
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/65BD8BDB0F0688479A1741E2BD6624408DA567AB.mft
File: 65BD8BDB0F0688479A1741E2BD6624408DA567AB.mft (raw, json)
Hash identifier: x+kZ3KkG/TeHdh8WeUyD4CupPoiT7Uflw2g2R+yfkAA=
Subject key identifier: E0:73:07:B0:FC:1E:34:B2:69:59:0A:23:72:FE:5C:E3:D9:86:78:90
Authority key identifier: 65:BD:8B:DB:0F:06:88:47:9A:17:41:E2:BD:66:24:40:8D:A5:67:AB
Certificate issuer: /CN=65BD8BDB0F0688479A1741E2BD6624408DA567AB
Certificate serial: 31F4156EDB219BE24D2A276DA67809B8DE6DF9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65BD8BDB0F0688479A1741E2BD6624408DA567AB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/65BD8BDB0F0688479A1741E2BD6624408DA567AB.mft
Manifest number: DC
Signing time: Tue 13 Oct 2026 13:53:12 +0000
Manifest this update: Tue 13 Oct 2026 13:48:12 +0000
Manifest next update: Wed 14 Oct 2026 17:46:12 +0000
Files and hashes: 1: 3130332e3138302e35392e302f32342d3234203d3e2039333431.roa (hash: syfItM1/yGZojD6BnuWKenSP5tC0UxI22EVXiaCRFHk=)
2: 3130332e3138302e35382e302f32342d3234203d3e2039333431.roa (hash: 0M3/iOLfAX/g/90FmWqP3sssBOdbMngP4uNnmAsUyjY=)
3: 3130332e3138302e35382e302f32332d3233203d3e2039333431.roa (hash: 9g7qK44kNZNkc5s9DYu864dbcgLL2OYqPHQVtd+AZyk=)
4: 65BD8BDB0F0688479A1741E2BD6624408DA567AB.crl (hash: XG0zybPNLEwVFfWziPhTNHEZAbTZ63D5wothFe+NuJY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/65BD8BDB0F0688479A1741E2BD6624408DA567AB.crl
rsync://rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/65BD8BDB0F0688479A1741E2BD6624408DA567AB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65BD8BDB0F0688479A1741E2BD6624408DA567AB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 16:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:f4:15:6e:db:21:9b:e2:4d:2a:27:6d:a6:78:09:b8:de:6d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65BD8BDB0F0688479A1741E2BD6624408DA567AB
Validity
Not Before: Oct 13 13:48:12 2026 GMT
Not After : Oct 14 17:46:12 2026 GMT
Subject: CN=E07307B0FC1E34B269590A2372FE5CE3D9867890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fd:cc:de:ee:cb:04:a6:b0:32:26:22:62:b2:
07:b9:90:56:f0:5f:6d:ba:94:27:d4:1d:30:91:e5:
e4:af:e4:7a:c9:78:85:82:7c:e4:12:09:de:25:6a:
19:3a:ea:fc:2e:3c:27:c3:0d:72:a0:c8:b6:e7:ea:
88:8a:ac:da:84:3b:c2:0b:ed:96:d1:32:68:e8:0c:
81:d9:e7:8c:61:39:96:37:b7:af:f0:02:28:f4:1e:
f9:48:b8:cc:45:7c:f1:6a:a0:2d:96:f2:d6:7f:08:
1d:24:03:88:98:ba:1f:63:7d:28:27:db:a4:6a:f6:
6a:07:7d:df:82:9f:28:c2:fd:a2:4a:26:50:05:56:
a7:0f:3e:75:07:5a:ae:f0:80:06:cb:0c:19:20:55:
75:f1:77:82:e0:66:61:3f:50:8d:94:79:04:d0:80:
88:59:98:6e:24:91:a2:16:e9:1a:05:84:92:93:92:
ff:0b:94:29:c6:12:20:de:35:ec:b2:fb:0f:30:9c:
60:2a:93:80:c0:2b:96:2e:fd:6d:3b:94:ce:35:af:
c6:98:11:2c:27:4d:08:60:25:e3:bb:25:4d:65:4b:
50:5c:31:81:36:37:23:8b:1a:c3:5d:05:69:48:27:
c0:e1:e6:18:f2:a3:bb:71:ca:c1:85:c3:03:6d:48:
b8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:73:07:B0:FC:1E:34:B2:69:59:0A:23:72:FE:5C:E3:D9:86:78:90
X509v3 Authority Key Identifier:
keyid:65:BD:8B:DB:0F:06:88:47:9A:17:41:E2:BD:66:24:40:8D:A5:67:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/65BD8BDB0F0688479A1741E2BD6624408DA567AB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65BD8BDB0F0688479A1741E2BD6624408DA567AB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/65BD8BDB0F0688479A1741E2BD6624408DA567AB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:42:03:dd:c5:4e:19:49:26:84:8c:e2:30:b4:78:b3:32:47:
4c:42:6c:35:b8:03:60:07:06:20:5d:df:38:94:ef:b9:f5:89:
a9:bb:1a:f0:8c:f6:3d:9c:e9:bb:6a:bd:6f:29:df:62:c3:82:
44:bd:48:2d:4d:c2:f4:e9:15:2c:de:85:6c:96:11:fb:23:63:
1f:47:62:7b:54:e4:4a:12:ec:4a:f1:30:57:2f:84:de:3b:c2:
24:a4:f3:c7:f3:8a:21:47:65:8a:09:bd:a4:c1:e9:b6:61:4a:
79:96:52:cb:85:a9:76:7f:60:f2:d4:11:55:c2:ca:aa:28:f4:
b5:b1:8a:69:1c:e0:fa:c1:3d:09:3b:a5:b8:6a:67:5e:96:af:
79:66:11:a8:38:99:23:c8:87:29:27:46:f8:e7:1b:73:10:fb:
a4:ea:b5:c4:05:7a:79:9a:df:c5:4f:e1:55:4c:5e:60:a2:0e:
b6:71:a9:96:ab:99:0f:01:b1:7e:79:96:e6:1f:ed:4a:68:b1:
d6:b2:0a:0d:92:39:1e:31:28:8e:15:b2:3f:ba:f0:52:43:90:
65:65:d1:82:a0:28:c9:1f:bd:32:e1:fa:d5:c4:5b:51:7b:5b:
9f:6b:03:0d:19:a3:69:9a:2a:b5:c0:3c:85:16:7e:81:99:9f:
4e:6b:0a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:10:04 2026 by rpki-client