$ rpki-client -vvf rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/A65F65BF2DB9317754BA910F052FC09429259CBC.mft File: A65F65BF2DB9317754BA910F052FC09429259CBC.mft (raw, json) Hash identifier: e19WikCAjBbaoHu9ami4tfuoBbBffcG7JFWlplslM0Y= Subject key identifier: 70:FB:F0:48:7F:E2:B6:96:B4:C2:D3:72:8E:35:18:DB:53:EB:5B:F4 Authority key identifier: A6:5F:65:BF:2D:B9:31:77:54:BA:91:0F:05:2F:C0:94:29:25:9C:BC Certificate issuer: /CN=A65F65BF2DB9317754BA910F052FC09429259CBC Certificate serial: 389E2391E84383F286A129BC31260E88B0E78FF7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A65F65BF2DB9317754BA910F052FC09429259CBC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/A65F65BF2DB9317754BA910F052FC09429259CBC.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 19:28:57 +0000 Manifest this update: Thu 23 Jul 2026 19:23:57 +0000 Manifest next update: Fri 24 Jul 2026 22:23:57 +0000 Files and hashes: 1: 3135372e32302e3230382e302f32332d3233203d3e20313532343136.roa (hash: 6sJwEQuVC2SCQbpKDbpQ7062AUPzj2WmwzEMVpDHp88=) 2: 3135372e32302e3230382e302f32342d3234203d3e20313532343136.roa (hash: vffHdk9OOgHjUn3gX3E1MpxE/+kaQ1DhpiQKkuuDY58=) 3: A65F65BF2DB9317754BA910F052FC09429259CBC.crl (hash: 5ar+KrVUuxoeCTTBGyKXPc2PC+5Bg05MNEcUrRmwlig=) 4: 3135372e32302e3230392e302f32342d3234203d3e20313532343136.roa (hash: rwfp5y5H5qPfQhaF6rDqIcStalVTGJI0mJpk4RX2nTI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/A65F65BF2DB9317754BA910F052FC09429259CBC.crl rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/A65F65BF2DB9317754BA910F052FC09429259CBC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A65F65BF2DB9317754BA910F052FC09429259CBC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:23:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:9e:23:91:e8:43:83:f2:86:a1:29:bc:31:26:0e:88:b0:e7:8f:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A65F65BF2DB9317754BA910F052FC09429259CBC Validity Not Before: Jul 23 19:23:57 2026 GMT Not After : Jul 24 22:23:57 2026 GMT Subject: CN=70FBF0487FE2B696B4C2D3728E3518DB53EB5BF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:72:28:2a:8d:8d:8e:63:2d:1d:48:50:9c:a8: 09:84:1a:87:c2:92:e5:f5:44:1d:bf:8d:37:14:61: 90:bf:f8:e4:af:bb:49:6a:ce:37:a2:36:c3:ee:67: 3c:7e:95:e5:06:f1:f9:87:e9:d3:8e:ff:92:d2:3d: 26:62:d7:2a:3c:20:98:6e:37:99:ff:8f:57:70:6d: c4:60:5b:ea:97:47:dc:86:b9:24:42:48:f4:03:46: a0:af:90:f5:80:99:b0:90:cd:0e:a7:c5:6e:b6:f5: c7:60:68:76:bb:16:27:0c:a1:23:36:0c:f9:ed:a1: 05:a2:ce:ba:26:ec:48:e1:c8:9d:dc:47:eb:05:33: 1c:74:0e:62:3b:5c:fd:2b:c7:32:e0:fa:a9:bd:9f: b9:5c:eb:65:67:65:18:f8:a3:9b:e3:51:08:7f:56: 0e:9d:53:cb:e4:6f:ce:ef:c5:b0:f4:f9:e5:c3:f4: b6:aa:46:aa:09:da:90:9f:46:2e:d6:10:74:16:74: 4a:0c:86:3d:29:d9:25:20:ce:4d:bf:b5:0b:cd:74: 40:9a:50:0e:d5:50:13:bd:76:b8:f7:bf:cc:1b:b3: d8:48:53:f7:3c:31:12:4e:c8:37:43:c1:6a:b6:ab: f8:66:d8:12:b7:a5:8b:78:5f:fd:64:44:79:8f:88: 42:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:FB:F0:48:7F:E2:B6:96:B4:C2:D3:72:8E:35:18:DB:53:EB:5B:F4 X509v3 Authority Key Identifier: keyid:A6:5F:65:BF:2D:B9:31:77:54:BA:91:0F:05:2F:C0:94:29:25:9C:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/A65F65BF2DB9317754BA910F052FC09429259CBC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A65F65BF2DB9317754BA910F052FC09429259CBC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/A65F65BF2DB9317754BA910F052FC09429259CBC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:46:8d:91:07:7e:c0:2f:16:bb:8c:9a:84:ca:30:32:ef:3c: 40:62:d5:a5:ec:06:25:0c:d8:3c:97:38:52:bf:53:b1:74:b6: 9d:99:17:4b:db:8a:3e:72:f5:5b:e1:87:15:82:43:83:34:6a: 27:34:02:1c:71:1f:78:d7:a7:45:3c:e6:28:5f:0b:70:bc:e9: e6:5d:f5:c3:12:df:ea:4a:f4:e0:99:54:45:5a:b1:4f:75:44: 81:ae:8f:4c:75:4d:53:c0:04:11:6d:5f:9e:c4:72:f8:5e:91: 8c:da:c3:a2:50:35:90:67:29:01:5f:bd:3d:27:96:48:f5:45: 52:81:91:2f:f1:40:3f:33:f2:a6:c1:37:31:e9:7f:66:b6:09: 05:be:be:f8:df:28:23:0c:ac:22:f9:d3:fd:8f:c3:da:7a:a1: cf:07:af:c5:98:07:d9:3a:d6:e2:5b:7f:25:61:0a:bd:c4:27: dc:b2:b6:71:a5:05:c4:91:ea:d9:30:55:50:70:ba:9f:1a:5f: b2:7a:08:dc:62:13:83:51:29:1d:3c:9f:01:62:06:c9:cb:5f: 3c:86:3a:f3:ed:23:5f:1e:2d:80:27:25:3d:52:b9:a8:b1:78: 86:0c:c1:f4:91:c1:ba:6a:ae:f2:ac:4e:b2:25:0b:88:bd:2c: 5f:cf:e4:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOJ4jkehDg/KGoSm8MSYOiLDnj/cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY1RjY1QkYyREI5MzE3NzU0QkE5MTBGMDUyRkMwOTQy OTI1OUNCQzAeFw0yNjA3MjMxOTIzNTdaFw0yNjA3MjQyMjIzNTdaMDMxMTAvBgNV BAMTKDcwRkJGMDQ4N0ZFMkI2OTZCNEMyRDM3MjhFMzUxOERCNTNFQjVCRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtcigqjY2OYy0dSFCcqAmEGofC kuX1RB2/jTcUYZC/+OSvu0lqzjeiNsPuZzx+leUG8fmH6dOO/5LSPSZi1yo8IJhu N5n/j1dwbcRgW+qXR9yGuSRCSPQDRqCvkPWAmbCQzQ6nxW629cdgaHa7FicMoSM2 DPntoQWizrom7EjhyJ3cR+sFMxx0DmI7XP0rxzLg+qm9n7lc62VnZRj4o5vjUQh/ Vg6dU8vkb87vxbD0+eXD9LaqRqoJ2pCfRi7WEHQWdEoMhj0p2SUgzk2/tQvNdECa UA7VUBO9drj3v8wbs9hIU/c8MRJOyDdDwWq2q/hm2BK3pYt4X/1kRHmPiEIzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcPvwSH/itpa0wtNyjjUY21PrW/QwHwYDVR0j BBgwFoAUpl9lvy25MXdUupEPBS/AlCklnLwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGM0MDk0ZDItZTE4ZC00ODQwLTg0ZmEtYzU3NTdhZjU4MGYxLzAvQTY1RjY1QkYy REI5MzE3NzU0QkE5MTBGMDUyRkMwOTQyOTI1OUNCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BNjVGNjVCRjJEQjkzMTc3NTRCQTkxMEYwNTJGQzA5NDI5MjU5 Q0JDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGM0MDk0ZDItZTE4ZC00ODQwLTg0 ZmEtYzU3NTdhZjU4MGYxLzAvQTY1RjY1QkYyREI5MzE3NzU0QkE5MTBGMDUyRkMw OTQyOTI1OUNCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAElGjZEHfsAvFruMmoTKMDLvPEBi1aXsBiUM 2DyXOFK/U7F0tp2ZF0vbij5y9VvhhxWCQ4M0aic0AhxxH3jXp0U85ihfC3C86eZd 9cMS3+pK9OCZVEVasU91RIGuj0x1TVPABBFtX57EcvhekYzaw6JQNZBnKQFfvT0n lkj1RVKBkS/xQD8z8qbBNzHpf2a2CQW+vvjfKCMMrCL50/2Pw9p6oc8Hr8WYB9k6 1uJbfyVhCr3EJ9yytnGlBcSR6tkwVVBwup8aX7J6CNxiE4NRKR08nwFiBsnLXzyG OvPtI18eLYAnJT1SuaixeIYMwfSRwbpqrvKsTrIlC4i9LF/P5DM= -----END CERTIFICATE-----Generated at Fri Jul 24 07:26:56 2026 by rpki-client