$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e8506048-737e-441d-a913-29726c11d744/0/65B1AC6FC4D0F3ECC73AB47D61B0856F78976B1F.mft File: 65B1AC6FC4D0F3ECC73AB47D61B0856F78976B1F.mft (raw, json) Hash identifier: bq/eiswTiolA/wSAiCAcug/Frw2L24NmiggW6Yp3RC0= Subject key identifier: 0B:15:F2:F7:7D:41:19:5A:F3:98:56:C9:CE:D7:EB:A1:67:9A:1F:B6 Authority key identifier: 65:B1:AC:6F:C4:D0:F3:EC:C7:3A:B4:7D:61:B0:85:6F:78:97:6B:1F Certificate issuer: /CN=65B1AC6FC4D0F3ECC73AB47D61B0856F78976B1F Certificate serial: 2087F23D6828EC766553D10D71AEEFC9C89AB27E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65B1AC6FC4D0F3ECC73AB47D61B0856F78976B1F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e8506048-737e-441d-a913-29726c11d744/0/65B1AC6FC4D0F3ECC73AB47D61B0856F78976B1F.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 06:38:54 +0000 Manifest this update: Thu 24 Sep 2026 06:33:54 +0000 Manifest next update: Fri 25 Sep 2026 08:46:54 +0000 Files and hashes: 1: 65B1AC6FC4D0F3ECC73AB47D61B0856F78976B1F.crl (hash: jafdrJcXM9me2U87uhlD3jzKXD2saAnfJz6qnu9CRF8=) 2: 3130332e3137392e36392e302f32342d3234203d3e20313439333436.roa (hash: iF1/HI5T9x0r6R3Th5myrHplbkTjLUqKlDKBufNTpL0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e8506048-737e-441d-a913-29726c11d744/0/65B1AC6FC4D0F3ECC73AB47D61B0856F78976B1F.crl rsync://rpki-rsync.idnic.net/repo/e8506048-737e-441d-a913-29726c11d744/0/65B1AC6FC4D0F3ECC73AB47D61B0856F78976B1F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65B1AC6FC4D0F3ECC73AB47D61B0856F78976B1F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 08:46:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:87:f2:3d:68:28:ec:76:65:53:d1:0d:71:ae:ef:c9:c8:9a:b2:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65B1AC6FC4D0F3ECC73AB47D61B0856F78976B1F Validity Not Before: Sep 24 06:33:54 2026 GMT Not After : Sep 25 08:46:54 2026 GMT Subject: CN=0B15F2F77D41195AF39856C9CED7EBA1679A1FB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d4:f2:04:57:6f:db:1c:e2:0c:06:5c:85:e0: c5:f7:b2:7d:5d:66:b6:5c:3e:fb:ea:f7:86:40:c1: 09:51:41:77:aa:f9:d9:38:12:da:15:cd:68:4f:e4: ca:ca:9d:ad:02:82:38:ea:e9:9d:2a:ce:93:a7:4f: d2:2e:b9:d3:ee:c7:f8:82:65:84:54:a4:e9:dc:37: 8f:df:f3:15:03:d4:01:70:d4:db:05:66:a9:51:7d: fe:10:de:25:f2:b1:f5:8c:da:12:af:38:a1:44:2d: 0c:21:11:c3:92:e3:90:ab:4b:bb:44:9a:db:8c:bf: 38:f4:6b:7e:55:04:bd:2c:70:12:bd:fc:f9:94:e7: 90:cd:99:cf:9e:52:02:a7:7a:e9:6d:41:55:5b:5c: 2f:0e:ba:44:20:cf:98:3c:6b:fb:84:3e:b2:ce:2e: 8b:fd:5c:ee:0e:57:da:94:9d:ac:3a:a4:37:a8:8b: bb:1b:b3:fa:c5:24:a1:c8:e3:dc:2a:ad:fa:bf:ac: 1f:06:d9:36:08:89:bf:28:b3:49:56:df:b0:95:e6: 5e:2f:d5:38:7d:f1:c0:b7:89:c4:26:8a:61:68:72: 35:25:b6:c0:3c:50:49:f1:64:bc:44:47:be:96:45: 12:ca:e2:b8:2f:19:ec:be:c3:5b:c9:58:17:26:6e: 79:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:15:F2:F7:7D:41:19:5A:F3:98:56:C9:CE:D7:EB:A1:67:9A:1F:B6 X509v3 Authority Key Identifier: keyid:65:B1:AC:6F:C4:D0:F3:EC:C7:3A:B4:7D:61:B0:85:6F:78:97:6B:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e8506048-737e-441d-a913-29726c11d744/0/65B1AC6FC4D0F3ECC73AB47D61B0856F78976B1F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65B1AC6FC4D0F3ECC73AB47D61B0856F78976B1F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e8506048-737e-441d-a913-29726c11d744/0/65B1AC6FC4D0F3ECC73AB47D61B0856F78976B1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:2b:3c:ab:48:13:01:03:b5:4c:38:d1:42:ba:d9:52:26:6e: f0:84:70:17:71:cf:0b:14:92:b2:95:0c:be:da:d5:59:30:33: 3e:18:35:e8:52:71:8e:32:0b:23:c5:85:67:8c:68:0a:0d:07: fa:86:7a:29:72:13:7a:f7:b6:12:b8:6c:c0:e9:88:a4:f5:5f: 4b:98:d3:69:90:21:01:6f:11:05:92:31:ac:93:60:8b:23:fb: e5:85:77:5d:41:c7:42:cf:05:9c:c3:0e:06:46:0d:02:72:ec: 84:08:1e:12:94:2d:36:aa:bc:96:2c:a4:76:6f:8c:40:11:a1: 6b:44:69:aa:e3:3b:8f:cb:4e:32:1e:75:fc:90:4e:40:7d:47: cc:33:6b:84:05:e1:d5:3b:cb:07:9a:a7:5b:07:85:15:b8:5d: 03:08:bf:81:62:7e:a1:c1:5a:60:30:82:47:f9:85:bc:94:c4: 49:8e:ec:2c:b1:cc:3d:98:de:28:d5:ae:39:07:07:72:cf:e1: 13:ee:d7:ba:db:88:ae:38:e7:60:f8:08:a6:16:26:b6:a9:83: 8d:be:7e:5a:2e:4e:fc:fa:72:0f:cf:65:0a:dc:02:28:f4:95: 99:51:60:7b:11:0d:6e:dc:12:ac:18:5c:59:50:a2:70:1e:74: 2f:cf:36:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIIfyPWgo7HZlU9ENca7vyciasn4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVCMUFDNkZDNEQwRjNFQ0M3M0FCNDdENjFCMDg1NkY3 ODk3NkIxRjAeFw0yNjA5MjQwNjMzNTRaFw0yNjA5MjUwODQ2NTRaMDMxMTAvBgNV BAMTKDBCMTVGMkY3N0Q0MTE5NUFGMzk4NTZDOUNFRDdFQkExNjc5QTFGQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk1PIEV2/bHOIMBlyF4MX3sn1d ZrZcPvvq94ZAwQlRQXeq+dk4EtoVzWhP5MrKna0Cgjjq6Z0qzpOnT9IuudPux/iC ZYRUpOncN4/f8xUD1AFw1NsFZqlRff4Q3iXysfWM2hKvOKFELQwhEcOS45CrS7tE mtuMvzj0a35VBL0scBK9/PmU55DNmc+eUgKneultQVVbXC8OukQgz5g8a/uEPrLO Lov9XO4OV9qUnaw6pDeoi7sbs/rFJKHI49wqrfq/rB8G2TYIib8os0lW37CV5l4v 1Th98cC3icQmimFocjUltsA8UEnxZLxER76WRRLK4rgvGey+w1vJWBcmbnlJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCxXy931BGVrzmFbJztfroWeaH7YwHwYDVR0j BBgwFoAUZbGsb8TQ8+zHOrR9YbCFb3iXax8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTg1MDYwNDgtNzM3ZS00NDFkLWE5MTMtMjk3MjZjMTFkNzQ0LzAvNjVCMUFDNkZD NEQwRjNFQ0M3M0FCNDdENjFCMDg1NkY3ODk3NkIxRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NUIxQUM2RkM0RDBGM0VDQzczQUI0N0Q2MUIwODU2Rjc4OTc2 QjFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTg1MDYwNDgtNzM3ZS00NDFkLWE5 MTMtMjk3MjZjMTFkNzQ0LzAvNjVCMUFDNkZDNEQwRjNFQ0M3M0FCNDdENjFCMDg1 NkY3ODk3NkIxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKUrPKtIEwEDtUw40UK62VImbvCEcBdxzwsU krKVDL7a1VkwMz4YNehScY4yCyPFhWeMaAoNB/qGeilyE3r3thK4bMDpiKT1X0uY 02mQIQFvEQWSMayTYIsj++WFd11Bx0LPBZzDDgZGDQJy7IQIHhKULTaqvJYspHZv jEARoWtEaarjO4/LTjIedfyQTkB9R8wza4QF4dU7yweap1sHhRW4XQMIv4FifqHB WmAwgkf5hbyUxEmO7CyxzD2Y3ijVrjkHB3LP4RPu17rbiK4452D4CKYWJrapg42+ flouTvz6cg/PZQrcAij0lZlRYHsRDW7cEqwYXFlQonAedC/PNlg= -----END CERTIFICATE-----Generated at Thu Sep 24 20:11:56 2026 by rpki-client