
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.mft
File: 65DBBEC678177B7159AD901A4023BA57AA4096DC.mft (raw, json)
Hash identifier: 1BEXvSA49+7tFCDtQdX8e3+WubcrBHQ+VeKQKkiU4EE=
Subject key identifier: 5C:07:0C:97:1F:4E:FB:20:15:CF:DB:B3:CB:33:BA:E0:62:A6:D6:29
Authority key identifier: 65:DB:BE:C6:78:17:7B:71:59:AD:90:1A:40:23:BA:57:AA:40:96:DC
Certificate issuer: /CN=65DBBEC678177B7159AD901A4023BA57AA4096DC
Certificate serial: 74BE87D10BD2F059858BA3D28E57975AF27C96DF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65DBBEC678177B7159AD901A4023BA57AA4096DC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 04:19:01 +0000
Manifest this update: Tue 12 May 2026 04:14:01 +0000
Manifest next update: Wed 13 May 2026 07:14:01 +0000
Files and hashes: 1: 3230322e39332e3234372e302f32342d3234203d3e203338373738.roa (hash: uq0XahCuPwPF6uONqKm2eLZO4OTWzUiViXqNuFHYT+4=)
2: 3230322e39332e3234342e302f32332d3233203d3e203338373738.roa (hash: RES+IzVfinBoTB3WoZkBb0K0PMLwmwjFh6203Hnv7Fk=)
3: 3230322e39332e3234302e302f32342d3234203d3e203338373738.roa (hash: S4EP1lFYVTju24ot1ck+7kHJylZlYJvHzPIKURDcI5k=)
4: 65DBBEC678177B7159AD901A4023BA57AA4096DC.crl (hash: zpMQp5k/MivbsCj+qzp2K0sHkkhyBmc8vtDJFnX+yUs=)
5: 3230322e39332e3234342e302f32322d3234203d3e203338373738.roa (hash: HYOwWEsyIVZXnK4eLcj02fPXUV54e21APLG1OWqeK6Y=)
6: 3230322e39332e3234332e302f32342d3234203d3e203234313938.roa (hash: uoDjto4Bon7pce7gaQoVwabXxUeeyeeN7W67OfZu0pY=)
7: 3230322e39332e3234322e302f32342d3234203d3e203234313938.roa (hash: ahy9pgYJ/JRzmM8+Ec6KtXzoFXDTJf+AENe9YjQMlak=)
8: 3230322e39332e3234362e302f32342d3234203d3e203338373738.roa (hash: ryDBz/OArSkajCTSmWMTBuq6yxPVuRRR4FSfEXo1xKg=)
9: 3230322e39332e3234362e302f32332d3233203d3e203338373738.roa (hash: AMuay0c5oSMPzmQyIJxb21rH75gJq04Z09sxFsI2gX8=)
10: 323430323a623234303a3a2f34372d3437203d3e203234313938.roa (hash: Os0dOUCAo82Ro4JJGXlWsdYmgpvswgP/lGrJ/rFU8kQ=)
11: 3130332e3135352e3138362e302f32332d3234203d3e203234313938.roa (hash: XMUkhya/Im5TwnX+KHLLztrNmQIz+mhwII8y24T5T0Y=)
12: 3230322e39332e3234302e302f32332d3233203d3e203338373738.roa (hash: 2tjc/8qrga6+39EQjimW3zf16UfFL3aN5h4lRF828pQ=)
13: 3230322e39332e3234352e302f32342d3234203d3e203338373738.roa (hash: WJ8WqvkTLbC87sRVwP0S84GR9M75HVASRazE6C4BxN8=)
14: 3230322e39332e3234312e302f32342d3234203d3e203338373738.roa (hash: aAelOJ+yvf4qi4zR02tVF6ytUGxSBShT/+GgUk24frk=)
15: 3230322e39332e3234342e302f32342d3234203d3e203338373738.roa (hash: tvyLyjFncuafaNsnPRjTIe3OmM+u2yeMnvd+JSKf+OI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.crl
rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65DBBEC678177B7159AD901A4023BA57AA4096DC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 07:14:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:be:87:d1:0b:d2:f0:59:85:8b:a3:d2:8e:57:97:5a:f2:7c:96:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65DBBEC678177B7159AD901A4023BA57AA4096DC
Validity
Not Before: May 12 04:14:01 2026 GMT
Not After : May 13 07:14:01 2026 GMT
Subject: CN=5C070C971F4EFB2015CFDBB3CB33BAE062A6D629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3b:30:63:dd:83:9c:85:83:4a:00:e8:d9:56:
ae:72:9d:56:93:a6:49:8b:29:76:0b:a6:f5:80:37:
06:8f:b5:1a:0c:7a:5e:9d:ef:fc:d2:c2:ca:ef:31:
a4:18:63:30:a0:be:2d:bc:82:2c:01:03:ca:9b:1d:
de:9b:5e:24:13:16:18:6e:5a:b5:3f:62:9f:22:31:
23:4c:8e:f9:a1:73:b5:8c:38:6c:32:49:fa:a6:67:
09:82:b0:d3:79:d7:27:36:a1:ce:b2:5c:bc:cc:69:
14:0d:2b:f2:ff:6d:f8:6d:97:81:5b:90:de:ea:d8:
7b:1c:32:07:54:73:07:bf:7b:c2:71:62:29:eb:cd:
1b:8b:cf:ea:20:3e:0a:12:85:f0:8f:c8:c9:6c:d3:
2f:ab:79:34:07:65:df:cb:6a:d4:28:92:17:2a:01:
a0:44:6e:c2:fa:a3:d4:28:f7:94:75:8a:1b:18:a0:
0e:b1:fa:e1:d8:9c:b3:0c:27:38:40:ae:52:ce:8e:
cc:5e:6f:4d:de:20:75:37:6d:2b:2e:69:a6:b8:9a:
ea:32:77:e4:da:8d:2a:99:1e:b3:10:7c:b0:62:d7:
08:0d:41:aa:18:78:d1:af:7d:12:00:b7:aa:82:ac:
23:69:ce:2f:3d:80:35:e0:a4:de:de:ab:49:e2:ea:
88:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:07:0C:97:1F:4E:FB:20:15:CF:DB:B3:CB:33:BA:E0:62:A6:D6:29
X509v3 Authority Key Identifier:
keyid:65:DB:BE:C6:78:17:7B:71:59:AD:90:1A:40:23:BA:57:AA:40:96:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65DBBEC678177B7159AD901A4023BA57AA4096DC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:19:ec:b3:c2:ac:62:f6:67:85:3b:45:b2:62:36:bf:61:83:
ca:47:f1:b1:42:8e:07:93:d2:a6:46:c0:92:ef:78:55:84:d7:
4b:6b:11:94:a8:57:5e:1e:7c:11:07:cb:b6:3b:ab:9e:07:e0:
bb:d4:f9:ce:e9:80:20:bd:61:17:ce:ce:e0:e4:87:0a:c4:52:
e2:04:a2:22:b0:32:18:c2:01:0f:80:c8:6a:93:dc:2c:17:c1:
a6:d8:7b:72:de:56:20:2b:8f:be:72:a0:96:50:10:61:11:4e:
5a:04:f9:57:8e:da:ba:ac:75:49:2e:5d:9a:27:33:b5:73:86:
d4:1e:55:b1:1f:26:7f:6a:8f:8d:51:f0:49:d9:58:a5:6c:c0:
8e:14:ba:76:ad:58:0d:71:00:4b:fa:73:60:7f:1b:65:2b:44:
f1:90:51:e3:7d:7c:2f:ee:39:ee:6b:b8:67:72:1c:e0:cc:24:
59:89:70:ca:7f:e9:d6:4f:97:ac:94:5c:7c:2d:2f:c1:64:6c:
2c:81:78:02:bf:f7:56:9e:42:79:db:93:e7:80:33:eb:cc:5f:
f3:e5:a3:a1:7f:ae:aa:02:7b:4a:08:30:47:cc:eb:e0:bc:16:
8f:89:2f:92:1a:81:ce:ed:15:1e:32:ab:a0:e1:c4:6b:e0:e3:
f0:6d:32:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:47:29 2026 by rpki-client