$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/A65F65BF2DB9317754BA910F052FC09429259CBC.mft File: A65F65BF2DB9317754BA910F052FC09429259CBC.mft (raw, json) Hash identifier: cgjrJo3wSRrzeQs2IBKecX4FOJk+xk6yMKLJFPV6rhw= Subject key identifier: 90:C4:BA:E8:AF:21:17:59:5C:22:3B:B4:FB:3D:3A:FF:5A:E4:DF:D5 Authority key identifier: A6:5F:65:BF:2D:B9:31:77:54:BA:91:0F:05:2F:C0:94:29:25:9C:BC Certificate issuer: /CN=A65F65BF2DB9317754BA910F052FC09429259CBC Certificate serial: 57EF5FECDB6DAB84971E9A79C349D0683E1B0CB8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A65F65BF2DB9317754BA910F052FC09429259CBC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/A65F65BF2DB9317754BA910F052FC09429259CBC.mft Manifest number: BE Signing time: Mon 21 Sep 2026 00:16:51 +0000 Manifest this update: Mon 21 Sep 2026 00:11:51 +0000 Manifest next update: Tue 22 Sep 2026 02:46:51 +0000 Files and hashes: 1: A65F65BF2DB9317754BA910F052FC09429259CBC.crl (hash: yycQyDPLpu7IKc/bB68gX7vwxm1ZANISiTnkxvxtEFs=) 2: 3135372e32302e3230392e302f32342d3234203d3e20313532343136.roa (hash: rwfp5y5H5qPfQhaF6rDqIcStalVTGJI0mJpk4RX2nTI=) 3: 3135372e32302e3230382e302f32342d3234203d3e20313532343136.roa (hash: vffHdk9OOgHjUn3gX3E1MpxE/+kaQ1DhpiQKkuuDY58=) 4: 3135372e32302e3230382e302f32332d3233203d3e20313532343136.roa (hash: 6sJwEQuVC2SCQbpKDbpQ7062AUPzj2WmwzEMVpDHp88=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/A65F65BF2DB9317754BA910F052FC09429259CBC.crl rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/A65F65BF2DB9317754BA910F052FC09429259CBC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A65F65BF2DB9317754BA910F052FC09429259CBC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 02:46:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:ef:5f:ec:db:6d:ab:84:97:1e:9a:79:c3:49:d0:68:3e:1b:0c:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A65F65BF2DB9317754BA910F052FC09429259CBC Validity Not Before: Sep 21 00:11:51 2026 GMT Not After : Sep 22 02:46:51 2026 GMT Subject: CN=90C4BAE8AF2117595C223BB4FB3D3AFF5AE4DFD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b4:88:01:fa:73:fb:b7:e9:ad:85:74:9e:b6: cf:9e:4a:9e:66:bc:8a:52:75:64:bc:32:ec:1c:96: 0f:18:c5:7b:aa:4d:8c:e0:c4:72:98:38:5c:38:e3: 6f:69:4f:c2:fa:d9:8f:0c:0a:71:c4:28:cd:f1:9d: a7:49:3d:73:98:f9:3a:a5:06:34:6a:bf:e4:6a:07: 3c:2c:35:d4:7a:00:8d:2f:6e:0f:92:c7:93:37:39: c7:95:b7:d0:de:51:9f:c6:38:40:1b:b9:c4:d5:9a: d6:a6:c9:16:65:74:21:29:06:0f:ff:99:74:2c:89: 3a:aa:8e:84:4c:4d:4f:f8:3a:7c:38:2c:e9:e8:97: 78:d6:0e:4d:52:d8:0d:be:d7:42:53:b1:b9:9e:83: f8:ab:19:49:fb:28:da:dc:d2:c9:53:f5:e8:55:6a: 3c:0a:ce:76:9b:ce:42:fe:2a:c1:7d:89:6e:9e:d4: 85:70:e8:1c:a3:f4:38:37:19:0e:91:17:83:2f:ba: 30:84:78:c6:60:f8:e6:5d:61:18:a4:8d:4e:ca:b5: 6d:fe:f2:21:51:26:99:be:5f:ad:32:e1:cd:c9:d0: cb:cb:56:e9:48:0e:2c:42:c8:3b:82:57:b1:f6:52: 05:91:79:03:6b:34:8d:66:84:f9:73:68:fc:d8:00: 47:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:C4:BA:E8:AF:21:17:59:5C:22:3B:B4:FB:3D:3A:FF:5A:E4:DF:D5 X509v3 Authority Key Identifier: keyid:A6:5F:65:BF:2D:B9:31:77:54:BA:91:0F:05:2F:C0:94:29:25:9C:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/A65F65BF2DB9317754BA910F052FC09429259CBC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A65F65BF2DB9317754BA910F052FC09429259CBC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/A65F65BF2DB9317754BA910F052FC09429259CBC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:3a:ef:0b:65:4c:ca:f8:84:ea:17:5e:d4:2f:3c:16:29:ab: 10:71:2f:e5:b1:12:5f:b7:9a:bf:1d:ef:72:1f:56:63:9f:d8: a9:da:f0:f8:3f:09:93:3b:6b:a3:8b:3b:bd:d3:6a:96:c6:95: 2e:ad:4c:b9:ff:43:85:b3:d2:94:fa:35:46:ce:90:b6:b7:1a: 40:73:f4:2b:c8:70:be:57:11:78:99:eb:40:d6:10:e4:61:dd: f5:27:42:f4:6e:f5:62:68:b2:fd:ca:ae:fd:5b:36:59:11:2c: ff:5f:d3:44:ed:11:1a:77:e6:50:ba:03:10:3b:df:6c:32:d7: 85:8f:f0:45:8c:4e:b3:fa:59:69:9d:74:68:21:b6:ec:dc:c6: 87:d8:48:2f:2c:1f:6c:db:70:1d:3a:28:0f:95:f0:c5:a2:da: 6c:49:d7:d5:a4:3d:7c:93:03:02:e4:7b:b1:65:47:68:ba:36: 86:a6:ea:4b:7b:8a:c3:d5:01:a1:51:d0:87:0c:11:c7:35:29: d0:15:69:41:1a:cf:d4:83:3d:8e:e9:11:8e:5e:f1:f1:de:36: ee:e1:f2:e4:9e:66:3d:7f:2e:d8:c0:e9:22:77:2a:22:c7:85: d3:78:66:d1:9a:80:02:01:29:7d:e2:16:2f:e6:4e:f5:ae:2e: a8:38:e4:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV+9f7Nttq4SXHpp5w0nQaD4bDLgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY1RjY1QkYyREI5MzE3NzU0QkE5MTBGMDUyRkMwOTQy OTI1OUNCQzAeFw0yNjA5MjEwMDExNTFaFw0yNjA5MjIwMjQ2NTFaMDMxMTAvBgNV BAMTKDkwQzRCQUU4QUYyMTE3NTk1QzIyM0JCNEZCM0QzQUZGNUFFNERGRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjtIgB+nP7t+mthXSets+eSp5m vIpSdWS8Muwclg8YxXuqTYzgxHKYOFw4429pT8L62Y8MCnHEKM3xnadJPXOY+Tql BjRqv+RqBzwsNdR6AI0vbg+Sx5M3OceVt9DeUZ/GOEAbucTVmtamyRZldCEpBg// mXQsiTqqjoRMTU/4Onw4LOnol3jWDk1S2A2+10JTsbmeg/irGUn7KNrc0slT9ehV ajwKznabzkL+KsF9iW6e1IVw6Byj9Dg3GQ6RF4MvujCEeMZg+OZdYRikjU7KtW3+ 8iFRJpm+X60y4c3J0MvLVulIDixCyDuCV7H2UgWReQNrNI1mhPlzaPzYAEfPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkMS66K8hF1lcIju0+z06/1rk39UwHwYDVR0j BBgwFoAUpl9lvy25MXdUupEPBS/AlCklnLwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGM0MDk0ZDItZTE4ZC00ODQwLTg0ZmEtYzU3NTdhZjU4MGYxLzAvQTY1RjY1QkYy REI5MzE3NzU0QkE5MTBGMDUyRkMwOTQyOTI1OUNCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BNjVGNjVCRjJEQjkzMTc3NTRCQTkxMEYwNTJGQzA5NDI5MjU5 Q0JDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGM0MDk0ZDItZTE4ZC00ODQwLTg0 ZmEtYzU3NTdhZjU4MGYxLzAvQTY1RjY1QkYyREI5MzE3NzU0QkE5MTBGMDUyRkMw OTQyOTI1OUNCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJQ67wtlTMr4hOoXXtQvPBYpqxBxL+WxEl+3 mr8d73IfVmOf2Kna8Pg/CZM7a6OLO73TapbGlS6tTLn/Q4Wz0pT6NUbOkLa3GkBz 9CvIcL5XEXiZ60DWEORh3fUnQvRu9WJosv3Krv1bNlkRLP9f00TtERp35lC6AxA7 32wy14WP8EWMTrP6WWmddGghtuzcxofYSC8sH2zbcB06KA+V8MWi2mxJ19WkPXyT AwLke7FlR2i6Noam6kt7isPVAaFR0IcMEcc1KdAVaUEaz9SDPY7pEY5e8fHeNu7h 8uSeZj1/LtjA6SJ3KiLHhdN4ZtGagAIBKX3iFi/mTvWuLqg45B0= -----END CERTIFICATE-----Generated at Mon Sep 21 08:35:45 2026 by rpki-client