$ rpki-client -vvvf rpki-rsync.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.mft File: 71645BDB97FEBD6E0D4F53A08CBF24077C24E403.mft (raw, json) Hash identifier: HhfiSdgTPS1dmMk/1tv9PAdioEZwNUL4NbQwlvsoLXE= Subject key identifier: 37:26:44:0A:5C:92:27:1F:F2:AB:4D:73:49:52:D6:4D:DD:A9:4B:2E Authority key identifier: 71:64:5B:DB:97:FE:BD:6E:0D:4F:53:A0:8C:BF:24:07:7C:24:E4:03 Certificate issuer: /CN=71645BDB97FEBD6E0D4F53A08CBF24077C24E403 Certificate serial: 01AE70A6703D92E25F60CEF9DE0DF3D14848A7C9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.mft Manifest number: BE Signing time: Mon 21 Sep 2026 15:20:32 +0000 Manifest this update: Mon 21 Sep 2026 15:15:32 +0000 Manifest next update: Tue 22 Sep 2026 15:26:32 +0000 Files and hashes: 1: 3130332e3131372e38322e302f32332d3234203d3e20313335343438.roa (hash: jSBSE01bFNIgx3G9PIWj722UJJ7hQspo49sh3BoclUs=) 2: 34352e3132322e35322e302f32322d3234203d3e20313335343438.roa (hash: 8N1IzAB8pkX4/FYSEzrTQt1a1/sgsTYFhzCROR3Q7kU=) 3: 3133392e352e34302e302f32322d3234203d3e20313335343438.roa (hash: FLE2sS5KzMoMGu8AryL/UH7mCUV7o+5G4oSkkHyigRI=) 4: 71645BDB97FEBD6E0D4F53A08CBF24077C24E403.crl (hash: QRT3R0W7cTnUDbNXIqMkA73DG2rBWJY7MgKpvLloz+I=) 5: 3130332e36342e31342e302f32342d3234203d3e20313335343438.roa (hash: cnZhDjgBV18bkSYzt4GtOPM77vSmVw7AFFCEwfJop2Y=) 6: 34352e3132352e37322e302f32322d3234203d3e20313335343438.roa (hash: 715qMLL3zWMsWmsxBXBWi9NPtVddaj245ppj1A5IigM=) 7: 3132352e36322e39322e302f32322d3234203d3e20313338383032.roa (hash: fIe5ivOarf67OW2F9hXTn+7dCpQiLZXrcOnnAzgWfZQ=) 8: 3130332e39372e3235312e302f32342d3234203d3e20313335343438.roa (hash: 1ClnarbK+m27NSskMGx6t2ycJpMm9Bjfs5h4sHIhDls=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.crl rsync://rpki-rsync.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 15:26:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:ae:70:a6:70:3d:92:e2:5f:60:ce:f9:de:0d:f3:d1:48:48:a7:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71645BDB97FEBD6E0D4F53A08CBF24077C24E403 Validity Not Before: Sep 21 15:15:32 2026 GMT Not After : Sep 22 15:26:32 2026 GMT Subject: CN=3726440A5C92271FF2AB4D734952D64DDDA94B2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9e:e1:ae:c7:2d:6e:79:d1:21:31:ac:cd:f9: 34:be:3e:d7:77:da:b2:34:73:d0:64:db:05:91:b8: be:0e:4d:80:9a:fd:76:e7:b0:c3:cb:40:60:8e:1c: 78:a2:bc:a0:c3:4e:cd:b8:b2:a8:c8:24:b9:54:5e: 8c:ce:b0:37:54:e7:bf:09:c4:4d:7b:1d:8a:cb:94: 15:53:68:87:a3:40:8e:6b:d5:17:06:0d:1e:12:a3: cd:4a:6e:7a:58:61:b6:13:31:0a:72:d1:93:80:2b: a0:be:a7:f7:e4:84:ba:20:fb:f9:b7:f9:be:03:ab: 38:ee:79:b9:73:9c:48:e3:b0:f3:de:b5:21:8a:4a: f9:9a:72:c1:7f:89:f8:10:a4:b5:f1:fa:b8:99:65: ce:5e:d4:83:10:09:c5:50:8e:c2:89:9e:74:40:85: 63:eb:b9:1d:e9:b3:a7:4c:0e:09:5c:c2:6c:60:e6: c4:de:4e:a9:2d:b4:04:e9:38:eb:d5:19:22:11:97: 5a:70:43:ac:7b:0b:87:b1:3d:6c:3a:a9:e8:ee:e2: 9f:7e:5e:5c:22:0d:27:99:bf:5a:b9:6c:18:c1:e3: 35:d9:a8:c9:8f:01:44:96:26:d6:61:5a:c8:85:e6: 7b:39:f7:99:5d:7f:3f:fc:2f:32:1d:46:07:40:fd: a4:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:26:44:0A:5C:92:27:1F:F2:AB:4D:73:49:52:D6:4D:DD:A9:4B:2E X509v3 Authority Key Identifier: keyid:71:64:5B:DB:97:FE:BD:6E:0D:4F:53:A0:8C:BF:24:07:7C:24:E4:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:23:d7:2a:71:17:2e:74:bd:80:00:ea:d8:00:f3:2e:08:9c: 38:a6:05:f8:35:62:8d:e9:d4:ce:fe:35:cb:0e:ad:88:42:1d: e7:e4:28:df:e1:c8:07:a0:31:29:50:23:ec:ac:7e:74:51:24: 49:95:e2:2f:2d:0a:77:92:8d:17:1c:36:18:74:ef:b0:49:ec: 49:af:af:75:3f:2c:35:ff:45:75:d6:0c:0e:32:17:95:87:da: 89:9c:40:f1:c6:dc:06:4c:db:cb:be:56:aa:9c:65:5a:7e:7d: 78:e4:a5:99:5b:28:68:e3:52:25:9e:f3:dc:7f:3a:98:28:1a: e6:46:58:58:52:80:1a:35:f4:9f:9c:62:8b:61:9f:3b:c5:a5: 19:cd:3b:31:79:6b:02:29:97:c5:3e:37:84:bd:2f:a4:e5:49: a9:a5:fb:08:da:f7:d3:08:4e:91:8c:f7:03:08:73:07:01:6a: 0e:b3:34:9a:3d:13:2e:16:29:bb:f5:22:23:08:de:96:98:fc: fb:b0:42:91:ea:52:c7:4c:97:44:89:04:09:14:c8:d6:66:a3: 0f:ab:a0:1d:44:e8:f4:45:d2:a6:16:2a:90:9d:80:f0:84:5a: 14:4c:66:d0:6b:39:51:db:cb:31:92:52:ce:23:23:65:33:ee: 82:32:eb:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAa5wpnA9kuJfYM753g3z0UhIp8kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE2NDVCREI5N0ZFQkQ2RTBENEY1M0EwOENCRjI0MDc3 QzI0RTQwMzAeFw0yNjA5MjExNTE1MzJaFw0yNjA5MjIxNTI2MzJaMDMxMTAvBgNV BAMTKDM3MjY0NDBBNUM5MjI3MUZGMkFCNEQ3MzQ5NTJENjRERERBOTRCMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4nuGuxy1uedEhMazN+TS+Ptd3 2rI0c9Bk2wWRuL4OTYCa/XbnsMPLQGCOHHiivKDDTs24sqjIJLlUXozOsDdU578J xE17HYrLlBVTaIejQI5r1RcGDR4So81KbnpYYbYTMQpy0ZOAK6C+p/fkhLog+/m3 +b4DqzjueblznEjjsPPetSGKSvmacsF/ifgQpLXx+riZZc5e1IMQCcVQjsKJnnRA hWPruR3ps6dMDglcwmxg5sTeTqkttATpOOvVGSIRl1pwQ6x7C4exPWw6qeju4p9+ XlwiDSeZv1q5bBjB4zXZqMmPAUSWJtZhWsiF5ns595ldfz/8LzIdRgdA/aTvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNyZEClySJx/yq01zSVLWTd2pSy4wHwYDVR0j BBgwFoAUcWRb25f+vW4NT1OgjL8kB3wk5AMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDU5YWNiOTctNmU4Ny00ZTMxLWE1NjktYTI2NjBkZjRmMmI4LzAvNzE2NDVCREI5 N0ZFQkQ2RTBENEY1M0EwOENCRjI0MDc3QzI0RTQwMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MTY0NUJEQjk3RkVCRDZFMEQ0RjUzQTA4Q0JGMjQwNzdDMjRF NDAzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDU5YWNiOTctNmU4Ny00ZTMxLWE1 NjktYTI2NjBkZjRmMmI4LzAvNzE2NDVCREI5N0ZFQkQ2RTBENEY1M0EwOENCRjI0 MDc3QzI0RTQwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHkj1ypxFy50vYAA6tgA8y4InDimBfg1Yo3p 1M7+NcsOrYhCHefkKN/hyAegMSlQI+ysfnRRJEmV4i8tCneSjRccNhh077BJ7Emv r3U/LDX/RXXWDA4yF5WH2omcQPHG3AZM28u+VqqcZVp+fXjkpZlbKGjjUiWe89x/ OpgoGuZGWFhSgBo19J+cYothnzvFpRnNOzF5awIpl8U+N4S9L6TlSaml+wja99MI TpGM9wMIcwcBag6zNJo9Ey4WKbv1IiMI3paY/PuwQpHqUsdMl0SJBAkUyNZmow+r oB1E6PRF0qYWKpCdgPCEWhRMZtBrOVHbyzGSUs4jI2Uz7oIy62Y= -----END CERTIFICATE-----Generated at Tue Sep 22 03:57:19 2026 by rpki-client