYQv/7ToVZLEitekUpwMaHkdNmU95xOP3OLr3cwdvFVHTPriWhc0f4mRQlIg3 Eb/Ecz/AFivbSjEuJq5yeT93R7YmQ00C+rkueZp8Z9QpuJvAxy9rgv5xkVadKLHi GKloYcFSx2RUxSzl9zesoNtmEPolQyc0pPUbnChoHFjScPfjXQ+pROsOJ2OppHT6 pRH4kG1ocmOYGnnXYXL6AdL7AGICA5c4rQiI10zNnlVHivr+g+mDc7zwYaWfL/bB tSxhpjFws7Ee4Ag0VB3c40bDE+QJaJqXKaIcbK+zpR5noCkrOlvTS5xovHbVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFUQ/1wYCIKtzjlhb7VodcKg6qDwwHwYDVR0j BBgwFoAUZRd6Mjbkzeneq6bSTYF5jANCs1kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDA2MTQxNjMtNGNhNC00OTM2LWJmOGItODRkOGMyZDFmMDJkLzAvNjUxNzdBMzIz NkU0Q0RFOURFQUJBNkQyNEQ4MTc5OEMwMzQyQjM1OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NTE3N0EzMjM2RTRDREU5REVBQkE2RDI0RDgxNzk4QzAzNDJC MzU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDA2MTQxNjMtNGNhNC00OTM2LWJm OGItODRkOGMyZDFmMDJkLzAvNjUxNzdBMzIzNkU0Q0RFOURFQUJBNkQyNEQ4MTc5 OEMwMzQyQjM1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHxNrDXcDYiBuRTwtqjwFHklwZwUIEl+Jcj2 DqpbE80GlbzRchLAD6+fCdqKZkPOgpw5oGxuNta3PryYct6vY1XBaQnGv7zmDhaj v6J4IVuwEqb3PACb0/ZYZ0QeHLgiZSWX8t5PZ4UpyKzriRIIdzP1rihYvzkVltLO xHKNnGQE4kxrpPu7NauK65o2ClvnaaRNqERQCvhHmlEknwJI2+E05pAQQF8Q6R/r NZUI7SGm8Tf6LEHbFycrYbYePlPuwXrc0MslrqCqScUcV0wW2fY9nKie1jz5tV8L rWfY5ezbHcomKYhG4FQYcEhS4SFcGGu8mF6dNDCjktKRkVHjbtE= -----END CERTIFICATE-----Generated at Wed May 13 11:47:22 2026 by rpki-client