$ rpki-client -vvf rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.mft File: 65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.mft (raw, json) Hash identifier: W2hw2je2d5Ie726WBmI27SQD10ork406b5CFA7CW1Ro= Subject key identifier: 7A:12:EF:21:DD:4B:12:85:55:78:A5:3C:19:DA:DD:46:99:25:64:D1 Authority key identifier: 65:FE:1D:A2:7B:82:A0:F9:AC:31:85:52:FD:2F:D0:0E:F6:6B:F7:CD Certificate issuer: /CN=65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD Certificate serial: 698933D12D0438E97C1CCFADC720F8E96C1DDF41 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 15:54:54 +0000 Manifest this update: Fri 19 Jun 2026 15:49:54 +0000 Manifest next update: Sat 20 Jun 2026 15:55:54 +0000 Files and hashes: 1: 3130332e3139342e34362e302f32332d3234203d3e20313439393731.roa (hash: 4ExEorQAkAboUfCg4xl3LFUmZFGrqFAxLJKE8qeWaSE=) 2: 65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.crl (hash: iWIGccgjFUztClYIp0RMr8S1kjQi91bjuZ5Lm/Okb/8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.crl rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 15:55:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:89:33:d1:2d:04:38:e9:7c:1c:cf:ad:c7:20:f8:e9:6c:1d:df:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD Validity Not Before: Jun 19 15:49:54 2026 GMT Not After : Jun 20 15:55:54 2026 GMT Subject: CN=7A12EF21DD4B12855578A53C19DADD46992564D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:58:b9:ef:27:c6:41:5c:68:91:96:45:62:91: 55:e1:97:8e:17:9e:f3:76:26:1b:aa:90:90:36:f6: 60:df:9b:d4:34:72:c7:4b:18:5a:f5:42:a7:e8:97: d9:3b:30:2a:92:95:42:ae:18:30:ea:12:06:7f:fe: 07:c9:bd:53:a6:d3:2c:0d:b7:a0:3c:07:f7:d2:a0: 53:3d:03:de:8b:e3:f9:fb:cb:8f:ce:68:76:16:39: e9:25:20:74:a4:a4:ec:c4:fb:ce:2d:44:8c:fd:12: 01:64:aa:0f:d7:8b:fd:bd:22:ea:6a:ab:69:3d:d2: a8:a6:cf:82:54:0e:2f:ac:3e:f2:31:e7:df:d5:f8: f1:13:a8:e9:fb:58:15:15:19:8e:69:30:66:5b:b1: 06:37:94:4e:a7:05:b9:cd:a7:c1:e0:a6:8a:24:25: 0d:8b:60:5d:d5:57:72:3b:18:24:e2:65:b8:8e:91: fd:90:47:df:8d:cc:c2:73:c4:8d:39:ad:68:1d:69: ee:f0:25:a0:2c:d0:57:77:c2:41:01:72:2b:36:86: e8:bc:9f:5d:41:45:d8:5d:bf:85:23:50:c7:06:49: ca:06:a5:b6:85:32:85:28:7c:20:cb:df:8d:81:e3: 9b:c6:a8:cd:b8:cf:e8:d6:09:60:99:7b:57:66:3b: e2:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:12:EF:21:DD:4B:12:85:55:78:A5:3C:19:DA:DD:46:99:25:64:D1 X509v3 Authority Key Identifier: keyid:65:FE:1D:A2:7B:82:A0:F9:AC:31:85:52:FD:2F:D0:0E:F6:6B:F7:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:a0:8a:14:e5:96:18:b8:81:75:98:34:7c:c7:b2:e1:93:43: 58:1c:6f:a1:89:06:fd:61:6a:25:d4:03:89:b1:19:4f:74:c0: ea:2f:b2:e8:2e:85:a0:5b:cb:a1:24:9c:fa:95:86:3d:12:aa: 79:c7:21:0c:25:c9:a9:b1:06:25:fa:b0:de:89:c8:0a:8f:4e: 55:c9:cd:00:ab:7e:a1:fc:6b:32:a5:36:fa:c0:97:37:01:2e: 3b:48:9c:f0:1e:3a:2f:4e:13:4e:cc:a7:93:00:af:69:a6:e0: a3:21:03:11:b3:2e:3d:ee:b8:e5:02:3c:1b:9e:56:dc:1b:ff: db:b2:26:36:f9:c0:36:4f:e9:a1:bb:1c:d7:09:b0:0b:db:60: ea:65:43:78:bc:1b:ad:83:34:2c:4b:14:7e:bc:db:46:b6:69: 51:28:df:9a:a2:f0:5b:71:f7:9f:a1:1e:b0:fc:bd:c1:83:61: 78:2d:38:69:df:b5:7a:44:7c:cb:8f:90:f2:22:4e:78:d3:d8: 3b:94:4d:74:e6:c1:d2:dd:64:fd:ef:da:51:db:cc:e5:5a:82: 3b:90:c5:5b:c6:c0:73:8a:05:90:6d:5b:69:ec:9d:51:96:b1: 9c:db:96:b7:72:17:55:0b:b2:b9:00:5a:33:a1:72:06:b3:91: 5e:8f:0a:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaYkz0S0EOOl8HM+txyD46Wwd30EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVGRTFEQTI3QjgyQTBGOUFDMzE4NTUyRkQyRkQwMEVG NjZCRjdDRDAeFw0yNjA2MTkxNTQ5NTRaFw0yNjA2MjAxNTU1NTRaMDMxMTAvBgNV BAMTKDdBMTJFRjIxREQ0QjEyODU1NTc4QTUzQzE5REFERDQ2OTkyNTY0RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMWLnvJ8ZBXGiRlkVikVXhl44X nvN2JhuqkJA29mDfm9Q0csdLGFr1Qqfol9k7MCqSlUKuGDDqEgZ//gfJvVOm0ywN t6A8B/fSoFM9A96L4/n7y4/OaHYWOeklIHSkpOzE+84tRIz9EgFkqg/Xi/29Iupq q2k90qimz4JUDi+sPvIx59/V+PETqOn7WBUVGY5pMGZbsQY3lE6nBbnNp8Hgpook JQ2LYF3VV3I7GCTiZbiOkf2QR9+NzMJzxI05rWgdae7wJaAs0Fd3wkEBcis2hui8 n11BRdhdv4UjUMcGScoGpbaFMoUofCDL342B45vGqM24z+jWCWCZe1dmO+IBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUehLvId1LEoVVeKU8GdrdRpklZNEwHwYDVR0j BBgwFoAUZf4donuCoPmsMYVS/S/QDvZr980wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yjg5OTNhOTMtNTg4OS00ZTAyLTllOTUtNzY5Y2I4OWUwMDM1LzAvNjVGRTFEQTI3 QjgyQTBGOUFDMzE4NTUyRkQyRkQwMEVGNjZCRjdDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NUZFMURBMjdCODJBMEY5QUMzMTg1NTJGRDJGRDAwRUY2NkJG N0NELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjg5OTNhOTMtNTg4OS00ZTAyLTll OTUtNzY5Y2I4OWUwMDM1LzAvNjVGRTFEQTI3QjgyQTBGOUFDMzE4NTUyRkQyRkQw MEVGNjZCRjdDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACGgihTllhi4gXWYNHzHsuGTQ1gcb6GJBv1h aiXUA4mxGU90wOovsuguhaBby6EknPqVhj0SqnnHIQwlyamxBiX6sN6JyAqPTlXJ zQCrfqH8azKlNvrAlzcBLjtInPAeOi9OE07Mp5MAr2mm4KMhAxGzLj3uuOUCPBue Vtwb/9uyJjb5wDZP6aG7HNcJsAvbYOplQ3i8G62DNCxLFH6820a2aVEo35qi8Ftx 95+hHrD8vcGDYXgtOGnftXpEfMuPkPIiTnjT2DuUTXTmwdLdZP3v2lHbzOVagjuQ xVvGwHOKBZBtW2nsnVGWsZzblrdyF1ULsrkAWjOhcgazkV6PCnY= -----END CERTIFICATE-----Generated at Sat Jun 20 09:14:04 2026 by rpki-client