$ rpki-client -vvf rpki-rsync.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/71BEA54A40125136212043443871943E11E47CE8.mft File: 71BEA54A40125136212043443871943E11E47CE8.mft (raw, json) Hash identifier: CqsrYpx6z05jczT9FoAw0+ZB5bT1kz0gg0dUkpC3quo= Subject key identifier: 12:A6:D9:D6:B6:CD:33:9A:83:80:67:FE:11:F9:9B:02:B9:AC:94:B3 Authority key identifier: 71:BE:A5:4A:40:12:51:36:21:20:43:44:38:71:94:3E:11:E4:7C:E8 Certificate issuer: /CN=71BEA54A40125136212043443871943E11E47CE8 Certificate serial: 1D2DC2E72D80FBB94AB08D30EAB5AA9B42A6C30F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71BEA54A40125136212043443871943E11E47CE8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/71BEA54A40125136212043443871943E11E47CE8.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 20:19:36 +0000 Manifest this update: Tue 02 Jun 2026 20:14:36 +0000 Manifest next update: Wed 03 Jun 2026 22:52:36 +0000 Files and hashes: 1: 3130332e3233342e31382e302f32332d3233203d3e20313531353036.roa (hash: PHU5h1LHUlDbfO+kxPjDf9ATbrrXtorAw7bNDenM+FM=) 2: 3130332e3233342e31392e302f32342d3234203d3e20313531353036.roa (hash: SJitFwYKCLnaXZQ4OdV1EreS23s72a/7Op1qTgfnrGo=) 3: 71BEA54A40125136212043443871943E11E47CE8.crl (hash: y/eT3FwewVKfwSaMFHHhhTfBNH4sj1mVGNdGsMJryeU=) 4: 3130332e3233342e31382e302f32342d3234203d3e20313531353036.roa (hash: VJzo4/caWYAHukBH2w0BGX1Ka+vdrCFh1viFJ7tFkV8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/71BEA54A40125136212043443871943E11E47CE8.crl rsync://rpki-rsync.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/71BEA54A40125136212043443871943E11E47CE8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71BEA54A40125136212043443871943E11E47CE8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 22:52:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:2d:c2:e7:2d:80:fb:b9:4a:b0:8d:30:ea:b5:aa:9b:42:a6:c3:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71BEA54A40125136212043443871943E11E47CE8 Validity Not Before: Jun 2 20:14:36 2026 GMT Not After : Jun 3 22:52:36 2026 GMT Subject: CN=12A6D9D6B6CD339A838067FE11F99B02B9AC94B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:db:e1:0c:65:fe:04:44:b3:36:20:ca:6b:d7: eb:d0:c3:24:6d:8f:a5:df:10:be:49:16:19:18:5b: dd:73:52:12:07:d6:0d:af:92:58:1e:f3:04:68:30: 57:bb:3e:ee:10:15:d8:fc:e4:22:1d:8e:e1:cf:49: fb:ce:0c:5e:f6:48:0f:32:1f:5d:78:53:1c:15:05: 13:58:8d:0a:4e:8d:30:d0:da:67:c8:86:33:38:fd: 8d:d4:6f:6d:d8:91:48:e7:26:da:8f:33:e0:04:27: e2:c1:d4:d9:08:00:bf:fd:a4:aa:e3:e6:32:e8:e8: 0c:ec:c6:9f:a8:1b:eb:8a:a3:46:88:c0:9c:fc:9a: 53:52:fe:29:ae:bd:f7:e8:58:c3:f3:95:c8:58:34: 5e:bb:6c:1e:84:3f:07:6a:c3:da:eb:09:a9:13:e9: 43:a1:6c:2f:47:77:aa:62:69:2d:13:62:50:3c:5a: fb:0e:74:a9:c4:45:a4:2a:f0:6d:03:8a:07:7e:36: 03:3c:33:1f:be:7b:b4:9b:40:e3:79:05:52:dc:c2: 88:76:2a:c1:e9:95:80:0b:48:8d:d2:3f:4f:e0:18: 62:4a:94:72:5c:3b:dd:d2:f2:8e:95:02:6d:e8:52: 98:aa:dd:0e:84:02:4f:32:86:ad:1a:3f:d1:8d:27: a8:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A6:D9:D6:B6:CD:33:9A:83:80:67:FE:11:F9:9B:02:B9:AC:94:B3 X509v3 Authority Key Identifier: keyid:71:BE:A5:4A:40:12:51:36:21:20:43:44:38:71:94:3E:11:E4:7C:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/71BEA54A40125136212043443871943E11E47CE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71BEA54A40125136212043443871943E11E47CE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/71BEA54A40125136212043443871943E11E47CE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:d7:d1:6d:57:09:b9:98:aa:b2:50:01:77:fd:8a:67:35:5d: 60:0c:dd:96:e6:80:c9:a2:c4:97:ba:53:0f:56:3a:b6:b3:19: 18:40:be:22:bf:b5:22:12:86:1b:a2:fb:6a:c1:30:ee:b3:e6: bf:47:91:e3:8b:50:13:75:77:4a:03:ee:d0:29:25:1b:12:89: 4d:5c:40:3f:58:e4:7c:a3:ef:eb:22:f0:b9:2f:9f:8d:69:8c: dc:2a:fc:c5:0a:43:68:25:6e:3f:5e:e3:94:3c:da:96:35:48: 98:43:9f:98:2a:3b:a3:df:9f:90:d4:dd:bb:ee:34:2c:a2:78: 3b:9e:43:fd:04:c0:52:e1:2f:64:32:40:c8:89:24:6a:25:c4: 09:cf:76:5f:2a:d8:68:a3:b2:60:80:e1:59:75:5e:d9:1c:1d: 42:bd:19:04:ef:c9:9f:82:55:77:f2:08:4e:aa:56:22:34:56: 29:c8:dd:01:74:5c:bf:47:f5:20:7d:99:62:b6:0d:d3:af:fe: 7a:9b:11:2d:ea:63:a9:96:3e:ea:0e:55:39:44:6f:81:ff:61: 61:ba:19:bf:7d:5c:fd:8f:c3:c5:0c:99:8f:4f:32:65:a7:b8: f2:f4:9a:dd:16:64:04:f7:8a:ef:60:1e:c3:50:70:2a:fd:66: 38:77:15:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHS3C5y2A+7lKsI0w6rWqm0Kmww8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFCRUE1NEE0MDEyNTEzNjIxMjA0MzQ0Mzg3MTk0M0Ux MUU0N0NFODAeFw0yNjA2MDIyMDE0MzZaFw0yNjA2MDMyMjUyMzZaMDMxMTAvBgNV BAMTKDEyQTZEOUQ2QjZDRDMzOUE4MzgwNjdGRTExRjk5QjAyQjlBQzk0QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw2+EMZf4ERLM2IMpr1+vQwyRt j6XfEL5JFhkYW91zUhIH1g2vklge8wRoMFe7Pu4QFdj85CIdjuHPSfvODF72SA8y H114UxwVBRNYjQpOjTDQ2mfIhjM4/Y3Ub23YkUjnJtqPM+AEJ+LB1NkIAL/9pKrj 5jLo6Azsxp+oG+uKo0aIwJz8mlNS/imuvffoWMPzlchYNF67bB6EPwdqw9rrCakT 6UOhbC9Hd6piaS0TYlA8WvsOdKnERaQq8G0Digd+NgM8Mx++e7SbQON5BVLcwoh2 KsHplYALSI3SP0/gGGJKlHJcO93S8o6VAm3oUpiq3Q6EAk8yhq0aP9GNJ6g3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEqbZ1rbNM5qDgGf+EfmbArmslLMwHwYDVR0j BBgwFoAUcb6lSkASUTYhIENEOHGUPhHkfOgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzg4MzI5Y2EtZThmNy00ZDNkLWFjZTQtODA3ZjhhYTU4YWUwLzAvNzFCRUE1NEE0 MDEyNTEzNjIxMjA0MzQ0Mzg3MTk0M0UxMUU0N0NFOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MUJFQTU0QTQwMTI1MTM2MjEyMDQzNDQzODcxOTQzRTExRTQ3 Q0U4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzg4MzI5Y2EtZThmNy00ZDNkLWFj ZTQtODA3ZjhhYTU4YWUwLzAvNzFCRUE1NEE0MDEyNTEzNjIxMjA0MzQ0Mzg3MTk0 M0UxMUU0N0NFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH3X0W1XCbmYqrJQAXf9imc1XWAM3ZbmgMmi xJe6Uw9WOrazGRhAviK/tSIShhui+2rBMO6z5r9HkeOLUBN1d0oD7tApJRsSiU1c QD9Y5Hyj7+si8Lkvn41pjNwq/MUKQ2glbj9e45Q82pY1SJhDn5gqO6Pfn5DU3bvu NCyieDueQ/0EwFLhL2QyQMiJJGolxAnPdl8q2GijsmCA4Vl1XtkcHUK9GQTvyZ+C VXfyCE6qViI0VinI3QF0XL9H9SB9mWK2DdOv/nqbES3qY6mWPuoOVTlEb4H/YWG6 Gb99XP2Pw8UMmY9PMmWnuPL0mt0WZAT3iu9gHsNQcCr9Zjh3FRw= -----END CERTIFICATE-----Generated at Wed Jun 3 03:53:49 2026 by rpki-client