$ rpki-client -vvf rpki-rsync.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.mft File: 71645BDB97FEBD6E0D4F53A08CBF24077C24E403.mft (raw, json) Hash identifier: pFZNQbt3B6N3tUrUjOQVjL807bmbgOhp5rGrwKv28qI= Subject key identifier: A1:E8:F8:3F:4E:F0:89:56:20:4B:45:3E:FD:13:96:9B:D3:93:38:48 Authority key identifier: 71:64:5B:DB:97:FE:BD:6E:0D:4F:53:A0:8C:BF:24:07:7C:24:E4:03 Certificate issuer: /CN=71645BDB97FEBD6E0D4F53A08CBF24077C24E403 Certificate serial: 5FB558CDDCEF195D220A6A8EBBC1C240111F954E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.mft Manifest number: 62 Signing time: Mon 13 Jul 2026 23:08:28 +0000 Manifest this update: Mon 13 Jul 2026 23:03:28 +0000 Manifest next update: Wed 15 Jul 2026 00:57:28 +0000 Files and hashes: 1: 3130332e3131372e38322e302f32332d3234203d3e20313335343438.roa (hash: jSBSE01bFNIgx3G9PIWj722UJJ7hQspo49sh3BoclUs=) 2: 71645BDB97FEBD6E0D4F53A08CBF24077C24E403.crl (hash: XCY2VLJQjZQjeSLIJp/LdJK98Zrrj/b9AvRmuKM6VgU=) 3: 3133392e352e34302e302f32322d3234203d3e20313335343438.roa (hash: FLE2sS5KzMoMGu8AryL/UH7mCUV7o+5G4oSkkHyigRI=) 4: 34352e3132352e37322e302f32322d3234203d3e20313335343438.roa (hash: 715qMLL3zWMsWmsxBXBWi9NPtVddaj245ppj1A5IigM=) 5: 34352e3132322e35322e302f32322d3234203d3e20313335343438.roa (hash: 8N1IzAB8pkX4/FYSEzrTQt1a1/sgsTYFhzCROR3Q7kU=) 6: 3132352e36322e39322e302f32322d3234203d3e20313338383032.roa (hash: fIe5ivOarf67OW2F9hXTn+7dCpQiLZXrcOnnAzgWfZQ=) 7: 3130332e39372e3235312e302f32342d3234203d3e20313335343438.roa (hash: 1ClnarbK+m27NSskMGx6t2ycJpMm9Bjfs5h4sHIhDls=) 8: 3130332e36342e31342e302f32342d3234203d3e20313335343438.roa (hash: cnZhDjgBV18bkSYzt4GtOPM77vSmVw7AFFCEwfJop2Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.crl rsync://rpki-rsync.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 00:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:b5:58:cd:dc:ef:19:5d:22:0a:6a:8e:bb:c1:c2:40:11:1f:95:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71645BDB97FEBD6E0D4F53A08CBF24077C24E403 Validity Not Before: Jul 13 23:03:28 2026 GMT Not After : Jul 15 00:57:28 2026 GMT Subject: CN=A1E8F83F4EF08956204B453EFD13969BD3933848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:20:23:52:0b:25:a9:73:ca:9a:1e:a9:e7:75: 78:11:ba:a0:c0:cd:29:24:89:ea:2c:e2:8a:51:df: c3:1d:75:e6:c6:fd:ed:68:e9:7e:7a:44:78:28:99: 8e:15:e2:fd:9f:28:60:f0:b6:77:c2:2a:ad:78:80: 7e:57:40:16:01:88:1d:4d:03:54:7f:08:6f:74:0f: e4:65:df:ff:af:df:20:22:9d:a0:17:08:44:6d:5c: 24:bc:49:1a:f8:84:c8:bf:96:c3:86:01:b1:ea:42: 12:c4:3b:a6:23:62:2a:cc:2e:16:25:f7:de:8a:61: 0a:f4:15:1b:f7:3e:82:78:04:8d:81:a4:fb:6f:e6: af:56:bf:b4:2b:b3:f5:b6:8e:45:e9:d9:f2:18:2f: 73:f1:9e:6b:c9:f5:a7:fc:02:f0:11:d0:c0:aa:d0: 5c:10:d8:e1:22:3b:77:61:34:58:29:30:11:a0:e5: 01:4c:60:62:a3:c5:d2:2e:ca:3e:ee:39:8c:aa:49: 72:a3:aa:c3:21:25:de:e1:b3:22:db:0e:ee:57:3b: 2a:32:5e:db:db:13:33:01:65:a0:df:d8:51:fc:ab: e0:f4:1f:9c:eb:05:7e:dc:5b:be:16:33:b1:75:35: 17:fb:9c:cd:d1:dd:3d:1d:c3:72:89:f9:18:15:1b: 10:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:E8:F8:3F:4E:F0:89:56:20:4B:45:3E:FD:13:96:9B:D3:93:38:48 X509v3 Authority Key Identifier: keyid:71:64:5B:DB:97:FE:BD:6E:0D:4F:53:A0:8C:BF:24:07:7C:24:E4:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:69:eb:ad:e9:5b:eb:d6:50:d2:12:dd:ee:a1:11:c9:85:c2: 05:12:ac:c7:33:2a:4c:27:12:44:da:0c:ab:00:5b:1c:56:27: 9b:f6:ac:95:18:4b:c1:eb:b8:05:9a:93:a6:f1:0d:64:2f:e4: 29:ee:17:a1:a3:89:6b:7b:4e:1d:e2:ea:61:2e:b7:4e:19:ea: 68:33:56:05:d1:03:a9:1b:79:75:81:46:88:5b:04:f7:fa:21: 5b:30:bd:61:bd:3b:e9:78:94:a4:98:c7:92:7b:0f:cc:8e:e1: a8:9f:21:e4:c6:d6:15:3e:c3:b6:d8:1f:7f:1d:5c:39:fa:0d: f9:60:c8:b6:cd:1d:44:6e:5d:ce:61:89:c0:8c:4f:70:72:9a: 5d:6c:70:b8:14:b4:57:25:f4:e0:0a:fe:75:c3:15:73:f4:76: ab:ac:32:b7:b9:f0:04:b2:14:e7:15:bb:11:a3:ac:79:b9:79: a9:cf:9c:13:22:f9:7c:2c:aa:02:b6:ea:72:57:47:54:80:47: 7b:c3:17:60:31:01:7a:e8:fa:c9:d5:45:fa:99:fb:68:00:c0: 2e:6b:37:c2:5a:0e:4a:48:a3:19:80:96:b2:14:50:18:61:5a: ed:39:1a:46:db:10:89:2d:40:00:26:e3:8b:21:0a:2f:6d:81: 40:95:da:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX7VYzdzvGV0iCmqOu8HCQBEflU4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE2NDVCREI5N0ZFQkQ2RTBENEY1M0EwOENCRjI0MDc3 QzI0RTQwMzAeFw0yNjA3MTMyMzAzMjhaFw0yNjA3MTUwMDU3MjhaMDMxMTAvBgNV BAMTKEExRThGODNGNEVGMDg5NTYyMDRCNDUzRUZEMTM5NjlCRDM5MzM4NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgICNSCyWpc8qaHqnndXgRuqDA zSkkieos4opR38MddebG/e1o6X56RHgomY4V4v2fKGDwtnfCKq14gH5XQBYBiB1N A1R/CG90D+Rl3/+v3yAinaAXCERtXCS8SRr4hMi/lsOGAbHqQhLEO6YjYirMLhYl 996KYQr0FRv3PoJ4BI2BpPtv5q9Wv7Qrs/W2jkXp2fIYL3PxnmvJ9af8AvAR0MCq 0FwQ2OEiO3dhNFgpMBGg5QFMYGKjxdIuyj7uOYyqSXKjqsMhJd7hsyLbDu5XOyoy XtvbEzMBZaDf2FH8q+D0H5zrBX7cW74WM7F1NRf7nM3R3T0dw3KJ+RgVGxA5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoej4P07wiVYgS0U+/ROWm9OTOEgwHwYDVR0j BBgwFoAUcWRb25f+vW4NT1OgjL8kB3wk5AMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDU5YWNiOTctNmU4Ny00ZTMxLWE1NjktYTI2NjBkZjRmMmI4LzAvNzE2NDVCREI5 N0ZFQkQ2RTBENEY1M0EwOENCRjI0MDc3QzI0RTQwMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MTY0NUJEQjk3RkVCRDZFMEQ0RjUzQTA4Q0JGMjQwNzdDMjRF NDAzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDU5YWNiOTctNmU4Ny00ZTMxLWE1 NjktYTI2NjBkZjRmMmI4LzAvNzE2NDVCREI5N0ZFQkQ2RTBENEY1M0EwOENCRjI0 MDc3QzI0RTQwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALJp663pW+vWUNIS3e6hEcmFwgUSrMczKkwn EkTaDKsAWxxWJ5v2rJUYS8HruAWak6bxDWQv5CnuF6GjiWt7Th3i6mEut04Z6mgz VgXRA6kbeXWBRohbBPf6IVswvWG9O+l4lKSYx5J7D8yO4aifIeTG1hU+w7bYH38d XDn6DflgyLbNHURuXc5hicCMT3Byml1scLgUtFcl9OAK/nXDFXP0dqusMre58ASy FOcVuxGjrHm5eanPnBMi+XwsqgK26nJXR1SAR3vDF2AxAXro+snVRfqZ+2gAwC5r N8JaDkpIoxmAlrIUUBhhWu05GkbbEIktQAAm44shCi9tgUCV2ls= -----END CERTIFICATE-----Generated at Tue Jul 14 09:06:57 2026 by rpki-client