$ rpki-client -vvvf rpki-rsync.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/71468BECC53B96325385ED8BB32F3639F1F5E487.mft File: 71468BECC53B96325385ED8BB32F3639F1F5E487.mft (raw, json) Hash identifier: aT7lKpYrlIkXPAzglYkkwBpafVBIFBOtHq2rmsOnBcA= Subject key identifier: AA:2B:4E:B1:81:E6:71:DB:3C:74:55:F0:38:BA:8C:2A:95:D3:1C:7E Authority key identifier: 71:46:8B:EC:C5:3B:96:32:53:85:ED:8B:B3:2F:36:39:F1:F5:E4:87 Certificate issuer: /CN=71468BECC53B96325385ED8BB32F3639F1F5E487 Certificate serial: 276F2BC8B0B90BD56251F25998CF60BB337B442F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71468BECC53B96325385ED8BB32F3639F1F5E487.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/71468BECC53B96325385ED8BB32F3639F1F5E487.mft Manifest number: BD Signing time: Mon 21 Sep 2026 02:09:09 +0000 Manifest this update: Mon 21 Sep 2026 02:04:09 +0000 Manifest next update: Tue 22 Sep 2026 02:35:09 +0000 Files and hashes: 1: 3130332e36362e33362e302f32342d3234203d3e20313530323233.roa (hash: cbw+qMwfHCXDiTnr7sY/MlfwfCUda213WDrCyTfAh4Y=) 2: 71468BECC53B96325385ED8BB32F3639F1F5E487.crl (hash: JSnYyJrKv7Tb1b0A50bGeX8KI/YhkVi/hwjmbbv6DJQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/71468BECC53B96325385ED8BB32F3639F1F5E487.crl rsync://rpki-rsync.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/71468BECC53B96325385ED8BB32F3639F1F5E487.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71468BECC53B96325385ED8BB32F3639F1F5E487.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 02:35:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:6f:2b:c8:b0:b9:0b:d5:62:51:f2:59:98:cf:60:bb:33:7b:44:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71468BECC53B96325385ED8BB32F3639F1F5E487 Validity Not Before: Sep 21 02:04:09 2026 GMT Not After : Sep 22 02:35:09 2026 GMT Subject: CN=AA2B4EB181E671DB3C7455F038BA8C2A95D31C7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:fc:0b:d3:93:7c:bd:ab:2c:ef:0a:ec:a5:6a: d6:cb:a1:d0:cf:65:e6:2b:ac:9d:35:f7:1e:22:8b: 20:b7:93:93:bc:db:2f:9a:2c:52:07:30:23:b0:08: b1:aa:38:31:a5:94:23:b1:01:f4:19:5b:77:4e:36: dc:77:a1:60:46:a6:64:f3:ca:98:a6:9f:e0:0a:41: af:e7:98:a1:43:9b:20:f4:86:90:5f:5f:78:ce:04: 5f:a7:16:fa:3d:34:a3:c1:fd:12:5a:f6:bc:59:9d: ab:6e:42:8e:9b:ca:4b:71:13:a2:fd:a2:45:a2:a9: 01:61:94:f0:4a:28:57:95:b3:20:c2:8e:4f:50:90: 79:89:3f:46:e8:1f:69:67:c1:90:61:08:60:15:cc: c7:6e:cf:3c:28:b6:93:28:8e:67:a9:04:47:e8:b9: 0f:74:85:06:17:1c:01:38:dd:59:8a:a8:0f:88:92: 1c:dd:3c:00:86:40:d2:7c:46:96:67:cb:88:44:ae: 89:b9:0b:ff:16:12:1c:5f:1a:b7:ac:50:50:15:22: 83:cd:6e:e3:3f:33:fe:7b:ee:b4:25:51:6b:bd:24: 36:e0:30:f8:86:66:2f:8b:64:31:e7:0b:7e:d5:8d: 7e:56:cc:2c:79:3e:bb:03:c3:ed:8e:ef:1c:30:d9: 39:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:2B:4E:B1:81:E6:71:DB:3C:74:55:F0:38:BA:8C:2A:95:D3:1C:7E X509v3 Authority Key Identifier: keyid:71:46:8B:EC:C5:3B:96:32:53:85:ED:8B:B3:2F:36:39:F1:F5:E4:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/71468BECC53B96325385ED8BB32F3639F1F5E487.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71468BECC53B96325385ED8BB32F3639F1F5E487.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/71468BECC53B96325385ED8BB32F3639F1F5E487.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:27:d4:6d:98:7a:6e:79:8f:2d:e6:5c:0d:30:e4:d4:a8:28: f7:24:1a:00:02:22:d8:82:2f:27:70:6a:6f:31:52:ba:54:88: a7:86:71:89:73:cf:43:b0:50:a3:08:c9:58:62:36:7f:26:b4: c9:d8:a9:00:74:da:71:a9:d2:d5:12:8a:db:8d:06:f0:a3:d1: a6:9d:5d:bc:22:3d:24:09:af:02:f8:72:2e:6b:54:d6:40:93: c1:a3:ec:60:da:1e:bc:34:04:95:0b:83:7e:7d:0b:5a:4c:8a: c4:e3:07:8a:df:39:13:4a:13:37:00:6f:51:be:03:7d:ca:51: 8f:2e:ac:ef:c1:f3:3d:e8:1d:1f:5c:ba:b8:d8:cc:c6:97:16: 42:b1:88:37:cc:94:14:93:61:f6:2d:9d:3c:66:21:a7:7a:9d: 31:e0:8d:95:1c:cc:26:5f:60:20:dd:69:84:5a:a3:53:9a:43: 0f:64:17:c5:f3:48:44:03:eb:66:72:5e:65:8a:69:cb:1a:7e: d5:8f:ae:5c:01:85:90:b6:3d:e6:0f:5d:fb:0a:ae:6a:e7:88: 03:98:82:c8:6c:7e:db:c1:76:0e:7a:75:b4:f7:1e:3f:d0:5a: dc:ea:fa:5c:58:31:77:08:70:72:ef:cc:18:aa:15:3a:be:ca: 14:9d:9f:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ28ryLC5C9ViUfJZmM9guzN7RC8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE0NjhCRUNDNTNCOTYzMjUzODVFRDhCQjMyRjM2MzlG MUY1RTQ4NzAeFw0yNjA5MjEwMjA0MDlaFw0yNjA5MjIwMjM1MDlaMDMxMTAvBgNV BAMTKEFBMkI0RUIxODFFNjcxREIzQzc0NTVGMDM4QkE4QzJBOTVEMzFDN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt/AvTk3y9qyzvCuylatbLodDP ZeYrrJ019x4iiyC3k5O82y+aLFIHMCOwCLGqODGllCOxAfQZW3dONtx3oWBGpmTz ypimn+AKQa/nmKFDmyD0hpBfX3jOBF+nFvo9NKPB/RJa9rxZnatuQo6byktxE6L9 okWiqQFhlPBKKFeVsyDCjk9QkHmJP0boH2lnwZBhCGAVzMduzzwotpMojmepBEfo uQ90hQYXHAE43VmKqA+IkhzdPACGQNJ8RpZny4hErom5C/8WEhxfGresUFAVIoPN buM/M/577rQlUWu9JDbgMPiGZi+LZDHnC37VjX5WzCx5PrsDw+2O7xww2TkRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqitOsYHmcds8dFXwOLqMKpXTHH4wHwYDVR0j BBgwFoAUcUaL7MU7ljJThe2Lsy82OfH15IcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTJkYmQ3ODUtNmJjYS00OTNiLThhNjUtM2I1Mjc3MDA3ZmVkLzAvNzE0NjhCRUND NTNCOTYzMjUzODVFRDhCQjMyRjM2MzlGMUY1RTQ4Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MTQ2OEJFQ0M1M0I5NjMyNTM4NUVEOEJCMzJGMzYzOUYxRjVF NDg3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTJkYmQ3ODUtNmJjYS00OTNiLThh NjUtM2I1Mjc3MDA3ZmVkLzAvNzE0NjhCRUNDNTNCOTYzMjUzODVFRDhCQjMyRjM2 MzlGMUY1RTQ4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD8n1G2Yem55jy3mXA0w5NSoKPckGgACItiC Lydwam8xUrpUiKeGcYlzz0OwUKMIyVhiNn8mtMnYqQB02nGp0tUSituNBvCj0aad XbwiPSQJrwL4ci5rVNZAk8Gj7GDaHrw0BJULg359C1pMisTjB4rfORNKEzcAb1G+ A33KUY8urO/B8z3oHR9curjYzMaXFkKxiDfMlBSTYfYtnTxmIad6nTHgjZUczCZf YCDdaYRao1OaQw9kF8XzSEQD62ZyXmWKacsaftWPrlwBhZC2PeYPXfsKrmrniAOY gshsftvBdg56dbT3Hj/QWtzq+lxYMXcIcHLvzBiqFTq+yhSdn9c= -----END CERTIFICATE-----Generated at Mon Sep 21 20:07:54 2026 by rpki-client