$ rpki-client -vvf rpki-rsync.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/71BEA54A40125136212043443871943E11E47CE8.mft File: 71BEA54A40125136212043443871943E11E47CE8.mft (raw, json) Hash identifier: Z1brDlm1xuCGam3QvQZDOy/BwW/ztfbG7OKJ5UFlviw= Subject key identifier: 8B:6E:DA:D1:59:B1:97:42:EA:A5:1D:83:2E:F6:BB:90:0C:00:B7:18 Authority key identifier: 71:BE:A5:4A:40:12:51:36:21:20:43:44:38:71:94:3E:11:E4:7C:E8 Certificate issuer: /CN=71BEA54A40125136212043443871943E11E47CE8 Certificate serial: 78107F35DD5352124C24FD9A159118FC68046085 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71BEA54A40125136212043443871943E11E47CE8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/71BEA54A40125136212043443871943E11E47CE8.mft Manifest number: 38 Signing time: Sat 13 Jun 2026 18:01:17 +0000 Manifest this update: Sat 13 Jun 2026 17:56:17 +0000 Manifest next update: Sun 14 Jun 2026 18:48:17 +0000 Files and hashes: 1: 3130332e3233342e31382e302f32342d3234203d3e20313531353036.roa (hash: VJzo4/caWYAHukBH2w0BGX1Ka+vdrCFh1viFJ7tFkV8=) 2: 3130332e3233342e31392e302f32342d3234203d3e20313531353036.roa (hash: SJitFwYKCLnaXZQ4OdV1EreS23s72a/7Op1qTgfnrGo=) 3: 71BEA54A40125136212043443871943E11E47CE8.crl (hash: cyGaCrJxNCKZK5xBXtpR1c6Qeh+4g8tfxyAcwBqJmoQ=) 4: 3130332e3233342e31382e302f32332d3233203d3e20313531353036.roa (hash: PHU5h1LHUlDbfO+kxPjDf9ATbrrXtorAw7bNDenM+FM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/71BEA54A40125136212043443871943E11E47CE8.crl rsync://rpki-rsync.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/71BEA54A40125136212043443871943E11E47CE8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71BEA54A40125136212043443871943E11E47CE8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:10:7f:35:dd:53:52:12:4c:24:fd:9a:15:91:18:fc:68:04:60:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71BEA54A40125136212043443871943E11E47CE8 Validity Not Before: Jun 13 17:56:17 2026 GMT Not After : Jun 14 18:48:17 2026 GMT Subject: CN=8B6EDAD159B19742EAA51D832EF6BB900C00B718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:fc:56:e9:42:c4:28:ed:9f:91:0d:f9:94:e2: 3b:36:d3:de:cf:46:98:79:8e:0e:3e:18:3b:86:64: 8f:9a:3b:4e:75:86:f7:98:4b:6e:18:9b:c7:d4:77: 98:65:e2:c7:21:48:de:f5:fa:18:40:b8:52:49:c9: 0e:45:36:f7:86:2d:cf:84:f7:eb:3a:61:aa:89:b2: e8:83:20:67:c0:ee:1a:fa:7b:bb:9f:1d:65:35:ba: 7a:3f:83:c9:a2:b6:97:26:82:9e:c3:d2:e3:b9:b8: 31:4a:c1:42:f5:39:35:5c:52:26:ed:eb:d4:85:47: d7:40:72:6c:dc:0a:e2:ce:80:4d:c7:1d:ca:cd:20: 4c:d0:5a:7b:c9:9d:9c:17:40:82:d2:f6:d8:58:e5: df:04:44:2a:84:f0:b2:bc:84:7d:09:7f:29:98:75: fc:7a:fc:42:fa:05:35:d2:96:86:59:ee:6f:c8:79: 02:24:46:25:b2:9e:12:b3:e3:bf:a7:94:59:2b:e6: 4d:44:38:e9:d5:99:d7:00:0f:97:26:e2:ec:4d:dc: 56:32:e3:4a:ba:20:40:c9:04:15:f0:d8:19:ac:c8: 26:ed:4b:38:6a:18:7d:ec:ef:cd:f7:08:a0:e4:88: 2d:c3:67:ea:34:3c:3a:35:81:15:0f:53:24:2e:e7: 5d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:6E:DA:D1:59:B1:97:42:EA:A5:1D:83:2E:F6:BB:90:0C:00:B7:18 X509v3 Authority Key Identifier: keyid:71:BE:A5:4A:40:12:51:36:21:20:43:44:38:71:94:3E:11:E4:7C:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/71BEA54A40125136212043443871943E11E47CE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71BEA54A40125136212043443871943E11E47CE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/71BEA54A40125136212043443871943E11E47CE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:15:b7:1e:15:a0:70:21:3d:e6:27:ba:1b:18:50:ff:3f:62: 8a:bb:c8:c5:ae:a8:3c:9e:68:27:8d:a9:42:01:8a:d0:84:a4: 40:c8:4d:74:4b:93:fb:21:ee:b7:56:5b:bc:bb:69:e1:1c:e0: cd:d6:5d:fd:c6:ee:86:39:e2:e6:2f:96:e8:f1:ca:fb:e0:17: fc:87:f9:65:1d:89:ae:26:00:a5:0c:c7:68:33:5f:47:78:88: 79:ab:ee:9f:9f:dd:b1:3d:e2:2e:16:9a:f9:20:67:9e:04:56: d4:1b:c7:dd:16:2a:6b:50:fa:60:46:b6:f3:87:90:ba:52:e8: b7:d5:75:17:37:24:38:c1:7c:6e:02:51:47:97:72:16:c9:86: 34:51:a6:e5:8b:d5:1e:a9:33:f1:50:f9:2c:d1:af:00:85:29: 67:64:66:61:51:21:37:58:bf:48:c3:02:88:92:18:4a:43:7c: 42:b3:06:53:bd:79:71:41:63:25:98:1d:ea:6f:43:db:19:48: b7:87:21:7d:22:78:ad:6f:d6:02:04:3a:5e:94:a6:c3:a3:96: b9:c4:df:99:23:0f:f2:f1:00:90:6b:81:cb:13:e9:6e:5f:9b: f1:4a:15:f9:fe:7d:ef:a1:91:5c:ff:c2:17:b4:68:29:39:4d: f4:2f:2b:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeBB/Nd1TUhJMJP2aFZEY/GgEYIUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFCRUE1NEE0MDEyNTEzNjIxMjA0MzQ0Mzg3MTk0M0Ux MUU0N0NFODAeFw0yNjA2MTMxNzU2MTdaFw0yNjA2MTQxODQ4MTdaMDMxMTAvBgNV BAMTKDhCNkVEQUQxNTlCMTk3NDJFQUE1MUQ4MzJFRjZCQjkwMEMwMEI3MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCN/FbpQsQo7Z+RDfmU4js2097P Rph5jg4+GDuGZI+aO051hveYS24Ym8fUd5hl4schSN71+hhAuFJJyQ5FNveGLc+E 9+s6YaqJsuiDIGfA7hr6e7ufHWU1uno/g8mitpcmgp7D0uO5uDFKwUL1OTVcUibt 69SFR9dAcmzcCuLOgE3HHcrNIEzQWnvJnZwXQILS9thY5d8ERCqE8LK8hH0JfymY dfx6/EL6BTXSloZZ7m/IeQIkRiWynhKz47+nlFkr5k1EOOnVmdcAD5cm4uxN3FYy 40q6IEDJBBXw2BmsyCbtSzhqGH3s7833CKDkiC3DZ+o0PDo1gRUPUyQu512tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi27a0Vmxl0LqpR2DLva7kAwAtxgwHwYDVR0j BBgwFoAUcb6lSkASUTYhIENEOHGUPhHkfOgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzg4MzI5Y2EtZThmNy00ZDNkLWFjZTQtODA3ZjhhYTU4YWUwLzAvNzFCRUE1NEE0 MDEyNTEzNjIxMjA0MzQ0Mzg3MTk0M0UxMUU0N0NFOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MUJFQTU0QTQwMTI1MTM2MjEyMDQzNDQzODcxOTQzRTExRTQ3 Q0U4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzg4MzI5Y2EtZThmNy00ZDNkLWFj ZTQtODA3ZjhhYTU4YWUwLzAvNzFCRUE1NEE0MDEyNTEzNjIxMjA0MzQ0Mzg3MTk0 M0UxMUU0N0NFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFEVtx4VoHAhPeYnuhsYUP8/Yoq7yMWuqDye aCeNqUIBitCEpEDITXRLk/sh7rdWW7y7aeEc4M3WXf3G7oY54uYvlujxyvvgF/yH +WUdia4mAKUMx2gzX0d4iHmr7p+f3bE94i4WmvkgZ54EVtQbx90WKmtQ+mBGtvOH kLpS6LfVdRc3JDjBfG4CUUeXchbJhjRRpuWL1R6pM/FQ+SzRrwCFKWdkZmFRITdY v0jDAoiSGEpDfEKzBlO9eXFBYyWYHepvQ9sZSLeHIX0ieK1v1gIEOl6UpsOjlrnE 35kjD/LxAJBrgcsT6W5fm/FKFfn+fe+hkVz/whe0aCk5TfQvK6g= -----END CERTIFICATE-----Generated at Sat Jun 13 22:27:16 2026 by rpki-client