$ rpki-client -vvf rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/A65F65BF2DB9317754BA910F052FC09429259CBC.mft File: A65F65BF2DB9317754BA910F052FC09429259CBC.mft (raw, json) Hash identifier: tj8cvIksCJwEXHHctAgYIZ7+qf5mmqkps1MchaEjL+w= Subject key identifier: 90:2C:D9:E6:ED:A0:56:20:33:A0:00:2B:9C:E8:C3:1B:1A:DB:46:86 Authority key identifier: A6:5F:65:BF:2D:B9:31:77:54:BA:91:0F:05:2F:C0:94:29:25:9C:BC Certificate issuer: /CN=A65F65BF2DB9317754BA910F052FC09429259CBC Certificate serial: 2F2C96EC14102592FAEF269ED62EE688392FBE9F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A65F65BF2DB9317754BA910F052FC09429259CBC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/A65F65BF2DB9317754BA910F052FC09429259CBC.mft Manifest number: 40 Signing time: Thu 18 Jun 2026 05:44:05 +0000 Manifest this update: Thu 18 Jun 2026 05:39:05 +0000 Manifest next update: Fri 19 Jun 2026 08:08:05 +0000 Files and hashes: 1: 3135372e32302e3230382e302f32332d3233203d3e20313532343136.roa (hash: 6sJwEQuVC2SCQbpKDbpQ7062AUPzj2WmwzEMVpDHp88=) 2: A65F65BF2DB9317754BA910F052FC09429259CBC.crl (hash: EQGp6VnVwR58YvkgtyixnKagTHzr3tzXFOb4mfqZWj0=) 3: 3135372e32302e3230392e302f32342d3234203d3e20313532343136.roa (hash: rwfp5y5H5qPfQhaF6rDqIcStalVTGJI0mJpk4RX2nTI=) 4: 3135372e32302e3230382e302f32342d3234203d3e20313532343136.roa (hash: vffHdk9OOgHjUn3gX3E1MpxE/+kaQ1DhpiQKkuuDY58=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/A65F65BF2DB9317754BA910F052FC09429259CBC.crl rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/A65F65BF2DB9317754BA910F052FC09429259CBC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A65F65BF2DB9317754BA910F052FC09429259CBC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 08:08:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:2c:96:ec:14:10:25:92:fa:ef:26:9e:d6:2e:e6:88:39:2f:be:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A65F65BF2DB9317754BA910F052FC09429259CBC Validity Not Before: Jun 18 05:39:05 2026 GMT Not After : Jun 19 08:08:05 2026 GMT Subject: CN=902CD9E6EDA0562033A0002B9CE8C31B1ADB4686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b3:f7:ab:ca:65:5f:4d:c9:57:12:df:4d:3c: c3:26:74:02:38:51:76:62:3e:dc:cd:1c:f1:b3:eb: 0d:88:d2:48:7e:ab:7f:79:2a:3d:62:56:55:a6:af: 34:e5:aa:b4:1a:09:a6:6a:25:67:f4:86:25:6a:66: d6:af:3d:6f:fc:71:6a:ee:28:8e:ab:a4:26:b9:23: 9a:05:1a:d2:f6:e0:44:1a:a0:b4:92:6a:3b:c0:20: d1:62:af:46:03:bc:d7:b9:88:53:97:36:1b:9a:b5: e7:07:46:1b:88:1b:8c:52:47:a2:c7:77:7c:5d:e7: d9:4c:30:5b:8a:b9:44:bc:91:7f:c6:59:3b:0d:f1: 3b:d7:79:55:44:01:7c:40:d7:a9:5b:0a:28:7e:12: 9c:3b:02:e0:e7:bd:1e:56:09:ee:02:31:5c:21:7b: cd:f8:53:93:8f:b8:22:2d:a2:8e:b1:8d:4e:a9:6c: e2:f5:53:b7:bd:ff:3e:b9:52:39:db:f5:b6:1c:fb: a5:1b:a1:f9:4f:3b:8a:0c:64:32:19:19:60:54:36: bc:ca:d2:40:76:e4:d9:03:f3:11:93:b8:51:5f:06: df:79:0c:a2:57:da:d3:4c:34:ef:a2:20:5e:c9:91: 57:a9:da:eb:de:4b:27:66:91:a6:36:27:5c:d7:f6: 16:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:2C:D9:E6:ED:A0:56:20:33:A0:00:2B:9C:E8:C3:1B:1A:DB:46:86 X509v3 Authority Key Identifier: keyid:A6:5F:65:BF:2D:B9:31:77:54:BA:91:0F:05:2F:C0:94:29:25:9C:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/A65F65BF2DB9317754BA910F052FC09429259CBC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A65F65BF2DB9317754BA910F052FC09429259CBC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/A65F65BF2DB9317754BA910F052FC09429259CBC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:ca:8b:15:f6:30:04:1c:72:70:66:05:c8:8f:71:e5:c7:c6: 46:25:49:c6:5c:52:31:74:29:0f:33:f5:9c:2a:3e:05:b3:26: a3:91:ea:b4:82:69:ac:2d:9c:1b:06:a2:1e:49:1b:8d:3e:ef: 28:e5:8a:7a:d5:29:fb:d0:41:b5:f3:7c:a9:dd:92:56:55:d8: 06:85:40:10:a4:0f:8f:94:5b:37:31:3c:2e:a7:94:47:12:2e: cb:ee:e4:9e:14:fe:48:82:4c:40:12:ad:07:16:b4:90:79:01: 42:ea:4c:a8:9d:2c:29:fa:83:29:3c:0d:81:dc:8f:a1:3e:fa: 11:1f:e7:02:26:35:b2:c1:71:b3:08:1b:98:6d:28:a8:71:3c: 22:0a:54:28:f6:8c:4d:2c:f0:48:fd:88:5b:cc:d1:59:5d:ca: d4:62:65:4b:26:40:9f:32:f3:e7:8c:a5:34:76:19:3d:02:e2: fa:4f:2b:56:67:b0:35:0e:9d:b4:0a:bc:f5:a2:3a:93:59:ba: 5a:07:1c:74:2e:eb:bb:21:31:fc:e7:03:bd:a3:33:92:03:fc: 0a:84:f3:fe:96:0b:56:39:71:17:eb:a7:61:76:16:06:72:c9: 43:11:8a:98:b7:e4:81:67:48:75:60:ba:01:32:ac:26:dd:42: 89:29:90:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULyyW7BQQJZL67yae1i7miDkvvp8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY1RjY1QkYyREI5MzE3NzU0QkE5MTBGMDUyRkMwOTQy OTI1OUNCQzAeFw0yNjA2MTgwNTM5MDVaFw0yNjA2MTkwODA4MDVaMDMxMTAvBgNV BAMTKDkwMkNEOUU2RURBMDU2MjAzM0EwMDAyQjlDRThDMzFCMUFEQjQ2ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCas/erymVfTclXEt9NPMMmdAI4 UXZiPtzNHPGz6w2I0kh+q395Kj1iVlWmrzTlqrQaCaZqJWf0hiVqZtavPW/8cWru KI6rpCa5I5oFGtL24EQaoLSSajvAINFir0YDvNe5iFOXNhuatecHRhuIG4xSR6LH d3xd59lMMFuKuUS8kX/GWTsN8TvXeVVEAXxA16lbCih+Epw7AuDnvR5WCe4CMVwh e834U5OPuCItoo6xjU6pbOL1U7e9/z65Ujnb9bYc+6UboflPO4oMZDIZGWBUNrzK 0kB25NkD8xGTuFFfBt95DKJX2tNMNO+iIF7JkVep2uveSydmkaY2J1zX9hbdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkCzZ5u2gViAzoAArnOjDGxrbRoYwHwYDVR0j BBgwFoAUpl9lvy25MXdUupEPBS/AlCklnLwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGM0MDk0ZDItZTE4ZC00ODQwLTg0ZmEtYzU3NTdhZjU4MGYxLzAvQTY1RjY1QkYy REI5MzE3NzU0QkE5MTBGMDUyRkMwOTQyOTI1OUNCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BNjVGNjVCRjJEQjkzMTc3NTRCQTkxMEYwNTJGQzA5NDI5MjU5 Q0JDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGM0MDk0ZDItZTE4ZC00ODQwLTg0 ZmEtYzU3NTdhZjU4MGYxLzAvQTY1RjY1QkYyREI5MzE3NzU0QkE5MTBGMDUyRkMw OTQyOTI1OUNCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEzKixX2MAQccnBmBciPceXHxkYlScZcUjF0 KQ8z9ZwqPgWzJqOR6rSCaawtnBsGoh5JG40+7yjlinrVKfvQQbXzfKndklZV2AaF QBCkD4+UWzcxPC6nlEcSLsvu5J4U/kiCTEASrQcWtJB5AULqTKidLCn6gyk8DYHc j6E++hEf5wImNbLBcbMIG5htKKhxPCIKVCj2jE0s8Ej9iFvM0VldytRiZUsmQJ8y 8+eMpTR2GT0C4vpPK1ZnsDUOnbQKvPWiOpNZuloHHHQu67shMfznA72jM5ID/AqE 8/6WC1Y5cRfrp2F2FgZyyUMRipi35IFnSHVgugEyrCbdQokpkFQ= -----END CERTIFICATE-----Generated at Thu Jun 18 17:10:51 2026 by rpki-client