$ rpki-client -vvf rpki-rsync.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/71468BECC53B96325385ED8BB32F3639F1F5E487.mft File: 71468BECC53B96325385ED8BB32F3639F1F5E487.mft (raw, json) Hash identifier: kGiK8MpYDrbf86dCyNOC00/jOC6W3Xv3v+pw3VaxrXU= Subject key identifier: 5B:91:94:35:28:6D:E1:F4:06:69:4B:DB:6D:B7:7D:84:17:DF:31:05 Authority key identifier: 71:46:8B:EC:C5:3B:96:32:53:85:ED:8B:B3:2F:36:39:F1:F5:E4:87 Certificate issuer: /CN=71468BECC53B96325385ED8BB32F3639F1F5E487 Certificate serial: 294B9DB4AAF3291846DDA91F6DF9981ADD60F37D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71468BECC53B96325385ED8BB32F3639F1F5E487.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/71468BECC53B96325385ED8BB32F3639F1F5E487.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 19:20:16 +0000 Manifest this update: Mon 20 Jul 2026 19:15:16 +0000 Manifest next update: Tue 21 Jul 2026 20:01:16 +0000 Files and hashes: 1: 71468BECC53B96325385ED8BB32F3639F1F5E487.crl (hash: wErPn0mWCANneikwk6SGjHYQ91q1XHBxWUvVf3wDBX4=) 2: 3130332e36362e33362e302f32342d3234203d3e20313530323233.roa (hash: cbw+qMwfHCXDiTnr7sY/MlfwfCUda213WDrCyTfAh4Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/71468BECC53B96325385ED8BB32F3639F1F5E487.crl rsync://rpki-rsync.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/71468BECC53B96325385ED8BB32F3639F1F5E487.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71468BECC53B96325385ED8BB32F3639F1F5E487.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 20:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:4b:9d:b4:aa:f3:29:18:46:dd:a9:1f:6d:f9:98:1a:dd:60:f3:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71468BECC53B96325385ED8BB32F3639F1F5E487 Validity Not Before: Jul 20 19:15:16 2026 GMT Not After : Jul 21 20:01:16 2026 GMT Subject: CN=5B919435286DE1F406694BDB6DB77D8417DF3105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e5:af:1c:1b:29:cc:12:f9:09:a3:d6:5a:40: a3:ff:d7:61:6b:c9:16:03:77:89:fc:92:bb:ca:4b: 4e:69:e7:f7:c6:2a:7b:75:6c:81:c7:34:ba:7f:27: b4:d0:2e:c3:da:ef:99:44:d4:4d:2d:92:1a:76:ae: 3a:65:66:a8:c0:d0:04:23:c4:6b:c1:3e:9e:01:52: df:5c:da:c8:2e:30:a4:fe:e9:65:6e:fe:ec:cc:47: 1b:ca:36:51:a2:fd:21:b1:bb:b4:d9:26:f8:34:c3: 7c:a8:ac:ca:fd:6b:62:e8:9c:27:5c:d0:76:fe:e7: af:83:7b:93:97:c6:a7:5c:4b:ad:d5:1d:c5:cf:e1: 52:84:62:f0:90:5e:61:c6:b7:92:82:84:64:8f:5b: 84:ac:c9:0e:09:b5:5e:6b:77:11:e9:cc:79:0a:14: 2e:16:39:fb:86:35:9a:8e:aa:a7:8c:fe:2a:a9:5d: 72:61:01:d5:de:64:ea:96:38:4e:c7:12:e0:83:27: 34:42:f8:45:2b:2e:6c:94:9b:80:7a:92:c5:5f:c9: 05:28:3a:52:d1:0f:91:e4:d1:16:eb:b6:c5:fe:68: 4c:b7:ba:92:79:34:86:94:f9:22:6f:5e:3a:7a:8d: cc:9d:f0:d5:80:f9:a5:1b:b3:c7:55:af:94:b9:63: f1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:91:94:35:28:6D:E1:F4:06:69:4B:DB:6D:B7:7D:84:17:DF:31:05 X509v3 Authority Key Identifier: keyid:71:46:8B:EC:C5:3B:96:32:53:85:ED:8B:B3:2F:36:39:F1:F5:E4:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/71468BECC53B96325385ED8BB32F3639F1F5E487.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71468BECC53B96325385ED8BB32F3639F1F5E487.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/71468BECC53B96325385ED8BB32F3639F1F5E487.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:5a:b8:a3:d0:c1:f3:63:1c:f5:2b:77:4f:1e:d7:4f:f2:a6: be:c6:21:f8:69:98:d9:91:aa:22:b0:0c:1e:17:86:98:b8:fb: 93:86:50:75:b1:27:9e:ac:10:b8:34:75:e4:d5:88:c4:fe:05: 0b:f6:4e:57:53:ad:12:53:5c:08:b8:7f:8a:eb:3c:ee:d7:8c: b5:6d:0a:9f:2a:a0:52:d1:23:b4:50:3e:ab:83:a4:7d:4d:6c: e1:7a:88:f5:24:4f:b7:1b:b1:ce:81:8b:8d:1e:cb:19:57:41: e3:3b:4a:69:64:30:b3:ea:b7:cf:a8:06:33:45:5c:ac:5a:2f: 7b:aa:53:fe:74:97:3d:2a:e2:51:7f:ff:0a:76:35:c1:fd:e3: dc:14:11:9e:c7:b4:54:be:57:67:1d:3f:cd:b6:98:ee:6d:2d: ce:58:7d:45:57:ff:93:48:b2:c1:14:27:56:a9:ea:41:44:b7: 8b:eb:c6:df:3a:5b:c0:b0:66:53:19:5b:76:93:f6:fc:99:08: f9:2f:ab:23:d8:b1:47:88:20:d7:9f:56:76:8a:3e:f3:65:a5: d1:5e:ff:fa:d5:a5:36:49:b5:c2:ee:42:e6:39:48:41:15:2e: 10:b6:e3:e2:d7:57:30:ce:02:72:90:e8:a9:3b:b3:7a:10:d7: 7e:6f:de:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKUudtKrzKRhG3akfbfmYGt1g830wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE0NjhCRUNDNTNCOTYzMjUzODVFRDhCQjMyRjM2MzlG MUY1RTQ4NzAeFw0yNjA3MjAxOTE1MTZaFw0yNjA3MjEyMDAxMTZaMDMxMTAvBgNV BAMTKDVCOTE5NDM1Mjg2REUxRjQwNjY5NEJEQjZEQjc3RDg0MTdERjMxMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn5a8cGynMEvkJo9ZaQKP/12Fr yRYDd4n8krvKS05p5/fGKnt1bIHHNLp/J7TQLsPa75lE1E0tkhp2rjplZqjA0AQj xGvBPp4BUt9c2sguMKT+6WVu/uzMRxvKNlGi/SGxu7TZJvg0w3yorMr9a2LonCdc 0Hb+56+De5OXxqdcS63VHcXP4VKEYvCQXmHGt5KChGSPW4SsyQ4JtV5rdxHpzHkK FC4WOfuGNZqOqqeM/iqpXXJhAdXeZOqWOE7HEuCDJzRC+EUrLmyUm4B6ksVfyQUo OlLRD5Hk0RbrtsX+aEy3upJ5NIaU+SJvXjp6jcyd8NWA+aUbs8dVr5S5Y/GXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW5GUNSht4fQGaUvbbbd9hBffMQUwHwYDVR0j BBgwFoAUcUaL7MU7ljJThe2Lsy82OfH15IcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTJkYmQ3ODUtNmJjYS00OTNiLThhNjUtM2I1Mjc3MDA3ZmVkLzAvNzE0NjhCRUND NTNCOTYzMjUzODVFRDhCQjMyRjM2MzlGMUY1RTQ4Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MTQ2OEJFQ0M1M0I5NjMyNTM4NUVEOEJCMzJGMzYzOUYxRjVF NDg3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTJkYmQ3ODUtNmJjYS00OTNiLThh NjUtM2I1Mjc3MDA3ZmVkLzAvNzE0NjhCRUNDNTNCOTYzMjUzODVFRDhCQjMyRjM2 MzlGMUY1RTQ4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAElauKPQwfNjHPUrd08e10/ypr7GIfhpmNmR qiKwDB4Xhpi4+5OGUHWxJ56sELg0deTViMT+BQv2TldTrRJTXAi4f4rrPO7XjLVt Cp8qoFLRI7RQPquDpH1NbOF6iPUkT7cbsc6Bi40eyxlXQeM7SmlkMLPqt8+oBjNF XKxaL3uqU/50lz0q4lF//wp2NcH949wUEZ7HtFS+V2cdP822mO5tLc5YfUVX/5NI ssEUJ1ap6kFEt4vrxt86W8CwZlMZW3aT9vyZCPkvqyPYsUeIINefVnaKPvNlpdFe //rVpTZJtcLuQuY5SEEVLhC24+LXVzDOAnKQ6Kk7s3oQ135v3rY= -----END CERTIFICATE-----Generated at Tue Jul 21 06:39:36 2026 by rpki-client