$ rpki-client -vvf rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/A65F65BF2DB9317754BA910F052FC09429259CBC.mft File: A65F65BF2DB9317754BA910F052FC09429259CBC.mft (raw, json) Hash identifier: iQ80ixKyhGtw8Ow/F/3dOG00KeYHDlEMMtaPANnwEhY= Subject key identifier: B8:62:8C:C9:0D:71:11:7B:65:02:56:D9:35:B8:E5:7C:24:E7:F2:D5 Authority key identifier: A6:5F:65:BF:2D:B9:31:77:54:BA:91:0F:05:2F:C0:94:29:25:9C:BC Certificate issuer: /CN=A65F65BF2DB9317754BA910F052FC09429259CBC Certificate serial: 42F350374D2181F6689C01078E3842B0F207B3A7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A65F65BF2DB9317754BA910F052FC09429259CBC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/A65F65BF2DB9317754BA910F052FC09429259CBC.mft Manifest number: 0E Signing time: Tue 12 May 2026 01:02:51 +0000 Manifest this update: Tue 12 May 2026 00:57:51 +0000 Manifest next update: Wed 13 May 2026 04:34:51 +0000 Files and hashes: 1: 3135372e32302e3230382e302f32342d3234203d3e20313532343136.roa (hash: vffHdk9OOgHjUn3gX3E1MpxE/+kaQ1DhpiQKkuuDY58=) 2: 3135372e32302e3230392e302f32342d3234203d3e20313532343136.roa (hash: rwfp5y5H5qPfQhaF6rDqIcStalVTGJI0mJpk4RX2nTI=) 3: 3135372e32302e3230382e302f32332d3233203d3e20313532343136.roa (hash: 6sJwEQuVC2SCQbpKDbpQ7062AUPzj2WmwzEMVpDHp88=) 4: A65F65BF2DB9317754BA910F052FC09429259CBC.crl (hash: Z9PeqKwt4SO0YZKOcY/iyyvDGzOueNKR0+tYP3twTUA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/A65F65BF2DB9317754BA910F052FC09429259CBC.crl rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/A65F65BF2DB9317754BA910F052FC09429259CBC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A65F65BF2DB9317754BA910F052FC09429259CBC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 04:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:f3:50:37:4d:21:81:f6:68:9c:01:07:8e:38:42:b0:f2:07:b3:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A65F65BF2DB9317754BA910F052FC09429259CBC Validity Not Before: May 12 00:57:51 2026 GMT Not After : May 13 04:34:51 2026 GMT Subject: CN=B8628CC90D71117B650256D935B8E57C24E7F2D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:58:24:5e:82:9c:6f:09:92:47:86:13:f5:71: 90:24:52:b0:87:25:53:95:0f:a0:32:4b:9d:c9:7e: d3:99:88:88:76:53:b5:56:a0:8a:dc:4a:5e:96:05: c8:eb:ff:67:91:e6:57:db:79:22:18:e2:44:ff:03: a5:f2:2a:4e:bd:a6:0e:f3:38:70:e5:62:96:6a:68: 80:7e:1c:85:a2:2c:72:0f:31:d9:59:69:36:ed:ec: 52:92:67:58:ff:8d:0b:73:f6:6b:ff:16:a4:b6:f8: 53:70:41:f9:6f:31:be:be:67:1a:94:a1:d3:d3:76: bd:75:26:e8:c8:c5:a6:58:d5:fb:5f:e4:4a:af:f5: e4:f1:4a:47:a3:95:90:12:e4:91:f2:00:7a:8e:72: ed:4a:39:bb:23:eb:e7:ef:b8:57:cd:a7:af:61:60: 64:fb:32:7b:fb:67:80:a4:c3:07:d8:23:64:9d:06: f9:11:f8:f4:fb:e9:70:ee:c1:41:cc:30:e6:09:81: 05:40:68:05:3e:e7:38:ca:1b:5e:5d:0b:16:58:19: 14:3d:59:71:05:f3:b3:ff:79:77:8b:17:b2:d4:98: 36:e6:97:fc:b3:7b:0d:3d:14:89:5e:b5:9e:b0:f5: 91:1e:5b:a3:1a:5c:c2:67:5b:e4:ac:72:a3:43:50: f7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:62:8C:C9:0D:71:11:7B:65:02:56:D9:35:B8:E5:7C:24:E7:F2:D5 X509v3 Authority Key Identifier: keyid:A6:5F:65:BF:2D:B9:31:77:54:BA:91:0F:05:2F:C0:94:29:25:9C:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/A65F65BF2DB9317754BA910F052FC09429259CBC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A65F65BF2DB9317754BA910F052FC09429259CBC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/A65F65BF2DB9317754BA910F052FC09429259CBC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:a3:00:1a:b2:d5:f3:7c:cc:88:62:d5:10:26:34:f3:4c:66: 58:37:15:a9:d5:f1:2c:e4:4f:cc:5c:fc:af:a9:c5:ec:34:9d: 1e:97:72:5a:ea:88:b2:9f:0a:e1:22:9f:1d:b4:7b:5e:30:d7: 18:73:55:60:8b:4c:ae:3a:4d:55:4b:cc:ca:bc:72:ba:32:2c: 5f:90:47:1c:d3:83:1c:ae:06:a6:cc:3c:2b:29:17:d6:44:e9: c7:e4:c6:b4:b4:d0:e6:81:0d:0c:a7:cc:d3:57:a7:e9:fc:c0: a9:c7:bf:8c:df:9e:f8:3d:d9:54:98:8b:ff:46:f0:2b:d8:6f: 2a:63:af:38:06:1b:54:e7:aa:e2:47:5f:a2:32:e1:c6:13:f7: 68:78:bd:2d:30:36:ec:03:95:86:8e:4f:f4:b2:67:8d:c4:57: 55:b0:59:f7:0c:10:61:de:c1:7d:eb:97:44:98:36:1e:49:0c: c9:5c:92:e9:b7:b9:a4:a8:a2:fb:7e:58:77:b3:ad:54:10:76: e1:0b:9a:7f:71:e9:97:fd:b8:26:35:e6:eb:fa:f9:f7:08:57: c0:0d:f7:72:59:dc:da:5b:45:bf:d0:93:f3:b7:db:74:37:46: 95:4f:80:aa:22:4a:6f:7e:a5:21:d6:02:34:d7:87:df:bf:db: 09:be:e1:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQvNQN00hgfZonAEHjjhCsPIHs6cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY1RjY1QkYyREI5MzE3NzU0QkE5MTBGMDUyRkMwOTQy OTI1OUNCQzAeFw0yNjA1MTIwMDU3NTFaFw0yNjA1MTMwNDM0NTFaMDMxMTAvBgNV BAMTKEI4NjI4Q0M5MEQ3MTExN0I2NTAyNTZEOTM1QjhFNTdDMjRFN0YyRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDWCRegpxvCZJHhhP1cZAkUrCH JVOVD6AyS53JftOZiIh2U7VWoIrcSl6WBcjr/2eR5lfbeSIY4kT/A6XyKk69pg7z OHDlYpZqaIB+HIWiLHIPMdlZaTbt7FKSZ1j/jQtz9mv/FqS2+FNwQflvMb6+ZxqU odPTdr11JujIxaZY1ftf5Eqv9eTxSkejlZAS5JHyAHqOcu1KObsj6+fvuFfNp69h YGT7Mnv7Z4CkwwfYI2SdBvkR+PT76XDuwUHMMOYJgQVAaAU+5zjKG15dCxZYGRQ9 WXEF87P/eXeLF7LUmDbml/yzew09FIletZ6w9ZEeW6MaXMJnW+SscqNDUPfFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuGKMyQ1xEXtlAlbZNbjlfCTn8tUwHwYDVR0j BBgwFoAUpl9lvy25MXdUupEPBS/AlCklnLwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGM0MDk0ZDItZTE4ZC00ODQwLTg0ZmEtYzU3NTdhZjU4MGYxLzAvQTY1RjY1QkYy REI5MzE3NzU0QkE5MTBGMDUyRkMwOTQyOTI1OUNCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BNjVGNjVCRjJEQjkzMTc3NTRCQTkxMEYwNTJGQzA5NDI5MjU5 Q0JDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGM0MDk0ZDItZTE4ZC00ODQwLTg0 ZmEtYzU3NTdhZjU4MGYxLzAvQTY1RjY1QkYyREI5MzE3NzU0QkE5MTBGMDUyRkMw OTQyOTI1OUNCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEijABqy1fN8zIhi1RAmNPNMZlg3FanV8Szk T8xc/K+pxew0nR6XclrqiLKfCuEinx20e14w1xhzVWCLTK46TVVLzMq8croyLF+Q RxzTgxyuBqbMPCspF9ZE6cfkxrS00OaBDQynzNNXp+n8wKnHv4zfnvg92VSYi/9G 8CvYbypjrzgGG1TnquJHX6Iy4cYT92h4vS0wNuwDlYaOT/SyZ43EV1WwWfcMEGHe wX3rl0SYNh5JDMlckum3uaSoovt+WHezrVQQduELmn9x6Zf9uCY15uv6+fcIV8AN 93JZ3NpbRb/Qk/O323Q3RpVPgKoiSm9+pSHWAjTXh9+/2wm+4cw= -----END CERTIFICATE-----Generated at Tue May 12 22:39:39 2026 by rpki-client