
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.mft
File: 65DBBEC678177B7159AD901A4023BA57AA4096DC.mft (raw, json)
Hash identifier: gfh9fUjFDq7FYJKg7llmHJm9TatyWDk9aJXf2ro9wVg=
Subject key identifier: D8:53:60:28:40:FE:7A:B2:BE:57:68:9F:27:C7:FF:1F:7D:0B:61:FB
Authority key identifier: 65:DB:BE:C6:78:17:7B:71:59:AD:90:1A:40:23:BA:57:AA:40:96:DC
Certificate issuer: /CN=65DBBEC678177B7159AD901A4023BA57AA4096DC
Certificate serial: 78BBDB41C20A4F2D92ED97A411DA18642DF836E3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65DBBEC678177B7159AD901A4023BA57AA4096DC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.mft
Manifest number: BE
Signing time: Mon 21 Sep 2026 09:33:17 +0000
Manifest this update: Mon 21 Sep 2026 09:28:17 +0000
Manifest next update: Tue 22 Sep 2026 12:22:17 +0000
Files and hashes: 1: 3230322e39332e3234302e302f32342d3234203d3e203338373738.roa (hash: S4EP1lFYVTju24ot1ck+7kHJylZlYJvHzPIKURDcI5k=)
2: 3230322e39332e3234362e302f32332d3233203d3e203338373738.roa (hash: AMuay0c5oSMPzmQyIJxb21rH75gJq04Z09sxFsI2gX8=)
3: 3230322e39332e3234352e302f32342d3234203d3e203338373738.roa (hash: WJ8WqvkTLbC87sRVwP0S84GR9M75HVASRazE6C4BxN8=)
4: 3230322e39332e3234312e302f32342d3234203d3e203338373738.roa (hash: aAelOJ+yvf4qi4zR02tVF6ytUGxSBShT/+GgUk24frk=)
5: 3230322e39332e3234342e302f32342d3234203d3e203338373738.roa (hash: tvyLyjFncuafaNsnPRjTIe3OmM+u2yeMnvd+JSKf+OI=)
6: 3230322e39332e3234332e302f32342d3234203d3e203234313938.roa (hash: uoDjto4Bon7pce7gaQoVwabXxUeeyeeN7W67OfZu0pY=)
7: 323430323a623234303a3a2f34372d3437203d3e203234313938.roa (hash: Os0dOUCAo82Ro4JJGXlWsdYmgpvswgP/lGrJ/rFU8kQ=)
8: 3230322e39332e3234362e302f32342d3234203d3e203338373738.roa (hash: ryDBz/OArSkajCTSmWMTBuq6yxPVuRRR4FSfEXo1xKg=)
9: 3230322e39332e3234342e302f32332d3233203d3e203338373738.roa (hash: RES+IzVfinBoTB3WoZkBb0K0PMLwmwjFh6203Hnv7Fk=)
10: 3230322e39332e3234302e302f32332d3233203d3e203338373738.roa (hash: 2tjc/8qrga6+39EQjimW3zf16UfFL3aN5h4lRF828pQ=)
11: 3230322e39332e3234322e302f32342d3234203d3e203234313938.roa (hash: ahy9pgYJ/JRzmM8+Ec6KtXzoFXDTJf+AENe9YjQMlak=)
12: 3230322e39332e3234342e302f32322d3234203d3e203338373738.roa (hash: HYOwWEsyIVZXnK4eLcj02fPXUV54e21APLG1OWqeK6Y=)
13: 3230322e39332e3234372e302f32342d3234203d3e203338373738.roa (hash: uq0XahCuPwPF6uONqKm2eLZO4OTWzUiViXqNuFHYT+4=)
14: 65DBBEC678177B7159AD901A4023BA57AA4096DC.crl (hash: qeX8JoQ6Qqdh9tvHgnKrHp3QZZ30M0KTzPym5K7KHFo=)
15: 3130332e3135352e3138372e302f32342d3234203d3e20313534373739.roa (hash: acD4T9xX0RNOsIt+Dk7srNJFPhM3fLBMG+7sX11SPrM=)
16: 3130332e3135352e3138362e302f32342d3234203d3e203234313938.roa (hash: qLyqBtZOi6bzPzQ5YmenFV5BuE3tMCCGIzP66ZoAfsE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.crl
rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65DBBEC678177B7159AD901A4023BA57AA4096DC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 05:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:bb:db:41:c2:0a:4f:2d:92:ed:97:a4:11:da:18:64:2d:f8:36:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65DBBEC678177B7159AD901A4023BA57AA4096DC
Validity
Not Before: Sep 21 09:28:17 2026 GMT
Not After : Sep 22 12:22:17 2026 GMT
Subject: CN=D853602840FE7AB2BE57689F27C7FF1F7D0B61FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a0:24:23:90:4a:b1:3f:e7:cc:e1:bb:bc:b0:
50:82:08:79:e1:26:fa:59:ac:66:df:3a:0e:5c:6e:
19:78:71:91:61:d6:11:17:86:37:71:a0:f7:ac:e4:
b1:69:d5:10:82:fb:c6:81:1d:70:2d:8e:8b:3b:ff:
75:89:05:65:03:09:03:a2:d9:a3:b8:b0:fe:bd:93:
ee:11:ab:bd:5f:72:22:48:ee:12:4f:67:1c:1f:41:
91:69:c0:74:bf:44:7b:6d:5f:08:e0:fe:d5:6e:c2:
cf:90:96:59:c0:1d:bc:10:c7:bf:e7:aa:56:54:9d:
c6:05:36:10:cf:ed:8b:35:22:86:56:ae:29:78:7e:
78:80:6d:3d:72:05:b1:27:83:58:e1:9b:81:a0:c7:
7f:ba:cc:e0:f0:43:90:5a:9e:85:57:85:05:e7:0e:
a3:a4:37:17:8e:b2:d4:95:a3:d8:13:d7:b9:51:f1:
d1:f3:9b:73:fd:b2:32:d4:43:9e:8b:7f:54:7c:bf:
eb:09:7d:da:0c:5f:21:f0:f9:78:27:1b:e8:bc:1e:
52:c5:06:a6:31:05:50:02:a2:95:6f:a6:76:c6:7a:
a1:f4:7d:c9:f7:de:87:87:4f:f8:f9:0d:b8:ea:21:
d5:10:df:b7:92:8e:35:26:71:2f:f4:0b:43:99:84:
fb:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:53:60:28:40:FE:7A:B2:BE:57:68:9F:27:C7:FF:1F:7D:0B:61:FB
X509v3 Authority Key Identifier:
keyid:65:DB:BE:C6:78:17:7B:71:59:AD:90:1A:40:23:BA:57:AA:40:96:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65DBBEC678177B7159AD901A4023BA57AA4096DC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:5d:42:e0:c3:5c:02:93:b0:d3:af:bb:ee:60:26:6c:ab:f9:
c6:cc:89:d1:f4:3f:93:c6:01:7a:f9:87:f4:2c:5b:96:96:59:
2e:42:57:0a:50:d5:72:8f:71:ea:ef:3d:4c:07:75:e9:0e:5d:
ab:73:71:57:a7:fd:41:4a:d4:06:cd:92:95:19:71:1b:bc:c5:
84:02:9c:3d:05:37:4f:f9:ca:29:8c:37:4f:63:e1:5c:31:de:
32:af:66:a2:7e:25:23:66:1f:e8:43:c5:71:c3:13:3a:5f:8f:
28:e6:1b:ff:bd:b5:c2:3b:55:4e:85:51:b6:73:58:6b:91:44:
22:42:45:7f:c7:28:5a:d5:61:9f:1d:ea:62:44:44:a1:16:84:
de:f4:cc:9a:dc:73:84:d6:ff:52:da:2c:45:5b:42:27:26:f5:
95:20:d5:8a:aa:6f:94:ca:e0:11:2d:88:c2:a5:59:c7:5f:db:
3e:cf:c0:7a:4a:a4:fe:4a:65:38:c7:80:9a:7a:92:a3:72:d8:
1b:6a:ef:89:d9:d7:c2:90:6a:4d:73:5c:e1:54:7a:b8:12:4f:
fd:bd:51:58:e4:5d:67:f2:63:00:d8:85:bd:53:73:4f:01:e5:
e1:b8:6c:66:ed:69:0f:88:d4:f9:69:2c:7e:ee:c2:e8:a1:5c:
bb:01:27:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:41:08 2026 by rpki-client