
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/65B2322C56F44BF22F2FEC36B959F99E1D331066.mft
File: 65B2322C56F44BF22F2FEC36B959F99E1D331066.mft (raw, json)
Hash identifier: tnW+kGX9UBRrUKgkv3D46K1P8ER7kaVOuX5xekFai+0=
Subject key identifier: E7:02:53:2E:E1:B1:AA:50:5F:7D:16:71:CA:31:0F:B3:02:39:92:96
Authority key identifier: 65:B2:32:2C:56:F4:4B:F2:2F:2F:EC:36:B9:59:F9:9E:1D:33:10:66
Certificate issuer: /CN=65B2322C56F44BF22F2FEC36B959F99E1D331066
Certificate serial: 73D99459CCF4BACB4D8024DD29BAF22A4C758A0B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65B2322C56F44BF22F2FEC36B959F99E1D331066.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/65B2322C56F44BF22F2FEC36B959F99E1D331066.mft
Manifest number: C3
Signing time: Thu 24 Sep 2026 13:58:15 +0000
Manifest this update: Thu 24 Sep 2026 13:53:15 +0000
Manifest next update: Fri 25 Sep 2026 16:02:15 +0000
Files and hashes: 1: 3130332e3132362e3139352e302f32342d3234203d3e20313530353438.roa (hash: ArWINNWiCoq7qYCWEDrQkzwtNUnQVElWRhRzX3xlhI8=)
2: 65B2322C56F44BF22F2FEC36B959F99E1D331066.crl (hash: CNs7OPfJZkzM+pTuI/AhUbn5DOJ5/iNOC0twVUTvY8k=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/65B2322C56F44BF22F2FEC36B959F99E1D331066.crl
rsync://rpki-rsync.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/65B2322C56F44BF22F2FEC36B959F99E1D331066.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65B2322C56F44BF22F2FEC36B959F99E1D331066.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 10:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:d9:94:59:cc:f4:ba:cb:4d:80:24:dd:29:ba:f2:2a:4c:75:8a:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65B2322C56F44BF22F2FEC36B959F99E1D331066
Validity
Not Before: Sep 24 13:53:15 2026 GMT
Not After : Sep 25 16:02:15 2026 GMT
Subject: CN=E702532EE1B1AA505F7D1671CA310FB302399296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:96:e4:3d:e2:1a:65:c7:8d:8a:46:a1:ec:b6:
76:51:d2:69:b6:0f:89:d4:17:26:9e:56:1b:b5:df:
ff:9b:01:18:17:6a:8f:09:e7:18:af:6c:0c:02:61:
a0:de:95:53:6b:c8:2b:c7:ad:8a:bb:3d:c2:5c:8d:
5d:bd:e3:04:f7:39:4f:f9:be:0d:3e:a4:26:38:7b:
f6:0d:0b:33:da:ff:b7:b8:0f:db:96:b8:1f:cd:24:
dc:8a:fa:9c:14:6e:81:19:d7:0b:bd:69:80:42:2a:
be:de:38:4a:b1:5a:cf:c6:a9:e5:f4:02:be:7e:98:
b3:1d:63:f7:1c:90:28:db:89:4e:07:5b:c2:07:0a:
32:c1:93:92:bf:1d:d2:fb:2e:93:fb:0d:f6:33:2d:
d7:13:98:73:77:c1:bd:fb:9c:9a:e7:3f:f8:18:6c:
ae:78:d0:26:4c:d7:17:eb:03:08:d8:88:07:04:6f:
07:eb:0e:68:3d:49:26:97:26:62:ec:55:04:ed:91:
6c:b1:ca:0c:95:8b:7a:cc:34:8b:c9:d6:18:03:b4:
a3:53:76:25:71:66:b4:da:16:79:84:fa:d1:5a:3a:
fb:de:12:90:9a:44:d7:59:19:4a:6b:5e:f5:21:fa:
dc:20:87:d7:d1:89:9b:67:3f:5b:fd:02:92:94:ab:
36:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:02:53:2E:E1:B1:AA:50:5F:7D:16:71:CA:31:0F:B3:02:39:92:96
X509v3 Authority Key Identifier:
keyid:65:B2:32:2C:56:F4:4B:F2:2F:2F:EC:36:B9:59:F9:9E:1D:33:10:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/65B2322C56F44BF22F2FEC36B959F99E1D331066.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65B2322C56F44BF22F2FEC36B959F99E1D331066.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/65B2322C56F44BF22F2FEC36B959F99E1D331066.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:d7:f5:ae:31:a8:65:83:8a:4c:d1:0a:c0:fe:0f:75:db:2f:
77:01:54:47:97:6a:33:2f:bb:d5:45:4f:c8:77:31:40:bb:2d:
b7:a4:0f:da:ad:99:cb:02:0b:f9:99:b4:45:59:f7:69:c4:30:
49:a4:c0:f0:97:07:8e:2c:42:66:c4:52:e9:c9:ca:b8:fd:56:
4b:a5:c3:78:07:d3:6a:ed:87:7e:13:b2:5a:f2:24:0e:6b:00:
91:38:51:70:b0:f7:85:30:93:29:a2:1d:93:f9:17:cb:41:15:
27:d4:9c:d3:54:3b:8b:8b:81:88:01:dc:cd:00:e9:43:e6:a8:
32:d6:06:04:df:a7:bd:25:0c:8e:b6:00:09:ea:56:77:0c:db:
37:f5:7d:4a:6a:5e:45:56:10:f9:19:aa:f8:ae:1e:e1:15:65:
e6:64:91:e4:ec:c7:f5:8e:6a:5f:d1:44:38:da:1c:bf:9b:79:
0c:13:b3:d3:ca:1f:d0:5d:a2:6f:e3:97:7c:7f:46:af:5b:dd:
e2:48:d2:bf:f9:76:c9:bb:c3:5d:d4:c2:2b:e8:1d:75:c3:02:
59:7a:f7:6f:bd:06:c3:3f:9d:e6:e8:ec:90:58:29:0b:4f:81:
8a:80:7d:22:10:6b:be:33:70:76:52:db:03:cc:a2:f0:b9:8b:
de:c0:4f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:20:23 2026 by rpki-client