$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.mft File: 65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.mft (raw, json) Hash identifier: PGKO/dNrQWomlszWr6SWKDkzxtRwWAay7GLyMIGc5ZM= Subject key identifier: 16:C7:7F:92:68:66:B5:67:E3:CC:BE:25:E2:93:8D:D6:9E:BB:30:EA Authority key identifier: 65:FE:1D:A2:7B:82:A0:F9:AC:31:85:52:FD:2F:D0:0E:F6:6B:F7:CD Certificate issuer: /CN=65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD Certificate serial: 5A1F5BCF661AFC5A3F3E046EA3BADAC68867CD6D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.mft Manifest number: BC Signing time: Sun 20 Sep 2026 09:59:32 +0000 Manifest this update: Sun 20 Sep 2026 09:54:32 +0000 Manifest next update: Mon 21 Sep 2026 10:35:32 +0000 Files and hashes: 1: 3130332e3139342e34362e302f32332d3234203d3e20313439393731.roa (hash: 4ExEorQAkAboUfCg4xl3LFUmZFGrqFAxLJKE8qeWaSE=) 2: 65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.crl (hash: sepHUEzp0rETOHFROXBSsEYg87FsoywzwbaXhxM1qwY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.crl rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 10:35:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:1f:5b:cf:66:1a:fc:5a:3f:3e:04:6e:a3:ba:da:c6:88:67:cd:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD Validity Not Before: Sep 20 09:54:32 2026 GMT Not After : Sep 21 10:35:32 2026 GMT Subject: CN=16C77F926866B567E3CCBE25E2938DD69EBB30EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:17:20:35:92:86:58:6e:2b:cd:76:af:bb:63: f0:a8:da:e0:42:45:2a:e8:b5:8d:57:ef:7c:82:ee: af:7f:53:95:85:c4:a2:f0:97:18:72:70:ff:5c:0b: 44:c6:75:dc:3d:e7:90:a4:64:b1:a3:70:0b:53:11: d2:55:d6:5e:c3:24:2d:27:fe:1b:34:9f:39:06:f8: fa:ee:6b:9a:20:db:d1:13:df:47:b3:13:1f:1c:27: 61:d9:28:2c:95:2e:ae:e6:98:c6:d6:3c:66:e5:6a: 01:3a:57:6b:ca:e5:29:4e:41:ca:98:53:86:52:ab: 3c:16:c5:d5:c5:30:3f:c0:6f:97:36:6a:17:b6:b2: f7:41:bb:f7:92:7d:d6:7a:53:cc:3b:2f:7f:2f:2b: aa:f9:78:c6:8e:34:6a:ac:65:a4:3a:dd:bf:55:fb: 9b:2c:80:fa:7e:cd:fb:7f:c3:b1:b3:5f:16:50:16: 4e:b5:10:8e:c6:a7:25:a7:5a:1c:6e:b7:3d:80:13: 86:57:84:b2:75:0b:3b:d0:5e:f7:e4:ef:8c:aa:64: 71:7b:1f:3f:e9:f0:6a:b1:21:c5:cb:d9:3d:74:40: 6b:0c:54:25:a0:a3:21:70:82:ff:ce:6d:ae:99:06: 4a:8a:ac:a9:99:e6:cd:af:e4:c4:6f:66:54:88:fb: aa:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:C7:7F:92:68:66:B5:67:E3:CC:BE:25:E2:93:8D:D6:9E:BB:30:EA X509v3 Authority Key Identifier: keyid:65:FE:1D:A2:7B:82:A0:F9:AC:31:85:52:FD:2F:D0:0E:F6:6B:F7:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:27:45:9f:15:49:f0:7b:a0:86:7b:f3:a4:1d:c9:f7:e5:d6: 24:ee:0a:14:72:94:77:ee:b6:a4:82:03:6c:bd:98:e6:8b:16: a8:d3:c2:8e:71:10:94:f9:b2:1d:2c:b3:9e:2b:3c:94:a2:c2: 2d:2d:37:3c:b9:69:d0:90:37:71:ba:a8:8c:ed:85:e8:b9:67: fb:38:48:91:df:95:fc:2a:cf:60:07:30:d5:cf:19:9a:2d:ca: 52:56:7a:e1:7d:3e:d5:33:94:c0:65:e8:11:7d:88:c5:e4:ec: cb:5d:6b:94:af:01:f5:56:b2:2f:8a:5a:fd:2e:79:69:4b:14: 04:15:fd:6c:70:b1:77:ff:ef:97:00:ec:f6:03:fc:1e:de:2d: d8:09:bd:ee:09:90:7e:fc:93:14:25:ae:17:f2:69:da:3d:af: 3c:65:08:e4:b8:14:c5:ac:cd:c9:f1:f1:1b:59:24:70:30:8f: a7:26:32:e4:09:77:2e:5e:87:44:42:1a:8f:d8:34:27:02:d6: 94:42:bc:80:e8:88:c6:7e:89:6a:f2:0d:04:b7:59:fb:e0:03: 0f:e6:6c:9f:fa:2c:0a:82:60:2a:8e:fa:bd:ef:ea:16:47:f2: 9b:7b:f9:27:3c:d5:fe:91:e4:3a:aa:f8:7e:1e:d7:1e:b3:6b: 93:01:bb:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWh9bz2Ya/Fo/PgRuo7raxohnzW0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVGRTFEQTI3QjgyQTBGOUFDMzE4NTUyRkQyRkQwMEVG NjZCRjdDRDAeFw0yNjA5MjAwOTU0MzJaFw0yNjA5MjExMDM1MzJaMDMxMTAvBgNV BAMTKDE2Qzc3RjkyNjg2NkI1NjdFM0NDQkUyNUUyOTM4REQ2OUVCQjMwRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiFyA1koZYbivNdq+7Y/Co2uBC RSrotY1X73yC7q9/U5WFxKLwlxhycP9cC0TGddw955CkZLGjcAtTEdJV1l7DJC0n /hs0nzkG+Prua5og29ET30ezEx8cJ2HZKCyVLq7mmMbWPGblagE6V2vK5SlOQcqY U4ZSqzwWxdXFMD/Ab5c2ahe2svdBu/eSfdZ6U8w7L38vK6r5eMaONGqsZaQ63b9V +5ssgPp+zft/w7GzXxZQFk61EI7GpyWnWhxutz2AE4ZXhLJ1CzvQXvfk74yqZHF7 Hz/p8GqxIcXL2T10QGsMVCWgoyFwgv/Oba6ZBkqKrKmZ5s2v5MRvZlSI+6oxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFsd/kmhmtWfjzL4l4pON1p67MOowHwYDVR0j BBgwFoAUZf4donuCoPmsMYVS/S/QDvZr980wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yjg5OTNhOTMtNTg4OS00ZTAyLTllOTUtNzY5Y2I4OWUwMDM1LzAvNjVGRTFEQTI3 QjgyQTBGOUFDMzE4NTUyRkQyRkQwMEVGNjZCRjdDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NUZFMURBMjdCODJBMEY5QUMzMTg1NTJGRDJGRDAwRUY2NkJG N0NELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjg5OTNhOTMtNTg4OS00ZTAyLTll OTUtNzY5Y2I4OWUwMDM1LzAvNjVGRTFEQTI3QjgyQTBGOUFDMzE4NTUyRkQyRkQw MEVGNjZCRjdDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEYnRZ8VSfB7oIZ786Qdyffl1iTuChRylHfu tqSCA2y9mOaLFqjTwo5xEJT5sh0ss54rPJSiwi0tNzy5adCQN3G6qIzthei5Z/s4 SJHflfwqz2AHMNXPGZotylJWeuF9PtUzlMBl6BF9iMXk7Mtda5SvAfVWsi+KWv0u eWlLFAQV/WxwsXf/75cA7PYD/B7eLdgJve4JkH78kxQlrhfyado9rzxlCOS4FMWs zcnx8RtZJHAwj6cmMuQJdy5eh0RCGo/YNCcC1pRCvIDoiMZ+iWryDQS3WfvgAw/m bJ/6LAqCYCqO+r3v6hZH8pt7+Sc81f6R5Dqq+H4e1x6za5MBu04= -----END CERTIFICATE-----Generated at Mon Sep 21 04:08:08 2026 by rpki-client