$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/A65F65BF2DB9317754BA910F052FC09429259CBC.mft File: A65F65BF2DB9317754BA910F052FC09429259CBC.mft (raw, json) Hash identifier: Itp1fAhrlxw92JHpuv8Y+dS4PMYG9ZjHnx74u3gyX5w= Subject key identifier: 23:BD:4F:D3:C7:EE:E6:A2:52:4B:5A:C3:07:A2:71:E4:D9:18:7A:6C Authority key identifier: A6:5F:65:BF:2D:B9:31:77:54:BA:91:0F:05:2F:C0:94:29:25:9C:BC Certificate issuer: /CN=A65F65BF2DB9317754BA910F052FC09429259CBC Certificate serial: 1612CD8913D6BBA91C55F0AFD8BB96F8E2BF96D5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A65F65BF2DB9317754BA910F052FC09429259CBC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/A65F65BF2DB9317754BA910F052FC09429259CBC.mft Manifest number: F5 Signing time: Mon 02 Nov 2026 09:39:40 +0000 Manifest this update: Mon 02 Nov 2026 09:34:40 +0000 Manifest next update: Tue 03 Nov 2026 10:42:40 +0000 Files and hashes: 1: 3135372e32302e3230382e302f32342d3234203d3e20313532343136.roa (hash: vffHdk9OOgHjUn3gX3E1MpxE/+kaQ1DhpiQKkuuDY58=) 2: 3135372e32302e3230392e302f32342d3234203d3e20313532343136.roa (hash: rwfp5y5H5qPfQhaF6rDqIcStalVTGJI0mJpk4RX2nTI=) 3: A65F65BF2DB9317754BA910F052FC09429259CBC.crl (hash: DBWjDSIdo0oo1jAPt4ZzbMBkctkwKGyhcY3lb9CoggU=) 4: 3135372e32302e3230382e302f32332d3233203d3e20313532343136.roa (hash: 6sJwEQuVC2SCQbpKDbpQ7062AUPzj2WmwzEMVpDHp88=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/A65F65BF2DB9317754BA910F052FC09429259CBC.crl rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/A65F65BF2DB9317754BA910F052FC09429259CBC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A65F65BF2DB9317754BA910F052FC09429259CBC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 10:42:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:12:cd:89:13:d6:bb:a9:1c:55:f0:af:d8:bb:96:f8:e2:bf:96:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A65F65BF2DB9317754BA910F052FC09429259CBC Validity Not Before: Nov 2 09:34:40 2026 GMT Not After : Nov 3 10:42:40 2026 GMT Subject: CN=23BD4FD3C7EEE6A2524B5AC307A271E4D9187A6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:6f:45:81:d1:f5:cb:6b:8f:6f:61:be:76:cc: 58:5e:c5:5b:d2:0f:2f:ab:8a:0b:2b:61:00:0d:1c: 95:5a:08:ca:93:e8:0a:61:63:f0:0b:39:c8:c6:b4: c2:1b:9b:f9:51:c0:f3:66:be:f8:87:5f:1d:1a:d4: 5d:88:f5:d7:37:f6:3f:1e:53:e8:1b:5c:e0:ac:26: 8d:64:34:1c:94:b0:11:ea:eb:be:85:31:41:32:40: 67:d5:07:d3:e5:1f:63:5f:54:13:d6:9c:b0:dc:a0: 34:50:61:55:25:da:e5:94:95:31:27:a9:64:df:ac: 38:ae:63:e4:b9:56:11:07:fc:fe:81:2f:3f:51:f7: bf:50:de:a8:99:c0:40:27:22:12:33:ce:12:33:a3: a1:48:d9:ad:31:fc:aa:5c:15:85:2c:11:bd:c9:ab: 9c:87:9f:8e:49:a2:3a:f7:f3:50:bb:d0:3e:ea:a6: 5e:24:ca:3a:a6:aa:21:9c:14:18:8a:88:bd:39:29: 70:0d:90:4f:79:9c:93:79:6b:41:7f:d3:6f:15:11: 48:9c:c8:1e:a6:39:1f:79:a3:96:12:ae:c3:f9:99: 8f:7a:cc:95:52:11:c0:a5:25:7a:27:40:64:96:e8: 2e:84:84:85:e6:68:9b:49:d3:be:a6:d6:b2:5c:11: e2:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:BD:4F:D3:C7:EE:E6:A2:52:4B:5A:C3:07:A2:71:E4:D9:18:7A:6C X509v3 Authority Key Identifier: keyid:A6:5F:65:BF:2D:B9:31:77:54:BA:91:0F:05:2F:C0:94:29:25:9C:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/A65F65BF2DB9317754BA910F052FC09429259CBC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A65F65BF2DB9317754BA910F052FC09429259CBC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/A65F65BF2DB9317754BA910F052FC09429259CBC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:62:e3:ea:2b:f4:9d:f5:e3:ec:2c:1c:e2:2f:56:8b:1c:22: 76:83:d6:6c:fb:86:dc:df:92:3a:57:33:b5:c0:c6:38:23:f0: 57:72:31:8d:c5:7f:b2:20:8f:c6:f1:2e:e5:48:c8:df:c7:1c: 2f:8f:65:ad:3e:43:ed:c4:33:05:f0:29:92:8d:d8:c5:98:65: 18:3e:d1:b0:48:d0:b2:f2:6c:18:0c:51:b8:3e:3b:f7:7a:b7: 4e:bb:2d:f9:95:a7:47:9a:8b:4c:f1:ba:f0:13:35:99:c8:c3: 81:3a:71:04:c7:95:1f:c2:fc:7e:f0:f7:74:3d:ba:55:ac:dc: eb:5e:79:8e:6d:84:d2:74:a5:a3:d5:ff:cf:b1:90:43:72:43: 26:3f:0e:01:93:b4:1a:94:25:10:7f:6d:36:63:2a:7e:a2:ed: ea:92:b3:30:6a:45:a1:b0:9f:a5:68:56:90:b6:d9:4d:56:f8: f6:01:f1:78:d8:77:2f:75:74:9d:7b:a7:15:98:a9:b7:0c:78: aa:37:96:8f:b7:2f:59:22:e9:af:b9:18:68:76:67:60:20:c2: 8e:11:55:4b:2b:5c:33:f3:6e:fa:e5:72:f8:3a:8c:70:44:e5: c7:e7:49:81:f0:c1:57:4e:bf:e2:b9:c8:bd:f3:ba:31:10:86: 17:63:06:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFhLNiRPWu6kcVfCv2LuW+OK/ltUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY1RjY1QkYyREI5MzE3NzU0QkE5MTBGMDUyRkMwOTQy OTI1OUNCQzAeFw0yNjExMDIwOTM0NDBaFw0yNjExMDMxMDQyNDBaMDMxMTAvBgNV BAMTKDIzQkQ0RkQzQzdFRUU2QTI1MjRCNUFDMzA3QTI3MUU0RDkxODdBNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdb0WB0fXLa49vYb52zFhexVvS Dy+rigsrYQANHJVaCMqT6AphY/ALOcjGtMIbm/lRwPNmvviHXx0a1F2I9dc39j8e U+gbXOCsJo1kNByUsBHq676FMUEyQGfVB9PlH2NfVBPWnLDcoDRQYVUl2uWUlTEn qWTfrDiuY+S5VhEH/P6BLz9R979Q3qiZwEAnIhIzzhIzo6FI2a0x/KpcFYUsEb3J q5yHn45Jojr381C70D7qpl4kyjqmqiGcFBiKiL05KXANkE95nJN5a0F/028VEUic yB6mOR95o5YSrsP5mY96zJVSEcClJXonQGSW6C6EhIXmaJtJ076m1rJcEeINAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI71P08fu5qJSS1rDB6Jx5NkYemwwHwYDVR0j BBgwFoAUpl9lvy25MXdUupEPBS/AlCklnLwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGM0MDk0ZDItZTE4ZC00ODQwLTg0ZmEtYzU3NTdhZjU4MGYxLzAvQTY1RjY1QkYy REI5MzE3NzU0QkE5MTBGMDUyRkMwOTQyOTI1OUNCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BNjVGNjVCRjJEQjkzMTc3NTRCQTkxMEYwNTJGQzA5NDI5MjU5 Q0JDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGM0MDk0ZDItZTE4ZC00ODQwLTg0 ZmEtYzU3NTdhZjU4MGYxLzAvQTY1RjY1QkYyREI5MzE3NzU0QkE5MTBGMDUyRkMw OTQyOTI1OUNCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD1i4+or9J314+wsHOIvVoscInaD1mz7htzf kjpXM7XAxjgj8FdyMY3Ff7Igj8bxLuVIyN/HHC+PZa0+Q+3EMwXwKZKN2MWYZRg+ 0bBI0LLybBgMUbg+O/d6t067LfmVp0eai0zxuvATNZnIw4E6cQTHlR/C/H7w93Q9 ulWs3OteeY5thNJ0paPV/8+xkENyQyY/DgGTtBqUJRB/bTZjKn6i7eqSszBqRaGw n6VoVpC22U1W+PYB8XjYdy91dJ17pxWYqbcMeKo3lo+3L1ki6a+5GGh2Z2Agwo4R VUsrXDPzbvrlcvg6jHBE5cfnSYHwwVdOv+K5yL3zujEQhhdjBqY= -----END CERTIFICATE-----Generated at Mon Nov 2 17:54:41 2026 by rpki-client