$ rpki-client -vvf rpki-rsync.idnic.net/repo/e8506048-737e-441d-a913-29726c11d744/0/65B1AC6FC4D0F3ECC73AB47D61B0856F78976B1F.mft File: 65B1AC6FC4D0F3ECC73AB47D61B0856F78976B1F.mft (raw, json) Hash identifier: goQKC2xoubAz7PSTY3E3dDR+eztcGmbNTu8RuIpgdN0= Subject key identifier: B5:50:63:67:3F:1E:C8:5E:6F:89:7A:85:B0:A7:06:04:80:0F:93:ED Authority key identifier: 65:B1:AC:6F:C4:D0:F3:EC:C7:3A:B4:7D:61:B0:85:6F:78:97:6B:1F Certificate issuer: /CN=65B1AC6FC4D0F3ECC73AB47D61B0856F78976B1F Certificate serial: 75DA33C36F0CE145E6B7EC0EB3EAEF51989D8C28 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65B1AC6FC4D0F3ECC73AB47D61B0856F78976B1F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e8506048-737e-441d-a913-29726c11d744/0/65B1AC6FC4D0F3ECC73AB47D61B0856F78976B1F.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 20:06:05 +0000 Manifest this update: Mon 20 Jul 2026 20:01:05 +0000 Manifest next update: Tue 21 Jul 2026 21:40:05 +0000 Files and hashes: 1: 65B1AC6FC4D0F3ECC73AB47D61B0856F78976B1F.crl (hash: fuB7txT2a4FJl4WNLjpGjjuSpXe97ibHnwggrpBEYqE=) 2: 3130332e3137392e36392e302f32342d3234203d3e20313439333436.roa (hash: iF1/HI5T9x0r6R3Th5myrHplbkTjLUqKlDKBufNTpL0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e8506048-737e-441d-a913-29726c11d744/0/65B1AC6FC4D0F3ECC73AB47D61B0856F78976B1F.crl rsync://rpki-rsync.idnic.net/repo/e8506048-737e-441d-a913-29726c11d744/0/65B1AC6FC4D0F3ECC73AB47D61B0856F78976B1F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65B1AC6FC4D0F3ECC73AB47D61B0856F78976B1F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 21:40:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:da:33:c3:6f:0c:e1:45:e6:b7:ec:0e:b3:ea:ef:51:98:9d:8c:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65B1AC6FC4D0F3ECC73AB47D61B0856F78976B1F Validity Not Before: Jul 20 20:01:05 2026 GMT Not After : Jul 21 21:40:05 2026 GMT Subject: CN=B55063673F1EC85E6F897A85B0A70604800F93ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:42:c0:b2:77:42:a4:21:d4:3f:18:e7:1b:c4: c0:6c:5f:30:c0:f3:3e:a6:01:7c:be:f0:0b:78:14: 86:27:72:cc:e0:25:df:8a:52:4b:9f:c6:c3:87:1f: ff:41:8f:d3:b7:a2:8d:34:45:e2:9c:36:a1:cc:86: 1e:d2:cc:4d:10:8d:3a:9b:ab:0a:02:4c:39:6f:15: 0d:0d:8d:22:eb:58:12:59:f9:82:ba:79:dd:2d:13: 2f:48:c3:0d:b8:21:a2:24:a0:f3:d7:f9:7b:25:68: 2f:7d:e8:cb:13:b6:f1:7f:68:95:4a:47:82:9d:37: eb:03:8c:e6:1c:dd:80:bd:08:a6:ee:8c:43:52:69: 09:a3:57:c3:e7:e8:8f:d3:78:98:80:e9:97:0c:68: f5:95:43:16:fe:61:cd:ac:af:08:fd:76:d0:0d:c2: 35:bc:6b:a2:7c:f8:97:fd:65:6c:a5:ba:aa:da:0d: e8:ba:c0:2b:79:aa:cf:91:15:59:5f:e5:20:b2:06: ef:b4:bd:a5:ec:b5:b7:88:0a:26:bf:54:f1:a2:f0: e7:90:17:dc:59:0b:8e:ec:80:9b:d5:b5:7c:74:b0: 93:13:bc:67:04:54:d9:2c:3b:c7:b7:8d:04:cb:7a: 71:0a:26:66:dc:33:0d:85:c6:d0:d2:a0:7c:1c:6c: 00:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:50:63:67:3F:1E:C8:5E:6F:89:7A:85:B0:A7:06:04:80:0F:93:ED X509v3 Authority Key Identifier: keyid:65:B1:AC:6F:C4:D0:F3:EC:C7:3A:B4:7D:61:B0:85:6F:78:97:6B:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e8506048-737e-441d-a913-29726c11d744/0/65B1AC6FC4D0F3ECC73AB47D61B0856F78976B1F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65B1AC6FC4D0F3ECC73AB47D61B0856F78976B1F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e8506048-737e-441d-a913-29726c11d744/0/65B1AC6FC4D0F3ECC73AB47D61B0856F78976B1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:d1:eb:35:fd:5c:db:a8:27:3c:72:75:74:92:71:58:48:b7: 20:eb:c6:5e:3c:ba:ae:71:ab:b3:34:28:b3:4e:bc:58:6f:30: 3c:ca:bf:2c:9c:87:05:ea:39:a7:b3:c9:f3:fe:28:1f:fd:89: 79:d0:4e:2c:48:85:fb:f0:5b:72:31:86:2b:c4:6c:b9:0f:b2: 55:c0:2f:70:52:d4:c3:21:ae:d5:46:c2:22:a0:19:8b:b4:c0: f4:9b:f0:cc:a4:91:f1:06:f3:49:14:b1:bf:58:b3:86:74:46: 68:31:7c:e4:a7:cd:a3:ce:62:1b:1f:2a:b2:64:34:6d:d8:b6: 69:b3:ed:e5:68:c2:1f:68:cb:80:42:16:03:f2:1d:16:fe:9a: 2f:2c:ee:65:e0:59:ad:29:db:14:d2:fa:0a:bd:ec:9c:50:d1: 75:8d:44:56:11:41:a4:95:8b:f6:a0:1a:ad:35:b7:09:eb:79: 5e:fb:f9:b1:01:58:d8:04:4d:33:83:f5:91:c7:c6:b1:ad:78: ca:eb:ae:6d:41:f0:af:98:1c:5c:51:98:87:73:4f:83:03:a6: bb:b0:29:53:4b:7f:40:35:21:34:35:27:45:c4:c2:df:9a:97: cf:6b:8e:7d:a5:fe:3d:e2:23:cc:1d:80:be:7e:eb:0e:e6:3b: 24:2b:f6:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUddozw28M4UXmt+wOs+rvUZidjCgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVCMUFDNkZDNEQwRjNFQ0M3M0FCNDdENjFCMDg1NkY3 ODk3NkIxRjAeFw0yNjA3MjAyMDAxMDVaFw0yNjA3MjEyMTQwMDVaMDMxMTAvBgNV BAMTKEI1NTA2MzY3M0YxRUM4NUU2Rjg5N0E4NUIwQTcwNjA0ODAwRjkzRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChQsCyd0KkIdQ/GOcbxMBsXzDA 8z6mAXy+8At4FIYncszgJd+KUkufxsOHH/9Bj9O3oo00ReKcNqHMhh7SzE0QjTqb qwoCTDlvFQ0NjSLrWBJZ+YK6ed0tEy9Iww24IaIkoPPX+XslaC996MsTtvF/aJVK R4KdN+sDjOYc3YC9CKbujENSaQmjV8Pn6I/TeJiA6ZcMaPWVQxb+Yc2srwj9dtAN wjW8a6J8+Jf9ZWyluqraDei6wCt5qs+RFVlf5SCyBu+0vaXstbeICia/VPGi8OeQ F9xZC47sgJvVtXx0sJMTvGcEVNksO8e3jQTLenEKJmbcMw2FxtDSoHwcbABJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtVBjZz8eyF5viXqFsKcGBIAPk+0wHwYDVR0j BBgwFoAUZbGsb8TQ8+zHOrR9YbCFb3iXax8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTg1MDYwNDgtNzM3ZS00NDFkLWE5MTMtMjk3MjZjMTFkNzQ0LzAvNjVCMUFDNkZD NEQwRjNFQ0M3M0FCNDdENjFCMDg1NkY3ODk3NkIxRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NUIxQUM2RkM0RDBGM0VDQzczQUI0N0Q2MUIwODU2Rjc4OTc2 QjFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTg1MDYwNDgtNzM3ZS00NDFkLWE5 MTMtMjk3MjZjMTFkNzQ0LzAvNjVCMUFDNkZDNEQwRjNFQ0M3M0FCNDdENjFCMDg1 NkY3ODk3NkIxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFvR6zX9XNuoJzxydXSScVhItyDrxl48uq5x q7M0KLNOvFhvMDzKvyychwXqOaezyfP+KB/9iXnQTixIhfvwW3IxhivEbLkPslXA L3BS1MMhrtVGwiKgGYu0wPSb8MykkfEG80kUsb9Ys4Z0RmgxfOSnzaPOYhsfKrJk NG3Ytmmz7eVowh9oy4BCFgPyHRb+mi8s7mXgWa0p2xTS+gq97JxQ0XWNRFYRQaSV i/agGq01twnreV77+bEBWNgETTOD9ZHHxrGteMrrrm1B8K+YHFxRmIdzT4MDpruw KVNLf0A1ITQ1J0XEwt+al89rjn2l/j3iI8wdgL5+6w7mOyQr9oU= -----END CERTIFICATE-----Generated at Tue Jul 21 06:58:38 2026 by rpki-client