$ rpki-client -vvf rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/65BD8BDB0F0688479A1741E2BD6624408DA567AB.mft File: 65BD8BDB0F0688479A1741E2BD6624408DA567AB.mft (raw, json) Hash identifier: 4Ljgr2sxvUDd0ewOeJCqI64xP4h5i9zE2eexAHwyJko= Subject key identifier: E7:19:F9:0A:BB:9C:97:9C:45:1A:3C:7C:A5:04:33:F4:87:FC:C6:25 Authority key identifier: 65:BD:8B:DB:0F:06:88:47:9A:17:41:E2:BD:66:24:40:8D:A5:67:AB Certificate issuer: /CN=65BD8BDB0F0688479A1741E2BD6624408DA567AB Certificate serial: 5B504AACA870A32A073BFE13A6B63CA0A4F5847B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65BD8BDB0F0688479A1741E2BD6624408DA567AB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/65BD8BDB0F0688479A1741E2BD6624408DA567AB.mft Manifest number: 3A Signing time: Sat 13 Jun 2026 19:53:18 +0000 Manifest this update: Sat 13 Jun 2026 19:48:18 +0000 Manifest next update: Sun 14 Jun 2026 21:43:18 +0000 Files and hashes: 1: 3130332e3138302e35382e302f32342d3234203d3e2039333431.roa (hash: 0M3/iOLfAX/g/90FmWqP3sssBOdbMngP4uNnmAsUyjY=) 2: 3130332e3138302e35392e302f32342d3234203d3e2039333431.roa (hash: syfItM1/yGZojD6BnuWKenSP5tC0UxI22EVXiaCRFHk=) 3: 3130332e3138302e35382e302f32332d3233203d3e2039333431.roa (hash: 9g7qK44kNZNkc5s9DYu864dbcgLL2OYqPHQVtd+AZyk=) 4: 65BD8BDB0F0688479A1741E2BD6624408DA567AB.crl (hash: RZKAchseLvG9ZtUfUJpGZ57zSpLzBmwjWUhUiwk3y3E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/65BD8BDB0F0688479A1741E2BD6624408DA567AB.crl rsync://rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/65BD8BDB0F0688479A1741E2BD6624408DA567AB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65BD8BDB0F0688479A1741E2BD6624408DA567AB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:50:4a:ac:a8:70:a3:2a:07:3b:fe:13:a6:b6:3c:a0:a4:f5:84:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65BD8BDB0F0688479A1741E2BD6624408DA567AB Validity Not Before: Jun 13 19:48:18 2026 GMT Not After : Jun 14 21:43:18 2026 GMT Subject: CN=E719F90ABB9C979C451A3C7CA50433F487FCC625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:03:73:db:5f:64:4c:09:b6:c2:25:96:dc:e0: d7:86:d9:ba:43:80:22:65:11:b3:c7:41:84:d7:e8: a7:6e:0e:c1:12:59:14:2c:ac:49:ea:b1:bc:c9:b6: 4e:52:9e:5e:57:b8:30:1a:b3:43:04:30:ac:0e:3d: 9d:19:d6:83:64:66:05:73:a7:67:2d:e1:c8:0c:59: b0:8b:7d:8c:cd:a9:17:93:fc:b3:45:1c:0f:5d:d3: 23:f9:25:38:ce:54:0c:04:34:e8:91:6f:ca:d5:b3: ad:29:db:1b:7a:2b:9d:06:35:06:50:9c:78:e9:bf: 66:5e:6d:ab:6a:1b:bb:7f:72:11:b9:1b:46:47:32: 39:24:14:96:46:e0:c4:74:20:e4:6a:ed:2a:0d:84: fc:b7:2e:36:9b:dc:5a:8d:a9:c1:5d:4d:77:92:a1: 43:1f:ef:18:29:f4:ac:4a:0a:2f:b5:d8:fe:9f:fd: ca:b6:a6:31:1d:a1:5d:9b:c9:d0:3c:56:43:ad:a4: 1d:97:88:b0:eb:ae:9b:85:eb:46:93:fd:07:c8:e4: e9:f3:67:9a:95:f6:8f:4d:c3:bf:db:0d:4f:b7:2c: 1a:7d:cc:2e:97:13:7c:24:af:c4:61:cb:e3:a3:5a: 81:cc:fa:de:a1:ef:99:46:17:98:99:15:32:b1:a4: d7:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:19:F9:0A:BB:9C:97:9C:45:1A:3C:7C:A5:04:33:F4:87:FC:C6:25 X509v3 Authority Key Identifier: keyid:65:BD:8B:DB:0F:06:88:47:9A:17:41:E2:BD:66:24:40:8D:A5:67:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/65BD8BDB0F0688479A1741E2BD6624408DA567AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65BD8BDB0F0688479A1741E2BD6624408DA567AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/65BD8BDB0F0688479A1741E2BD6624408DA567AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:34:2d:6f:dc:60:1d:e1:22:16:c9:eb:67:b4:b6:8b:f4:7e: 65:8c:ae:dc:56:28:36:2f:b9:85:f1:20:57:88:e6:a1:e6:1b: 80:5f:f6:ba:9c:b0:66:7a:c7:e0:d7:f9:e8:26:57:2c:a7:03: e4:bc:73:e3:fe:f6:49:89:f9:20:35:39:19:0c:50:b2:0e:4f: e8:ca:23:3b:0a:0e:c4:1b:6c:b4:11:f2:e3:fd:a5:99:e3:d4: cb:30:7f:b1:de:46:83:75:d8:0a:58:fe:c5:9f:02:3f:d5:4f: 44:7d:d8:9d:6c:23:83:a8:bf:48:39:8d:e0:93:8d:2b:e0:06: 30:d4:22:66:08:74:b5:04:5d:73:be:4e:55:fe:b9:e9:55:35: b3:41:f5:57:e6:79:ce:b8:9e:fe:46:2f:8f:7d:3d:84:f4:0b: 3f:e2:5c:34:42:33:0a:5b:ad:b3:02:f3:9a:b3:e9:a0:52:0d: 11:7b:2b:d5:df:4b:0d:23:68:d1:f3:85:23:0b:a6:bd:93:e0: 0e:ab:5c:98:6e:b7:f3:3b:d8:c3:dd:7d:de:92:bd:7c:97:1a: 5d:98:78:d3:1e:18:38:43:d7:d4:1a:ef:e6:32:cc:32:bc:74: a5:ae:90:04:85:62:a4:b2:04:15:24:66:7d:06:b3:a9:87:7b: ad:83:59:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW1BKrKhwoyoHO/4TprY8oKT1hHswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVCRDhCREIwRjA2ODg0NzlBMTc0MUUyQkQ2NjI0NDA4 REE1NjdBQjAeFw0yNjA2MTMxOTQ4MThaFw0yNjA2MTQyMTQzMThaMDMxMTAvBgNV BAMTKEU3MTlGOTBBQkI5Qzk3OUM0NTFBM0M3Q0E1MDQzM0Y0ODdGQ0M2MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtA3PbX2RMCbbCJZbc4NeG2bpD gCJlEbPHQYTX6KduDsESWRQsrEnqsbzJtk5Snl5XuDAas0MEMKwOPZ0Z1oNkZgVz p2ct4cgMWbCLfYzNqReT/LNFHA9d0yP5JTjOVAwENOiRb8rVs60p2xt6K50GNQZQ nHjpv2ZebatqG7t/chG5G0ZHMjkkFJZG4MR0IORq7SoNhPy3Ljab3FqNqcFdTXeS oUMf7xgp9KxKCi+12P6f/cq2pjEdoV2bydA8VkOtpB2XiLDrrpuF60aT/QfI5Onz Z5qV9o9Nw7/bDU+3LBp9zC6XE3wkr8Rhy+OjWoHM+t6h75lGF5iZFTKxpNd5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5xn5Crucl5xFGjx8pQQz9If8xiUwHwYDVR0j BBgwFoAUZb2L2w8GiEeaF0HivWYkQI2lZ6swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTcxYTg0N2QtMjUzMS00ZDdmLTkyNDEtOTc3Nzg1MDYwNWQ2LzAvNjVCRDhCREIw RjA2ODg0NzlBMTc0MUUyQkQ2NjI0NDA4REE1NjdBQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NUJEOEJEQjBGMDY4ODQ3OUExNzQxRTJCRDY2MjQ0MDhEQTU2 N0FCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTcxYTg0N2QtMjUzMS00ZDdmLTky NDEtOTc3Nzg1MDYwNWQ2LzAvNjVCRDhCREIwRjA2ODg0NzlBMTc0MUUyQkQ2NjI0 NDA4REE1NjdBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI00LW/cYB3hIhbJ62e0tov0fmWMrtxWKDYv uYXxIFeI5qHmG4Bf9rqcsGZ6x+DX+egmVyynA+S8c+P+9kmJ+SA1ORkMULIOT+jK IzsKDsQbbLQR8uP9pZnj1Mswf7HeRoN12ApY/sWfAj/VT0R92J1sI4Oov0g5jeCT jSvgBjDUImYIdLUEXXO+TlX+uelVNbNB9Vfmec64nv5GL499PYT0Cz/iXDRCMwpb rbMC85qz6aBSDRF7K9XfSw0jaNHzhSMLpr2T4A6rXJhut/M72MPdfd6SvXyXGl2Y eNMeGDhD19Qa7+YyzDK8dKWukASFYqSyBBUkZn0Gs6mHe62DWWI= -----END CERTIFICATE-----Generated at Sun Jun 14 00:17:50 2026 by rpki-client