$ rpki-client -vvf rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.mft File: 65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.mft (raw, json) Hash identifier: /eEDYfjiJwyf1nuZV9kFnJvfaswCVU3CsX5CEf+5Khc= Subject key identifier: 57:EE:7B:21:42:76:D7:53:DD:10:A9:0E:10:0D:1B:7B:A5:3E:5D:23 Authority key identifier: 65:FE:1D:A2:7B:82:A0:F9:AC:31:85:52:FD:2F:D0:0E:F6:6B:F7:CD Certificate issuer: /CN=65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD Certificate serial: 1637BB9CBC932957A6AD653E3AEC12D8266C3191 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 21:40:25 +0000 Manifest this update: Tue 16 Jun 2026 21:35:25 +0000 Manifest next update: Wed 17 Jun 2026 22:03:25 +0000 Files and hashes: 1: 3130332e3139342e34362e302f32332d3234203d3e20313439393731.roa (hash: 4ExEorQAkAboUfCg4xl3LFUmZFGrqFAxLJKE8qeWaSE=) 2: 65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.crl (hash: 7Du168f0+MC+sxhaTWRaSAzqW61e1UptwJGe99/WM1s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.crl rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 22:03:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:37:bb:9c:bc:93:29:57:a6:ad:65:3e:3a:ec:12:d8:26:6c:31:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD Validity Not Before: Jun 16 21:35:25 2026 GMT Not After : Jun 17 22:03:25 2026 GMT Subject: CN=57EE7B214276D753DD10A90E100D1B7BA53E5D23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:81:60:5d:9c:10:96:60:01:a7:25:83:43:ed: 44:b2:e3:3d:83:5d:19:94:0e:ca:80:9d:cb:1e:f9: 94:7b:d3:fc:f8:ab:29:6e:ed:26:23:f7:be:74:88: 27:74:0d:07:39:ce:28:b3:2b:70:74:b3:0f:35:12: 1d:74:bf:d6:9f:fb:cc:cf:f6:41:f2:c3:7c:a0:dc: bf:08:a1:df:8d:07:0c:1f:ff:0c:f8:65:5f:84:b3: 17:60:77:55:29:74:6c:3c:96:d1:43:21:e9:59:2b: a8:9d:75:fa:8a:17:71:a7:d4:39:26:69:25:dc:94: 27:d6:06:af:81:55:88:31:1f:00:9d:7c:98:de:a6: 17:2f:34:dc:a0:c0:53:bc:c7:69:f7:9d:4a:ae:05: 10:2a:d8:a3:bd:d0:24:85:4c:e7:de:35:f5:1e:4f: 75:53:a6:35:61:5b:c2:96:8b:9a:a2:45:d2:77:4f: c1:f2:af:98:d2:38:d3:5d:bc:29:aa:01:99:3b:b9: f1:db:ab:47:97:aa:a1:3a:39:24:21:06:3a:53:89: 7c:37:d2:cf:94:0d:e1:da:dd:37:43:a1:94:93:f7: e8:c5:27:6a:44:70:24:b6:4f:91:26:65:7a:f6:fd: b0:44:ad:8f:04:5d:45:01:22:19:d6:d7:ec:51:14: c6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:EE:7B:21:42:76:D7:53:DD:10:A9:0E:10:0D:1B:7B:A5:3E:5D:23 X509v3 Authority Key Identifier: keyid:65:FE:1D:A2:7B:82:A0:F9:AC:31:85:52:FD:2F:D0:0E:F6:6B:F7:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/65FE1DA27B82A0F9AC318552FD2FD00EF66BF7CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:0a:24:ca:76:d1:da:d3:a8:4f:a2:92:84:1e:4d:a1:91:ce: 38:39:07:59:15:3a:ec:ef:cc:04:e3:38:54:9a:d5:2f:1b:a4: 53:dc:a1:a1:fd:f7:9e:99:aa:c4:f0:64:28:33:33:fd:7e:29: 68:93:d7:d3:96:2f:ed:74:9e:fa:fc:16:af:fb:41:9f:2a:84: 4d:ba:e3:57:18:8b:be:68:2c:7e:b7:91:c4:c6:42:7a:12:94: 22:8c:55:be:61:3d:ca:8a:e4:8a:ba:a0:c8:c6:27:77:81:0a: c2:3b:05:ab:d7:11:6d:bc:8e:41:fd:18:65:13:5c:aa:85:a2: 20:96:55:b4:c7:55:17:d6:85:68:6f:54:9a:34:15:31:fe:8d: a3:56:73:db:94:b7:68:1c:8c:75:b5:74:6b:97:72:a8:c3:12: 32:0a:39:6b:05:03:d6:e7:74:b7:d4:17:4a:83:58:6f:1e:24: b0:a2:06:1c:77:cd:1e:90:d6:4b:64:c1:09:cd:fb:18:db:93: 69:96:9b:32:3d:8f:73:6b:01:bd:cd:5a:fb:2e:26:d2:ab:81: 5b:3f:18:37:ff:1d:94:0b:11:03:e1:bd:59:b0:95:7c:1f:55: 7b:21:10:32:13:83:81:05:9d:5a:76:af:ad:67:e4:a2:96:d5: ba:60:27:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFje7nLyTKVemrWU+OuwS2CZsMZEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVGRTFEQTI3QjgyQTBGOUFDMzE4NTUyRkQyRkQwMEVG NjZCRjdDRDAeFw0yNjA2MTYyMTM1MjVaFw0yNjA2MTcyMjAzMjVaMDMxMTAvBgNV BAMTKDU3RUU3QjIxNDI3NkQ3NTNERDEwQTkwRTEwMEQxQjdCQTUzRTVEMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0gWBdnBCWYAGnJYND7USy4z2D XRmUDsqAncse+ZR70/z4qylu7SYj9750iCd0DQc5ziizK3B0sw81Eh10v9af+8zP 9kHyw3yg3L8Iod+NBwwf/wz4ZV+Esxdgd1UpdGw8ltFDIelZK6iddfqKF3Gn1Dkm aSXclCfWBq+BVYgxHwCdfJjephcvNNygwFO8x2n3nUquBRAq2KO90CSFTOfeNfUe T3VTpjVhW8KWi5qiRdJ3T8Hyr5jSONNdvCmqAZk7ufHbq0eXqqE6OSQhBjpTiXw3 0s+UDeHa3TdDoZST9+jFJ2pEcCS2T5EmZXr2/bBErY8EXUUBIhnW1+xRFMb1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV+57IUJ211PdEKkOEA0be6U+XSMwHwYDVR0j BBgwFoAUZf4donuCoPmsMYVS/S/QDvZr980wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yjg5OTNhOTMtNTg4OS00ZTAyLTllOTUtNzY5Y2I4OWUwMDM1LzAvNjVGRTFEQTI3 QjgyQTBGOUFDMzE4NTUyRkQyRkQwMEVGNjZCRjdDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NUZFMURBMjdCODJBMEY5QUMzMTg1NTJGRDJGRDAwRUY2NkJG N0NELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjg5OTNhOTMtNTg4OS00ZTAyLTll OTUtNzY5Y2I4OWUwMDM1LzAvNjVGRTFEQTI3QjgyQTBGOUFDMzE4NTUyRkQyRkQw MEVGNjZCRjdDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEoKJMp20drTqE+ikoQeTaGRzjg5B1kVOuzv zATjOFSa1S8bpFPcoaH9956ZqsTwZCgzM/1+KWiT19OWL+10nvr8Fq/7QZ8qhE26 41cYi75oLH63kcTGQnoSlCKMVb5hPcqK5Iq6oMjGJ3eBCsI7BavXEW28jkH9GGUT XKqFoiCWVbTHVRfWhWhvVJo0FTH+jaNWc9uUt2gcjHW1dGuXcqjDEjIKOWsFA9bn dLfUF0qDWG8eJLCiBhx3zR6Q1ktkwQnN+xjbk2mWmzI9j3NrAb3NWvsuJtKrgVs/ GDf/HZQLEQPhvVmwlXwfVXshEDITg4EFnVp2r61n5KKW1bpgJxc= -----END CERTIFICATE-----Generated at Wed Jun 17 09:20:28 2026 by rpki-client