$ rpki-client -vvf rpki-rsync.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.mft File: 71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.mft (raw, json) Hash identifier: qY/VVgzIbDQVKBPwek6KrFsjMfm8V2Kx/8X4JexpXVA= Subject key identifier: B4:E2:C5:F4:07:89:CF:8C:2D:AA:1F:B2:95:61:8B:61:8F:08:47:3B Authority key identifier: 71:EA:AE:94:B4:B9:7C:5E:D5:3A:52:F7:20:BB:E5:EA:78:EF:DE:5B Certificate issuer: /CN=71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B Certificate serial: 2B9276ED3002E651435C4083033409125C84B23D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.mft Manifest number: 3B Signing time: Mon 15 Jun 2026 05:38:08 +0000 Manifest this update: Mon 15 Jun 2026 05:33:08 +0000 Manifest next update: Tue 16 Jun 2026 09:11:08 +0000 Files and hashes: 1: 71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.crl (hash: dLKvs0yDMSGSX1fggu78i56WKj5E1eT1R6AHSnMUXsw=) 2: 3130332e3134342e3130332e302f32342d3234203d3e20313339343231.roa (hash: NVvHOXca2LITMgeQ8pj0e3M7sUAPWn5Q20ai1Hw8JHw=) 3: 3130332e3134342e3130322e302f32332d3234203d3e20313339343231.roa (hash: aW/uUXbkxJYBViD7wNIMNmfKm91NHMXKaNMrrbbLaYo=) 4: 3130332e3134342e3130322e302f32342d3234203d3e20313339343231.roa (hash: nH3r82YwlmcelOXc3c6hCqTAafYwlMIm171yaloUlQU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.crl rsync://rpki-rsync.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Jun 2026 03:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:92:76:ed:30:02:e6:51:43:5c:40:83:03:34:09:12:5c:84:b2:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B Validity Not Before: Jun 15 05:33:08 2026 GMT Not After : Jun 16 09:11:08 2026 GMT Subject: CN=B4E2C5F40789CF8C2DAA1FB295618B618F08473B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c8:31:c9:f6:fd:d6:01:23:31:67:3e:0a:0e: 82:4c:04:23:5b:f6:a2:92:10:9a:41:30:40:9f:32: 3c:22:ef:7a:b8:f1:24:6e:57:01:6d:74:ca:24:3a: 1d:97:56:d9:a5:21:ee:6b:13:b4:c9:81:2d:88:5b: 20:9d:aa:6f:ec:e4:27:7a:60:d9:27:3a:cd:42:94: a1:c3:7b:bf:1e:50:02:ad:25:19:52:0b:fa:1b:3a: b3:f3:d8:a9:da:32:e7:7d:a7:07:53:14:e3:66:d2: 06:44:58:4a:b0:b3:7b:7f:e9:76:17:55:63:6c:c1: c0:a6:e5:68:c5:80:43:65:96:08:27:27:21:1e:e3: 48:7d:e6:90:3c:b5:e1:83:48:3e:f1:d8:57:75:06: 11:7d:da:6f:bc:e5:4d:f6:1d:7b:88:1e:8b:56:68: ea:76:b7:35:2e:7b:a8:22:7b:1d:33:f1:a2:e9:cf: 53:d9:84:37:45:7e:98:b0:ee:b0:65:1c:11:5b:4a: ad:65:ab:86:69:de:44:b1:ba:ee:ac:6f:75:48:e5: ea:fc:86:86:b0:a8:a0:14:0c:c1:ac:39:a5:15:a6: 13:d0:27:94:50:32:21:8a:3a:81:68:de:99:3a:37: 33:8c:61:23:10:51:45:4a:ff:df:6d:05:40:4d:42: 84:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:E2:C5:F4:07:89:CF:8C:2D:AA:1F:B2:95:61:8B:61:8F:08:47:3B X509v3 Authority Key Identifier: keyid:71:EA:AE:94:B4:B9:7C:5E:D5:3A:52:F7:20:BB:E5:EA:78:EF:DE:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:82:b2:4f:d5:2c:e7:ac:7f:98:ce:c2:6f:29:f7:27:87:cc: 8c:24:01:30:2a:8f:86:62:24:06:2a:d9:ef:65:6f:ec:2a:2c: 7c:54:50:34:22:3a:29:8a:e0:2d:29:e6:2d:84:f7:56:09:31: 35:f1:8e:bb:fc:ef:ad:1b:17:71:4d:c5:9d:87:b4:e6:7d:f1: f2:45:6a:20:1d:57:cc:04:e4:c5:95:da:a5:22:b4:38:58:2c: 5f:86:32:9f:60:34:a0:c0:92:10:07:1c:e3:69:65:b8:e0:13: d1:22:9a:ed:6f:f4:2d:2d:d4:c8:1b:56:2d:fa:3b:76:92:52: 6c:d2:e7:81:21:5c:47:32:6f:d9:66:09:5a:a0:25:b0:2f:b5: 4a:a6:76:72:8d:8a:19:67:7b:37:75:f8:c1:a0:17:30:fa:a2: b6:d2:36:0c:38:05:1a:06:0e:81:35:3b:ce:b5:fa:d7:83:6e: fe:d6:c0:f3:10:6f:cf:5e:c8:cc:05:17:88:d2:af:d5:e1:d7: e7:bc:a7:b1:56:d5:de:04:d2:63:6f:ec:45:34:ef:b5:d2:4b: 4e:8b:3f:b7:bb:cd:8d:30:c9:c3:bf:ab:55:0a:b4:6b:e1:14: d9:e8:5f:12:1d:47:b5:c4:29:39:42:13:15:f9:67:7f:bc:9a: 90:32:30:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK5J27TAC5lFDXECDAzQJElyEsj0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFFQUFFOTRCNEI5N0M1RUQ1M0E1MkY3MjBCQkU1RUE3 OEVGREU1QjAeFw0yNjA2MTUwNTMzMDhaFw0yNjA2MTYwOTExMDhaMDMxMTAvBgNV BAMTKEI0RTJDNUY0MDc4OUNGOEMyREFBMUZCMjk1NjE4QjYxOEYwODQ3M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCyDHJ9v3WASMxZz4KDoJMBCNb 9qKSEJpBMECfMjwi73q48SRuVwFtdMokOh2XVtmlIe5rE7TJgS2IWyCdqm/s5Cd6 YNknOs1ClKHDe78eUAKtJRlSC/obOrPz2KnaMud9pwdTFONm0gZEWEqws3t/6XYX VWNswcCm5WjFgENllggnJyEe40h95pA8teGDSD7x2Fd1BhF92m+85U32HXuIHotW aOp2tzUue6giex0z8aLpz1PZhDdFfpiw7rBlHBFbSq1lq4Zp3kSxuu6sb3VI5er8 hoawqKAUDMGsOaUVphPQJ5RQMiGKOoFo3pk6NzOMYSMQUUVK/99tBUBNQoRbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtOLF9AeJz4wtqh+ylWGLYY8IRzswHwYDVR0j BBgwFoAUcequlLS5fF7VOlL3ILvl6njv3lswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmE1MzQxZTgtMjJkOC00NDljLWE3NTMtZTQ3YmJmYzQ4NTM4LzAvNzFFQUFFOTRC NEI5N0M1RUQ1M0E1MkY3MjBCQkU1RUE3OEVGREU1Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MUVBQUU5NEI0Qjk3QzVFRDUzQTUyRjcyMEJCRTVFQTc4RUZE RTVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmE1MzQxZTgtMjJkOC00NDljLWE3 NTMtZTQ3YmJmYzQ4NTM4LzAvNzFFQUFFOTRCNEI5N0M1RUQ1M0E1MkY3MjBCQkU1 RUE3OEVGREU1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIaCsk/VLOesf5jOwm8p9yeHzIwkATAqj4Zi JAYq2e9lb+wqLHxUUDQiOimK4C0p5i2E91YJMTXxjrv8760bF3FNxZ2HtOZ98fJF aiAdV8wE5MWV2qUitDhYLF+GMp9gNKDAkhAHHONpZbjgE9Eimu1v9C0t1MgbVi36 O3aSUmzS54EhXEcyb9lmCVqgJbAvtUqmdnKNihlnezd1+MGgFzD6orbSNgw4BRoG DoE1O861+teDbv7WwPMQb89eyMwFF4jSr9Xh1+e8p7FW1d4E0mNv7EU077XSS06L P7e7zY0wycO/q1UKtGvhFNnoXxIdR7XEKTlCExX5Z3+8mpAyMEQ= -----END CERTIFICATE-----Generated at Mon Jun 15 17:04:24 2026 by rpki-client