$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.mft File: 65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.mft (raw, json) Hash identifier: syEcY0mUVwBK2nnguiqTJGBW+T3Q8WuHcDvNOH08zcg= Subject key identifier: C1:F8:E4:4D:CD:61:50:E9:62:C3:A9:C8:AB:90:42:0A:0D:4B:3F:7D Authority key identifier: 65:FE:1D:A2:7B:82:A0:F9:AC:31:85:52:FD:2F:D0:0E:F6:6B:F7:CD Certificate issuer: /CN=65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD Certificate serial: 1CF0C79D501050DE70434154AD494EF4A7218AEF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.mft Manifest number: 0105 Signing time: Mon 09 Nov 2026 11:19:49 +0000 Manifest this update: Mon 09 Nov 2026 11:14:49 +0000 Manifest next update: Tue 10 Nov 2026 14:27:49 +0000 Files and hashes: 1: 3130332e3139342e34362e302f32332d3234203d3e20313534373239.roa (hash: 0ZRcB3QuJxRcZRfvWjBmAKhe/Zo32XmRUANVKEZt9VE=) 2: 3130332e3139342e34362e302f32332d3234203d3e20313439393731.roa (hash: J1nHPFtAKLB+vuTpgao772bc30wyFHiWLh6RRldiry8=) 3: 3130332e3139342e34362e302f32342d3234203d3e20313534373239.roa (hash: cA3+om6sO6hy3Y7QiM5mtcnYKLLbpQv4RTYP8k/VNK4=) 4: 3130332e3139342e34362e302f32342d3234203d3e20313439393731.roa (hash: 20o6cT5BLNovtqYdA+/pLFKRgD8D7hQ8yuxDKaT2ZSg=) 5: 65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.crl (hash: cFaUcUgkpKKnid0ITHk/kgxAfZ6jt7SXUZBRHJrMKKo=) 6: 3130332e3139342e34372e302f32342d3234203d3e20313439393731.roa (hash: RVWN9lnu+KvZlFcQZ9inyEY0+6TUodWkYC50twZKJSI=) 7: 3130332e3139342e34372e302f32342d3234203d3e20313534373239.roa (hash: VwsPbkcLNvQ7dIcrL+a6RAItC8kaWe0YUutPOxiwt9I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.crl rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:f0:c7:9d:50:10:50:de:70:43:41:54:ad:49:4e:f4:a7:21:8a:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD Validity Not Before: Nov 9 11:14:49 2026 GMT Not After : Nov 10 14:27:49 2026 GMT Subject: CN=C1F8E44DCD6150E962C3A9C8AB90420A0D4B3F7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:93:17:ab:5f:85:cc:05:1e:ee:30:f5:7b:f8: a7:34:96:0e:df:70:d2:48:67:62:04:b5:92:c7:7b: b1:cd:b2:2a:7b:42:1f:9d:2d:4c:7a:23:f0:ad:70: 86:e1:00:78:db:6c:2d:fa:ad:e6:0d:67:d7:7d:77: 60:84:89:7d:a5:89:62:0d:7b:6a:40:9e:c2:7a:ed: 8b:6b:26:ac:60:d4:80:58:74:bc:2a:e8:c1:db:22: e4:fd:e3:ff:85:97:1c:f1:bc:15:bb:45:54:d3:b6: c3:67:14:c7:48:6a:19:2d:f1:b6:db:65:e9:71:e3: 20:df:80:14:9e:7c:be:5b:fb:a5:cb:bb:1a:1e:cf: e8:ac:6b:0b:43:31:47:ab:0d:9c:c1:23:df:e4:91: 84:01:9e:b3:ce:41:cd:ff:2b:85:46:29:19:81:8e: 06:f5:dc:76:f2:12:a4:3d:91:a9:bc:d8:a1:c9:6d: 3c:fd:8b:97:31:2f:3d:39:07:74:6b:09:81:1d:f8: 7b:d3:ce:68:6e:16:2c:6e:87:7d:34:70:be:c1:6a: 74:6f:44:c7:d7:69:59:3a:ea:83:d2:f3:a6:f5:be: c3:5b:5b:e9:7f:c5:db:d3:a5:bb:7e:80:0b:6c:16: 9e:19:a9:3c:2c:42:dd:0f:03:fc:ca:3c:b1:c5:c8: ec:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F8:E4:4D:CD:61:50:E9:62:C3:A9:C8:AB:90:42:0A:0D:4B:3F:7D X509v3 Authority Key Identifier: keyid:65:FE:1D:A2:7B:82:A0:F9:AC:31:85:52:FD:2F:D0:0E:F6:6B:F7:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:39:1c:bd:38:1a:e1:6c:8e:45:78:23:31:b3:36:77:f4:97: bf:53:f0:6f:7f:27:9e:c2:35:83:a0:7a:77:77:33:ea:b1:ab: a6:97:ea:36:27:9a:d9:57:f8:54:01:59:20:a2:35:b5:f2:1e: 42:4a:d4:eb:ea:79:12:b9:05:68:8b:4a:54:2f:f1:e6:7a:5c: 45:d0:f9:cb:0c:4b:fb:4e:f7:e3:78:64:18:44:e4:80:90:a4: 9e:bb:bb:c8:a0:cf:0a:41:12:28:03:f8:43:ec:7b:f4:cd:22: 89:d9:3f:de:21:8c:f4:e5:ae:b4:2c:7c:68:0e:0d:88:67:84: 41:d2:40:61:0e:0e:1b:97:7c:51:2d:8d:c9:ef:03:f4:6e:48: 9e:05:ea:85:5d:3e:97:6d:53:a3:20:53:40:44:67:ac:a8:df: af:48:8d:ed:d3:a5:18:2e:3c:84:f6:35:9c:60:86:84:b2:26: d8:0a:ac:98:90:c6:c6:20:85:07:a1:41:40:cf:24:62:06:6f: 64:b9:6f:27:06:be:da:c2:48:23:15:e5:e9:f3:4f:4a:b6:b0: 4e:51:d8:d8:9c:7d:6a:65:2d:89:18:6e:6e:15:14:ba:55:5c: da:f8:cc:b9:7b:80:27:53:bb:11:92:45:27:cc:e9:3c:6d:f2: d3:01:2d:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHPDHnVAQUN5wQ0FUrUlO9Kchiu8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVGRTFEQTI3QjgyQTBGOUFDMzE4NTUyRkQyRkQwMEVG NjZCRjdDRDAeFw0yNjExMDkxMTE0NDlaFw0yNjExMTAxNDI3NDlaMDMxMTAvBgNV BAMTKEMxRjhFNDREQ0Q2MTUwRTk2MkMzQTlDOEFCOTA0MjBBMEQ0QjNGN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUkxerX4XMBR7uMPV7+Kc0lg7f cNJIZ2IEtZLHe7HNsip7Qh+dLUx6I/CtcIbhAHjbbC36reYNZ9d9d2CEiX2liWIN e2pAnsJ67YtrJqxg1IBYdLwq6MHbIuT94/+FlxzxvBW7RVTTtsNnFMdIahkt8bbb Zelx4yDfgBSefL5b+6XLuxoez+isawtDMUerDZzBI9/kkYQBnrPOQc3/K4VGKRmB jgb13HbyEqQ9kam82KHJbTz9i5cxLz05B3RrCYEd+HvTzmhuFixuh300cL7BanRv RMfXaVk66oPS86b1vsNbW+l/xdvTpbt+gAtsFp4ZqTwsQt0PA/zKPLHFyOznAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwfjkTc1hUOliw6nIq5BCCg1LP30wHwYDVR0j BBgwFoAUZf4donuCoPmsMYVS/S/QDvZr980wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yjg5OTNhOTMtNTg4OS00ZTAyLTllOTUtNzY5Y2I4OWUwMDM1LzAvNjVGRTFEQTI3 QjgyQTBGOUFDMzE4NTUyRkQyRkQwMEVGNjZCRjdDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NUZFMURBMjdCODJBMEY5QUMzMTg1NTJGRDJGRDAwRUY2NkJG N0NELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjg5OTNhOTMtNTg4OS00ZTAyLTll OTUtNzY5Y2I4OWUwMDM1LzAvNjVGRTFEQTI3QjgyQTBGOUFDMzE4NTUyRkQyRkQw MEVGNjZCRjdDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEw5HL04GuFsjkV4IzGzNnf0l79T8G9/J57C NYOgend3M+qxq6aX6jYnmtlX+FQBWSCiNbXyHkJK1OvqeRK5BWiLSlQv8eZ6XEXQ +csMS/tO9+N4ZBhE5ICQpJ67u8igzwpBEigD+EPse/TNIonZP94hjPTlrrQsfGgO DYhnhEHSQGEODhuXfFEtjcnvA/RuSJ4F6oVdPpdtU6MgU0BEZ6yo369Ije3TpRgu PIT2NZxghoSyJtgKrJiQxsYghQehQUDPJGIGb2S5bycGvtrCSCMV5enzT0q2sE5R 2NicfWplLYkYbm4VFLpVXNr4zLl7gCdTuxGSRSfM6Txt8tMBLQY= -----END CERTIFICATE-----Generated at Tue Nov 10 00:45:07 2026 by rpki-client