$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.mft File: A65A7370A28DA71B1C11B89E09D51753C498246D.mft (raw, json) Hash identifier: tBu8XNsV7wqAqcQstvUwIpAMOIe5gcuxcgiWXVjFKNs= Subject key identifier: C8:B0:BE:9A:C2:B1:A3:23:D6:AF:55:79:C5:48:48:66:4B:EB:0A:27 Authority key identifier: A6:5A:73:70:A2:8D:A7:1B:1C:11:B8:9E:09:D5:17:53:C4:98:24:6D Certificate issuer: /CN=A65A7370A28DA71B1C11B89E09D51753C498246D Certificate serial: 51C32F6AD3EBE20C6CF59A0126B4218F438CD263 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/A65A7370A28DA71B1C11B89E09D51753C498246D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.mft Manifest number: DA Signing time: Tue 13 Oct 2026 04:11:17 +0000 Manifest this update: Tue 13 Oct 2026 04:06:17 +0000 Manifest next update: Wed 14 Oct 2026 05:28:17 +0000 Files and hashes: 1: A65A7370A28DA71B1C11B89E09D51753C498246D.crl (hash: /OLdnBmtWVlP/4CVGBDb/Bqt7kbQsffjnx1kyt6iq98=) 2: 3135312e3135382e37352e302f32342d3234203d3e20313331343534.roa (hash: Ho6tdl1he9FR1/62MiqnACr306KYnR/YSxoabj/m7M4=) 3: 3135312e3135382e37342e302f32332d3233203d3e20313331343534.roa (hash: kTQiZ7hK+M7BbCy/GwseyxlIaws4BXvafRAJzzRJxhc=) 4: 3135312e3135382e37342e302f32342d3234203d3e20313331343534.roa (hash: yLjPOFhKt4noRbzRL2MIGaluRq2L7M9f6uyh5pKU9Ec=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.crl rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/3/A65A7370A28DA71B1C11B89E09D51753C498246D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 05:28:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:c3:2f:6a:d3:eb:e2:0c:6c:f5:9a:01:26:b4:21:8f:43:8c:d2:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A65A7370A28DA71B1C11B89E09D51753C498246D Validity Not Before: Oct 13 04:06:17 2026 GMT Not After : Oct 14 05:28:17 2026 GMT Subject: CN=C8B0BE9AC2B1A323D6AF5579C54848664BEB0A27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5e:30:a8:ab:51:c2:d5:e9:d2:69:09:52:a0: 51:01:b7:bc:af:24:6b:0f:c7:f6:61:15:0b:96:ef: 3c:44:97:29:7b:af:66:f8:8b:f0:57:32:b0:4f:f1: 5c:09:af:ac:34:f7:12:08:44:93:69:cc:d6:01:13: db:eb:9e:df:ed:03:7f:65:69:76:4b:3e:ec:b0:08: bf:90:68:7d:ef:70:d1:38:4d:1d:b1:13:a2:24:d3: 44:df:78:96:66:21:cf:e5:c7:c0:cd:54:1e:71:28: 98:dd:7b:90:69:d1:a8:07:4e:e4:72:97:42:96:91: 8f:63:16:80:5e:66:9f:ee:83:9b:05:89:e9:0c:f0: d1:80:5a:b9:0c:45:be:e5:2d:29:46:1f:aa:8e:9d: f3:a4:76:ab:8d:8e:48:4f:83:dc:0c:77:0d:d2:5c: b7:fd:52:3d:0d:c5:4d:32:1a:a6:e9:29:c8:05:85: 29:eb:ab:bc:d5:21:a9:34:90:9a:00:6b:18:f9:28: bc:e7:c5:4c:0c:d2:4e:e0:0b:33:94:48:1c:81:c3: 62:12:5d:52:cb:2a:3b:90:64:24:26:0f:8b:95:ec: 11:4e:c7:2e:98:73:3a:47:ea:d7:b7:6c:ee:47:5f: 35:fb:a1:c8:71:d8:78:b9:98:2e:69:01:70:07:86: b0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:B0:BE:9A:C2:B1:A3:23:D6:AF:55:79:C5:48:48:66:4B:EB:0A:27 X509v3 Authority Key Identifier: keyid:A6:5A:73:70:A2:8D:A7:1B:1C:11:B8:9E:09:D5:17:53:C4:98:24:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/A65A7370A28DA71B1C11B89E09D51753C498246D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:a4:52:d7:36:76:1b:a5:b5:56:26:cc:a1:c3:6d:f8:8f:46: 47:03:4e:86:8b:95:52:a9:fd:36:86:94:52:d0:07:99:30:b3: 9b:63:ef:88:0b:7b:c8:9c:f2:26:04:8b:d1:cc:ea:59:1a:15: ce:0c:9f:7c:5b:0f:2c:40:29:fa:3b:0d:3f:36:91:90:c7:4c: 04:06:8e:68:7d:e2:6d:16:57:9f:b7:d5:ca:7d:76:76:91:bd: 11:42:01:c3:d9:99:4e:29:9c:8c:02:98:0e:28:85:8e:2b:e7: 15:bd:ea:e6:79:26:56:e2:af:62:45:b6:7b:f4:03:1d:74:40: 81:d4:db:7e:a2:33:d9:cd:67:35:24:5c:2c:49:6f:1a:54:d8: 78:12:82:f7:dd:7f:99:2e:fd:bd:fa:c7:74:ab:29:b7:23:0f: 0f:2b:6b:20:06:a1:f2:76:19:60:05:63:cd:da:c4:4f:a6:7d: 2d:15:06:5b:6c:c7:e3:5f:9c:83:b9:e3:b3:9c:01:89:a3:64: 8f:6b:53:90:24:e1:af:01:11:e0:c1:cf:96:79:b4:31:55:f8: 58:f5:d5:20:e4:0c:e8:29:a1:cd:2d:b7:78:d4:91:51:cb:80: f5:7d:77:35:22:63:9e:e2:9a:31:d0:3e:e2:b9:e4:e9:fb:f8: a7:c7:ff:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUcMvatPr4gxs9ZoBJrQhj0OM0mMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY1QTczNzBBMjhEQTcxQjFDMTFCODlFMDlENTE3NTND NDk4MjQ2RDAeFw0yNjEwMTMwNDA2MTdaFw0yNjEwMTQwNTI4MTdaMDMxMTAvBgNV BAMTKEM4QjBCRTlBQzJCMUEzMjNENkFGNTU3OUM1NDg0ODY2NEJFQjBBMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNXjCoq1HC1enSaQlSoFEBt7yv JGsPx/ZhFQuW7zxElyl7r2b4i/BXMrBP8VwJr6w09xIIRJNpzNYBE9vrnt/tA39l aXZLPuywCL+QaH3vcNE4TR2xE6Ik00TfeJZmIc/lx8DNVB5xKJjde5Bp0agHTuRy l0KWkY9jFoBeZp/ug5sFiekM8NGAWrkMRb7lLSlGH6qOnfOkdquNjkhPg9wMdw3S XLf9Uj0NxU0yGqbpKcgFhSnrq7zVIak0kJoAaxj5KLznxUwM0k7gCzOUSByBw2IS XVLLKjuQZCQmD4uV7BFOxy6YczpH6te3bO5HXzX7ochx2Hi5mC5pAXAHhrChAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyLC+msKxoyPWr1V5xUhIZkvrCicwHwYDVR0j BBgwFoAUplpzcKKNpxscEbieCdUXU8SYJG0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmVmMTZmMzEtNjBjZS00N2E3LWFlOGQtNWEyOGM1MTFjOTQ3LzEvQTY1QTczNzBB MjhEQTcxQjFDMTFCODlFMDlENTE3NTNDNDk4MjQ2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMy9BNjVBNzM3MEEyOERBNzFCMUMxMUI4OUUwOUQ1MTc1M0M0OTgy NDZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmVmMTZmMzEtNjBjZS00N2E3LWFl OGQtNWEyOGM1MTFjOTQ3LzEvQTY1QTczNzBBMjhEQTcxQjFDMTFCODlFMDlENTE3 NTNDNDk4MjQ2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAekUtc2dhultVYmzKHDbfiPRkcDToaLlVKp /TaGlFLQB5kws5tj74gLe8ic8iYEi9HM6lkaFc4Mn3xbDyxAKfo7DT82kZDHTAQG jmh94m0WV5+31cp9dnaRvRFCAcPZmU4pnIwCmA4ohY4r5xW96uZ5Jlbir2JFtnv0 Ax10QIHU236iM9nNZzUkXCxJbxpU2HgSgvfdf5ku/b36x3SrKbcjDw8rayAGofJ2 GWAFY83axE+mfS0VBltsx+NfnIO547OcAYmjZI9rU5Ak4a8BEeDBz5Z5tDFV+Fj1 1SDkDOgpoc0tt3jUkVHLgPV9dzUiY57imjHQPuK55On7+KfH/28= -----END CERTIFICATE-----Generated at Tue Oct 13 17:34:39 2026 by rpki-client