$ rpki-client -vvf rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/65BD8BDB0F0688479A1741E2BD6624408DA567AB.mft File: 65BD8BDB0F0688479A1741E2BD6624408DA567AB.mft (raw, json) Hash identifier: YwBLI8lVqTK8EmBnn1xRkejHCihbLFYoAaHd2GH2CMw= Subject key identifier: 7D:21:6B:CF:6C:40:86:1C:F8:48:27:49:D5:99:C3:47:45:EE:2D:7B Authority key identifier: 65:BD:8B:DB:0F:06:88:47:9A:17:41:E2:BD:66:24:40:8D:A5:67:AB Certificate issuer: /CN=65BD8BDB0F0688479A1741E2BD6624408DA567AB Certificate serial: 2D579424FEB48EBF4A98738A183F8642DC525425 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65BD8BDB0F0688479A1741E2BD6624408DA567AB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/65BD8BDB0F0688479A1741E2BD6624408DA567AB.mft Manifest number: 93 Signing time: Wed 19 Aug 2026 15:07:03 +0000 Manifest this update: Wed 19 Aug 2026 15:02:03 +0000 Manifest next update: Thu 20 Aug 2026 18:40:03 +0000 Files and hashes: 1: 3130332e3138302e35382e302f32342d3234203d3e2039333431.roa (hash: 0M3/iOLfAX/g/90FmWqP3sssBOdbMngP4uNnmAsUyjY=) 2: 3130332e3138302e35392e302f32342d3234203d3e2039333431.roa (hash: syfItM1/yGZojD6BnuWKenSP5tC0UxI22EVXiaCRFHk=) 3: 65BD8BDB0F0688479A1741E2BD6624408DA567AB.crl (hash: gpAgWgokZRb6tg8RF9cUv41l97CatwJ9OKb1ayoxPdc=) 4: 3130332e3138302e35382e302f32332d3233203d3e2039333431.roa (hash: 9g7qK44kNZNkc5s9DYu864dbcgLL2OYqPHQVtd+AZyk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/65BD8BDB0F0688479A1741E2BD6624408DA567AB.crl rsync://rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/65BD8BDB0F0688479A1741E2BD6624408DA567AB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65BD8BDB0F0688479A1741E2BD6624408DA567AB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Aug 2026 18:40:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:57:94:24:fe:b4:8e:bf:4a:98:73:8a:18:3f:86:42:dc:52:54:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65BD8BDB0F0688479A1741E2BD6624408DA567AB Validity Not Before: Aug 19 15:02:03 2026 GMT Not After : Aug 20 18:40:03 2026 GMT Subject: CN=7D216BCF6C40861CF8482749D599C34745EE2D7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:2a:d1:84:90:d8:03:a2:44:cd:28:88:82:4c: 95:5d:00:ca:05:39:32:4b:f8:1c:61:c3:30:f3:b3: 30:e7:b5:dc:f8:58:d0:62:ed:0e:1d:35:6d:fc:cd: c4:c6:f6:75:cc:9b:36:83:d5:ae:e9:75:d3:51:6f: d5:26:89:3f:1a:ee:89:18:a5:7e:62:72:3a:40:29: b9:0f:3f:cd:d8:a2:58:75:d8:9e:58:62:fc:50:b0: 1e:db:be:46:f4:63:1c:a5:6a:cb:90:9b:88:6b:05: 9b:7c:65:e4:3f:e7:1a:52:6c:68:91:7c:bc:fb:22: 40:b2:74:78:72:08:7a:a7:91:70:c2:bd:25:35:57: 63:6e:7f:4b:fd:07:fd:32:e9:f2:68:99:1f:79:a0: 25:e0:65:ec:af:36:a1:df:be:ed:55:dd:e3:62:c2: 8a:72:9a:93:9e:36:d3:5b:37:a1:ab:d8:1e:00:17: a3:b3:ab:5d:b3:75:76:32:ef:24:6e:35:5a:9f:81: 4e:2e:9b:8a:fb:56:aa:c9:9e:5f:83:94:0d:64:77: 55:d4:ff:2d:16:0c:2e:d0:89:91:a5:50:9a:16:cd: 3c:c7:37:85:51:a7:0b:6c:50:5b:bc:d2:44:5f:23: b7:c2:72:b4:45:0d:a5:b3:04:76:2d:a5:29:bb:66: be:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:21:6B:CF:6C:40:86:1C:F8:48:27:49:D5:99:C3:47:45:EE:2D:7B X509v3 Authority Key Identifier: keyid:65:BD:8B:DB:0F:06:88:47:9A:17:41:E2:BD:66:24:40:8D:A5:67:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/65BD8BDB0F0688479A1741E2BD6624408DA567AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65BD8BDB0F0688479A1741E2BD6624408DA567AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/65BD8BDB0F0688479A1741E2BD6624408DA567AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:4e:98:d8:f5:bb:48:63:28:53:0e:a8:9d:45:8e:df:95:af: 88:eb:74:ca:d5:b1:9d:a5:d8:bf:80:3f:ef:89:af:00:b0:df: 99:da:22:21:90:eb:26:3c:46:e6:d4:38:2f:9c:f3:21:ad:c2: 6c:9b:d7:c1:eb:bd:33:87:d0:ae:7f:3e:65:ac:9c:0d:cc:67: ab:86:a8:34:a3:6c:83:22:fb:2f:d5:9d:ef:75:85:35:21:0e: 2e:66:70:1a:69:4b:9d:19:50:e4:fe:a7:c5:6d:57:3a:64:b3: 30:2e:73:e7:18:5f:15:aa:9f:60:89:b6:bc:62:46:c0:af:e8: c1:38:95:1f:a3:cf:12:52:75:1a:a6:04:ff:a6:20:3b:ff:7d: c1:ff:bd:8d:e3:d2:22:39:34:34:74:b6:33:60:83:1a:a1:e9: 90:91:db:13:0d:a1:6e:a7:e0:51:c0:b3:f8:a3:fb:65:c9:37: 8d:4e:90:5e:13:ee:c9:e4:86:8b:21:01:3b:6e:ce:dc:a4:d3: 00:46:2b:91:15:b5:3b:d6:3e:9f:ab:d3:5d:62:f9:a3:e0:b0: ac:4b:47:66:f9:ba:74:1d:05:dc:9f:1e:9b:9f:cc:a7:23:45: 20:56:e8:c8:bc:ff:3d:82:73:a6:52:21:73:99:f0:6c:e0:d3: 18:96:57:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULVeUJP60jr9KmHOKGD+GQtxSVCUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVCRDhCREIwRjA2ODg0NzlBMTc0MUUyQkQ2NjI0NDA4 REE1NjdBQjAeFw0yNjA4MTkxNTAyMDNaFw0yNjA4MjAxODQwMDNaMDMxMTAvBgNV BAMTKDdEMjE2QkNGNkM0MDg2MUNGODQ4Mjc0OUQ1OTlDMzQ3NDVFRTJEN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkKtGEkNgDokTNKIiCTJVdAMoF OTJL+BxhwzDzszDntdz4WNBi7Q4dNW38zcTG9nXMmzaD1a7pddNRb9UmiT8a7okY pX5icjpAKbkPP83Yolh12J5YYvxQsB7bvkb0YxylasuQm4hrBZt8ZeQ/5xpSbGiR fLz7IkCydHhyCHqnkXDCvSU1V2Nuf0v9B/0y6fJomR95oCXgZeyvNqHfvu1V3eNi wopympOeNtNbN6Gr2B4AF6Ozq12zdXYy7yRuNVqfgU4um4r7VqrJnl+DlA1kd1XU /y0WDC7QiZGlUJoWzTzHN4VRpwtsUFu80kRfI7fCcrRFDaWzBHYtpSm7Zr7xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfSFrz2xAhhz4SCdJ1ZnDR0XuLXswHwYDVR0j BBgwFoAUZb2L2w8GiEeaF0HivWYkQI2lZ6swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTcxYTg0N2QtMjUzMS00ZDdmLTkyNDEtOTc3Nzg1MDYwNWQ2LzAvNjVCRDhCREIw RjA2ODg0NzlBMTc0MUUyQkQ2NjI0NDA4REE1NjdBQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NUJEOEJEQjBGMDY4ODQ3OUExNzQxRTJCRDY2MjQ0MDhEQTU2 N0FCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTcxYTg0N2QtMjUzMS00ZDdmLTky NDEtOTc3Nzg1MDYwNWQ2LzAvNjVCRDhCREIwRjA2ODg0NzlBMTc0MUUyQkQ2NjI0 NDA4REE1NjdBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHJOmNj1u0hjKFMOqJ1Fjt+Vr4jrdMrVsZ2l 2L+AP++JrwCw35naIiGQ6yY8RubUOC+c8yGtwmyb18HrvTOH0K5/PmWsnA3MZ6uG qDSjbIMi+y/Vne91hTUhDi5mcBppS50ZUOT+p8VtVzpkszAuc+cYXxWqn2CJtrxi RsCv6ME4lR+jzxJSdRqmBP+mIDv/fcH/vY3j0iI5NDR0tjNggxqh6ZCR2xMNoW6n 4FHAs/ij+2XJN41OkF4T7snkhoshATtuztyk0wBGK5EVtTvWPp+r011i+aPgsKxL R2b5unQdBdyfHpufzKcjRSBW6Mi8/z2Cc6ZSIXOZ8Gzg0xiWV5c= -----END CERTIFICATE-----Generated at Thu Aug 20 07:06:13 2026 by rpki-client