$ rpki-client -vvf rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.mft File: 65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.mft (raw, json) Hash identifier: g9i/RCiy9wIJnVmgxbwV48xTxhaHTQMTFL0cmYPs5hE= Subject key identifier: B3:6C:B3:F5:0C:16:8A:66:EF:45:FD:94:04:F4:3F:84:42:A2:03:D2 Authority key identifier: 65:FE:1D:A2:7B:82:A0:F9:AC:31:85:52:FD:2F:D0:0E:F6:6B:F7:CD Certificate issuer: /CN=65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD Certificate serial: 03C0D008963FDEEA719EBAFD4DB12F4A2E304F95 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:17:00 +0000 Manifest this update: Tue 12 May 2026 20:12:00 +0000 Manifest next update: Thu 14 May 2026 00:11:00 +0000 Files and hashes: 1: 65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.crl (hash: mrA8TuoGKQCnYHkvLwQOYFSe0RUC3q1KYPUudf4cO8M=) 2: 3130332e3139342e34362e302f32332d3234203d3e20313439393731.roa (hash: 4ExEorQAkAboUfCg4xl3LFUmZFGrqFAxLJKE8qeWaSE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.crl rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:c0:d0:08:96:3f:de:ea:71:9e:ba:fd:4d:b1:2f:4a:2e:30:4f:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD Validity Not Before: May 12 20:12:00 2026 GMT Not After : May 14 00:11:00 2026 GMT Subject: CN=B36CB3F50C168A66EF45FD9404F43F8442A203D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:4c:af:71:61:ea:95:15:13:8c:96:3b:60:f6: 7f:1a:54:a6:6e:22:e4:ef:92:6b:f7:e6:6d:ce:df: 93:71:57:3a:65:96:c7:81:ef:e3:90:7f:7d:4f:90: 18:c2:b4:9d:ae:59:50:77:53:b5:19:a2:35:99:a1: fb:03:e5:f0:ae:04:5d:89:41:0b:88:2f:40:3f:25: 58:cd:4a:69:5b:13:59:47:39:95:fc:f8:bc:49:f4: 22:01:08:7f:e2:66:32:86:a1:0e:c7:e1:b5:34:e5: 0a:03:96:a1:1a:3a:6e:f4:0d:99:64:02:6f:29:9a: 89:9e:03:95:51:20:d4:65:0c:7c:7e:e6:65:eb:44: 08:b1:89:c5:f0:6c:13:68:eb:d6:21:17:f8:85:ec: 36:a4:5c:01:65:9b:98:bd:7b:aa:b6:2f:1b:e8:96: f5:6c:db:69:eb:5a:6c:94:05:ed:2f:b1:3c:7f:3b: ad:f2:26:3f:d3:96:e4:29:d5:1e:bb:b7:b5:a0:17: 48:5e:49:8b:0f:72:4d:b0:85:52:d6:90:e9:78:aa: f0:6e:a2:f9:56:f5:72:ac:0b:93:04:46:0b:8a:65: d6:71:26:09:a5:19:ba:74:df:ba:18:e5:ff:6e:60: 56:78:3e:56:b5:1b:8f:46:ff:9a:b1:c3:46:d6:0e: 26:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:6C:B3:F5:0C:16:8A:66:EF:45:FD:94:04:F4:3F:84:42:A2:03:D2 X509v3 Authority Key Identifier: keyid:65:FE:1D:A2:7B:82:A0:F9:AC:31:85:52:FD:2F:D0:0E:F6:6B:F7:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:af:b3:07:42:72:92:e6:67:92:81:dc:d6:a4:fa:4b:a7:96: c4:a1:fc:58:48:63:f8:d4:df:62:01:c0:9e:f4:3b:c6:7c:40: 1c:21:85:7b:f4:ed:38:70:aa:f4:4d:65:88:b0:2a:3f:c6:b6: 44:1f:55:ab:e4:22:e5:d2:46:e3:29:69:30:43:57:94:14:44: 5b:b8:1e:00:45:9e:9e:99:be:3b:d6:a0:6e:e0:93:29:a4:81: e0:c2:73:90:f1:a9:bc:c7:fa:23:f9:5c:64:cd:c5:8b:b9:17: 38:de:4d:9d:fc:a1:5b:1f:5c:6f:9c:7a:4b:07:5a:a8:62:4e: 20:5d:fb:02:8f:10:8d:e1:5c:23:8e:f1:1b:7b:74:6b:e2:c7: 2c:7c:66:f8:ca:50:97:c3:95:15:62:08:6a:30:f7:c8:31:5d: 77:1c:f0:26:e6:60:0f:49:88:b4:e4:35:73:f2:8c:f4:20:75: 39:13:7f:15:4f:d4:2d:f4:06:0d:0d:23:f1:08:f5:21:a4:04: 74:ca:dc:a3:4f:55:43:49:30:ad:f6:46:5b:5b:dc:4a:86:14: 1d:29:5b:6e:0b:96:d2:c7:2f:7f:12:42:58:6a:c0:d1:bd:35: d5:5e:33:7d:a3:de:cf:90:7d:e5:14:3a:c4:8c:66:72:e8:0b: 9a:12:56:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA8DQCJY/3upxnrr9TbEvSi4wT5UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVGRTFEQTI3QjgyQTBGOUFDMzE4NTUyRkQyRkQwMEVG NjZCRjdDRDAeFw0yNjA1MTIyMDEyMDBaFw0yNjA1MTQwMDExMDBaMDMxMTAvBgNV BAMTKEIzNkNCM0Y1MEMxNjhBNjZFRjQ1RkQ5NDA0RjQzRjg0NDJBMjAzRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqTK9xYeqVFROMljtg9n8aVKZu IuTvkmv35m3O35NxVzpllseB7+OQf31PkBjCtJ2uWVB3U7UZojWZofsD5fCuBF2J QQuIL0A/JVjNSmlbE1lHOZX8+LxJ9CIBCH/iZjKGoQ7H4bU05QoDlqEaOm70DZlk Am8pmomeA5VRINRlDHx+5mXrRAixicXwbBNo69YhF/iF7DakXAFlm5i9e6q2Lxvo lvVs22nrWmyUBe0vsTx/O63yJj/TluQp1R67t7WgF0heSYsPck2whVLWkOl4qvBu ovlW9XKsC5MERguKZdZxJgmlGbp037oY5f9uYFZ4Pla1G49G/5qxw0bWDiaZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs2yz9QwWimbvRf2UBPQ/hEKiA9IwHwYDVR0j BBgwFoAUZf4donuCoPmsMYVS/S/QDvZr980wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yjg5OTNhOTMtNTg4OS00ZTAyLTllOTUtNzY5Y2I4OWUwMDM1LzAvNjVGRTFEQTI3 QjgyQTBGOUFDMzE4NTUyRkQyRkQwMEVGNjZCRjdDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NUZFMURBMjdCODJBMEY5QUMzMTg1NTJGRDJGRDAwRUY2NkJG N0NELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjg5OTNhOTMtNTg4OS00ZTAyLTll OTUtNzY5Y2I4OWUwMDM1LzAvNjVGRTFEQTI3QjgyQTBGOUFDMzE4NTUyRkQyRkQw MEVGNjZCRjdDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACWvswdCcpLmZ5KB3Nak+kunlsSh/FhIY/jU 32IBwJ70O8Z8QBwhhXv07ThwqvRNZYiwKj/GtkQfVavkIuXSRuMpaTBDV5QURFu4 HgBFnp6ZvjvWoG7gkymkgeDCc5DxqbzH+iP5XGTNxYu5FzjeTZ38oVsfXG+ceksH WqhiTiBd+wKPEI3hXCOO8Rt7dGvixyx8ZvjKUJfDlRViCGow98gxXXcc8CbmYA9J iLTkNXPyjPQgdTkTfxVP1C30Bg0NI/EI9SGkBHTK3KNPVUNJMK32Rltb3EqGFB0p W24LltLHL38SQlhqwNG9NdVeM32j3s+QfeUUOsSMZnLoC5oSViE= -----END CERTIFICATE-----Generated at Tue May 12 22:46:07 2026 by rpki-client