$ rpki-client -vvf rpki-rsync.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.mft File: 71645BDB97FEBD6E0D4F53A08CBF24077C24E403.mft (raw, json) Hash identifier: 0ZCYQ7XdDr+DCPGx8x+Oivb6TIif9ntrVVePLAJKL8M= Subject key identifier: 68:9C:03:10:BD:11:15:CE:73:65:B8:5C:7A:18:D0:66:03:5F:EA:64 Authority key identifier: 71:64:5B:DB:97:FE:BD:6E:0D:4F:53:A0:8C:BF:24:07:7C:24:E4:03 Certificate issuer: /CN=71645BDB97FEBD6E0D4F53A08CBF24077C24E403 Certificate serial: 0B28F75021E7D03631FF39750582E67382C4F52A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 05:29:30 +0000 Manifest this update: Wed 17 Jun 2026 05:24:30 +0000 Manifest next update: Thu 18 Jun 2026 07:54:30 +0000 Files and hashes: 1: 3130332e3131372e38322e302f32332d3234203d3e20313335343438.roa (hash: jSBSE01bFNIgx3G9PIWj722UJJ7hQspo49sh3BoclUs=) 2: 3132352e36322e39322e302f32322d3234203d3e20313338383032.roa (hash: fIe5ivOarf67OW2F9hXTn+7dCpQiLZXrcOnnAzgWfZQ=) 3: 34352e3132322e35322e302f32322d3234203d3e20313335343438.roa (hash: 8N1IzAB8pkX4/FYSEzrTQt1a1/sgsTYFhzCROR3Q7kU=) 4: 3130332e36342e31342e302f32342d3234203d3e20313335343438.roa (hash: cnZhDjgBV18bkSYzt4GtOPM77vSmVw7AFFCEwfJop2Y=) 5: 71645BDB97FEBD6E0D4F53A08CBF24077C24E403.crl (hash: KonsFLqVaRWSAJa1kx/7o1aszYVKrG/2ttU5g40pPZk=) 6: 34352e3132352e37322e302f32322d3234203d3e20313335343438.roa (hash: 715qMLL3zWMsWmsxBXBWi9NPtVddaj245ppj1A5IigM=) 7: 3130332e39372e3235312e302f32342d3234203d3e20313335343438.roa (hash: 1ClnarbK+m27NSskMGx6t2ycJpMm9Bjfs5h4sHIhDls=) 8: 3133392e352e34302e302f32322d3234203d3e20313335343438.roa (hash: FLE2sS5KzMoMGu8AryL/UH7mCUV7o+5G4oSkkHyigRI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.crl rsync://rpki-rsync.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:28:f7:50:21:e7:d0:36:31:ff:39:75:05:82:e6:73:82:c4:f5:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71645BDB97FEBD6E0D4F53A08CBF24077C24E403 Validity Not Before: Jun 17 05:24:30 2026 GMT Not After : Jun 18 07:54:30 2026 GMT Subject: CN=689C0310BD1115CE7365B85C7A18D066035FEA64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:92:04:aa:5d:6a:09:5a:13:5d:33:7e:19:46: 71:82:26:3d:03:7c:d2:87:a4:6d:58:81:fb:43:75: c7:8a:92:dd:1a:5a:b1:4c:1f:f3:96:a6:3a:7a:e0: 73:ca:e4:84:c3:d6:6c:10:fd:0c:2f:8d:78:a9:d3: be:1b:11:90:15:d1:2b:4b:d4:2e:4a:3f:0f:0d:23: 72:d9:34:4e:63:b1:cc:79:bd:42:df:2e:11:e8:10: 59:1a:f8:04:d3:fc:c2:2c:4d:32:de:d4:55:d8:2c: a2:10:f0:8a:b3:36:42:8a:8d:d2:b2:d3:d0:d9:3a: e0:d8:6e:9e:a9:8e:3c:e9:81:41:b3:0c:82:9c:a0: 63:57:ef:b0:2c:ad:1f:e5:f5:25:68:6c:ce:83:c4: 6f:d8:89:23:1b:84:e2:68:f4:2d:19:f7:3b:e7:19: 2e:f5:8a:73:c6:05:ff:20:ed:d2:4d:99:47:79:ff: 5e:be:f6:9b:d7:35:2d:e0:2d:7d:01:aa:b5:20:97: 35:22:0c:d7:5f:5f:8d:7f:c5:b7:1f:bc:22:bc:ac: 3b:e0:1b:96:b6:b3:a8:79:99:f2:58:12:1e:75:4c: f3:77:0b:80:9d:65:a6:ab:d3:42:fb:4f:44:42:bb: 81:7c:5a:f1:91:9d:19:1e:8b:4e:31:c3:d0:03:6b: 81:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:9C:03:10:BD:11:15:CE:73:65:B8:5C:7A:18:D0:66:03:5F:EA:64 X509v3 Authority Key Identifier: keyid:71:64:5B:DB:97:FE:BD:6E:0D:4F:53:A0:8C:BF:24:07:7C:24:E4:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:9c:05:dc:e1:be:0c:86:84:d4:c1:a6:12:75:6e:d6:52:3b: c7:26:1c:b6:b2:db:64:ca:53:e3:a8:00:58:59:13:f6:5e:93: a2:be:9c:51:7e:50:f0:84:bf:07:97:45:f6:3c:98:27:0e:cf: da:ce:60:26:bb:65:09:61:57:70:42:0c:9e:83:c5:08:4d:db: 67:09:d4:50:56:fa:ac:dd:89:e5:0b:d5:36:e9:3c:f2:6b:b8: 79:3e:b2:cb:e8:66:9f:34:65:24:ce:44:7f:cf:b7:8c:b8:1f: e6:bd:0c:3f:61:f1:fd:8d:7b:38:10:a7:75:b4:51:9e:3c:70: 68:52:79:f7:99:65:e2:54:23:8a:94:8a:37:2b:91:3d:8c:52: 68:35:3f:06:f2:02:4a:c9:d2:36:b0:2a:43:ef:88:91:a0:a1: e4:1f:2f:0d:8e:8f:72:ee:4b:5a:27:bd:17:00:21:41:f2:70: c2:73:4c:6b:1b:b7:84:ad:9e:37:7d:01:e3:2d:44:be:4e:6f: a9:ad:0b:ca:3e:b1:5b:df:68:07:37:a8:af:b7:6e:e0:77:92: 26:c4:a5:18:91:1b:6b:87:3f:c6:aa:de:0c:0f:ff:94:c3:65: f8:85:ef:f4:9b:58:36:3d:29:f6:24:78:aa:73:b5:2d:ad:e9: ff:5a:c6:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCyj3UCHn0DYx/zl1BYLmc4LE9SowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE2NDVCREI5N0ZFQkQ2RTBENEY1M0EwOENCRjI0MDc3 QzI0RTQwMzAeFw0yNjA2MTcwNTI0MzBaFw0yNjA2MTgwNzU0MzBaMDMxMTAvBgNV BAMTKDY4OUMwMzEwQkQxMTE1Q0U3MzY1Qjg1QzdBMThEMDY2MDM1RkVBNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6kgSqXWoJWhNdM34ZRnGCJj0D fNKHpG1YgftDdceKkt0aWrFMH/OWpjp64HPK5ITD1mwQ/QwvjXip074bEZAV0StL 1C5KPw8NI3LZNE5jscx5vULfLhHoEFka+ATT/MIsTTLe1FXYLKIQ8IqzNkKKjdKy 09DZOuDYbp6pjjzpgUGzDIKcoGNX77AsrR/l9SVobM6DxG/YiSMbhOJo9C0Z9zvn GS71inPGBf8g7dJNmUd5/16+9pvXNS3gLX0BqrUglzUiDNdfX41/xbcfvCK8rDvg G5a2s6h5mfJYEh51TPN3C4CdZaar00L7T0RCu4F8WvGRnRkei04xw9ADa4HtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaJwDEL0RFc5zZbhcehjQZgNf6mQwHwYDVR0j BBgwFoAUcWRb25f+vW4NT1OgjL8kB3wk5AMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDU5YWNiOTctNmU4Ny00ZTMxLWE1NjktYTI2NjBkZjRmMmI4LzAvNzE2NDVCREI5 N0ZFQkQ2RTBENEY1M0EwOENCRjI0MDc3QzI0RTQwMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MTY0NUJEQjk3RkVCRDZFMEQ0RjUzQTA4Q0JGMjQwNzdDMjRF NDAzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDU5YWNiOTctNmU4Ny00ZTMxLWE1 NjktYTI2NjBkZjRmMmI4LzAvNzE2NDVCREI5N0ZFQkQ2RTBENEY1M0EwOENCRjI0 MDc3QzI0RTQwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIqcBdzhvgyGhNTBphJ1btZSO8cmHLay22TK U+OoAFhZE/Zek6K+nFF+UPCEvweXRfY8mCcOz9rOYCa7ZQlhV3BCDJ6DxQhN22cJ 1FBW+qzdieUL1TbpPPJruHk+ssvoZp80ZSTORH/Pt4y4H+a9DD9h8f2NezgQp3W0 UZ48cGhSefeZZeJUI4qUijcrkT2MUmg1PwbyAkrJ0jawKkPviJGgoeQfLw2Oj3Lu S1onvRcAIUHycMJzTGsbt4Stnjd9AeMtRL5Ob6mtC8o+sVvfaAc3qK+3buB3kibE pRiRG2uHP8aq3gwP/5TDZfiF7/SbWDY9KfYkeKpztS2t6f9axmo= -----END CERTIFICATE-----Generated at Wed Jun 17 11:30:15 2026 by rpki-client