$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/65B2322C56F44BF22F2FEC36B959F99E1D331066.mft File: 65B2322C56F44BF22F2FEC36B959F99E1D331066.mft (raw, json) Hash identifier: Uxt/OaNBeZ+Qrl3hCgShJreOYG0uwUGwkRGZsLLync8= Subject key identifier: 53:3B:65:1A:35:51:60:A4:79:47:53:C0:79:B5:F4:9D:AB:95:3C:57 Authority key identifier: 65:B2:32:2C:56:F4:4B:F2:2F:2F:EC:36:B9:59:F9:9E:1D:33:10:66 Certificate issuer: /CN=65B2322C56F44BF22F2FEC36B959F99E1D331066 Certificate serial: 248870DBCFA5370AE8D5197F0DC14E7CB8CB745F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65B2322C56F44BF22F2FEC36B959F99E1D331066.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/65B2322C56F44BF22F2FEC36B959F99E1D331066.mft Manifest number: BF Signing time: Mon 21 Sep 2026 14:04:00 +0000 Manifest this update: Mon 21 Sep 2026 13:59:00 +0000 Manifest next update: Tue 22 Sep 2026 17:40:00 +0000 Files and hashes: 1: 3130332e3132362e3139352e302f32342d3234203d3e20313530353438.roa (hash: ArWINNWiCoq7qYCWEDrQkzwtNUnQVElWRhRzX3xlhI8=) 2: 65B2322C56F44BF22F2FEC36B959F99E1D331066.crl (hash: GKQEPOsGugD7UYXw4do65YIMDKAMBP5cFcMHuSVKVHA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/65B2322C56F44BF22F2FEC36B959F99E1D331066.crl rsync://rpki-rsync.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/65B2322C56F44BF22F2FEC36B959F99E1D331066.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65B2322C56F44BF22F2FEC36B959F99E1D331066.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:88:70:db:cf:a5:37:0a:e8:d5:19:7f:0d:c1:4e:7c:b8:cb:74:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65B2322C56F44BF22F2FEC36B959F99E1D331066 Validity Not Before: Sep 21 13:59:00 2026 GMT Not After : Sep 22 17:40:00 2026 GMT Subject: CN=533B651A355160A4794753C079B5F49DAB953C57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f1:7b:b3:a8:54:2a:1a:60:91:5b:85:3b:b9: 37:75:96:fc:4e:86:af:f9:15:4e:83:78:89:09:e1: 4a:2a:3b:0c:05:b0:bb:f7:1e:f9:d3:f7:e1:6d:7a: ca:a6:e1:28:30:a2:c1:11:f4:e5:be:3b:63:1c:db: de:77:5e:83:d1:99:cf:bf:5f:52:81:79:e4:4c:c7: f7:bf:b2:f9:6e:bc:cc:68:d8:72:57:ac:6e:52:6b: 38:e4:4b:94:3a:21:e9:96:b4:cb:4b:d0:03:93:6c: bd:35:33:b4:06:f9:19:e1:be:eb:78:a5:19:fd:64: d8:9b:79:1e:8a:ac:a7:f0:4e:da:9d:46:ed:b3:2f: c2:a0:a9:43:40:13:d3:34:1b:0f:f9:a4:b7:0f:9e: 59:08:f6:29:29:cd:de:54:06:ba:36:db:f6:77:d5: b6:0f:f1:8d:5c:03:2c:5c:15:b3:f5:c6:9a:55:6e: ef:56:1c:01:05:ee:eb:6a:e5:58:31:a4:3f:00:44: 6f:57:33:1e:e4:7e:7f:67:8a:6e:fd:1f:8a:13:c1: e4:fa:eb:9e:1a:8f:3b:29:95:dd:a0:80:01:cc:1d: 29:c0:a5:9f:9d:de:da:44:3a:04:b7:f1:ef:9a:eb: 06:45:0c:6b:57:11:b8:a0:44:8f:88:4a:d1:f0:ea: 4f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:3B:65:1A:35:51:60:A4:79:47:53:C0:79:B5:F4:9D:AB:95:3C:57 X509v3 Authority Key Identifier: keyid:65:B2:32:2C:56:F4:4B:F2:2F:2F:EC:36:B9:59:F9:9E:1D:33:10:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/65B2322C56F44BF22F2FEC36B959F99E1D331066.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65B2322C56F44BF22F2FEC36B959F99E1D331066.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/65B2322C56F44BF22F2FEC36B959F99E1D331066.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:81:4e:a4:f9:80:f3:b5:22:14:f5:4d:5b:c4:42:e1:0e:c4: 4a:b1:da:39:c3:a0:ce:ce:61:a1:0f:85:33:be:26:12:a3:49: 92:37:cc:08:aa:f8:7c:4b:42:b2:68:f3:03:18:08:c0:76:2f: 80:c2:ce:8d:27:c8:1e:0a:a1:9a:f4:b8:55:cb:a9:18:72:e3: c4:d4:3a:a5:31:d4:c2:da:a5:79:e4:1a:da:a7:35:99:bb:19: d1:89:09:39:cb:1d:70:78:10:25:a8:ea:10:47:2b:22:92:79: 93:a7:8f:23:0e:80:a7:a5:e8:74:4c:ea:08:1b:29:66:10:d2: e7:90:72:2a:0e:9b:85:cc:f7:01:1a:08:46:74:e2:28:3e:43: 47:44:59:c7:43:90:71:6b:0d:00:af:fc:a3:72:5d:13:7c:7b: e9:52:2b:37:4a:a2:27:12:3b:77:7a:9a:40:1b:c5:75:2e:36: f6:e7:99:1b:ec:cd:9d:a1:86:0c:96:22:63:df:26:b1:42:76: 63:99:ea:1b:4c:c6:89:2d:0a:79:a4:45:47:fd:1e:5c:41:09: ec:fb:76:14:c4:9c:17:0b:60:5a:e5:52:f2:64:a8:14:64:0a: a5:9a:dd:60:a6:2f:59:86:9a:dc:f9:0e:89:98:53:76:25:55: 82:b5:b0:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJIhw28+lNwro1Rl/DcFOfLjLdF8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVCMjMyMkM1NkY0NEJGMjJGMkZFQzM2Qjk1OUY5OUUx RDMzMTA2NjAeFw0yNjA5MjExMzU5MDBaFw0yNjA5MjIxNzQwMDBaMDMxMTAvBgNV BAMTKDUzM0I2NTFBMzU1MTYwQTQ3OTQ3NTNDMDc5QjVGNDlEQUI5NTNDNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn8XuzqFQqGmCRW4U7uTd1lvxO hq/5FU6DeIkJ4UoqOwwFsLv3HvnT9+Ftesqm4SgwosER9OW+O2Mc2953XoPRmc+/ X1KBeeRMx/e/svluvMxo2HJXrG5SazjkS5Q6IemWtMtL0AOTbL01M7QG+Rnhvut4 pRn9ZNibeR6KrKfwTtqdRu2zL8KgqUNAE9M0Gw/5pLcPnlkI9ikpzd5UBro22/Z3 1bYP8Y1cAyxcFbP1xppVbu9WHAEF7utq5VgxpD8ARG9XMx7kfn9nim79H4oTweT6 654ajzspld2ggAHMHSnApZ+d3tpEOgS38e+a6wZFDGtXEbigRI+IStHw6k99AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUztlGjVRYKR5R1PAebX0nauVPFcwHwYDVR0j BBgwFoAUZbIyLFb0S/IvL+w2uVn5nh0zEGYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjE5MzAxOGUtNzE4Zi00NzU3LWEwODctOTNhZDc3YjgxODIxLzAvNjVCMjMyMkM1 NkY0NEJGMjJGMkZFQzM2Qjk1OUY5OUUxRDMzMTA2Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NUIyMzIyQzU2RjQ0QkYyMkYyRkVDMzZCOTU5Rjk5RTFEMzMx MDY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjE5MzAxOGUtNzE4Zi00NzU3LWEw ODctOTNhZDc3YjgxODIxLzAvNjVCMjMyMkM1NkY0NEJGMjJGMkZFQzM2Qjk1OUY5 OUUxRDMzMTA2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGuBTqT5gPO1IhT1TVvEQuEOxEqx2jnDoM7O YaEPhTO+JhKjSZI3zAiq+HxLQrJo8wMYCMB2L4DCzo0nyB4KoZr0uFXLqRhy48TU OqUx1MLapXnkGtqnNZm7GdGJCTnLHXB4ECWo6hBHKyKSeZOnjyMOgKel6HRM6ggb KWYQ0ueQcioOm4XM9wEaCEZ04ig+Q0dEWcdDkHFrDQCv/KNyXRN8e+lSKzdKoicS O3d6mkAbxXUuNvbnmRvszZ2hhgyWImPfJrFCdmOZ6htMxoktCnmkRUf9HlxBCez7 dhTEnBcLYFrlUvJkqBRkCqWa3WCmL1mGmtz5DomYU3YlVYK1sEo= -----END CERTIFICATE-----Generated at Mon Sep 21 17:45:41 2026 by rpki-client