$ rpki-client -vvvf rpki-rsync.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/65177A3236E4CDE9DEABA6D24D81798C0342B359.mft File: 65177A3236E4CDE9DEABA6D24D81798C0342B359.mft (raw, json) Hash identifier: 8sWYKXC2PoyzBwqWSHrZ8TSdpx2P2b+Ocq6UDaWhBmk= Subject key identifier: 7A:EB:E5:CF:09:62:D1:F9:9E:BB:28:13:45:9D:C3:A1:7F:3D:18:3A Authority key identifier: 65:17:7A:32:36:E4:CD:E9:DE:AB:A6:D2:4D:81:79:8C:03:42:B3:59 Certificate issuer: /CN=65177A3236E4CDE9DEABA6D24D81798C0342B359 Certificate serial: 2A9FF9D050A0BFB038EB0BB6848A1C80F08AAFA5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65177A3236E4CDE9DEABA6D24D81798C0342B359.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/65177A3236E4CDE9DEABA6D24D81798C0342B359.mft Manifest number: EB Signing time: Sun 25 Oct 2026 08:06:32 +0000 Manifest this update: Sun 25 Oct 2026 08:01:32 +0000 Manifest next update: Mon 26 Oct 2026 08:26:32 +0000 Files and hashes: 1: 3130332e3134362e3134352e302f32342d3234203d3e20313530313836.roa (hash: dc+32akDqD+whWWKGoW6auMBb4nmyq1TxJGgB+DF/Mw=) 2: 65177A3236E4CDE9DEABA6D24D81798C0342B359.crl (hash: jbhj6N2zHtgkse0ILOuQ/JyFw3L29ylmsL+haYrJ/58=) 3: 3130332e3134362e3134342e302f32342d3234203d3e20313530313836.roa (hash: lVbFef/6mdjInFTMm3cO34cZeIrGM0mKpOLsVw5+rAw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/65177A3236E4CDE9DEABA6D24D81798C0342B359.crl rsync://rpki-rsync.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/65177A3236E4CDE9DEABA6D24D81798C0342B359.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65177A3236E4CDE9DEABA6D24D81798C0342B359.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 08:26:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:9f:f9:d0:50:a0:bf:b0:38:eb:0b:b6:84:8a:1c:80:f0:8a:af:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65177A3236E4CDE9DEABA6D24D81798C0342B359 Validity Not Before: Oct 25 08:01:32 2026 GMT Not After : Oct 26 08:26:32 2026 GMT Subject: CN=7AEBE5CF0962D1F99EBB2813459DC3A17F3D183A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:25:45:09:93:88:f8:a6:b7:c8:15:f7:78:a7: 62:f6:5e:a2:ff:8a:31:a7:da:9a:e1:ff:19:20:4e: b4:02:7f:18:d0:29:50:d9:7f:a5:ae:95:6b:72:18: 48:ff:c4:57:3a:e3:0d:5e:02:9e:83:92:45:e1:e3: a0:62:4b:f7:de:66:f7:89:3e:d1:ce:a5:f7:99:54: ed:bb:72:c1:8a:f8:3c:21:ab:12:5d:90:c4:90:28: f2:dd:9b:98:ae:9a:db:60:10:17:6f:f6:48:f3:13: ef:4e:23:94:7e:30:24:96:f7:c5:ed:0e:5e:a2:e8: 2e:19:b2:89:28:aa:f4:de:3f:dc:06:14:25:6c:73: d5:e9:7d:32:fa:e9:b7:0e:18:dc:13:5d:78:f0:37: 6a:c8:09:7e:18:2f:ca:a8:ac:47:b5:b5:77:fb:cc: 61:ad:5a:a8:66:4a:ca:95:c8:68:72:8e:02:62:80: f9:b3:90:bd:a6:18:87:f7:a6:e9:27:61:4c:66:da: 14:b5:72:90:1e:f0:31:17:2f:70:ea:42:8a:71:67: 56:44:4a:bb:5c:ea:56:6c:48:b6:49:67:fa:91:e3: 05:a0:10:bd:d6:33:8b:5f:37:1e:4e:27:1d:26:3c: 14:b2:14:6e:7b:e9:aa:09:4f:4a:fc:e6:65:41:a6: 0f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:EB:E5:CF:09:62:D1:F9:9E:BB:28:13:45:9D:C3:A1:7F:3D:18:3A X509v3 Authority Key Identifier: keyid:65:17:7A:32:36:E4:CD:E9:DE:AB:A6:D2:4D:81:79:8C:03:42:B3:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/65177A3236E4CDE9DEABA6D24D81798C0342B359.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65177A3236E4CDE9DEABA6D24D81798C0342B359.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/65177A3236E4CDE9DEABA6D24D81798C0342B359.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:9c:f2:9e:19:ee:23:0b:3c:45:55:38:d2:2b:8b:ec:d7:5e: d9:66:15:c6:01:2b:fd:07:40:a9:a8:1e:cb:5b:c5:a5:f6:47: 5c:cd:02:15:00:8a:0d:17:2f:4e:b3:1b:54:17:24:39:32:06: b0:35:01:d2:aa:dd:2b:62:98:e4:8f:63:a8:32:e6:ac:c6:64: f6:68:35:be:90:f6:a5:ed:eb:0e:4e:2a:cc:8e:ff:b3:cb:4c: 7f:5c:f2:f6:80:0e:93:33:0f:4c:f5:7a:c2:b5:71:4b:49:49: 8d:48:69:20:97:0e:9e:f4:2e:a0:2b:1c:f3:b5:85:cb:b0:88: 62:98:ef:26:60:33:1c:f1:1a:54:ff:66:2f:df:8a:34:a5:bb: 47:88:05:d8:21:8e:3c:c3:d2:e4:89:cc:b1:b5:e9:7a:ad:3e: a3:90:7e:c8:ef:b4:70:69:4f:fc:f6:62:9d:d9:91:d9:d5:54: 36:6d:36:f8:a2:75:99:29:d3:86:0c:78:13:de:0b:f0:ea:bf: 54:35:96:a2:fb:1b:39:0f:4b:3e:39:d3:29:df:c5:6f:dc:d6: 05:65:04:a8:f0:11:43:41:d0:3e:eb:31:2b:a5:50:11:d7:39: 73:77:37:75:6a:b1:3c:96:f4:95:64:83:b4:41:4a:99:8b:79: ef:66:1f:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKp/50FCgv7A46wu2hIocgPCKr6UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjUxNzdBMzIzNkU0Q0RFOURFQUJBNkQyNEQ4MTc5OEMw MzQyQjM1OTAeFw0yNjEwMjUwODAxMzJaFw0yNjEwMjYwODI2MzJaMDMxMTAvBgNV BAMTKDdBRUJFNUNGMDk2MkQxRjk5RUJCMjgxMzQ1OURDM0ExN0YzRDE4M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClJUUJk4j4prfIFfd4p2L2XqL/ ijGn2prh/xkgTrQCfxjQKVDZf6WulWtyGEj/xFc64w1eAp6DkkXh46BiS/feZveJ PtHOpfeZVO27csGK+DwhqxJdkMSQKPLdm5iumttgEBdv9kjzE+9OI5R+MCSW98Xt Dl6i6C4ZsokoqvTeP9wGFCVsc9XpfTL66bcOGNwTXXjwN2rICX4YL8qorEe1tXf7 zGGtWqhmSsqVyGhyjgJigPmzkL2mGIf3puknYUxm2hS1cpAe8DEXL3DqQopxZ1ZE Srtc6lZsSLZJZ/qR4wWgEL3WM4tfNx5OJx0mPBSyFG576aoJT0r85mVBpg8ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeuvlzwli0fmeuygTRZ3DoX89GDowHwYDVR0j BBgwFoAUZRd6Mjbkzeneq6bSTYF5jANCs1kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDA2MTQxNjMtNGNhNC00OTM2LWJmOGItODRkOGMyZDFmMDJkLzAvNjUxNzdBMzIz NkU0Q0RFOURFQUJBNkQyNEQ4MTc5OEMwMzQyQjM1OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NTE3N0EzMjM2RTRDREU5REVBQkE2RDI0RDgxNzk4QzAzNDJC MzU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDA2MTQxNjMtNGNhNC00OTM2LWJm OGItODRkOGMyZDFmMDJkLzAvNjUxNzdBMzIzNkU0Q0RFOURFQUJBNkQyNEQ4MTc5 OEMwMzQyQjM1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGqc8p4Z7iMLPEVVONIri+zXXtlmFcYBK/0H QKmoHstbxaX2R1zNAhUAig0XL06zG1QXJDkyBrA1AdKq3StimOSPY6gy5qzGZPZo Nb6Q9qXt6w5OKsyO/7PLTH9c8vaADpMzD0z1esK1cUtJSY1IaSCXDp70LqArHPO1 hcuwiGKY7yZgMxzxGlT/Zi/fijSlu0eIBdghjjzD0uSJzLG16XqtPqOQfsjvtHBp T/z2Yp3ZkdnVVDZtNviidZkp04YMeBPeC/Dqv1Q1lqL7GzkPSz450ynfxW/c1gVl BKjwEUNB0D7rMSulUBHXOXN3N3VqsTyW9JVkg7RBSpmLee9mH0A= -----END CERTIFICATE-----Generated at Sun Oct 25 23:11:35 2026 by rpki-client