$ rpki-client -vvf rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/A65F65BF2DB9317754BA910F052FC09429259CBC.mft File: A65F65BF2DB9317754BA910F052FC09429259CBC.mft (raw, json) Hash identifier: 8QdZXHyNi5eWLCmSAA34Id8d9EARgYNvUwSmfOkq8VY= Subject key identifier: 47:65:98:1B:FA:AB:C6:E9:A9:B7:85:64:0E:CC:A5:79:F3:01:2B:78 Authority key identifier: A6:5F:65:BF:2D:B9:31:77:54:BA:91:0F:05:2F:C0:94:29:25:9C:BC Certificate issuer: /CN=A65F65BF2DB9317754BA910F052FC09429259CBC Certificate serial: 205C2F486CBCE82D574CEDEB5EBAD69A0102DA32 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A65F65BF2DB9317754BA910F052FC09429259CBC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/A65F65BF2DB9317754BA910F052FC09429259CBC.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 09:33:43 +0000 Manifest this update: Tue 28 Jul 2026 09:28:43 +0000 Manifest next update: Wed 29 Jul 2026 10:02:43 +0000 Files and hashes: 1: 3135372e32302e3230382e302f32342d3234203d3e20313532343136.roa (hash: vffHdk9OOgHjUn3gX3E1MpxE/+kaQ1DhpiQKkuuDY58=) 2: 3135372e32302e3230382e302f32332d3233203d3e20313532343136.roa (hash: 6sJwEQuVC2SCQbpKDbpQ7062AUPzj2WmwzEMVpDHp88=) 3: A65F65BF2DB9317754BA910F052FC09429259CBC.crl (hash: fbHh8mu0/l5IcTZ2jQC50WIzB1oT4qvh3W4dvgw36MI=) 4: 3135372e32302e3230392e302f32342d3234203d3e20313532343136.roa (hash: rwfp5y5H5qPfQhaF6rDqIcStalVTGJI0mJpk4RX2nTI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/A65F65BF2DB9317754BA910F052FC09429259CBC.crl rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/A65F65BF2DB9317754BA910F052FC09429259CBC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A65F65BF2DB9317754BA910F052FC09429259CBC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 09:55:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:5c:2f:48:6c:bc:e8:2d:57:4c:ed:eb:5e:ba:d6:9a:01:02:da:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A65F65BF2DB9317754BA910F052FC09429259CBC Validity Not Before: Jul 28 09:28:43 2026 GMT Not After : Jul 29 10:02:43 2026 GMT Subject: CN=4765981BFAABC6E9A9B785640ECCA579F3012B78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6b:0b:35:cd:e2:a9:a6:a0:2a:13:19:cd:b7: 2b:21:e8:bf:c3:67:d9:ee:04:6f:28:95:2b:bc:36: 59:a2:8f:f2:f8:5c:19:b2:95:a3:96:48:df:18:b1: 57:a9:1d:19:2c:04:70:73:92:df:de:49:90:4e:29: 6d:c1:b8:5b:bf:2e:c4:1f:c9:01:ae:03:01:27:1e: 9e:1d:14:b8:d0:66:b5:f7:ae:ab:4e:f8:74:b8:ec: fd:5d:51:5c:cf:2e:2e:2f:a5:e9:48:11:65:d4:2a: ce:91:d0:83:83:17:41:5a:bb:87:e7:ed:73:16:2d: 23:0e:ad:0a:f5:d1:33:2f:57:e2:26:2e:12:32:ba: 6f:99:2c:00:f4:95:d5:e7:dc:d1:e8:42:14:5f:7b: 96:89:7c:c0:32:e7:5c:fb:14:cb:c0:67:8e:e4:c6: 51:f5:f3:a8:48:df:6c:48:4c:53:fc:79:d9:51:9a: 96:61:55:0e:3e:ef:85:ec:82:67:c4:eb:0b:b1:39: 1c:a6:f3:9c:d4:ab:d9:89:0e:c9:91:f6:a6:4e:af: 76:9f:23:0b:4a:cf:b4:96:68:27:15:6d:8b:f4:1f: dc:51:3c:a9:81:7b:66:5e:97:b7:99:63:e5:14:31: 4f:52:10:65:91:56:d3:53:4b:7f:6c:16:ff:fb:be: 49:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:65:98:1B:FA:AB:C6:E9:A9:B7:85:64:0E:CC:A5:79:F3:01:2B:78 X509v3 Authority Key Identifier: keyid:A6:5F:65:BF:2D:B9:31:77:54:BA:91:0F:05:2F:C0:94:29:25:9C:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/A65F65BF2DB9317754BA910F052FC09429259CBC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A65F65BF2DB9317754BA910F052FC09429259CBC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/A65F65BF2DB9317754BA910F052FC09429259CBC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:53:72:51:43:ab:7e:d4:50:fa:a7:c7:42:69:ef:6d:eb:c1: 04:e8:e6:78:92:5e:3e:e3:b4:44:d6:94:9a:f2:d4:62:fd:80: d6:6a:0b:95:2d:85:3b:f2:d6:d2:53:9b:43:da:20:fc:31:e4: 25:37:fa:22:aa:a6:7c:2e:7d:af:44:a0:33:04:db:e4:00:44: fc:c7:6f:db:86:6a:71:75:b7:f3:a0:20:9e:75:8f:bd:b4:ad: 34:0b:d4:f7:a4:95:53:29:b2:fb:af:f2:f4:c5:46:d8:63:96: 3a:a2:31:d0:60:c4:db:23:4d:be:61:9b:9e:ee:d4:9a:7d:b2: a0:5e:26:1e:c8:19:95:b1:87:65:20:52:d2:1a:03:b4:7d:b5: 3a:e2:6b:50:4e:17:e1:07:6f:19:29:da:b2:71:fe:75:89:75: fe:47:1d:8d:57:95:f2:93:ee:0d:74:89:c0:45:06:6b:81:5b: 5d:d2:a7:da:fc:54:05:e6:a2:a6:87:49:b1:15:63:0f:53:1e: e9:dc:d9:08:74:98:a0:44:61:5d:3c:9a:38:4e:56:fe:ae:69: 10:b6:2c:23:76:8d:47:0a:47:19:31:e1:89:c6:3b:e1:a7:95: d4:b6:55:2c:77:d9:c7:28:60:4e:02:8e:20:2a:d7:5b:d1:92: be:48:3f:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIFwvSGy86C1XTO3rXrrWmgEC2jIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY1RjY1QkYyREI5MzE3NzU0QkE5MTBGMDUyRkMwOTQy OTI1OUNCQzAeFw0yNjA3MjgwOTI4NDNaFw0yNjA3MjkxMDAyNDNaMDMxMTAvBgNV BAMTKDQ3NjU5ODFCRkFBQkM2RTlBOUI3ODU2NDBFQ0NBNTc5RjMwMTJCNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjaws1zeKppqAqExnNtysh6L/D Z9nuBG8olSu8Nlmij/L4XBmylaOWSN8YsVepHRksBHBzkt/eSZBOKW3BuFu/LsQf yQGuAwEnHp4dFLjQZrX3rqtO+HS47P1dUVzPLi4vpelIEWXUKs6R0IODF0Fau4fn 7XMWLSMOrQr10TMvV+ImLhIyum+ZLAD0ldXn3NHoQhRfe5aJfMAy51z7FMvAZ47k xlH186hI32xITFP8edlRmpZhVQ4+74XsgmfE6wuxORym85zUq9mJDsmR9qZOr3af IwtKz7SWaCcVbYv0H9xRPKmBe2Zel7eZY+UUMU9SEGWRVtNTS39sFv/7vkn3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR2WYG/qrxumpt4VkDsylefMBK3gwHwYDVR0j BBgwFoAUpl9lvy25MXdUupEPBS/AlCklnLwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGM0MDk0ZDItZTE4ZC00ODQwLTg0ZmEtYzU3NTdhZjU4MGYxLzAvQTY1RjY1QkYy REI5MzE3NzU0QkE5MTBGMDUyRkMwOTQyOTI1OUNCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BNjVGNjVCRjJEQjkzMTc3NTRCQTkxMEYwNTJGQzA5NDI5MjU5 Q0JDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGM0MDk0ZDItZTE4ZC00ODQwLTg0 ZmEtYzU3NTdhZjU4MGYxLzAvQTY1RjY1QkYyREI5MzE3NzU0QkE5MTBGMDUyRkMw OTQyOTI1OUNCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKRTclFDq37UUPqnx0Jp723rwQTo5niSXj7j tETWlJry1GL9gNZqC5UthTvy1tJTm0PaIPwx5CU3+iKqpnwufa9EoDME2+QARPzH b9uGanF1t/OgIJ51j720rTQL1PeklVMpsvuv8vTFRthjljqiMdBgxNsjTb5hm57u 1Jp9sqBeJh7IGZWxh2UgUtIaA7R9tTria1BOF+EHbxkp2rJx/nWJdf5HHY1XlfKT 7g10icBFBmuBW13Sp9r8VAXmoqaHSbEVYw9THunc2Qh0mKBEYV08mjhOVv6uaRC2 LCN2jUcKRxkx4YnGO+GnldS2VSx32ccoYE4CjiAq11vRkr5IP8o= -----END CERTIFICATE-----Generated at Tue Jul 28 20:29:30 2026 by rpki-client