$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/65B2322C56F44BF22F2FEC36B959F99E1D331066.mft File: 65B2322C56F44BF22F2FEC36B959F99E1D331066.mft (raw, json) Hash identifier: rOplr7wmU/xOBz36EQAC6Bf4pnetiW57DeUcn+tH/C4= Subject key identifier: EC:73:48:62:10:76:28:98:96:01:0A:84:52:15:B8:6C:E7:2B:47:BF Authority key identifier: 65:B2:32:2C:56:F4:4B:F2:2F:2F:EC:36:B9:59:F9:9E:1D:33:10:66 Certificate issuer: /CN=65B2322C56F44BF22F2FEC36B959F99E1D331066 Certificate serial: 0A9E33013A951ECC324DC0F99F89214356D0B6AC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65B2322C56F44BF22F2FEC36B959F99E1D331066.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/65B2322C56F44BF22F2FEC36B959F99E1D331066.mft Manifest number: FA Signing time: Wed 04 Nov 2026 06:31:21 +0000 Manifest this update: Wed 04 Nov 2026 06:26:21 +0000 Manifest next update: Thu 05 Nov 2026 07:40:21 +0000 Files and hashes: 1: 3130332e3132362e3139352e302f32342d3234203d3e20313530353438.roa (hash: ArWINNWiCoq7qYCWEDrQkzwtNUnQVElWRhRzX3xlhI8=) 2: 65B2322C56F44BF22F2FEC36B959F99E1D331066.crl (hash: c09kXlPh9kLbFUxyMw3nZWr1QFA9gRZfL193gjUNTSQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/65B2322C56F44BF22F2FEC36B959F99E1D331066.crl rsync://rpki-rsync.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/65B2322C56F44BF22F2FEC36B959F99E1D331066.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65B2322C56F44BF22F2FEC36B959F99E1D331066.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 07:40:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:9e:33:01:3a:95:1e:cc:32:4d:c0:f9:9f:89:21:43:56:d0:b6:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65B2322C56F44BF22F2FEC36B959F99E1D331066 Validity Not Before: Nov 4 06:26:21 2026 GMT Not After : Nov 5 07:40:21 2026 GMT Subject: CN=EC7348621076289896010A845215B86CE72B47BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:82:a6:39:0e:f8:5d:15:65:3a:f6:af:e1:b3: 03:92:82:2b:35:be:d1:5b:f0:d2:93:6d:ba:3e:35: 97:b8:6b:97:33:b7:32:ae:b5:da:7e:43:38:d5:a0: 8b:e8:54:93:5c:75:ec:93:af:dc:ad:81:7f:26:0b: 88:d3:d7:18:57:3f:a4:10:5f:2f:5d:1d:20:e5:bb: 73:a8:a3:ef:4f:26:2d:74:9d:1a:2d:aa:10:4f:58: 3d:4e:75:ba:d2:6b:22:eb:48:20:87:9d:40:a0:04: 8f:5a:97:65:f5:ea:c8:41:dd:90:5d:7b:3c:df:20: 71:e8:5a:c5:a8:9e:ae:11:63:65:16:bf:d8:f2:5d: a0:02:8a:eb:71:00:60:a4:fd:2d:ef:60:84:69:7f: 2f:74:57:fa:7a:af:64:92:90:4a:d9:6b:fb:aa:02: a9:a9:bb:de:d9:36:d7:51:98:e6:06:77:cc:2f:ea: 6b:91:6f:37:ff:fd:74:08:52:56:e1:fc:8c:74:1c: 74:c9:e3:1f:e4:65:73:46:1d:2e:50:63:34:51:85: 62:62:06:69:d9:3a:50:26:2e:a0:ad:70:10:2a:37: ae:e9:f7:e0:c6:3b:87:f5:9c:4c:55:03:5c:88:fe: 0d:81:b2:e3:1f:80:2b:c8:ec:28:e2:21:f3:37:99: b8:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:73:48:62:10:76:28:98:96:01:0A:84:52:15:B8:6C:E7:2B:47:BF X509v3 Authority Key Identifier: keyid:65:B2:32:2C:56:F4:4B:F2:2F:2F:EC:36:B9:59:F9:9E:1D:33:10:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/65B2322C56F44BF22F2FEC36B959F99E1D331066.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65B2322C56F44BF22F2FEC36B959F99E1D331066.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/65B2322C56F44BF22F2FEC36B959F99E1D331066.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:b3:ea:dd:30:f7:af:5c:06:66:1d:9d:67:51:d9:fd:8f:6f: da:bb:ea:2a:6a:53:1d:1a:87:25:a4:19:d7:1e:97:2b:58:da: 7c:99:78:d8:a2:f2:c2:3b:35:27:15:b0:8c:ee:c5:e1:30:10: 49:46:eb:92:eb:14:b3:c5:ff:52:dc:09:02:fc:8c:b2:08:90: 34:10:39:5b:44:e8:33:71:75:74:69:4d:90:50:76:8c:9a:6d: fd:66:db:7d:9d:ca:e1:94:e5:f3:5e:49:03:59:f7:4d:85:4c: a5:63:78:c6:21:a0:a8:53:63:aa:77:ff:27:be:16:05:7e:dd: fb:2d:c0:c0:c9:53:01:29:f1:f2:de:2e:ed:62:7d:51:be:d5: 84:58:1a:b3:5e:00:e9:d9:18:ad:cf:f1:d5:f6:ff:11:ce:6f: 91:bf:fb:0b:a3:a6:eb:b6:aa:2b:4d:53:07:60:07:74:d8:e2: 40:c6:73:d1:db:c5:20:6a:66:51:89:b1:99:3a:39:48:d6:ce: ce:a0:ea:21:f3:d5:1f:6c:8a:1c:dc:4a:64:c7:0f:e1:ad:13: 4d:9b:b9:fe:86:4e:d7:79:38:35:01:a8:b0:9f:5a:2e:c4:d3: 41:1e:25:c1:0b:16:27:f8:5e:b8:12:47:21:e1:d7:d5:06:da: 55:c9:fb:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCp4zATqVHswyTcD5n4khQ1bQtqwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVCMjMyMkM1NkY0NEJGMjJGMkZFQzM2Qjk1OUY5OUUx RDMzMTA2NjAeFw0yNjExMDQwNjI2MjFaFw0yNjExMDUwNzQwMjFaMDMxMTAvBgNV BAMTKEVDNzM0ODYyMTA3NjI4OTg5NjAxMEE4NDUyMTVCODZDRTcyQjQ3QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDgqY5DvhdFWU69q/hswOSgis1 vtFb8NKTbbo+NZe4a5cztzKutdp+QzjVoIvoVJNcdeyTr9ytgX8mC4jT1xhXP6QQ Xy9dHSDlu3Ooo+9PJi10nRotqhBPWD1OdbrSayLrSCCHnUCgBI9al2X16shB3ZBd ezzfIHHoWsWonq4RY2UWv9jyXaACiutxAGCk/S3vYIRpfy90V/p6r2SSkErZa/uq Aqmpu97ZNtdRmOYGd8wv6muRbzf//XQIUlbh/Ix0HHTJ4x/kZXNGHS5QYzRRhWJi BmnZOlAmLqCtcBAqN67p9+DGO4f1nExVA1yI/g2BsuMfgCvI7CjiIfM3mbhRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7HNIYhB2KJiWAQqEUhW4bOcrR78wHwYDVR0j BBgwFoAUZbIyLFb0S/IvL+w2uVn5nh0zEGYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjE5MzAxOGUtNzE4Zi00NzU3LWEwODctOTNhZDc3YjgxODIxLzAvNjVCMjMyMkM1 NkY0NEJGMjJGMkZFQzM2Qjk1OUY5OUUxRDMzMTA2Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NUIyMzIyQzU2RjQ0QkYyMkYyRkVDMzZCOTU5Rjk5RTFEMzMx MDY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjE5MzAxOGUtNzE4Zi00NzU3LWEw ODctOTNhZDc3YjgxODIxLzAvNjVCMjMyMkM1NkY0NEJGMjJGMkZFQzM2Qjk1OUY5 OUUxRDMzMTA2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHOz6t0w969cBmYdnWdR2f2Pb9q76ipqUx0a hyWkGdcelytY2nyZeNii8sI7NScVsIzuxeEwEElG65LrFLPF/1LcCQL8jLIIkDQQ OVtE6DNxdXRpTZBQdoyabf1m232dyuGU5fNeSQNZ902FTKVjeMYhoKhTY6p3/ye+ FgV+3fstwMDJUwEp8fLeLu1ifVG+1YRYGrNeAOnZGK3P8dX2/xHOb5G/+wujpuu2 qitNUwdgB3TY4kDGc9HbxSBqZlGJsZk6OUjWzs6g6iHz1R9sihzcSmTHD+GtE02b uf6GTtd5ODUBqLCfWi7E00EeJcELFif4XrgSRyHh19UG2lXJ+6g= -----END CERTIFICATE-----Generated at Wed Nov 4 14:40:46 2026 by rpki-client