$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e8506048-737e-441d-a913-29726c11d744/0/65B1AC6FC4D0F3ECC73AB47D61B0856F78976B1F.mft File: 65B1AC6FC4D0F3ECC73AB47D61B0856F78976B1F.mft (raw, json) Hash identifier: wpwZe63vSzFg1HZsLRVSqZdhZQBXcmyweC6THoASfro= Subject key identifier: 42:FD:D4:09:84:0A:A6:C0:35:AE:47:66:45:5D:31:89:1B:EC:8C:7E Authority key identifier: 65:B1:AC:6F:C4:D0:F3:EC:C7:3A:B4:7D:61:B0:85:6F:78:97:6B:1F Certificate issuer: /CN=65B1AC6FC4D0F3ECC73AB47D61B0856F78976B1F Certificate serial: 46685BA5CAE907B614EF451F0FADF941659CCCF0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65B1AC6FC4D0F3ECC73AB47D61B0856F78976B1F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e8506048-737e-441d-a913-29726c11d744/0/65B1AC6FC4D0F3ECC73AB47D61B0856F78976B1F.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 18:37:14 +0000 Manifest this update: Wed 16 Sep 2026 18:32:14 +0000 Manifest next update: Thu 17 Sep 2026 22:19:14 +0000 Files and hashes: 1: 3130332e3137392e36392e302f32342d3234203d3e20313439333436.roa (hash: iF1/HI5T9x0r6R3Th5myrHplbkTjLUqKlDKBufNTpL0=) 2: 65B1AC6FC4D0F3ECC73AB47D61B0856F78976B1F.crl (hash: DJj0Atr5telZzOlaPFwAO77GfIPheiXZAfwHxtpaQT0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e8506048-737e-441d-a913-29726c11d744/0/65B1AC6FC4D0F3ECC73AB47D61B0856F78976B1F.crl rsync://rpki-rsync.idnic.net/repo/e8506048-737e-441d-a913-29726c11d744/0/65B1AC6FC4D0F3ECC73AB47D61B0856F78976B1F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65B1AC6FC4D0F3ECC73AB47D61B0856F78976B1F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 22:19:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:68:5b:a5:ca:e9:07:b6:14:ef:45:1f:0f:ad:f9:41:65:9c:cc:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65B1AC6FC4D0F3ECC73AB47D61B0856F78976B1F Validity Not Before: Sep 16 18:32:14 2026 GMT Not After : Sep 17 22:19:14 2026 GMT Subject: CN=42FDD409840AA6C035AE4766455D31891BEC8C7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:21:33:51:e9:5f:b3:f9:99:3f:b3:1f:36:69: c9:b2:cc:8a:f1:1e:ac:68:63:d6:6f:5a:97:cc:c3: 83:4f:fa:f7:27:0b:82:73:7d:98:82:6f:ad:88:19: 44:de:b9:05:26:84:a4:1a:2e:50:c4:18:cd:f2:3e: ea:d3:47:51:cf:8c:fe:68:85:ae:c0:90:71:19:53: 36:d6:c2:39:28:96:79:54:44:96:05:67:4e:34:36: 8c:4e:5c:7e:01:7b:33:a5:9b:55:82:ec:59:a7:ed: 50:6f:2d:d0:f3:a2:79:63:38:7f:a5:94:78:6e:33: f8:b1:d2:65:c1:22:47:03:41:d9:cf:bb:5d:92:77: 3f:64:0b:22:4b:c7:52:90:0f:57:7b:1a:12:1c:f0: d1:6d:df:93:97:da:3d:50:09:fd:84:05:e7:6c:c7: 1c:40:cc:3d:84:b7:13:21:e5:ad:c4:6b:c2:04:e0: 49:05:55:07:e9:e2:77:b6:ab:5a:e3:d4:c3:c5:19: b2:70:a9:0f:fa:41:a9:de:97:a0:66:c3:03:06:af: f0:5c:c9:15:2f:31:4b:69:40:0a:f9:cd:34:cf:4a: 79:6e:8a:ef:a7:5a:3a:ff:c2:47:40:f3:9b:3a:8b: e8:85:7c:79:1b:bf:29:e4:7e:79:10:6b:d1:10:69: a4:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:FD:D4:09:84:0A:A6:C0:35:AE:47:66:45:5D:31:89:1B:EC:8C:7E X509v3 Authority Key Identifier: keyid:65:B1:AC:6F:C4:D0:F3:EC:C7:3A:B4:7D:61:B0:85:6F:78:97:6B:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e8506048-737e-441d-a913-29726c11d744/0/65B1AC6FC4D0F3ECC73AB47D61B0856F78976B1F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65B1AC6FC4D0F3ECC73AB47D61B0856F78976B1F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e8506048-737e-441d-a913-29726c11d744/0/65B1AC6FC4D0F3ECC73AB47D61B0856F78976B1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:cf:51:1c:0d:3c:41:54:3d:38:cc:86:0f:38:02:ff:6e:01: 14:a6:a4:6c:eb:9a:e3:83:ee:1a:b7:76:a0:84:dc:04:83:7c: 14:c3:e4:5d:1e:a3:90:ab:82:13:89:16:68:b1:bc:a9:09:9e: cf:63:3b:3d:e9:a6:2d:03:15:e6:bf:10:6d:9c:d3:db:15:f7: 2b:b0:d3:30:6d:e1:4a:5f:b0:ff:9b:a4:ba:0d:54:7e:6e:33: 15:52:4e:c4:1e:ad:af:fc:09:2d:be:9d:7f:90:12:ea:64:be: a2:a9:fe:67:29:ee:6e:33:18:d6:e8:1c:59:2f:70:14:76:38: b5:d0:d8:04:f0:2d:67:27:61:61:20:c8:5d:b0:f6:dd:66:31: 9c:a6:c0:74:ab:0b:34:72:37:f4:65:26:24:67:2f:7e:72:e4: a0:40:46:f5:cf:99:ce:86:95:de:84:65:63:5b:1b:e5:87:5e: a6:db:03:5f:94:38:81:b0:9f:71:02:eb:09:28:ce:96:9f:fd: 45:70:1d:8c:bf:41:31:5a:c3:40:fe:e6:6b:5b:7c:2c:e7:20: db:24:2a:6e:1c:c9:ac:dd:af:2a:11:e4:1a:0b:99:46:3d:4b: c5:71:33:72:a0:e6:4b:1b:33:20:54:46:06:0b:1e:bf:02:49: 5c:5f:92:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURmhbpcrpB7YU70UfD635QWWczPAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVCMUFDNkZDNEQwRjNFQ0M3M0FCNDdENjFCMDg1NkY3 ODk3NkIxRjAeFw0yNjA5MTYxODMyMTRaFw0yNjA5MTcyMjE5MTRaMDMxMTAvBgNV BAMTKDQyRkRENDA5ODQwQUE2QzAzNUFFNDc2NjQ1NUQzMTg5MUJFQzhDN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZITNR6V+z+Zk/sx82acmyzIrx HqxoY9ZvWpfMw4NP+vcnC4JzfZiCb62IGUTeuQUmhKQaLlDEGM3yPurTR1HPjP5o ha7AkHEZUzbWwjkolnlURJYFZ040NoxOXH4BezOlm1WC7Fmn7VBvLdDzonljOH+l lHhuM/ix0mXBIkcDQdnPu12Sdz9kCyJLx1KQD1d7GhIc8NFt35OX2j1QCf2EBeds xxxAzD2EtxMh5a3Ea8IE4EkFVQfp4ne2q1rj1MPFGbJwqQ/6Qanel6BmwwMGr/Bc yRUvMUtpQAr5zTTPSnluiu+nWjr/wkdA85s6i+iFfHkbvynkfnkQa9EQaaSnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQv3UCYQKpsA1rkdmRV0xiRvsjH4wHwYDVR0j BBgwFoAUZbGsb8TQ8+zHOrR9YbCFb3iXax8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTg1MDYwNDgtNzM3ZS00NDFkLWE5MTMtMjk3MjZjMTFkNzQ0LzAvNjVCMUFDNkZD NEQwRjNFQ0M3M0FCNDdENjFCMDg1NkY3ODk3NkIxRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NUIxQUM2RkM0RDBGM0VDQzczQUI0N0Q2MUIwODU2Rjc4OTc2 QjFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTg1MDYwNDgtNzM3ZS00NDFkLWE5 MTMtMjk3MjZjMTFkNzQ0LzAvNjVCMUFDNkZDNEQwRjNFQ0M3M0FCNDdENjFCMDg1 NkY3ODk3NkIxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHDPURwNPEFUPTjMhg84Av9uARSmpGzrmuOD 7hq3dqCE3ASDfBTD5F0eo5CrghOJFmixvKkJns9jOz3ppi0DFea/EG2c09sV9yuw 0zBt4UpfsP+bpLoNVH5uMxVSTsQera/8CS2+nX+QEupkvqKp/mcp7m4zGNboHFkv cBR2OLXQ2ATwLWcnYWEgyF2w9t1mMZymwHSrCzRyN/RlJiRnL35y5KBARvXPmc6G ld6EZWNbG+WHXqbbA1+UOIGwn3EC6wkozpaf/UVwHYy/QTFaw0D+5mtbfCznINsk Km4cyazdryoR5BoLmUY9S8VxM3Kg5ksbMyBURgYLHr8CSVxfkuA= -----END CERTIFICATE-----Generated at Thu Sep 17 10:49:28 2026 by rpki-client