$ rpki-client -vvf rpki-rsync.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.mft File: 71645BDB97FEBD6E0D4F53A08CBF24077C24E403.mft (raw, json) Hash identifier: zfqMIpsuI8SCl1VLmDAEQ0LpzfJGi20j54g1yB+Gv4c= Subject key identifier: DB:5C:6D:D8:53:60:4F:50:58:EE:68:51:8E:07:32:36:99:C2:47:54 Authority key identifier: 71:64:5B:DB:97:FE:BD:6E:0D:4F:53:A0:8C:BF:24:07:7C:24:E4:03 Certificate issuer: /CN=71645BDB97FEBD6E0D4F53A08CBF24077C24E403 Certificate serial: 2F3DAA99A9BB46DAE0FC40ADF89A8434FF75179D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 13:31:33 +0000 Manifest this update: Thu 23 Jul 2026 13:26:33 +0000 Manifest next update: Fri 24 Jul 2026 16:58:33 +0000 Files and hashes: 1: 3133392e352e34302e302f32322d3234203d3e20313335343438.roa (hash: FLE2sS5KzMoMGu8AryL/UH7mCUV7o+5G4oSkkHyigRI=) 2: 71645BDB97FEBD6E0D4F53A08CBF24077C24E403.crl (hash: 5K2cE+OR+IucWlxksdYT6gTTkj/YVR3rt0vlXp/e+5o=) 3: 34352e3132352e37322e302f32322d3234203d3e20313335343438.roa (hash: 715qMLL3zWMsWmsxBXBWi9NPtVddaj245ppj1A5IigM=) 4: 3130332e39372e3235312e302f32342d3234203d3e20313335343438.roa (hash: 1ClnarbK+m27NSskMGx6t2ycJpMm9Bjfs5h4sHIhDls=) 5: 3130332e36342e31342e302f32342d3234203d3e20313335343438.roa (hash: cnZhDjgBV18bkSYzt4GtOPM77vSmVw7AFFCEwfJop2Y=) 6: 34352e3132322e35322e302f32322d3234203d3e20313335343438.roa (hash: 8N1IzAB8pkX4/FYSEzrTQt1a1/sgsTYFhzCROR3Q7kU=) 7: 3130332e3131372e38322e302f32332d3234203d3e20313335343438.roa (hash: jSBSE01bFNIgx3G9PIWj722UJJ7hQspo49sh3BoclUs=) 8: 3132352e36322e39322e302f32322d3234203d3e20313338383032.roa (hash: fIe5ivOarf67OW2F9hXTn+7dCpQiLZXrcOnnAzgWfZQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.crl rsync://rpki-rsync.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 16:58:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:3d:aa:99:a9:bb:46:da:e0:fc:40:ad:f8:9a:84:34:ff:75:17:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71645BDB97FEBD6E0D4F53A08CBF24077C24E403 Validity Not Before: Jul 23 13:26:33 2026 GMT Not After : Jul 24 16:58:33 2026 GMT Subject: CN=DB5C6DD853604F5058EE68518E07323699C24754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:38:95:26:3b:17:d1:1e:cd:11:61:fc:a1:f7: 3a:18:e4:ed:7a:58:38:a5:0a:34:ad:17:13:d6:cb: 69:94:43:0a:0b:cd:6a:fc:f5:5f:bd:ff:1a:f0:f1: 05:06:e1:5f:1b:c7:87:10:98:d2:d2:5f:40:e1:ba: 72:ac:3c:f3:20:27:ea:11:3a:d1:6b:91:87:f0:de: 19:dd:f6:64:8e:69:04:f0:97:73:84:6f:98:33:b6: bb:b3:03:c3:f1:f4:cc:cb:5c:27:e4:f1:de:0c:5f: 8f:5d:a0:b7:a4:66:18:d7:13:4e:72:ea:80:bd:62: f2:27:6a:c4:0a:69:90:f5:17:09:74:d4:04:88:17: 2d:cc:71:57:d1:11:d3:df:61:85:cb:34:07:3a:f6: dd:84:5b:04:1c:84:f1:4a:e4:0f:24:d5:67:ad:3f: b5:52:ed:b9:7b:8c:77:36:f6:15:3c:85:f1:e6:49: f2:0b:a0:47:23:d7:36:45:43:5f:46:75:8d:2b:e8: fd:4c:ad:79:12:a6:5f:a9:c4:5d:c2:61:b0:1e:91: 35:e8:51:50:de:a4:bb:85:f5:7c:38:4f:18:d8:62: 84:58:3f:e6:3f:89:3c:e8:3a:60:18:93:0b:ff:e1: 16:ae:40:7e:a6:ed:bf:5e:68:eb:4d:ba:f9:fa:a3: 3b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:5C:6D:D8:53:60:4F:50:58:EE:68:51:8E:07:32:36:99:C2:47:54 X509v3 Authority Key Identifier: keyid:71:64:5B:DB:97:FE:BD:6E:0D:4F:53:A0:8C:BF:24:07:7C:24:E4:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:79:18:0a:ad:fa:c2:a1:85:c9:94:4d:31:4e:f2:dc:f5:dc: d2:ac:48:9e:57:9e:95:0b:4e:f6:59:98:eb:62:a5:f5:2c:48: bf:0b:5a:bd:59:df:e3:8e:0b:2a:32:37:74:dd:09:32:96:59: b8:74:44:ce:c2:69:f9:e8:0d:d5:c4:88:ea:67:eb:29:98:39: 24:ae:63:da:88:86:cf:86:03:02:91:ee:89:b0:dd:26:2a:63: f7:c0:23:0d:b7:13:cf:85:ed:cc:18:31:fa:a9:15:2e:07:62: ad:c3:2c:bd:51:51:20:1d:70:ef:9b:c9:9d:de:c4:48:92:f6: 14:d2:0f:70:3a:70:fd:75:ed:95:04:14:0f:5c:3a:5f:f5:9c: 4b:bf:2b:17:05:e7:db:5e:10:a8:51:16:9a:86:bc:73:15:43: b0:28:3f:83:61:74:29:c9:ab:d8:e2:18:c9:f0:1a:63:2f:36: ef:56:09:1f:90:92:f8:3d:9a:b0:5c:f6:60:30:b3:87:9d:fe: 9c:06:68:25:6e:6a:ba:64:e4:04:cb:d2:8c:f1:07:da:53:1b: c8:41:78:21:01:2b:73:8e:4e:a0:96:30:a0:cd:e6:5f:1d:52: 2d:f0:86:7e:a9:b7:27:da:f9:ef:01:6a:74:03:d2:c8:ca:92: b7:19:b4:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULz2qmam7Rtrg/ECt+JqENP91F50wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE2NDVCREI5N0ZFQkQ2RTBENEY1M0EwOENCRjI0MDc3 QzI0RTQwMzAeFw0yNjA3MjMxMzI2MzNaFw0yNjA3MjQxNjU4MzNaMDMxMTAvBgNV BAMTKERCNUM2REQ4NTM2MDRGNTA1OEVFNjg1MThFMDczMjM2OTlDMjQ3NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQOJUmOxfRHs0RYfyh9zoY5O16 WDilCjStFxPWy2mUQwoLzWr89V+9/xrw8QUG4V8bx4cQmNLSX0DhunKsPPMgJ+oR OtFrkYfw3hnd9mSOaQTwl3OEb5gztruzA8Px9MzLXCfk8d4MX49doLekZhjXE05y 6oC9YvInasQKaZD1Fwl01ASIFy3McVfREdPfYYXLNAc69t2EWwQchPFK5A8k1Wet P7VS7bl7jHc29hU8hfHmSfILoEcj1zZFQ19GdY0r6P1MrXkSpl+pxF3CYbAekTXo UVDepLuF9Xw4TxjYYoRYP+Y/iTzoOmAYkwv/4RauQH6m7b9eaOtNuvn6oztNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU21xt2FNgT1BY7mhRjgcyNpnCR1QwHwYDVR0j BBgwFoAUcWRb25f+vW4NT1OgjL8kB3wk5AMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDU5YWNiOTctNmU4Ny00ZTMxLWE1NjktYTI2NjBkZjRmMmI4LzAvNzE2NDVCREI5 N0ZFQkQ2RTBENEY1M0EwOENCRjI0MDc3QzI0RTQwMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MTY0NUJEQjk3RkVCRDZFMEQ0RjUzQTA4Q0JGMjQwNzdDMjRF NDAzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDU5YWNiOTctNmU4Ny00ZTMxLWE1 NjktYTI2NjBkZjRmMmI4LzAvNzE2NDVCREI5N0ZFQkQ2RTBENEY1M0EwOENCRjI0 MDc3QzI0RTQwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEN5GAqt+sKhhcmUTTFO8tz13NKsSJ5XnpUL TvZZmOtipfUsSL8LWr1Z3+OOCyoyN3TdCTKWWbh0RM7CafnoDdXEiOpn6ymYOSSu Y9qIhs+GAwKR7omw3SYqY/fAIw23E8+F7cwYMfqpFS4HYq3DLL1RUSAdcO+byZ3e xEiS9hTSD3A6cP117ZUEFA9cOl/1nEu/KxcF59teEKhRFpqGvHMVQ7AoP4NhdCnJ q9jiGMnwGmMvNu9WCR+Qkvg9mrBc9mAws4ed/pwGaCVuarpk5ATL0ozxB9pTG8hB eCEBK3OOTqCWMKDN5l8dUi3whn6ptyfa+e8BanQD0sjKkrcZtIM= -----END CERTIFICATE-----Generated at Fri Jul 24 07:40:43 2026 by rpki-client