$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/A65F65BF2DB9317754BA910F052FC09429259CBC.mft File: A65F65BF2DB9317754BA910F052FC09429259CBC.mft (raw, json) Hash identifier: tOYU2Q17griFu0pWKLTIcr46ziaKybpnobNUo8VKeB8= Subject key identifier: C0:7C:20:4E:DB:6F:8C:7A:F8:59:6B:E6:0C:24:E3:94:7A:3C:92:73 Authority key identifier: A6:5F:65:BF:2D:B9:31:77:54:BA:91:0F:05:2F:C0:94:29:25:9C:BC Certificate issuer: /CN=A65F65BF2DB9317754BA910F052FC09429259CBC Certificate serial: 6B30CF4A816521D09BB34AF9CF3048EF545B5D8E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A65F65BF2DB9317754BA910F052FC09429259CBC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/A65F65BF2DB9317754BA910F052FC09429259CBC.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 08:41:57 +0000 Manifest this update: Wed 23 Sep 2026 08:36:57 +0000 Manifest next update: Thu 24 Sep 2026 09:12:57 +0000 Files and hashes: 1: 3135372e32302e3230382e302f32332d3233203d3e20313532343136.roa (hash: 6sJwEQuVC2SCQbpKDbpQ7062AUPzj2WmwzEMVpDHp88=) 2: 3135372e32302e3230382e302f32342d3234203d3e20313532343136.roa (hash: vffHdk9OOgHjUn3gX3E1MpxE/+kaQ1DhpiQKkuuDY58=) 3: 3135372e32302e3230392e302f32342d3234203d3e20313532343136.roa (hash: rwfp5y5H5qPfQhaF6rDqIcStalVTGJI0mJpk4RX2nTI=) 4: A65F65BF2DB9317754BA910F052FC09429259CBC.crl (hash: guY9JGAuCVSowtxfEsZQxoIsnXgMxseLtls+JtUZ3jY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/A65F65BF2DB9317754BA910F052FC09429259CBC.crl rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/A65F65BF2DB9317754BA910F052FC09429259CBC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A65F65BF2DB9317754BA910F052FC09429259CBC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 09:12:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:30:cf:4a:81:65:21:d0:9b:b3:4a:f9:cf:30:48:ef:54:5b:5d:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A65F65BF2DB9317754BA910F052FC09429259CBC Validity Not Before: Sep 23 08:36:57 2026 GMT Not After : Sep 24 09:12:57 2026 GMT Subject: CN=C07C204EDB6F8C7AF8596BE60C24E3947A3C9273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0d:e8:e9:19:5c:75:c2:4e:f5:ea:44:d6:27: bd:d5:98:90:d0:f0:c9:05:07:ce:40:66:ee:43:a9: 77:b1:42:26:aa:b3:cb:70:9a:d9:b9:29:87:49:63: 6e:67:d6:36:14:58:a6:00:05:bf:65:d3:bd:06:b0: 9d:57:29:fd:9c:fd:49:6f:b7:4b:00:28:71:25:e4: d8:f0:d4:18:86:91:0b:b1:18:27:d8:b6:c5:71:9f: f1:88:8b:a5:10:c4:03:91:37:cc:a5:96:84:50:0b: fd:a7:c9:d1:da:d2:fe:22:e7:a2:06:63:54:4d:4e: 8f:21:6d:18:a9:af:4c:be:1e:b4:68:34:ff:db:3f: 6f:a8:c5:61:a6:9d:27:5f:51:39:f9:0e:91:7c:8f: 76:0a:49:63:90:4a:60:ba:16:08:2b:94:a0:73:f6: 6f:a5:a1:7d:03:ce:84:ae:f5:75:82:33:1e:32:f1: d5:19:f3:36:50:a2:4d:97:c1:88:44:5c:cf:64:33: a7:34:d9:60:6c:cb:dc:e0:72:f4:62:b1:a5:5d:09: 3d:2a:52:66:b1:85:57:52:9f:c3:28:58:9e:3e:fa: 83:20:f2:ee:25:1a:49:e2:5a:c7:89:32:be:e0:bb: bb:58:1f:d2:3e:9d:b8:3f:c7:12:a1:bb:21:e4:2a: 1f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:7C:20:4E:DB:6F:8C:7A:F8:59:6B:E6:0C:24:E3:94:7A:3C:92:73 X509v3 Authority Key Identifier: keyid:A6:5F:65:BF:2D:B9:31:77:54:BA:91:0F:05:2F:C0:94:29:25:9C:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/A65F65BF2DB9317754BA910F052FC09429259CBC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A65F65BF2DB9317754BA910F052FC09429259CBC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/A65F65BF2DB9317754BA910F052FC09429259CBC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:28:43:7c:2b:57:92:01:9a:f7:e1:f5:d0:42:f1:7a:70:64: 57:1f:0f:c5:70:4e:1d:ac:2c:1c:41:f9:71:7e:4e:3d:c8:90: bf:10:7a:5d:df:15:c7:7f:f0:99:65:6f:41:c6:88:ac:1c:ec: 07:38:01:28:4c:78:4b:c0:d7:56:dc:06:33:c6:74:b2:96:9a: 9e:0b:51:58:b3:4b:58:97:d0:ef:62:c0:b0:87:0e:45:c6:f5: 27:28:1c:c7:29:c8:55:d4:4f:40:93:67:a2:3a:24:73:0e:8d: 65:5a:65:63:fa:df:23:58:e5:5b:30:77:e3:ad:d4:3a:56:79: 01:39:8c:65:01:59:dd:ff:6a:be:14:00:82:7e:c6:a7:62:55: d1:e3:14:63:8e:67:78:7e:71:81:12:1f:23:13:e3:40:c4:24: b8:25:7a:af:93:7d:6c:de:ad:48:b3:b3:85:12:25:d9:38:b0: 35:25:ce:62:69:e9:e4:5c:b3:13:3e:12:1d:ab:c6:35:81:c7: 44:35:2b:91:34:81:2f:49:cd:e9:ec:18:f2:89:31:8a:17:6d: 19:51:85:a7:60:fe:4c:af:d3:a3:aa:ee:01:f7:66:a1:48:31: 8e:ea:55:3e:34:2a:9b:60:cf:9e:1b:58:a0:36:50:13:8c:d7: de:7e:44:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUazDPSoFlIdCbs0r5zzBI71RbXY4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY1RjY1QkYyREI5MzE3NzU0QkE5MTBGMDUyRkMwOTQy OTI1OUNCQzAeFw0yNjA5MjMwODM2NTdaFw0yNjA5MjQwOTEyNTdaMDMxMTAvBgNV BAMTKEMwN0MyMDRFREI2RjhDN0FGODU5NkJFNjBDMjRFMzk0N0EzQzkyNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSDejpGVx1wk716kTWJ73VmJDQ 8MkFB85AZu5DqXexQiaqs8twmtm5KYdJY25n1jYUWKYABb9l070GsJ1XKf2c/Ulv t0sAKHEl5Njw1BiGkQuxGCfYtsVxn/GIi6UQxAORN8ylloRQC/2nydHa0v4i56IG Y1RNTo8hbRipr0y+HrRoNP/bP2+oxWGmnSdfUTn5DpF8j3YKSWOQSmC6FggrlKBz 9m+loX0DzoSu9XWCMx4y8dUZ8zZQok2XwYhEXM9kM6c02WBsy9zgcvRisaVdCT0q UmaxhVdSn8MoWJ4++oMg8u4lGkniWseJMr7gu7tYH9I+nbg/xxKhuyHkKh8NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwHwgTttvjHr4WWvmDCTjlHo8knMwHwYDVR0j BBgwFoAUpl9lvy25MXdUupEPBS/AlCklnLwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGM0MDk0ZDItZTE4ZC00ODQwLTg0ZmEtYzU3NTdhZjU4MGYxLzAvQTY1RjY1QkYy REI5MzE3NzU0QkE5MTBGMDUyRkMwOTQyOTI1OUNCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BNjVGNjVCRjJEQjkzMTc3NTRCQTkxMEYwNTJGQzA5NDI5MjU5 Q0JDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGM0MDk0ZDItZTE4ZC00ODQwLTg0 ZmEtYzU3NTdhZjU4MGYxLzAvQTY1RjY1QkYyREI5MzE3NzU0QkE5MTBGMDUyRkMw OTQyOTI1OUNCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB8oQ3wrV5IBmvfh9dBC8XpwZFcfD8VwTh2s LBxB+XF+Tj3IkL8Qel3fFcd/8Jllb0HGiKwc7Ac4AShMeEvA11bcBjPGdLKWmp4L UVizS1iX0O9iwLCHDkXG9ScoHMcpyFXUT0CTZ6I6JHMOjWVaZWP63yNY5Vswd+Ot 1DpWeQE5jGUBWd3/ar4UAIJ+xqdiVdHjFGOOZ3h+cYESHyMT40DEJLgleq+TfWze rUizs4USJdk4sDUlzmJp6eRcsxM+Eh2rxjWBx0Q1K5E0gS9JzensGPKJMYoXbRlR hadg/kyv06Oq7gH3ZqFIMY7qVT40Kptgz54bWKA2UBOM195+RDc= -----END CERTIFICATE-----Generated at Wed Sep 23 20:50:57 2026 by rpki-client