$ rpki-client -vvf rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/65BD8BDB0F0688479A1741E2BD6624408DA567AB.mft File: 65BD8BDB0F0688479A1741E2BD6624408DA567AB.mft (raw, json) Hash identifier: M/n6xY7zO7lJSDXgx029OOgp3z/8hxHaHPRbtuqsTBk= Subject key identifier: BB:7E:37:E2:53:63:C1:BE:72:16:B5:41:01:65:E4:73:A3:2D:5D:66 Authority key identifier: 65:BD:8B:DB:0F:06:88:47:9A:17:41:E2:BD:66:24:40:8D:A5:67:AB Certificate issuer: /CN=65BD8BDB0F0688479A1741E2BD6624408DA567AB Certificate serial: 7F9A24340DBD5EDD0F63EE3D5B039B8684634F4E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65BD8BDB0F0688479A1741E2BD6624408DA567AB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/65BD8BDB0F0688479A1741E2BD6624408DA567AB.mft Manifest number: 05 Signing time: Tue 05 May 2026 10:35:36 +0000 Manifest this update: Tue 05 May 2026 10:30:36 +0000 Manifest next update: Wed 06 May 2026 10:46:36 +0000 Files and hashes: 1: 3130332e3138302e35382e302f32332d3233203d3e2039333431.roa (hash: 9g7qK44kNZNkc5s9DYu864dbcgLL2OYqPHQVtd+AZyk=) 2: 3130332e3138302e35382e302f32342d3234203d3e2039333431.roa (hash: 0M3/iOLfAX/g/90FmWqP3sssBOdbMngP4uNnmAsUyjY=) 3: 3130332e3138302e35392e302f32342d3234203d3e2039333431.roa (hash: syfItM1/yGZojD6BnuWKenSP5tC0UxI22EVXiaCRFHk=) 4: 65BD8BDB0F0688479A1741E2BD6624408DA567AB.crl (hash: bJSVAiFsC3P5aOWnXBIW5+n180LLmBeLFOBNYccqyiM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/65BD8BDB0F0688479A1741E2BD6624408DA567AB.crl rsync://rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/65BD8BDB0F0688479A1741E2BD6624408DA567AB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65BD8BDB0F0688479A1741E2BD6624408DA567AB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 10:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:9a:24:34:0d:bd:5e:dd:0f:63:ee:3d:5b:03:9b:86:84:63:4f:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65BD8BDB0F0688479A1741E2BD6624408DA567AB Validity Not Before: May 5 10:30:36 2026 GMT Not After : May 6 10:46:36 2026 GMT Subject: CN=BB7E37E25363C1BE7216B5410165E473A32D5D66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:73:99:e0:16:ab:0c:15:c8:5b:94:c3:67:f9: 15:98:29:7a:53:04:da:9e:0c:85:93:bc:73:70:03: c7:f2:ba:09:1e:01:f5:b1:a0:71:ae:a6:32:43:f9: 82:c6:45:a2:1a:b9:60:e6:fe:14:63:07:00:05:78: 48:87:8f:37:c8:44:ff:59:00:fd:c7:4a:64:71:08: 94:c5:6a:de:2b:b3:a7:42:7d:5c:8e:77:ef:9d:76: 74:eb:ef:69:6c:96:b2:d5:89:07:86:8e:1b:51:5d: d9:2a:5b:e5:49:00:6d:a3:fc:b1:e2:9d:13:85:4b: af:7b:85:f3:5a:f1:9b:7e:3d:b1:ad:9e:75:1e:9a: 58:f6:65:3a:9f:9a:45:08:8c:d2:6f:c4:9c:18:e6: 51:0f:59:1d:14:d9:f0:7e:3a:fa:b0:a8:df:0e:c1: 1a:b8:99:17:ae:4b:b1:3b:2f:3a:b5:41:b9:40:2e: ef:b5:7a:55:52:ea:cf:09:59:54:cc:a8:40:97:65: a3:6f:69:23:6f:f2:9f:57:80:4a:04:fe:d1:16:d1: 90:cb:45:5b:82:eb:af:60:52:51:ac:2c:81:55:23: 50:a0:c6:da:a4:e1:49:14:c3:89:d0:89:c7:4b:88: 90:1c:e4:ab:ab:5e:89:b1:91:01:b3:23:d5:3f:23: d5:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:7E:37:E2:53:63:C1:BE:72:16:B5:41:01:65:E4:73:A3:2D:5D:66 X509v3 Authority Key Identifier: keyid:65:BD:8B:DB:0F:06:88:47:9A:17:41:E2:BD:66:24:40:8D:A5:67:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/65BD8BDB0F0688479A1741E2BD6624408DA567AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65BD8BDB0F0688479A1741E2BD6624408DA567AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/65BD8BDB0F0688479A1741E2BD6624408DA567AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:69:ae:81:9f:48:d2:14:7d:ec:fe:de:5f:9f:d9:fc:57:43: b9:55:22:5a:e0:df:f5:4f:d0:16:08:35:a8:d4:62:b0:d8:3c: 97:c0:f6:96:84:c1:3b:74:f3:61:71:a4:ed:0b:97:9e:5a:01: 82:6f:58:89:39:7c:46:88:48:99:2c:8e:22:5f:ce:02:e9:c8: 97:e8:e3:74:ac:b9:85:fd:af:ae:c9:30:84:fa:8f:aa:b8:9c: 81:da:58:86:78:e7:a0:f3:11:62:a1:34:e8:b1:c8:b6:3a:18: 5c:9f:23:52:a5:cf:ab:ef:00:82:38:bd:3c:b8:df:38:08:c8: c9:ad:e5:77:21:64:fe:ae:8b:0d:b7:e4:ef:1e:91:70:2d:0d: 6a:29:74:fe:34:d1:03:6f:2d:43:39:de:32:ee:fa:09:e6:82: bd:a6:ed:9d:da:fc:6b:e8:d4:01:9e:c1:50:1b:84:2b:de:18: cc:94:03:2e:9e:45:0e:08:51:d8:60:77:27:62:06:55:37:14: df:43:a8:cc:2f:61:23:e2:23:da:44:01:8a:a9:09:c1:8b:13: c1:f9:8d:e9:91:76:35:cb:7d:22:1a:51:00:70:66:7e:18:30: 5a:3d:fa:8c:8d:c4:98:84:f5:ae:0f:39:e9:08:98:fc:88:42: e5:92:24:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf5okNA29Xt0PY+49WwObhoRjT04wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVCRDhCREIwRjA2ODg0NzlBMTc0MUUyQkQ2NjI0NDA4 REE1NjdBQjAeFw0yNjA1MDUxMDMwMzZaFw0yNjA1MDYxMDQ2MzZaMDMxMTAvBgNV BAMTKEJCN0UzN0UyNTM2M0MxQkU3MjE2QjU0MTAxNjVFNDczQTMyRDVENjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8c5ngFqsMFchblMNn+RWYKXpT BNqeDIWTvHNwA8fyugkeAfWxoHGupjJD+YLGRaIauWDm/hRjBwAFeEiHjzfIRP9Z AP3HSmRxCJTFat4rs6dCfVyOd++ddnTr72lslrLViQeGjhtRXdkqW+VJAG2j/LHi nROFS697hfNa8Zt+PbGtnnUemlj2ZTqfmkUIjNJvxJwY5lEPWR0U2fB+OvqwqN8O wRq4mReuS7E7Lzq1QblALu+1elVS6s8JWVTMqECXZaNvaSNv8p9XgEoE/tEW0ZDL RVuC669gUlGsLIFVI1Cgxtqk4UkUw4nQicdLiJAc5KurXomxkQGzI9U/I9XZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu3434lNjwb5yFrVBAWXkc6MtXWYwHwYDVR0j BBgwFoAUZb2L2w8GiEeaF0HivWYkQI2lZ6swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTcxYTg0N2QtMjUzMS00ZDdmLTkyNDEtOTc3Nzg1MDYwNWQ2LzAvNjVCRDhCREIw RjA2ODg0NzlBMTc0MUUyQkQ2NjI0NDA4REE1NjdBQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NUJEOEJEQjBGMDY4ODQ3OUExNzQxRTJCRDY2MjQ0MDhEQTU2 N0FCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTcxYTg0N2QtMjUzMS00ZDdmLTky NDEtOTc3Nzg1MDYwNWQ2LzAvNjVCRDhCREIwRjA2ODg0NzlBMTc0MUUyQkQ2NjI0 NDA4REE1NjdBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFdproGfSNIUfez+3l+f2fxXQ7lVIlrg3/VP 0BYINajUYrDYPJfA9paEwTt082FxpO0Ll55aAYJvWIk5fEaISJksjiJfzgLpyJfo 43SsuYX9r67JMIT6j6q4nIHaWIZ456DzEWKhNOixyLY6GFyfI1Klz6vvAII4vTy4 3zgIyMmt5XchZP6uiw235O8ekXAtDWopdP400QNvLUM53jLu+gnmgr2m7Z3a/Gvo 1AGewVAbhCveGMyUAy6eRQ4IUdhgdydiBlU3FN9DqMwvYSPiI9pEAYqpCcGLE8H5 jemRdjXLfSIaUQBwZn4YMFo9+oyNxJiE9a4POekImPyIQuWSJAA= -----END CERTIFICATE-----Generated at Tue May 5 14:21:45 2026 by rpki-client