$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/A65F65BF2DB9317754BA910F052FC09429259CBC.mft File: A65F65BF2DB9317754BA910F052FC09429259CBC.mft (raw, json) Hash identifier: HPladRGb7wYWk1pD1V/eAWojVKBxQnIAP2KozY68M+A= Subject key identifier: 49:9D:35:8D:96:53:90:38:11:2D:47:5A:AA:14:02:AE:5B:A5:CC:52 Authority key identifier: A6:5F:65:BF:2D:B9:31:77:54:BA:91:0F:05:2F:C0:94:29:25:9C:BC Certificate issuer: /CN=A65F65BF2DB9317754BA910F052FC09429259CBC Certificate serial: 56BA2F42C15DB4782F85192E63900B5883CC1570 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A65F65BF2DB9317754BA910F052FC09429259CBC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/A65F65BF2DB9317754BA910F052FC09429259CBC.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 08:18:50 +0000 Manifest this update: Thu 17 Sep 2026 08:13:50 +0000 Manifest next update: Fri 18 Sep 2026 09:54:50 +0000 Files and hashes: 1: 3135372e32302e3230382e302f32332d3233203d3e20313532343136.roa (hash: 6sJwEQuVC2SCQbpKDbpQ7062AUPzj2WmwzEMVpDHp88=) 2: 3135372e32302e3230392e302f32342d3234203d3e20313532343136.roa (hash: rwfp5y5H5qPfQhaF6rDqIcStalVTGJI0mJpk4RX2nTI=) 3: A65F65BF2DB9317754BA910F052FC09429259CBC.crl (hash: qsfWbiseyaH53APx2K41ah/Mw5sL8IBq9b1dTxlne+0=) 4: 3135372e32302e3230382e302f32342d3234203d3e20313532343136.roa (hash: vffHdk9OOgHjUn3gX3E1MpxE/+kaQ1DhpiQKkuuDY58=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/A65F65BF2DB9317754BA910F052FC09429259CBC.crl rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/A65F65BF2DB9317754BA910F052FC09429259CBC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A65F65BF2DB9317754BA910F052FC09429259CBC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:ba:2f:42:c1:5d:b4:78:2f:85:19:2e:63:90:0b:58:83:cc:15:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A65F65BF2DB9317754BA910F052FC09429259CBC Validity Not Before: Sep 17 08:13:50 2026 GMT Not After : Sep 18 09:54:50 2026 GMT Subject: CN=499D358D96539038112D475AAA1402AE5BA5CC52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:50:82:ec:e5:6e:56:36:fd:6d:d3:f4:2d:8f: a5:9c:77:53:47:bf:09:be:7c:f3:8d:ed:87:c0:11: 5e:20:30:94:4e:9a:89:aa:05:9d:bc:00:01:32:be: e5:4f:da:b6:f4:97:9d:7c:36:ed:1a:a5:1f:1a:3f: 66:2e:4a:c1:9b:98:2e:a5:25:04:dc:a3:f4:31:6a: 96:12:21:63:3f:c0:79:2f:7c:ee:5d:69:89:35:6d: 08:00:40:f1:59:ce:b4:25:60:88:5f:fd:de:aa:a9: 40:46:55:46:7f:9b:7d:94:68:ba:31:c1:db:77:af: c7:ae:a3:3c:24:65:6e:95:04:5e:f3:36:c6:f4:93: bb:cf:4a:d5:a4:63:45:ec:75:b3:9e:da:ad:22:bb: dd:9e:30:04:e5:ad:d2:7a:54:c3:c2:40:0c:4a:ab: 15:9a:d2:51:f3:25:43:e0:f4:88:67:a0:6c:25:96: b0:19:d0:8f:c5:13:44:31:a5:82:48:e7:9b:c0:30: 5c:a8:2b:59:8a:a3:28:56:45:08:42:09:0a:88:c6: 16:9f:89:4c:ff:22:81:a6:75:fc:2e:dc:ee:76:77: 7b:d4:35:b9:b2:68:8c:8a:0e:0c:ab:2a:7e:8d:2a: b2:de:28:2e:47:0d:fb:1e:05:81:d1:4a:44:e9:16: e1:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:9D:35:8D:96:53:90:38:11:2D:47:5A:AA:14:02:AE:5B:A5:CC:52 X509v3 Authority Key Identifier: keyid:A6:5F:65:BF:2D:B9:31:77:54:BA:91:0F:05:2F:C0:94:29:25:9C:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/A65F65BF2DB9317754BA910F052FC09429259CBC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A65F65BF2DB9317754BA910F052FC09429259CBC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/A65F65BF2DB9317754BA910F052FC09429259CBC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:01:a1:90:8a:9a:26:ef:c9:ca:b4:50:5d:e5:4d:90:6a:a6: 0e:11:16:72:c1:82:1f:ef:f7:f5:37:aa:50:22:74:14:96:25: c4:47:a4:37:9e:41:83:c5:d2:39:4c:f0:2f:d8:80:fe:eb:88: 22:c0:79:8c:d6:aa:c5:30:a5:ff:8b:f4:b6:39:f4:49:d0:1d: 3c:cb:ae:bc:59:9f:3a:a0:00:de:ba:d7:35:01:f4:dc:f8:f6: 60:0f:88:b8:48:50:07:83:8b:37:3b:9c:27:b7:d9:99:e1:81: 82:16:f3:7c:8b:58:8c:6b:b3:f8:04:f9:02:75:48:31:0b:53: 14:c6:e7:6b:d0:0c:26:01:32:fb:a0:33:83:ea:61:98:8b:53: c5:ce:e4:dc:c5:51:39:86:80:83:93:70:79:28:92:07:ee:b4: c1:e8:d9:ac:d1:b8:25:8e:69:0a:0d:36:d2:55:16:10:a1:5b: 02:92:0e:8d:a1:f2:00:7d:ff:60:5b:07:2a:e8:c7:7f:93:76: 5a:a7:f8:8a:7e:48:0a:08:03:b3:71:e8:4e:e2:c8:ee:30:f8: 0b:50:3d:4a:54:24:98:6a:9d:2b:50:77:93:3b:13:81:60:5a: 07:32:a4:9e:50:8a:6b:02:4e:75:79:0e:fb:09:ab:bd:64:10: bb:eb:0c:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVrovQsFdtHgvhRkuY5ALWIPMFXAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY1RjY1QkYyREI5MzE3NzU0QkE5MTBGMDUyRkMwOTQy OTI1OUNCQzAeFw0yNjA5MTcwODEzNTBaFw0yNjA5MTgwOTU0NTBaMDMxMTAvBgNV BAMTKDQ5OUQzNThEOTY1MzkwMzgxMTJENDc1QUFBMTQwMkFFNUJBNUNDNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2UILs5W5WNv1t0/Qtj6Wcd1NH vwm+fPON7YfAEV4gMJROmomqBZ28AAEyvuVP2rb0l518Nu0apR8aP2YuSsGbmC6l JQTco/QxapYSIWM/wHkvfO5daYk1bQgAQPFZzrQlYIhf/d6qqUBGVUZ/m32UaLox wdt3r8euozwkZW6VBF7zNsb0k7vPStWkY0XsdbOe2q0iu92eMATlrdJ6VMPCQAxK qxWa0lHzJUPg9IhnoGwllrAZ0I/FE0QxpYJI55vAMFyoK1mKoyhWRQhCCQqIxhaf iUz/IoGmdfwu3O52d3vUNbmyaIyKDgyrKn6NKrLeKC5HDfseBYHRSkTpFuHNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSZ01jZZTkDgRLUdaqhQCrlulzFIwHwYDVR0j BBgwFoAUpl9lvy25MXdUupEPBS/AlCklnLwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGM0MDk0ZDItZTE4ZC00ODQwLTg0ZmEtYzU3NTdhZjU4MGYxLzAvQTY1RjY1QkYy REI5MzE3NzU0QkE5MTBGMDUyRkMwOTQyOTI1OUNCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BNjVGNjVCRjJEQjkzMTc3NTRCQTkxMEYwNTJGQzA5NDI5MjU5 Q0JDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGM0MDk0ZDItZTE4ZC00ODQwLTg0 ZmEtYzU3NTdhZjU4MGYxLzAvQTY1RjY1QkYyREI5MzE3NzU0QkE5MTBGMDUyRkMw OTQyOTI1OUNCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK4BoZCKmibvycq0UF3lTZBqpg4RFnLBgh/v 9/U3qlAidBSWJcRHpDeeQYPF0jlM8C/YgP7riCLAeYzWqsUwpf+L9LY59EnQHTzL rrxZnzqgAN661zUB9Nz49mAPiLhIUAeDizc7nCe32ZnhgYIW83yLWIxrs/gE+QJ1 SDELUxTG52vQDCYBMvugM4PqYZiLU8XO5NzFUTmGgIOTcHkokgfutMHo2azRuCWO aQoNNtJVFhChWwKSDo2h8gB9/2BbByrox3+Tdlqn+Ip+SAoIA7Nx6E7iyO4w+AtQ PUpUJJhqnStQd5M7E4FgWgcypJ5QimsCTnV5DvsJq71kELvrDMA= -----END CERTIFICATE-----Generated at Thu Sep 17 11:26:32 2026 by rpki-client