$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/A65F65BF2DB9317754BA910F052FC09429259CBC.mft File: A65F65BF2DB9317754BA910F052FC09429259CBC.mft (raw, json) Hash identifier: 3e0+Z9Rca+AkrU5jxi/v3mMtWeAHIC+zY38er3FVbOk= Subject key identifier: F7:A9:05:A5:4B:40:11:00:3E:64:46:D7:DE:EE:2D:29:24:9A:E7:1B Authority key identifier: A6:5F:65:BF:2D:B9:31:77:54:BA:91:0F:05:2F:C0:94:29:25:9C:BC Certificate issuer: /CN=A65F65BF2DB9317754BA910F052FC09429259CBC Certificate serial: 291EACEA6167C166DD59B7D83A452E0394981B20 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A65F65BF2DB9317754BA910F052FC09429259CBC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/A65F65BF2DB9317754BA910F052FC09429259CBC.mft Manifest number: 0105 Signing time: Sat 14 Nov 2026 05:20:54 +0000 Manifest this update: Sat 14 Nov 2026 05:15:54 +0000 Manifest next update: Sun 15 Nov 2026 07:33:54 +0000 Files and hashes: 1: 3135372e32302e3230382e302f32332d3233203d3e20313532343136.roa (hash: 6sJwEQuVC2SCQbpKDbpQ7062AUPzj2WmwzEMVpDHp88=) 2: 3135372e32302e3230392e302f32342d3234203d3e20313532343136.roa (hash: rwfp5y5H5qPfQhaF6rDqIcStalVTGJI0mJpk4RX2nTI=) 3: A65F65BF2DB9317754BA910F052FC09429259CBC.crl (hash: 5wi+INNmtSpAwh0yMo28W4H5BFLbL8DbhPoRPyOblyI=) 4: 3135372e32302e3230382e302f32342d3234203d3e20313532343136.roa (hash: vffHdk9OOgHjUn3gX3E1MpxE/+kaQ1DhpiQKkuuDY58=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/A65F65BF2DB9317754BA910F052FC09429259CBC.crl rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/A65F65BF2DB9317754BA910F052FC09429259CBC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A65F65BF2DB9317754BA910F052FC09429259CBC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 07:33:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:1e:ac:ea:61:67:c1:66:dd:59:b7:d8:3a:45:2e:03:94:98:1b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A65F65BF2DB9317754BA910F052FC09429259CBC Validity Not Before: Nov 14 05:15:54 2026 GMT Not After : Nov 15 07:33:54 2026 GMT Subject: CN=F7A905A54B4011003E6446D7DEEE2D29249AE71B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:84:93:c2:c6:e1:8f:fd:8c:bc:af:a6:80:39: 67:d3:b3:41:69:f6:cc:c0:2b:8c:40:da:f2:5d:17: ec:b6:55:c6:91:e4:f1:e3:ba:b8:63:62:09:74:64: 96:c1:80:47:3e:79:96:91:f7:e1:8d:0b:18:5c:bf: 54:e7:31:33:74:f7:1f:e6:09:b5:4f:02:7f:9b:69: 87:7f:9e:0e:3e:d3:ff:81:37:65:7d:95:c2:4c:63: 37:56:c5:a2:fc:1e:79:46:7d:11:49:57:df:23:6b: bc:63:92:c2:6a:68:a5:59:74:45:ba:fc:26:51:f5: 74:af:63:8f:08:58:4a:37:97:5d:a4:62:a0:0b:af: 24:7d:e2:fb:3f:ec:b7:d4:e0:73:2d:75:c2:ee:8c: 6a:b9:40:67:79:22:10:7f:e1:cf:3f:78:b8:c3:41: 4f:d9:31:0d:75:da:2f:57:df:63:06:74:3c:db:9a: e5:e0:4d:36:29:ac:2d:c3:d6:72:72:2b:1c:c9:49: d2:4a:2d:5c:23:6b:7f:1a:9e:c9:33:99:1f:21:57: d5:bb:d3:d7:4d:bd:9e:f5:d0:48:fa:cc:45:2d:3b: b9:f1:57:e3:80:1e:94:0f:22:24:76:ac:44:aa:ff: f3:01:e2:36:98:8b:b8:39:f9:9a:0f:45:76:04:1e: 90:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:A9:05:A5:4B:40:11:00:3E:64:46:D7:DE:EE:2D:29:24:9A:E7:1B X509v3 Authority Key Identifier: keyid:A6:5F:65:BF:2D:B9:31:77:54:BA:91:0F:05:2F:C0:94:29:25:9C:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/A65F65BF2DB9317754BA910F052FC09429259CBC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A65F65BF2DB9317754BA910F052FC09429259CBC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/A65F65BF2DB9317754BA910F052FC09429259CBC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:ae:57:85:35:9f:5e:b2:83:35:ea:ab:4c:2d:ae:c5:78:a0: e3:a8:22:72:29:50:19:41:7a:57:39:52:d3:9d:f3:8c:87:6c: 1d:86:25:78:20:47:e0:0d:79:ee:1a:1b:92:0a:d7:b1:d4:fe: 16:f1:44:c5:99:8e:c8:76:e4:66:f0:7f:ff:16:38:26:57:5d: 15:f5:73:3e:bb:2f:69:8d:f0:1e:2a:43:dd:f8:aa:d6:df:84: 38:29:b7:70:f8:1e:4e:c2:9b:23:91:ca:9b:40:b3:4f:b3:f0: d3:92:ad:65:54:29:e5:bb:e2:3f:1e:7a:d0:55:c6:4f:0f:cb: 9e:8d:4d:45:56:9e:07:8c:ef:42:4f:46:ed:66:53:ba:a6:2c: 90:f4:7d:9b:7f:e1:75:96:75:b9:90:36:d3:86:42:e2:92:1b: 44:5c:c9:8c:6e:6e:e3:62:2d:9d:4f:b1:83:af:9a:80:54:2e: 35:3c:79:f4:a5:8d:d0:3d:46:ca:41:ef:20:85:a9:9b:1b:cd: a9:14:2e:44:ab:2b:2a:5b:a9:9b:96:3d:cf:e1:71:e8:bb:7d: 49:65:77:a3:49:db:dc:d1:18:fc:0b:96:11:8c:e7:37:f6:b4: e9:5c:08:63:74:42:68:05:94:c7:1b:3a:da:d9:c4:04:1c:da: e9:23:8a:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKR6s6mFnwWbdWbfYOkUuA5SYGyAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY1RjY1QkYyREI5MzE3NzU0QkE5MTBGMDUyRkMwOTQy OTI1OUNCQzAeFw0yNjExMTQwNTE1NTRaFw0yNjExMTUwNzMzNTRaMDMxMTAvBgNV BAMTKEY3QTkwNUE1NEI0MDExMDAzRTY0NDZEN0RFRUUyRDI5MjQ5QUU3MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMhJPCxuGP/Yy8r6aAOWfTs0Fp 9szAK4xA2vJdF+y2VcaR5PHjurhjYgl0ZJbBgEc+eZaR9+GNCxhcv1TnMTN09x/m CbVPAn+baYd/ng4+0/+BN2V9lcJMYzdWxaL8HnlGfRFJV98ja7xjksJqaKVZdEW6 /CZR9XSvY48IWEo3l12kYqALryR94vs/7LfU4HMtdcLujGq5QGd5IhB/4c8/eLjD QU/ZMQ112i9X32MGdDzbmuXgTTYprC3D1nJyKxzJSdJKLVwja38anskzmR8hV9W7 09dNvZ710Ej6zEUtO7nxV+OAHpQPIiR2rESq//MB4jaYi7g5+ZoPRXYEHpC9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU96kFpUtAEQA+ZEbX3u4tKSSa5xswHwYDVR0j BBgwFoAUpl9lvy25MXdUupEPBS/AlCklnLwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGM0MDk0ZDItZTE4ZC00ODQwLTg0ZmEtYzU3NTdhZjU4MGYxLzAvQTY1RjY1QkYy REI5MzE3NzU0QkE5MTBGMDUyRkMwOTQyOTI1OUNCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BNjVGNjVCRjJEQjkzMTc3NTRCQTkxMEYwNTJGQzA5NDI5MjU5 Q0JDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGM0MDk0ZDItZTE4ZC00ODQwLTg0 ZmEtYzU3NTdhZjU4MGYxLzAvQTY1RjY1QkYyREI5MzE3NzU0QkE5MTBGMDUyRkMw OTQyOTI1OUNCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABiuV4U1n16ygzXqq0wtrsV4oOOoInIpUBlB elc5UtOd84yHbB2GJXggR+ANee4aG5IK17HU/hbxRMWZjsh25Gbwf/8WOCZXXRX1 cz67L2mN8B4qQ934qtbfhDgpt3D4Hk7CmyORyptAs0+z8NOSrWVUKeW74j8eetBV xk8Py56NTUVWngeM70JPRu1mU7qmLJD0fZt/4XWWdbmQNtOGQuKSG0RcyYxubuNi LZ1PsYOvmoBULjU8efSljdA9RspB7yCFqZsbzakULkSrKypbqZuWPc/hcei7fUll d6NJ29zRGPwLlhGM5zf2tOlcCGN0QmgFlMcbOtrZxAQc2ukjiqg= -----END CERTIFICATE-----Generated at Sat Nov 14 22:25:03 2026 by rpki-client