$ rpki-client -vvf rpki-rsync.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.mft File: 71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.mft (raw, json) Hash identifier: PXVzxEZfUwKf0Y/x+DkuH9CNqdIVl8Ld7vLK9DlLhDY= Subject key identifier: FF:D8:43:38:9E:78:32:3F:FE:EE:6E:32:56:7D:81:91:F5:EB:F2:E5 Authority key identifier: 71:A4:5C:05:D7:D5:DF:9D:16:E9:C3:B0:60:75:35:DB:2B:90:6B:32 Certificate issuer: /CN=71A45C05D7D5DF9D16E9C3B0607535DB2B906B32 Certificate serial: 456979A6BA17D737729ABC79EEED32C564730BDE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.mft Manifest number: 3A Signing time: Sat 13 Jun 2026 18:37:01 +0000 Manifest this update: Sat 13 Jun 2026 18:32:01 +0000 Manifest next update: Sun 14 Jun 2026 21:02:01 +0000 Files and hashes: 1: 3130332e35362e39332e302f32342d3234203d3e203538343737.roa (hash: vqVbxn6Wjao5k2JYe2+RI+TcQAfRr5R7zs7bd5wdsLk=) 2: 3130332e35362e39322e302f32342d3234203d3e203538343737.roa (hash: d1IJ4T81r3K/uk2231YZmItFa5G4LBBNAf/1wVmUa9c=) 3: 71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.crl (hash: mpaaa1CXPOdk1//xsBPcz1MT5IjtlaFKmFUkWVsw4O8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.crl rsync://rpki-rsync.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:69:79:a6:ba:17:d7:37:72:9a:bc:79:ee:ed:32:c5:64:73:0b:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71A45C05D7D5DF9D16E9C3B0607535DB2B906B32 Validity Not Before: Jun 13 18:32:01 2026 GMT Not After : Jun 14 21:02:01 2026 GMT Subject: CN=FFD843389E78323FFEEE6E32567D8191F5EBF2E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:36:a2:4d:14:a2:14:08:64:34:46:69:ac:8a: 13:33:14:fe:2a:56:0b:0c:12:c6:36:06:f6:b4:b9: dd:74:51:97:0b:d4:3d:1a:99:23:71:86:10:61:71: 73:1c:66:b7:93:a3:8f:a4:b7:f2:7a:55:73:f7:8b: 78:c0:ef:b2:d9:e3:f5:4c:2a:17:46:25:54:c8:b4: 8a:72:d7:19:f8:e6:6e:f2:ae:04:b2:c4:45:7d:4d: a6:c8:ef:cb:04:fd:70:e2:25:cc:39:d3:46:f3:e3: a8:7f:95:7c:d3:e7:1c:06:97:7c:e8:b2:17:6c:69: e5:62:e3:d5:2a:00:fa:8d:4d:e3:4a:aa:fe:d1:f1: 81:06:ae:01:a0:23:b1:74:59:c4:2c:4f:9d:e1:66: 43:92:cc:12:5f:f5:46:1b:11:6f:a0:bb:29:cc:f6: b6:d7:e2:fc:68:46:ff:c7:bc:75:a8:b3:ad:1b:aa: f6:f4:41:03:47:76:c8:28:dc:15:b4:5f:06:ae:ed: ee:07:ff:5f:44:6e:35:03:17:e2:61:14:a9:1a:17: 8b:de:31:5d:ac:f6:0b:10:b1:0d:a7:5f:b0:ed:28: 4c:d8:f3:aa:4c:80:6d:41:9e:5d:69:c4:f8:7a:49: 43:a4:13:24:3f:84:22:e7:1c:90:a0:d7:6f:d5:cf: 00:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:D8:43:38:9E:78:32:3F:FE:EE:6E:32:56:7D:81:91:F5:EB:F2:E5 X509v3 Authority Key Identifier: keyid:71:A4:5C:05:D7:D5:DF:9D:16:E9:C3:B0:60:75:35:DB:2B:90:6B:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:70:de:f7:c1:f5:63:a9:b9:4b:b2:1f:d7:6c:99:65:38:34: 11:f8:44:60:0a:6e:0b:e5:53:c9:a6:3b:65:0f:08:bc:5a:2b: 35:f1:7f:14:83:24:76:38:85:db:7b:ad:46:97:c3:91:8a:c0: 7b:e4:89:93:c1:62:65:2a:54:1b:ef:81:cf:4d:2a:83:b3:b1: 00:29:80:f3:f4:68:fc:07:65:5a:7b:cb:b3:74:4c:24:bd:07: a2:5b:b4:e5:af:45:8d:bb:f7:84:1f:55:07:c6:7e:20:47:da: d0:44:cf:28:3f:1a:02:fd:14:4e:77:8f:15:f6:e5:dc:c4:ff: 32:0f:5f:2b:d4:db:1f:a5:6e:75:6c:d6:0c:9f:13:83:8c:91: 02:a4:e7:ff:f3:59:28:f0:2d:4a:7c:f6:ee:87:86:9c:35:cc: 50:b3:40:2f:35:f6:a4:bd:38:4f:b6:a6:0e:bc:30:4c:40:9b: f2:0b:0f:61:bb:05:a0:a0:7c:85:6d:e6:50:1a:ab:ee:6b:f4: 96:10:d7:aa:40:93:7a:74:61:93:76:ad:ba:00:54:46:cd:e1: b6:d5:a5:8c:d9:7f:a0:f2:62:46:6b:42:a7:2b:1e:48:22:a2: 69:1d:6e:46:89:b1:0c:8f:fd:67:89:ce:33:0f:b8:b6:42:54: a4:88:57:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURWl5proX1zdymrx57u0yxWRzC94wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFBNDVDMDVEN0Q1REY5RDE2RTlDM0IwNjA3NTM1REIy QjkwNkIzMjAeFw0yNjA2MTMxODMyMDFaFw0yNjA2MTQyMTAyMDFaMDMxMTAvBgNV BAMTKEZGRDg0MzM4OUU3ODMyM0ZGRUVFNkUzMjU2N0Q4MTkxRjVFQkYyRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5NqJNFKIUCGQ0RmmsihMzFP4q VgsMEsY2Bva0ud10UZcL1D0amSNxhhBhcXMcZreTo4+kt/J6VXP3i3jA77LZ4/VM KhdGJVTItIpy1xn45m7yrgSyxEV9TabI78sE/XDiJcw500bz46h/lXzT5xwGl3zo shdsaeVi49UqAPqNTeNKqv7R8YEGrgGgI7F0WcQsT53hZkOSzBJf9UYbEW+guynM 9rbX4vxoRv/HvHWos60bqvb0QQNHdsgo3BW0Xwau7e4H/19EbjUDF+JhFKkaF4ve MV2s9gsQsQ2nX7DtKEzY86pMgG1Bnl1pxPh6SUOkEyQ/hCLnHJCg12/VzwB5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/9hDOJ54Mj/+7m4yVn2BkfXr8uUwHwYDVR0j BBgwFoAUcaRcBdfV350W6cOwYHU12yuQazIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzI2Y2QyNmYtZmJkYS00Y2Q4LWEwMWMtYjAxNTU1MTMwMTVmLzAvNzFBNDVDMDVE N0Q1REY5RDE2RTlDM0IwNjA3NTM1REIyQjkwNkIzMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MUE0NUMwNUQ3RDVERjlEMTZFOUMzQjA2MDc1MzVEQjJCOTA2 QjMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzI2Y2QyNmYtZmJkYS00Y2Q4LWEw MWMtYjAxNTU1MTMwMTVmLzAvNzFBNDVDMDVEN0Q1REY5RDE2RTlDM0IwNjA3NTM1 REIyQjkwNkIzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABJw3vfB9WOpuUuyH9dsmWU4NBH4RGAKbgvl U8mmO2UPCLxaKzXxfxSDJHY4hdt7rUaXw5GKwHvkiZPBYmUqVBvvgc9NKoOzsQAp gPP0aPwHZVp7y7N0TCS9B6JbtOWvRY2794QfVQfGfiBH2tBEzyg/GgL9FE53jxX2 5dzE/zIPXyvU2x+lbnVs1gyfE4OMkQKk5//zWSjwLUp89u6Hhpw1zFCzQC819qS9 OE+2pg68MExAm/ILD2G7BaCgfIVt5lAaq+5r9JYQ16pAk3p0YZN2rboAVEbN4bbV pYzZf6DyYkZrQqcrHkgiomkdbkaJsQyP/WeJzjMPuLZCVKSIV4k= -----END CERTIFICATE-----Generated at Sat Jun 13 22:39:33 2026 by rpki-client