
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.mft
File: 65DBBEC678177B7159AD901A4023BA57AA4096DC.mft (raw, json)
Hash identifier: jP3pCEm3hPeABh+Flv/fCw5/qZ9IcM+iImt41lzhG9c=
Subject key identifier: 4D:F3:89:A1:CB:82:AF:14:9D:60:DE:B7:78:46:F4:1C:4B:37:C4:B1
Authority key identifier: 65:DB:BE:C6:78:17:7B:71:59:AD:90:1A:40:23:BA:57:AA:40:96:DC
Certificate issuer: /CN=65DBBEC678177B7159AD901A4023BA57AA4096DC
Certificate serial: 3640EFA79D538695D129DE1111EF335AD126EDDF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65DBBEC678177B7159AD901A4023BA57AA4096DC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.mft
Manifest number: C1
Signing time: Wed 23 Sep 2026 18:23:43 +0000
Manifest this update: Wed 23 Sep 2026 18:18:43 +0000
Manifest next update: Thu 24 Sep 2026 19:45:43 +0000
Files and hashes: 1: 3230322e39332e3234352e302f32342d3234203d3e203338373738.roa (hash: WJ8WqvkTLbC87sRVwP0S84GR9M75HVASRazE6C4BxN8=)
2: 3230322e39332e3234362e302f32342d3234203d3e203338373738.roa (hash: ryDBz/OArSkajCTSmWMTBuq6yxPVuRRR4FSfEXo1xKg=)
3: 3230322e39332e3234332e302f32342d3234203d3e203234313938.roa (hash: uoDjto4Bon7pce7gaQoVwabXxUeeyeeN7W67OfZu0pY=)
4: 3230322e39332e3234372e302f32342d3234203d3e203338373738.roa (hash: uq0XahCuPwPF6uONqKm2eLZO4OTWzUiViXqNuFHYT+4=)
5: 3230322e39332e3234342e302f32322d3234203d3e203338373738.roa (hash: HYOwWEsyIVZXnK4eLcj02fPXUV54e21APLG1OWqeK6Y=)
6: 3230322e39332e3234302e302f32342d3234203d3e203338373738.roa (hash: S4EP1lFYVTju24ot1ck+7kHJylZlYJvHzPIKURDcI5k=)
7: 3230322e39332e3234322e302f32342d3234203d3e203234313938.roa (hash: ahy9pgYJ/JRzmM8+Ec6KtXzoFXDTJf+AENe9YjQMlak=)
8: 3230322e39332e3234362e302f32332d3233203d3e203338373738.roa (hash: AMuay0c5oSMPzmQyIJxb21rH75gJq04Z09sxFsI2gX8=)
9: 65DBBEC678177B7159AD901A4023BA57AA4096DC.crl (hash: +hl1QoLetjgHsKDQozeGF5HFoPzY+muznz1Ix/1OUhU=)
10: 3130332e3135352e3138362e302f32342d3234203d3e203234313938.roa (hash: qLyqBtZOi6bzPzQ5YmenFV5BuE3tMCCGIzP66ZoAfsE=)
11: 323430323a623234303a3a2f34372d3437203d3e203234313938.roa (hash: Os0dOUCAo82Ro4JJGXlWsdYmgpvswgP/lGrJ/rFU8kQ=)
12: 3230322e39332e3234342e302f32342d3234203d3e203338373738.roa (hash: tvyLyjFncuafaNsnPRjTIe3OmM+u2yeMnvd+JSKf+OI=)
13: 3130332e3135352e3138372e302f32342d3234203d3e20313534373739.roa (hash: acD4T9xX0RNOsIt+Dk7srNJFPhM3fLBMG+7sX11SPrM=)
14: 3230322e39332e3234342e302f32332d3233203d3e203338373738.roa (hash: RES+IzVfinBoTB3WoZkBb0K0PMLwmwjFh6203Hnv7Fk=)
15: 3230322e39332e3234302e302f32332d3233203d3e203338373738.roa (hash: 2tjc/8qrga6+39EQjimW3zf16UfFL3aN5h4lRF828pQ=)
16: 3230322e39332e3234312e302f32342d3234203d3e203338373738.roa (hash: aAelOJ+yvf4qi4zR02tVF6ytUGxSBShT/+GgUk24frk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.crl
rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65DBBEC678177B7159AD901A4023BA57AA4096DC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 19:45:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:40:ef:a7:9d:53:86:95:d1:29:de:11:11:ef:33:5a:d1:26:ed:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65DBBEC678177B7159AD901A4023BA57AA4096DC
Validity
Not Before: Sep 23 18:18:43 2026 GMT
Not After : Sep 24 19:45:43 2026 GMT
Subject: CN=4DF389A1CB82AF149D60DEB77846F41C4B37C4B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f7:21:cb:2c:a5:b9:2b:90:f9:93:97:76:c2:
e1:40:be:67:ea:37:f5:c8:c8:67:01:13:9c:9a:28:
25:97:2d:97:0a:5c:89:53:c3:51:de:94:d3:74:63:
c0:df:2b:8a:34:e2:5c:bc:04:a6:67:55:62:19:f8:
dd:a2:6f:39:fd:88:4c:41:74:55:25:19:59:3c:e1:
24:80:66:af:7e:91:dd:e3:8c:f7:d5:41:94:c8:44:
68:b9:b9:4e:61:ab:df:8f:1b:80:19:3f:da:61:e1:
4f:d5:75:2d:40:88:6b:d5:50:41:d7:99:d2:f1:3b:
b0:78:1d:14:a4:c4:e9:ea:ab:a9:3f:6b:fd:0c:1b:
f2:ac:07:0c:21:52:ba:14:76:53:f4:04:21:fa:7b:
12:a5:9c:f5:d7:28:ab:aa:26:0f:74:c4:e2:95:0a:
fe:7e:8f:f4:41:62:5a:7d:63:c4:5b:8b:be:92:12:
65:1c:ae:c9:34:49:4a:ff:4a:62:09:d9:19:0e:a3:
0c:6c:f2:60:47:cc:f3:61:3d:bd:f4:41:fe:f3:82:
bf:09:1d:1d:79:7e:44:84:8e:f1:35:d9:56:37:08:
d6:64:3c:21:ca:ee:f5:b9:81:04:cb:7d:e3:f1:32:
7c:ea:db:51:4b:f5:89:4a:92:12:97:56:16:a5:ff:
39:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F3:89:A1:CB:82:AF:14:9D:60:DE:B7:78:46:F4:1C:4B:37:C4:B1
X509v3 Authority Key Identifier:
keyid:65:DB:BE:C6:78:17:7B:71:59:AD:90:1A:40:23:BA:57:AA:40:96:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65DBBEC678177B7159AD901A4023BA57AA4096DC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:a0:da:69:f1:b7:1a:c9:20:40:a3:9b:9d:76:06:09:e3:d9:
ae:0c:ce:ee:85:3d:b2:74:ef:24:45:14:53:3c:d4:06:8d:23:
7b:c9:dc:ff:18:0e:94:9d:f2:cd:79:21:66:cd:56:78:6d:8a:
47:68:54:30:51:78:1c:c5:a6:5d:7e:c3:b9:06:66:96:68:1b:
76:f0:23:72:81:ae:de:5c:10:c6:2e:9b:2e:e8:9c:56:76:06:
f6:de:77:a8:c2:d0:37:62:80:d4:43:9c:d0:66:0c:af:5a:6b:
80:7e:8c:3a:40:48:67:43:8e:ba:85:52:a7:4d:3e:1d:c2:a5:
54:31:0a:51:5c:5b:af:0a:5d:da:4e:ea:7b:a0:37:ee:41:23:
33:d6:fc:cf:e4:8a:b0:83:8b:63:16:ec:37:87:1e:e4:5a:04:
ea:21:65:d9:a8:57:83:9d:fb:8c:8f:69:0c:cf:23:b7:34:33:
f8:9c:58:b6:6a:30:0a:62:cc:ca:90:58:ec:23:57:fe:a2:6a:
10:c3:5a:a4:8e:18:b2:93:35:53:95:98:48:46:a5:c5:91:69:
92:ec:f1:c0:5f:25:6e:d9:7a:40:0a:13:b9:7a:8e:e7:f1:19:
e0:cb:46:b9:12:2c:68:47:2e:ed:33:ef:e7:34:4b:6a:3c:46:
c4:ce:96:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:39:10 2026 by rpki-client