$ rpki-client -vvvf rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/65BD8BDB0F0688479A1741E2BD6624408DA567AB.mft File: 65BD8BDB0F0688479A1741E2BD6624408DA567AB.mft (raw, json) Hash identifier: KhxSo9HzQYjt0wGGk66FPkzCIRLMXZAZOTao0Z8SEJg= Subject key identifier: 5A:34:3A:A1:08:A5:A8:0D:59:EF:5B:6B:D2:D6:60:71:70:A2:71:DF Authority key identifier: 65:BD:8B:DB:0F:06:88:47:9A:17:41:E2:BD:66:24:40:8D:A5:67:AB Certificate issuer: /CN=65BD8BDB0F0688479A1741E2BD6624408DA567AB Certificate serial: 12A72634723261EDD6B262C4F64A05856D0E767F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65BD8BDB0F0688479A1741E2BD6624408DA567AB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/65BD8BDB0F0688479A1741E2BD6624408DA567AB.mft Manifest number: DD Signing time: Wed 14 Oct 2026 09:47:26 +0000 Manifest this update: Wed 14 Oct 2026 09:42:26 +0000 Manifest next update: Thu 15 Oct 2026 10:05:26 +0000 Files and hashes: 1: 3130332e3138302e35392e302f32342d3234203d3e2039333431.roa (hash: syfItM1/yGZojD6BnuWKenSP5tC0UxI22EVXiaCRFHk=) 2: 3130332e3138302e35382e302f32342d3234203d3e2039333431.roa (hash: 0M3/iOLfAX/g/90FmWqP3sssBOdbMngP4uNnmAsUyjY=) 3: 65BD8BDB0F0688479A1741E2BD6624408DA567AB.crl (hash: SB3cbHhcdEQ0d7378ZKsU92j9jQZQxvniJpyuxT6zg0=) 4: 3130332e3138302e35382e302f32332d3233203d3e2039333431.roa (hash: 9g7qK44kNZNkc5s9DYu864dbcgLL2OYqPHQVtd+AZyk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/65BD8BDB0F0688479A1741E2BD6624408DA567AB.crl rsync://rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/65BD8BDB0F0688479A1741E2BD6624408DA567AB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65BD8BDB0F0688479A1741E2BD6624408DA567AB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 10:05:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:a7:26:34:72:32:61:ed:d6:b2:62:c4:f6:4a:05:85:6d:0e:76:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65BD8BDB0F0688479A1741E2BD6624408DA567AB Validity Not Before: Oct 14 09:42:26 2026 GMT Not After : Oct 15 10:05:26 2026 GMT Subject: CN=5A343AA108A5A80D59EF5B6BD2D6607170A271DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7c:90:53:20:d5:86:cf:ec:26:0a:90:28:d6: 82:8d:9d:b9:88:08:77:d4:1b:21:e1:10:99:9d:f8: e9:d3:ba:71:43:07:d3:4d:db:2f:4f:0f:ce:88:16: 11:d9:af:78:96:23:c6:a5:38:98:6f:64:9e:10:3b: fd:24:f5:ca:71:b3:b6:65:50:96:ac:75:19:1e:13: b0:0d:bc:1f:41:1c:25:3a:f5:23:9e:1a:fe:7d:31: bc:88:a7:a4:9e:88:93:f3:e9:cc:e4:e3:e2:a5:f2: e1:06:3e:d6:29:60:a5:ca:18:ff:15:2f:6b:3f:fd: 68:23:52:c3:55:24:04:30:1a:d7:57:7e:9b:bd:a0: 4a:50:bb:5f:2f:a6:17:8b:fd:3c:ed:12:aa:89:35: 54:e1:18:31:00:66:0c:1b:d3:75:69:bb:6a:fb:03: 7e:e3:54:9e:5d:83:7a:87:27:a7:e2:31:04:f5:ee: cb:26:82:1c:3d:5b:bb:1e:d6:61:91:37:c1:9f:b8: ad:da:f6:1e:a0:1f:94:eb:f6:50:b8:a2:da:f3:6a: c4:a0:5b:c4:80:52:e2:9a:75:4c:17:90:e8:a1:7c: f8:38:3f:e9:b2:2f:2a:0a:71:ad:be:77:54:43:69: e4:cd:77:23:ca:d9:fe:1b:3b:27:41:b3:65:78:fd: 8e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:34:3A:A1:08:A5:A8:0D:59:EF:5B:6B:D2:D6:60:71:70:A2:71:DF X509v3 Authority Key Identifier: keyid:65:BD:8B:DB:0F:06:88:47:9A:17:41:E2:BD:66:24:40:8D:A5:67:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/65BD8BDB0F0688479A1741E2BD6624408DA567AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65BD8BDB0F0688479A1741E2BD6624408DA567AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/65BD8BDB0F0688479A1741E2BD6624408DA567AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:22:37:6c:a9:dd:14:dc:ae:11:35:fa:9d:76:4b:ac:71:25: 86:92:c9:6e:22:fa:50:9d:0f:67:66:6c:a1:7a:87:74:0a:a9: 36:ac:3f:ab:22:d0:0a:9d:0e:72:78:8c:6b:9a:5a:5e:e9:aa: 7c:e4:92:29:82:2f:ad:f6:a1:6b:37:a1:c9:a8:99:53:a3:82: 97:9d:09:61:9b:d5:c8:5f:93:ee:67:dc:68:c7:e4:eb:fe:7c: 1d:92:ea:be:6f:92:e3:1c:ec:16:24:6b:55:aa:95:1a:42:86: 94:81:fd:78:84:13:39:a2:b1:1d:97:71:24:1f:22:1e:0c:21: cd:c4:e0:07:dc:e4:77:2f:f0:95:9f:b9:cf:26:6a:63:81:87: e7:84:8a:1b:d9:4e:f5:77:dd:be:16:7f:4f:1d:73:ba:60:37: 4c:b7:d1:f1:38:bb:68:bb:81:be:68:ad:24:ae:84:ac:ba:df: 95:91:c8:86:05:5a:6f:1f:e4:66:08:2d:2f:f8:54:61:0c:20: a2:57:d6:9a:b6:ae:c2:aa:86:e3:d4:e0:f9:fa:b1:23:cf:0a: 6d:09:39:c3:87:72:87:9e:ce:6d:18:b5:0c:ec:71:88:c2:f3: 89:b3:b1:0d:67:ab:b4:f9:aa:80:40:1f:2c:8d:f9:1c:8c:c5: ba:c5:05:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEqcmNHIyYe3WsmLE9koFhW0Odn8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVCRDhCREIwRjA2ODg0NzlBMTc0MUUyQkQ2NjI0NDA4 REE1NjdBQjAeFw0yNjEwMTQwOTQyMjZaFw0yNjEwMTUxMDA1MjZaMDMxMTAvBgNV BAMTKDVBMzQzQUExMDhBNUE4MEQ1OUVGNUI2QkQyRDY2MDcxNzBBMjcxREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4fJBTINWGz+wmCpAo1oKNnbmI CHfUGyHhEJmd+OnTunFDB9NN2y9PD86IFhHZr3iWI8alOJhvZJ4QO/0k9cpxs7Zl UJasdRkeE7ANvB9BHCU69SOeGv59MbyIp6SeiJPz6czk4+Kl8uEGPtYpYKXKGP8V L2s//WgjUsNVJAQwGtdXfpu9oEpQu18vpheL/TztEqqJNVThGDEAZgwb03Vpu2r7 A37jVJ5dg3qHJ6fiMQT17ssmghw9W7se1mGRN8GfuK3a9h6gH5Tr9lC4otrzasSg W8SAUuKadUwXkOihfPg4P+myLyoKca2+d1RDaeTNdyPK2f4bOydBs2V4/Y5HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWjQ6oQilqA1Z71tr0tZgcXCicd8wHwYDVR0j BBgwFoAUZb2L2w8GiEeaF0HivWYkQI2lZ6swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTcxYTg0N2QtMjUzMS00ZDdmLTkyNDEtOTc3Nzg1MDYwNWQ2LzAvNjVCRDhCREIw RjA2ODg0NzlBMTc0MUUyQkQ2NjI0NDA4REE1NjdBQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NUJEOEJEQjBGMDY4ODQ3OUExNzQxRTJCRDY2MjQ0MDhEQTU2 N0FCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTcxYTg0N2QtMjUzMS00ZDdmLTky NDEtOTc3Nzg1MDYwNWQ2LzAvNjVCRDhCREIwRjA2ODg0NzlBMTc0MUUyQkQ2NjI0 NDA4REE1NjdBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKoiN2yp3RTcrhE1+p12S6xxJYaSyW4i+lCd D2dmbKF6h3QKqTasP6si0AqdDnJ4jGuaWl7pqnzkkimCL632oWs3ocmomVOjgped CWGb1chfk+5n3GjH5Ov+fB2S6r5vkuMc7BYka1WqlRpChpSB/XiEEzmisR2XcSQf Ih4MIc3E4Afc5Hcv8JWfuc8mamOBh+eEihvZTvV33b4Wf08dc7pgN0y30fE4u2i7 gb5orSSuhKy635WRyIYFWm8f5GYILS/4VGEMIKJX1pq2rsKqhuPU4Pn6sSPPCm0J OcOHcoeezm0YtQzscYjC84mzsQ1nq7T5qoBAHyyN+RyMxbrFBVA= -----END CERTIFICATE-----Generated at Wed Oct 14 20:39:13 2026 by rpki-client