
$ rpki-client -vvf rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/A65F65BF2DB9317754BA910F052FC09429259CBC.mft
File: A65F65BF2DB9317754BA910F052FC09429259CBC.mft (raw, json)
Hash identifier: Hnv3CC19ORC5DRZ3m3CyUqi1AIcHTFSfAOvKRv9Baq8=
Subject key identifier: 8E:22:29:55:F4:D5:69:C7:E4:B9:AE:41:40:B1:11:52:0F:0E:2B:36
Authority key identifier: A6:5F:65:BF:2D:B9:31:77:54:BA:91:0F:05:2F:C0:94:29:25:9C:BC
Certificate issuer: /CN=A65F65BF2DB9317754BA910F052FC09429259CBC
Certificate serial: 355901EAE60E1DE08A9966F9A55B18717D26BEF0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A65F65BF2DB9317754BA910F052FC09429259CBC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/A65F65BF2DB9317754BA910F052FC09429259CBC.mft
Manifest number: 7C
Signing time: Sun 02 Aug 2026 12:27:47 +0000
Manifest this update: Sun 02 Aug 2026 12:22:47 +0000
Manifest next update: Mon 03 Aug 2026 14:49:47 +0000
Files and hashes: 1: 3135372e32302e3230392e302f32342d3234203d3e20313532343136.roa (hash: rwfp5y5H5qPfQhaF6rDqIcStalVTGJI0mJpk4RX2nTI=)
2: 3135372e32302e3230382e302f32332d3233203d3e20313532343136.roa (hash: 6sJwEQuVC2SCQbpKDbpQ7062AUPzj2WmwzEMVpDHp88=)
3: 3135372e32302e3230382e302f32342d3234203d3e20313532343136.roa (hash: vffHdk9OOgHjUn3gX3E1MpxE/+kaQ1DhpiQKkuuDY58=)
4: A65F65BF2DB9317754BA910F052FC09429259CBC.crl (hash: UKi1mAMhCfeRv9+CUcJVTfpp3XLV755fuwWdx9B63e4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/A65F65BF2DB9317754BA910F052FC09429259CBC.crl
rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/A65F65BF2DB9317754BA910F052FC09429259CBC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A65F65BF2DB9317754BA910F052FC09429259CBC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 14:49:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:59:01:ea:e6:0e:1d:e0:8a:99:66:f9:a5:5b:18:71:7d:26:be:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A65F65BF2DB9317754BA910F052FC09429259CBC
Validity
Not Before: Aug 2 12:22:47 2026 GMT
Not After : Aug 3 14:49:47 2026 GMT
Subject: CN=8E222955F4D569C7E4B9AE4140B111520F0E2B36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:fe:b3:f6:74:8e:60:24:eb:72:2e:84:05:57:
03:b2:1d:28:e5:34:3b:f4:e2:89:71:24:8a:f3:bf:
66:8e:85:5b:7c:8e:a6:52:77:04:05:6f:ab:ab:f9:
e0:54:23:51:be:e6:04:29:2c:bf:9f:52:0e:c6:31:
ab:03:ec:27:a0:8f:37:0d:cc:18:0d:cf:87:15:f8:
1b:4a:5a:00:8a:0a:61:a9:8c:70:c9:7e:61:8f:61:
98:0c:4f:41:d8:ec:97:1d:c9:5d:54:88:3b:9e:74:
9d:eb:e0:f2:df:87:39:9c:0e:c4:2f:3c:60:6f:30:
de:c0:a0:22:7a:8c:93:24:3a:5d:c4:d9:ef:a7:78:
d3:3b:e7:32:f0:dd:86:3c:9d:98:03:19:e4:53:72:
02:fb:e0:69:2c:e4:73:89:f0:d2:d0:f5:ba:1b:eb:
0c:47:12:77:6a:01:e8:71:11:54:a8:68:38:a0:77:
c0:8f:98:31:54:62:19:15:8a:4b:51:18:fe:c6:65:
4b:d8:d8:75:28:76:9b:7d:82:86:57:52:d5:e2:44:
7a:4e:51:7d:0c:76:14:37:4d:23:ad:a8:42:dc:ac:
06:fd:77:7f:54:9e:24:ae:4a:06:6a:5b:83:3a:ef:
bc:81:e2:20:d4:a3:cf:89:e6:a6:e0:5d:eb:c4:b5:
de:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:22:29:55:F4:D5:69:C7:E4:B9:AE:41:40:B1:11:52:0F:0E:2B:36
X509v3 Authority Key Identifier:
keyid:A6:5F:65:BF:2D:B9:31:77:54:BA:91:0F:05:2F:C0:94:29:25:9C:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/A65F65BF2DB9317754BA910F052FC09429259CBC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A65F65BF2DB9317754BA910F052FC09429259CBC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/A65F65BF2DB9317754BA910F052FC09429259CBC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:87:f3:d9:da:12:71:58:33:d5:73:7f:06:65:1b:ce:c7:cc:
ec:4f:49:7c:0a:54:b7:a8:b3:0c:b5:ff:e9:73:7d:bc:08:ec:
ba:ae:47:b3:e8:81:0f:69:77:d9:6b:ab:dc:08:84:fb:43:9e:
d8:82:23:17:44:81:c7:23:dc:eb:0a:7c:c9:86:ec:13:09:53:
27:00:04:81:45:08:5c:5b:75:b2:1e:4f:b4:b6:1b:fa:d3:b3:
b5:99:5b:0c:0b:7f:84:22:4c:fc:95:ac:fb:71:9e:6c:65:3a:
a8:25:35:30:45:9a:b2:17:f0:46:22:48:35:bc:1d:00:b0:e8:
5c:c7:8f:cb:46:4e:b5:9c:a1:6f:13:ab:2c:2f:43:35:1a:52:
66:c4:63:5d:77:d2:ff:f6:66:cd:f3:a2:35:d1:cb:95:40:9d:
c3:08:99:44:54:0f:3b:cc:ec:6b:9e:a8:cc:8d:1d:4d:49:d2:
b4:6a:5c:11:c3:7a:ff:73:d1:45:40:07:59:cc:85:86:08:69:
28:98:ad:83:7c:92:99:2a:44:f8:03:31:72:a8:e6:d7:18:4e:
c3:86:4c:a6:83:35:ca:39:d0:bd:9b:7e:ad:79:ad:7c:28:41:
49:03:0f:0a:86:77:6b:90:06:22:b6:34:d2:d7:4b:3b:80:4e:
de:05:a8:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 20:32:49 2026 by rpki-client