$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.mft File: 65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.mft (raw, json) Hash identifier: ll5Cz9KPwpKf89m7AxGoWbMinDnKRxhvAvtY17WxeMo= Subject key identifier: FF:06:88:A9:B9:1C:BF:18:8A:81:74:19:D9:08:A7:3B:01:9B:3D:78 Authority key identifier: 65:FE:1D:A2:7B:82:A0:F9:AC:31:85:52:FD:2F:D0:0E:F6:6B:F7:CD Certificate issuer: /CN=65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD Certificate serial: 0392FB103F4AC1D6AA081AAE0ABFBC509F87EACF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.mft Manifest number: EE Signing time: Sun 25 Oct 2026 12:47:31 +0000 Manifest this update: Sun 25 Oct 2026 12:42:31 +0000 Manifest next update: Mon 26 Oct 2026 12:52:31 +0000 Files and hashes: 1: 3130332e3139342e34372e302f32342d3234203d3e20313439393731.roa (hash: RVWN9lnu+KvZlFcQZ9inyEY0+6TUodWkYC50twZKJSI=) 2: 3130332e3139342e34362e302f32342d3234203d3e20313439393731.roa (hash: 20o6cT5BLNovtqYdA+/pLFKRgD8D7hQ8yuxDKaT2ZSg=) 3: 3130332e3139342e34362e302f32332d3234203d3e20313439393731.roa (hash: J1nHPFtAKLB+vuTpgao772bc30wyFHiWLh6RRldiry8=) 4: 65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.crl (hash: wjFtTDgHEgOFF9Pvt6cf1z49kj+ap5rAnBNK3ZC7DbU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.crl rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:92:fb:10:3f:4a:c1:d6:aa:08:1a:ae:0a:bf:bc:50:9f:87:ea:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD Validity Not Before: Oct 25 12:42:31 2026 GMT Not After : Oct 26 12:52:31 2026 GMT Subject: CN=FF0688A9B91CBF188A817419D908A73B019B3D78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:43:a5:0f:b5:f4:7d:e3:85:0b:a0:a0:1e:d4: 63:d8:36:7d:eb:a3:48:0a:5f:3e:ac:04:a2:63:89: d1:d8:6b:5d:7d:db:af:5a:04:28:5a:33:9c:04:63: a9:5e:b4:e5:e3:41:09:15:3c:9e:b6:c6:dc:52:5f: fe:79:e5:2b:fb:4f:5e:7d:ae:df:0f:e8:c9:d2:08: f4:5c:7f:ea:43:14:0b:f6:01:6e:e9:ab:86:b2:13: 0a:ca:f9:3b:25:45:8a:e7:9f:a9:6a:b0:80:8a:51: 7e:8e:92:6f:b6:9c:f6:0e:15:46:9a:ae:6a:7c:3a: bc:38:b2:77:b1:bd:5a:bb:8b:84:87:00:6d:d7:31: fe:6a:33:c3:80:b5:f1:a0:93:84:05:32:fb:67:93: ce:f8:6a:23:70:07:41:3a:86:63:4b:16:43:c8:e9: 43:fb:d8:b2:04:93:16:2c:5d:1d:de:04:80:98:4d: 96:de:92:9a:c9:c7:2d:01:d2:5e:65:ec:7d:63:02: d8:60:9e:13:42:af:d6:ab:21:d7:97:07:93:30:71: 2f:2d:53:92:b7:a3:22:80:9c:06:46:35:36:75:4c: 8e:4b:77:18:7f:6e:1d:7e:bc:8f:f5:45:02:70:d6: 3b:8f:3f:ce:2e:2e:a8:87:bf:c6:0f:5a:15:ec:21: 0b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:06:88:A9:B9:1C:BF:18:8A:81:74:19:D9:08:A7:3B:01:9B:3D:78 X509v3 Authority Key Identifier: keyid:65:FE:1D:A2:7B:82:A0:F9:AC:31:85:52:FD:2F:D0:0E:F6:6B:F7:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:81:be:47:a5:76:b3:04:59:af:44:5a:64:35:4f:82:8b:f1: 93:7e:7b:35:21:6a:fb:85:57:14:63:f6:e6:2e:ee:56:35:49: 8c:85:30:5f:34:b3:21:2f:85:7a:7a:21:7f:1d:0b:49:e6:25: 25:29:15:d8:08:f3:4e:54:d1:5e:88:e8:ad:38:3a:38:0c:f9: 07:fd:3a:1d:3d:e0:a0:5d:17:dd:57:27:c7:0c:b6:ff:7a:15: 4b:17:74:45:10:24:ad:a9:9d:fd:cf:87:9c:3f:e3:a9:94:4b: fb:fb:73:72:52:0b:c2:8e:84:c2:89:f1:5f:01:a1:c4:41:49: 26:e3:ca:03:a8:ff:cd:a1:8d:4a:99:8d:ae:a9:c3:50:2c:83: 63:fe:49:4c:56:34:28:f9:d3:fe:42:db:29:5c:24:49:28:af: 91:65:e9:d9:1d:eb:9e:4e:a2:21:10:7a:a9:42:ae:f8:90:b0: 32:77:17:25:48:14:82:81:ac:5f:6e:4e:ff:50:31:de:88:6d: 4a:d6:2d:7b:c6:9f:12:79:4a:23:9e:4f:b4:bc:d0:8b:dc:99: 4d:f1:7f:20:ba:b6:52:e7:81:23:3c:79:2e:1e:f6:34:2a:8c: 7b:bb:f1:8a:5b:b5:9d:e7:44:7d:55:87:61:44:db:49:06:d5: a9:e2:0a:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA5L7ED9KwdaqCBquCr+8UJ+H6s8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVGRTFEQTI3QjgyQTBGOUFDMzE4NTUyRkQyRkQwMEVG NjZCRjdDRDAeFw0yNjEwMjUxMjQyMzFaFw0yNjEwMjYxMjUyMzFaMDMxMTAvBgNV BAMTKEZGMDY4OEE5QjkxQ0JGMTg4QTgxNzQxOUQ5MDhBNzNCMDE5QjNENzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtQ6UPtfR944ULoKAe1GPYNn3r o0gKXz6sBKJjidHYa119269aBChaM5wEY6letOXjQQkVPJ62xtxSX/555Sv7T159 rt8P6MnSCPRcf+pDFAv2AW7pq4ayEwrK+TslRYrnn6lqsICKUX6Okm+2nPYOFUaa rmp8Orw4snexvVq7i4SHAG3XMf5qM8OAtfGgk4QFMvtnk874aiNwB0E6hmNLFkPI 6UP72LIEkxYsXR3eBICYTZbekprJxy0B0l5l7H1jAthgnhNCr9arIdeXB5MwcS8t U5K3oyKAnAZGNTZ1TI5Ldxh/bh1+vI/1RQJw1juPP84uLqiHv8YPWhXsIQs1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/waIqbkcvxiKgXQZ2QinOwGbPXgwHwYDVR0j BBgwFoAUZf4donuCoPmsMYVS/S/QDvZr980wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yjg5OTNhOTMtNTg4OS00ZTAyLTllOTUtNzY5Y2I4OWUwMDM1LzAvNjVGRTFEQTI3 QjgyQTBGOUFDMzE4NTUyRkQyRkQwMEVGNjZCRjdDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NUZFMURBMjdCODJBMEY5QUMzMTg1NTJGRDJGRDAwRUY2NkJG N0NELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjg5OTNhOTMtNTg4OS00ZTAyLTll OTUtNzY5Y2I4OWUwMDM1LzAvNjVGRTFEQTI3QjgyQTBGOUFDMzE4NTUyRkQyRkQw MEVGNjZCRjdDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADmBvkeldrMEWa9EWmQ1T4KL8ZN+ezUhavuF VxRj9uYu7lY1SYyFMF80syEvhXp6IX8dC0nmJSUpFdgI805U0V6I6K04OjgM+Qf9 Oh094KBdF91XJ8cMtv96FUsXdEUQJK2pnf3Ph5w/46mUS/v7c3JSC8KOhMKJ8V8B ocRBSSbjygOo/82hjUqZja6pw1Asg2P+SUxWNCj50/5C2ylcJEkor5Fl6dkd655O oiEQeqlCrviQsDJ3FyVIFIKBrF9uTv9QMd6IbUrWLXvGnxJ5SiOeT7S80IvcmU3x fyC6tlLngSM8eS4e9jQqjHu78YpbtZ3nRH1Vh2FE20kG1aniCoA= -----END CERTIFICATE-----Generated at Mon Oct 26 04:01:04 2026 by rpki-client