
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.mft
File: 65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.mft (raw, json)
Hash identifier: MjKvRQDjVc+wy/sh2tTSoSti0E7IrucbJUSATj/MYxo=
Subject key identifier: 1F:26:31:7D:10:68:59:38:9B:A3:5E:AE:10:93:B7:F5:A0:9C:F8:55
Authority key identifier: 65:FE:1D:A2:7B:82:A0:F9:AC:31:85:52:FD:2F:D0:0E:F6:6B:F7:CD
Certificate issuer: /CN=65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD
Certificate serial: 16EE4AE21C85E0CD9526A3E133708E15EDEECB3D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.mft
Manifest number: C1
Signing time: Wed 23 Sep 2026 23:50:27 +0000
Manifest this update: Wed 23 Sep 2026 23:45:27 +0000
Manifest next update: Fri 25 Sep 2026 01:07:27 +0000
Files and hashes: 1: 3130332e3139342e34362e302f32332d3234203d3e20313439393731.roa (hash: 4ExEorQAkAboUfCg4xl3LFUmZFGrqFAxLJKE8qeWaSE=)
2: 65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.crl (hash: eVBJEGdbT2XSzR/GDqAvg14jXJBaWfx9EMIiDuHCtxg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.crl
rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 01:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:ee:4a:e2:1c:85:e0:cd:95:26:a3:e1:33:70:8e:15:ed:ee:cb:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD
Validity
Not Before: Sep 23 23:45:27 2026 GMT
Not After : Sep 25 01:07:27 2026 GMT
Subject: CN=1F26317D106859389BA35EAE1093B7F5A09CF855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b4:a8:34:48:8e:67:ca:14:1c:bd:17:3c:dd:
8d:d8:88:ef:31:69:6c:38:2d:27:34:2a:68:78:8f:
0d:54:f4:46:48:9d:61:f2:39:6a:e1:10:69:97:95:
38:f1:ee:0b:13:5f:36:61:3a:96:52:b1:19:16:e6:
46:19:46:a6:31:55:66:4d:b6:f0:b7:2a:51:0b:f2:
09:09:09:8b:d3:51:9c:af:8b:35:33:bc:f0:4f:15:
37:c4:03:c5:f1:68:35:05:e3:23:ad:8b:43:11:16:
09:f1:36:cb:1d:91:7b:a8:e7:2a:7d:f1:04:f6:0f:
e4:5b:e8:12:76:58:23:cc:14:df:91:2e:3b:b3:44:
c4:c7:b9:e2:9f:60:44:20:27:43:ff:2c:60:5b:17:
76:80:2d:d1:dc:48:08:8a:5f:35:0c:65:d9:de:9f:
48:51:74:c5:e0:de:82:11:38:15:a8:cc:be:2d:6d:
e2:63:60:93:89:0f:e6:fc:41:25:12:83:63:6a:12:
15:8a:ba:ca:07:dc:63:1a:7f:70:30:81:2d:72:5f:
ea:37:74:90:69:01:96:4e:a0:24:a0:97:1d:05:e0:
d7:18:24:e1:d7:25:60:3a:7a:24:21:38:cf:f2:a6:
3f:d8:6c:c2:de:6b:59:5a:5b:4b:7a:23:27:8e:42:
2e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:26:31:7D:10:68:59:38:9B:A3:5E:AE:10:93:B7:F5:A0:9C:F8:55
X509v3 Authority Key Identifier:
keyid:65:FE:1D:A2:7B:82:A0:F9:AC:31:85:52:FD:2F:D0:0E:F6:6B:F7:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:47:9c:b2:c8:5c:2e:e8:04:1d:f1:5f:45:5c:d1:ba:4e:59:
f7:e8:5d:2b:07:19:32:e7:27:63:aa:3a:b9:e0:2f:ca:04:8b:
b5:59:c7:ff:12:a0:92:64:d6:63:89:4f:14:46:61:94:62:2b:
ed:36:bb:ec:33:95:2d:6d:a7:c9:54:a0:95:82:d2:2d:69:14:
d0:2c:2d:07:24:ff:ba:9a:46:6f:2f:84:4b:fd:cf:22:40:22:
87:75:fc:bf:04:6a:52:23:c2:3f:3d:da:27:6a:39:f0:28:bc:
28:4b:4b:89:a0:17:32:20:44:16:b8:5d:ba:7f:ac:4a:54:07:
cf:40:1d:24:a9:8a:d6:05:d5:4d:3d:dd:34:b9:ed:4d:73:51:
bf:b6:ee:57:85:ea:f2:7c:3c:f1:92:07:f4:f1:b4:23:ce:d3:
03:8e:41:0f:2f:af:fe:b0:5c:0b:65:1d:27:9c:fc:59:23:ea:
dd:b6:e8:f4:ce:e1:c2:a5:af:3d:7f:2e:ec:5a:ca:75:1a:1e:
da:c9:7e:a3:1e:db:3d:8d:c7:75:54:14:92:b4:25:2a:08:30:
6a:ef:7d:da:12:a4:d5:c7:3c:77:cf:5e:be:b9:57:32:98:50:
f7:b9:11:f2:96:50:89:b7:ca:2e:58:88:bb:a7:d3:08:9a:47:
27:77:36:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:02:25 2026 by rpki-client