$ rpki-client -vvvf rpki-rsync.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/65177A3236E4CDE9DEABA6D24D81798C0342B359.mft File: 65177A3236E4CDE9DEABA6D24D81798C0342B359.mft (raw, json) Hash identifier: VIMId1vFQAz5Xq1xnBmxIchykpqfjOwb9BK2UW6TN3Y= Subject key identifier: D9:62:D3:96:44:16:81:6D:EA:03:0B:61:08:41:99:D8:1C:CC:C9:85 Authority key identifier: 65:17:7A:32:36:E4:CD:E9:DE:AB:A6:D2:4D:81:79:8C:03:42:B3:59 Certificate issuer: /CN=65177A3236E4CDE9DEABA6D24D81798C0342B359 Certificate serial: 323F2DDDB39B65E474210176179DBA80F50CB255 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65177A3236E4CDE9DEABA6D24D81798C0342B359.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/65177A3236E4CDE9DEABA6D24D81798C0342B359.mft Manifest number: D4 Signing time: Wed 07 Oct 2026 21:44:44 +0000 Manifest this update: Wed 07 Oct 2026 21:39:44 +0000 Manifest next update: Thu 08 Oct 2026 23:38:44 +0000 Files and hashes: 1: 3130332e3134362e3134342e302f32342d3234203d3e20313530313836.roa (hash: lVbFef/6mdjInFTMm3cO34cZeIrGM0mKpOLsVw5+rAw=) 2: 3130332e3134362e3134352e302f32342d3234203d3e20313530313836.roa (hash: dc+32akDqD+whWWKGoW6auMBb4nmyq1TxJGgB+DF/Mw=) 3: 65177A3236E4CDE9DEABA6D24D81798C0342B359.crl (hash: oEuHXj6dJ67/NhXpF6nmq+w7vYjkeFW3qlcfwVFN1h4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/65177A3236E4CDE9DEABA6D24D81798C0342B359.crl rsync://rpki-rsync.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/65177A3236E4CDE9DEABA6D24D81798C0342B359.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65177A3236E4CDE9DEABA6D24D81798C0342B359.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Oct 2026 23:38:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:3f:2d:dd:b3:9b:65:e4:74:21:01:76:17:9d:ba:80:f5:0c:b2:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65177A3236E4CDE9DEABA6D24D81798C0342B359 Validity Not Before: Oct 7 21:39:44 2026 GMT Not After : Oct 8 23:38:44 2026 GMT Subject: CN=D962D3964416816DEA030B61084199D81CCCC985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8d:0a:90:e1:48:21:f8:bb:cb:f7:e8:77:1b: 4b:db:85:82:61:ea:d3:db:3d:88:92:fb:25:0b:02: 69:f4:aa:02:18:f3:9a:8b:0b:c8:f7:4e:a2:02:fb: f0:d2:35:0b:20:ab:47:e4:48:ae:a4:f8:a6:7a:59: 2a:02:a6:1c:1f:e2:8e:62:55:9c:38:4d:d2:e5:8a: 5b:7c:98:7f:20:02:fb:6b:27:d8:48:fb:02:1d:f2: e9:50:9f:56:07:f9:50:68:00:4a:dc:e6:f7:95:84: a0:a1:3f:94:c6:d3:30:b9:b8:b5:3b:37:a8:9d:2e: 3b:3e:5b:70:79:27:20:d0:ad:0b:24:4a:01:b8:80: 4b:34:c9:40:a8:26:fc:0d:c8:3d:3e:27:99:af:97: b2:30:29:0e:38:21:cd:aa:d6:3c:70:5c:bb:b2:49: ba:af:4d:e0:18:90:08:2c:d0:40:a5:72:f2:f6:d6: 70:06:c6:f4:4e:1d:0f:7d:58:2f:25:88:02:a9:47: 81:cb:7b:b1:7f:29:f5:bb:72:f7:7e:2f:fe:b7:23: d5:98:74:3d:05:75:b7:dd:fa:52:3a:75:e8:fb:7b: 8a:9e:bb:a3:7f:85:73:21:a9:07:8f:72:e8:32:54: fa:cc:be:88:a3:7f:81:82:05:b6:f2:f1:00:1d:df: 17:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:62:D3:96:44:16:81:6D:EA:03:0B:61:08:41:99:D8:1C:CC:C9:85 X509v3 Authority Key Identifier: keyid:65:17:7A:32:36:E4:CD:E9:DE:AB:A6:D2:4D:81:79:8C:03:42:B3:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/65177A3236E4CDE9DEABA6D24D81798C0342B359.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65177A3236E4CDE9DEABA6D24D81798C0342B359.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/65177A3236E4CDE9DEABA6D24D81798C0342B359.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:97:e0:c7:58:f7:27:ab:67:c3:e3:70:eb:a0:3e:17:f2:69: 8b:9e:ef:5b:bd:81:29:19:13:7f:73:55:95:9d:e7:18:a8:9e: 67:59:d9:51:a4:5a:ce:02:95:9c:28:99:77:59:5a:6a:62:02: e3:a9:60:a6:60:4e:a8:d9:2c:9a:74:8f:90:c5:99:10:92:2a: 41:ca:db:51:47:58:4e:6c:d2:57:38:95:53:1f:db:77:d4:0b: 88:72:fd:fa:3f:3d:fe:b9:0f:ab:1d:05:53:ee:bc:aa:f2:c1: fd:64:ca:6d:2f:01:20:18:3d:9e:f2:e9:1f:aa:e6:04:23:78: 36:13:1b:1b:8b:1d:17:b4:2e:45:56:c4:63:17:e2:d7:1b:94: 9b:2d:77:51:fb:54:e0:a4:58:80:89:d8:0a:ce:6c:0f:2e:01: e6:80:a7:53:a4:84:ce:43:6f:c4:3f:0a:b5:21:64:9a:78:b9: 30:1b:ec:8a:2b:d5:04:de:df:d2:d2:39:10:e8:b1:09:49:97: d1:73:d6:0e:10:57:7d:83:9b:88:c8:f9:be:7e:47:02:6e:23: 08:d7:9e:63:87:8b:0a:f3:46:c9:bd:50:f2:75:f8:bc:1e:06: 59:05:6f:40:c5:e8:2b:92:88:66:bd:17:b9:c8:c8:3f:12:45: 45:db:02:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMj8t3bObZeR0IQF2F526gPUMslUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjUxNzdBMzIzNkU0Q0RFOURFQUJBNkQyNEQ4MTc5OEMw MzQyQjM1OTAeFw0yNjEwMDcyMTM5NDRaFw0yNjEwMDgyMzM4NDRaMDMxMTAvBgNV BAMTKEQ5NjJEMzk2NDQxNjgxNkRFQTAzMEI2MTA4NDE5OUQ4MUNDQ0M5ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4jQqQ4Ugh+LvL9+h3G0vbhYJh 6tPbPYiS+yULAmn0qgIY85qLC8j3TqIC+/DSNQsgq0fkSK6k+KZ6WSoCphwf4o5i VZw4TdLlilt8mH8gAvtrJ9hI+wId8ulQn1YH+VBoAErc5veVhKChP5TG0zC5uLU7 N6idLjs+W3B5JyDQrQskSgG4gEs0yUCoJvwNyD0+J5mvl7IwKQ44Ic2q1jxwXLuy SbqvTeAYkAgs0EClcvL21nAGxvROHQ99WC8liAKpR4HLe7F/KfW7cvd+L/63I9WY dD0Fdbfd+lI6dej7e4qeu6N/hXMhqQePcugyVPrMvoijf4GCBbby8QAd3xf1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2WLTlkQWgW3qAwthCEGZ2BzMyYUwHwYDVR0j BBgwFoAUZRd6Mjbkzeneq6bSTYF5jANCs1kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDA2MTQxNjMtNGNhNC00OTM2LWJmOGItODRkOGMyZDFmMDJkLzAvNjUxNzdBMzIz NkU0Q0RFOURFQUJBNkQyNEQ4MTc5OEMwMzQyQjM1OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NTE3N0EzMjM2RTRDREU5REVBQkE2RDI0RDgxNzk4QzAzNDJC MzU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDA2MTQxNjMtNGNhNC00OTM2LWJm OGItODRkOGMyZDFmMDJkLzAvNjUxNzdBMzIzNkU0Q0RFOURFQUJBNkQyNEQ4MTc5 OEMwMzQyQjM1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACSX4MdY9yerZ8PjcOugPhfyaYue71u9gSkZ E39zVZWd5xionmdZ2VGkWs4ClZwomXdZWmpiAuOpYKZgTqjZLJp0j5DFmRCSKkHK 21FHWE5s0lc4lVMf23fUC4hy/fo/Pf65D6sdBVPuvKrywf1kym0vASAYPZ7y6R+q 5gQjeDYTGxuLHRe0LkVWxGMX4tcblJstd1H7VOCkWICJ2ArObA8uAeaAp1OkhM5D b8Q/CrUhZJp4uTAb7Ior1QTe39LSORDosQlJl9Fz1g4QV32Dm4jI+b5+RwJuIwjX nmOHiwrzRsm9UPJ1+LweBlkFb0DF6CuSiGa9F7nIyD8SRUXbArg= -----END CERTIFICATE-----Generated at Thu Oct 8 13:58:01 2026 by rpki-client