$ rpki-client -vvf rpki-rsync.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/65B2322C56F44BF22F2FEC36B959F99E1D331066.mft File: 65B2322C56F44BF22F2FEC36B959F99E1D331066.mft (raw, json) Hash identifier: wqNoOqonp/78TsOFW/o+wVw4APjOlmZ/ELUe6ray+rQ= Subject key identifier: D3:3F:67:76:1A:AF:7A:E8:A4:F0:2D:FE:61:08:00:A6:46:5C:A3:7F Authority key identifier: 65:B2:32:2C:56:F4:4B:F2:2F:2F:EC:36:B9:59:F9:9E:1D:33:10:66 Certificate issuer: /CN=65B2322C56F44BF22F2FEC36B959F99E1D331066 Certificate serial: 07E508FD8FCF412348AAFF1366A3BF5F50ACD722 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65B2322C56F44BF22F2FEC36B959F99E1D331066.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/65B2322C56F44BF22F2FEC36B959F99E1D331066.mft Manifest number: 0E Signing time: Tue 12 May 2026 07:03:13 +0000 Manifest this update: Tue 12 May 2026 06:58:13 +0000 Manifest next update: Wed 13 May 2026 09:47:13 +0000 Files and hashes: 1: 3130332e3132362e3139352e302f32342d3234203d3e20313530353438.roa (hash: ArWINNWiCoq7qYCWEDrQkzwtNUnQVElWRhRzX3xlhI8=) 2: 65B2322C56F44BF22F2FEC36B959F99E1D331066.crl (hash: HsnoQ+3XL5bPJTVMcD/2eW9LPuMLrL+3/+oTxx8I1io=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/65B2322C56F44BF22F2FEC36B959F99E1D331066.crl rsync://rpki-rsync.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/65B2322C56F44BF22F2FEC36B959F99E1D331066.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65B2322C56F44BF22F2FEC36B959F99E1D331066.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:e5:08:fd:8f:cf:41:23:48:aa:ff:13:66:a3:bf:5f:50:ac:d7:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65B2322C56F44BF22F2FEC36B959F99E1D331066 Validity Not Before: May 12 06:58:13 2026 GMT Not After : May 13 09:47:13 2026 GMT Subject: CN=D33F67761AAF7AE8A4F02DFE610800A6465CA37F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6f:74:c1:a5:9e:5d:f6:58:eb:7f:35:3f:2d: 9b:ca:91:f1:fa:a0:3e:ed:a4:ad:ab:00:0a:b0:6b: e1:f6:d7:5d:01:d0:20:09:7d:52:7c:e3:df:eb:ed: cf:78:60:4b:8d:c9:e0:41:18:23:7f:26:9b:39:8f: 99:49:b7:e8:34:db:c8:db:d5:74:0f:1e:8f:c5:69: 55:5b:38:62:c1:a9:77:1b:8b:0c:4c:3e:1d:21:d8: 39:a3:65:56:a2:d3:56:c6:11:10:79:76:06:71:61: 45:8a:be:3d:06:94:ea:1f:c2:88:a7:01:7e:36:46: de:83:21:2d:92:69:ed:17:fd:a8:9f:4f:e8:7e:48: 44:15:44:5b:b4:ec:74:b6:fc:40:8d:c5:21:30:3e: 33:db:0f:5c:7a:33:80:80:89:40:cf:4f:94:b3:36: 18:8d:51:63:e6:ab:86:bc:86:43:57:4a:8d:83:f4: 91:ef:98:ef:4c:1a:2f:0c:90:a6:6d:15:a1:f5:c2: db:a6:e8:87:eb:ec:12:48:3e:74:e2:32:d5:a2:d3: c7:79:52:72:e1:7f:7f:60:22:b7:8e:ec:b5:1a:76: cf:20:7e:c0:df:f2:54:6a:a5:32:45:1e:92:49:b8: a9:0f:82:38:86:1f:ac:88:06:91:c7:d8:48:1a:67: 1d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:3F:67:76:1A:AF:7A:E8:A4:F0:2D:FE:61:08:00:A6:46:5C:A3:7F X509v3 Authority Key Identifier: keyid:65:B2:32:2C:56:F4:4B:F2:2F:2F:EC:36:B9:59:F9:9E:1D:33:10:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/65B2322C56F44BF22F2FEC36B959F99E1D331066.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65B2322C56F44BF22F2FEC36B959F99E1D331066.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/65B2322C56F44BF22F2FEC36B959F99E1D331066.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:13:55:3f:20:0d:c1:b0:45:7a:26:71:0b:44:18:15:18:92: 8e:26:38:9c:bc:9a:a0:12:b9:4c:fc:6a:ff:7e:45:6e:47:64: a1:61:a1:8f:a6:e5:4b:0c:1b:63:9a:72:b8:1f:02:0b:bd:53: c2:b5:44:66:2b:ae:6c:f2:14:dd:e2:c6:72:44:b5:5d:b1:ba: 15:35:38:b5:9b:c6:6f:46:38:29:45:2a:d8:ce:42:30:b3:16: 49:5b:3a:de:a8:d9:b4:dd:6c:0a:bb:e3:a8:a2:6d:49:3a:50: f2:60:6b:3f:7f:bd:b7:90:55:df:ab:91:26:f3:e6:69:07:f0: bb:bf:3e:b1:f7:ec:83:0b:e3:d8:a8:b3:b2:8f:be:32:f8:96: 9d:28:f4:71:8a:5d:b9:2a:cb:13:88:8f:7f:4c:ef:b8:44:1b: 81:4c:b9:c9:5a:db:1f:6f:74:82:05:43:7b:3a:0b:60:a0:df: ad:bc:ce:4e:f7:d2:87:5b:16:d5:63:f7:ce:74:20:36:0e:9d: 08:8b:21:90:96:8f:ba:7d:df:d9:d4:9f:25:26:8a:09:95:0f: 6a:97:6d:98:a8:58:08:32:e0:62:f9:77:47:a6:a9:f8:6c:f4: a8:ce:63:ed:ba:64:2d:18:7e:33:1e:9b:df:77:4f:ec:4b:c0: 34:0f:7c:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB+UI/Y/PQSNIqv8TZqO/X1Cs1yIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVCMjMyMkM1NkY0NEJGMjJGMkZFQzM2Qjk1OUY5OUUx RDMzMTA2NjAeFw0yNjA1MTIwNjU4MTNaFw0yNjA1MTMwOTQ3MTNaMDMxMTAvBgNV BAMTKEQzM0Y2Nzc2MUFBRjdBRThBNEYwMkRGRTYxMDgwMEE2NDY1Q0EzN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCib3TBpZ5d9ljrfzU/LZvKkfH6 oD7tpK2rAAqwa+H2110B0CAJfVJ849/r7c94YEuNyeBBGCN/Jps5j5lJt+g028jb 1XQPHo/FaVVbOGLBqXcbiwxMPh0h2DmjZVai01bGERB5dgZxYUWKvj0GlOofwoin AX42Rt6DIS2Sae0X/aifT+h+SEQVRFu07HS2/ECNxSEwPjPbD1x6M4CAiUDPT5Sz NhiNUWPmq4a8hkNXSo2D9JHvmO9MGi8MkKZtFaH1wtum6Ifr7BJIPnTiMtWi08d5 UnLhf39gIreO7LUads8gfsDf8lRqpTJFHpJJuKkPgjiGH6yIBpHH2EgaZx2PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0z9ndhqveuik8C3+YQgApkZco38wHwYDVR0j BBgwFoAUZbIyLFb0S/IvL+w2uVn5nh0zEGYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjE5MzAxOGUtNzE4Zi00NzU3LWEwODctOTNhZDc3YjgxODIxLzAvNjVCMjMyMkM1 NkY0NEJGMjJGMkZFQzM2Qjk1OUY5OUUxRDMzMTA2Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NUIyMzIyQzU2RjQ0QkYyMkYyRkVDMzZCOTU5Rjk5RTFEMzMx MDY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjE5MzAxOGUtNzE4Zi00NzU3LWEw ODctOTNhZDc3YjgxODIxLzAvNjVCMjMyMkM1NkY0NEJGMjJGMkZFQzM2Qjk1OUY5 OUUxRDMzMTA2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGITVT8gDcGwRXomcQtEGBUYko4mOJy8mqAS uUz8av9+RW5HZKFhoY+m5UsMG2OacrgfAgu9U8K1RGYrrmzyFN3ixnJEtV2xuhU1 OLWbxm9GOClFKtjOQjCzFklbOt6o2bTdbAq746iibUk6UPJgaz9/vbeQVd+rkSbz 5mkH8Lu/PrH37IML49ios7KPvjL4lp0o9HGKXbkqyxOIj39M77hEG4FMucla2x9v dIIFQ3s6C2Cg3628zk730odbFtVj9850IDYOnQiLIZCWj7p939nUnyUmigmVD2qX bZioWAgy4GL5d0emqfhs9KjOY+26ZC0YfjMem993T+xLwDQPfDI= -----END CERTIFICATE-----Generated at Wed May 13 01:37:05 2026 by rpki-client