$ rpki-client -vvf rpki-rsync.idnic.net/repo/e8506048-737e-441d-a913-29726c11d744/0/65B1AC6FC4D0F3ECC73AB47D61B0856F78976B1F.mft File: 65B1AC6FC4D0F3ECC73AB47D61B0856F78976B1F.mft (raw, json) Hash identifier: lKQ5XsSVEL+s4uEAm+r8DSIrjGyiqTgJ1SB3SmnwBsY= Subject key identifier: B9:F6:D3:C0:9B:A7:BE:B8:A2:29:D5:21:88:6C:08:FD:DC:F4:00:28 Authority key identifier: 65:B1:AC:6F:C4:D0:F3:EC:C7:3A:B4:7D:61:B0:85:6F:78:97:6B:1F Certificate issuer: /CN=65B1AC6FC4D0F3ECC73AB47D61B0856F78976B1F Certificate serial: 7395215C004595F1DAB3FA2192C7CE66FEF79094 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65B1AC6FC4D0F3ECC73AB47D61B0856F78976B1F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e8506048-737e-441d-a913-29726c11d744/0/65B1AC6FC4D0F3ECC73AB47D61B0856F78976B1F.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 07:29:20 +0000 Manifest this update: Tue 02 Jun 2026 07:24:20 +0000 Manifest next update: Wed 03 Jun 2026 11:25:20 +0000 Files and hashes: 1: 65B1AC6FC4D0F3ECC73AB47D61B0856F78976B1F.crl (hash: M60RomjMSkHnYWPax7Xst26zLGXVDsPvKMnOghulICg=) 2: 3130332e3137392e36392e302f32342d3234203d3e20313439333436.roa (hash: iF1/HI5T9x0r6R3Th5myrHplbkTjLUqKlDKBufNTpL0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e8506048-737e-441d-a913-29726c11d744/0/65B1AC6FC4D0F3ECC73AB47D61B0856F78976B1F.crl rsync://rpki-rsync.idnic.net/repo/e8506048-737e-441d-a913-29726c11d744/0/65B1AC6FC4D0F3ECC73AB47D61B0856F78976B1F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65B1AC6FC4D0F3ECC73AB47D61B0856F78976B1F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 11:25:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:95:21:5c:00:45:95:f1:da:b3:fa:21:92:c7:ce:66:fe:f7:90:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65B1AC6FC4D0F3ECC73AB47D61B0856F78976B1F Validity Not Before: Jun 2 07:24:20 2026 GMT Not After : Jun 3 11:25:20 2026 GMT Subject: CN=B9F6D3C09BA7BEB8A229D521886C08FDDCF40028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:16:c5:81:6e:01:a6:29:58:a5:81:9c:4e:2b: 80:9c:d0:3b:b7:68:c3:dc:00:1f:5c:b7:54:ac:7a: 9c:28:f3:5c:fd:ea:b9:19:7e:0e:4c:2b:e5:53:38: d5:9c:3f:21:6a:d0:44:06:60:2b:92:59:f9:a3:f6: a3:6a:e8:ee:8e:15:67:18:73:6d:3f:af:75:21:89: 6b:e2:81:ab:2a:5a:8a:24:90:7e:47:13:e0:ce:e2: f2:eb:e6:a9:d2:9b:bd:48:83:6b:0f:29:45:aa:9f: 57:a4:36:36:ab:ef:37:35:c9:19:b5:50:b6:06:38: 9c:12:40:3f:2a:30:06:3b:c7:e9:b3:88:b4:1a:23: 01:56:65:3f:20:16:7b:3c:e8:9f:0d:f8:bc:10:db: f1:eb:cc:68:93:aa:10:21:f6:58:ed:ff:7e:e7:38: 3c:39:a2:5d:e9:49:5d:3e:e7:1c:2e:2e:83:16:61: 56:e4:cb:49:99:57:ef:8f:89:41:73:eb:f8:65:71: 56:b0:cb:42:2a:5a:49:91:57:05:9f:3c:84:81:a4: 7e:a3:ff:78:15:8d:7f:9a:62:ec:8b:86:d1:47:29: 4e:d5:48:72:ec:25:dd:73:10:36:58:c1:28:c2:83: 3a:1d:63:37:5e:8a:bc:85:ed:6c:58:4e:d8:3c:ea: 73:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F6:D3:C0:9B:A7:BE:B8:A2:29:D5:21:88:6C:08:FD:DC:F4:00:28 X509v3 Authority Key Identifier: keyid:65:B1:AC:6F:C4:D0:F3:EC:C7:3A:B4:7D:61:B0:85:6F:78:97:6B:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e8506048-737e-441d-a913-29726c11d744/0/65B1AC6FC4D0F3ECC73AB47D61B0856F78976B1F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65B1AC6FC4D0F3ECC73AB47D61B0856F78976B1F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e8506048-737e-441d-a913-29726c11d744/0/65B1AC6FC4D0F3ECC73AB47D61B0856F78976B1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:02:df:fb:de:a3:bf:a0:c2:59:e2:5e:78:62:93:6e:e9:ce: cc:44:d2:4d:8f:d8:e0:b2:60:e4:44:83:64:2b:35:70:89:92: 50:c1:47:39:d8:83:01:5e:6a:e5:52:ab:3d:e2:c9:62:a8:b4: 05:0b:ad:f0:d9:c0:a6:42:80:70:18:a4:c8:95:1d:64:d1:8d: 0f:77:83:9e:aa:15:e8:ba:c5:d4:b9:d5:f0:55:04:3c:d9:07: 95:38:a9:db:bf:ac:f6:ea:db:b0:f0:fe:45:95:12:6c:b9:19: 3c:14:e4:4c:44:ee:c7:12:9d:72:75:e7:e3:f9:25:ee:f2:9f: df:4c:55:f0:9c:a0:95:fa:41:2c:ab:0d:f3:b5:80:6f:bb:16: 0b:aa:36:b6:64:f9:f1:a7:d1:09:9a:a6:20:09:0c:72:89:3f: 62:b8:6d:9e:77:60:b6:7f:7b:f1:85:38:a0:b4:89:9a:be:9c: e4:56:51:4b:86:b1:40:54:a8:6b:0e:a0:ab:e9:d9:63:65:1f: cc:a4:fb:e0:26:35:b2:08:ee:cd:e5:15:cd:c5:8e:43:75:bf: b5:0c:53:50:5e:1a:6f:c1:7c:cd:01:21:88:c3:72:00:22:5c: d0:43:2f:af:04:e3:9a:b3:1f:3e:e1:a1:dc:cb:e9:29:a0:d5: bf:d1:d0:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc5UhXABFlfHas/ohksfOZv73kJQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVCMUFDNkZDNEQwRjNFQ0M3M0FCNDdENjFCMDg1NkY3 ODk3NkIxRjAeFw0yNjA2MDIwNzI0MjBaFw0yNjA2MDMxMTI1MjBaMDMxMTAvBgNV BAMTKEI5RjZEM0MwOUJBN0JFQjhBMjI5RDUyMTg4NkMwOEZERENGNDAwMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMFsWBbgGmKVilgZxOK4Cc0Du3 aMPcAB9ct1Ssepwo81z96rkZfg5MK+VTONWcPyFq0EQGYCuSWfmj9qNq6O6OFWcY c20/r3UhiWvigasqWookkH5HE+DO4vLr5qnSm71Ig2sPKUWqn1ekNjar7zc1yRm1 ULYGOJwSQD8qMAY7x+mziLQaIwFWZT8gFns86J8N+LwQ2/HrzGiTqhAh9ljt/37n ODw5ol3pSV0+5xwuLoMWYVbky0mZV++PiUFz6/hlcVawy0IqWkmRVwWfPISBpH6j /3gVjX+aYuyLhtFHKU7VSHLsJd1zEDZYwSjCgzodYzdeiryF7WxYTtg86nNrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUufbTwJunvriiKdUhiGwI/dz0ACgwHwYDVR0j BBgwFoAUZbGsb8TQ8+zHOrR9YbCFb3iXax8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTg1MDYwNDgtNzM3ZS00NDFkLWE5MTMtMjk3MjZjMTFkNzQ0LzAvNjVCMUFDNkZD NEQwRjNFQ0M3M0FCNDdENjFCMDg1NkY3ODk3NkIxRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NUIxQUM2RkM0RDBGM0VDQzczQUI0N0Q2MUIwODU2Rjc4OTc2 QjFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTg1MDYwNDgtNzM3ZS00NDFkLWE5 MTMtMjk3MjZjMTFkNzQ0LzAvNjVCMUFDNkZDNEQwRjNFQ0M3M0FCNDdENjFCMDg1 NkY3ODk3NkIxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIAC3/veo7+gwlniXnhik27pzsxE0k2P2OCy YOREg2QrNXCJklDBRznYgwFeauVSqz3iyWKotAULrfDZwKZCgHAYpMiVHWTRjQ93 g56qFei6xdS51fBVBDzZB5U4qdu/rPbq27Dw/kWVEmy5GTwU5ExE7scSnXJ15+P5 Je7yn99MVfCcoJX6QSyrDfO1gG+7FguqNrZk+fGn0QmapiAJDHKJP2K4bZ53YLZ/ e/GFOKC0iZq+nORWUUuGsUBUqGsOoKvp2WNlH8yk++AmNbII7s3lFc3FjkN1v7UM U1BeGm/BfM0BIYjDcgAiXNBDL68E45qzHz7hodzL6Smg1b/R0A8= -----END CERTIFICATE-----Generated at Wed Jun 3 04:08:44 2026 by rpki-client