$ rpki-client -vvf rpki-rsync.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/71468BECC53B96325385ED8BB32F3639F1F5E487.mft File: 71468BECC53B96325385ED8BB32F3639F1F5E487.mft (raw, json) Hash identifier: IjwrAXkiukT+kX/DLUaMoLCajfIJgGbiqidXTgVbUVQ= Subject key identifier: FB:25:E5:1F:86:CC:E6:AC:26:7D:C1:00:05:48:EF:85:88:F2:AF:16 Authority key identifier: 71:46:8B:EC:C5:3B:96:32:53:85:ED:8B:B3:2F:36:39:F1:F5:E4:87 Certificate issuer: /CN=71468BECC53B96325385ED8BB32F3639F1F5E487 Certificate serial: 28B5E891AE529CE9E0EC4D98532B71E20C7346D2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71468BECC53B96325385ED8BB32F3639F1F5E487.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/71468BECC53B96325385ED8BB32F3639F1F5E487.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 14:17:28 +0000 Manifest this update: Tue 02 Jun 2026 14:12:28 +0000 Manifest next update: Wed 03 Jun 2026 15:33:28 +0000 Files and hashes: 1: 3130332e36362e33362e302f32342d3234203d3e20313530323233.roa (hash: cbw+qMwfHCXDiTnr7sY/MlfwfCUda213WDrCyTfAh4Y=) 2: 71468BECC53B96325385ED8BB32F3639F1F5E487.crl (hash: R7xX+sW3c0ZcE0UwwnW1/PZ43M1fZNaC2SfjdWUVqGQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/71468BECC53B96325385ED8BB32F3639F1F5E487.crl rsync://rpki-rsync.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/71468BECC53B96325385ED8BB32F3639F1F5E487.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71468BECC53B96325385ED8BB32F3639F1F5E487.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 15:33:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:b5:e8:91:ae:52:9c:e9:e0:ec:4d:98:53:2b:71:e2:0c:73:46:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71468BECC53B96325385ED8BB32F3639F1F5E487 Validity Not Before: Jun 2 14:12:28 2026 GMT Not After : Jun 3 15:33:28 2026 GMT Subject: CN=FB25E51F86CCE6AC267DC1000548EF8588F2AF16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:50:70:ee:50:3b:a0:73:87:88:14:21:da:62: aa:54:59:67:08:6b:03:38:90:b3:83:20:81:81:46: b9:66:b9:d6:92:19:35:4e:28:17:27:b8:48:29:d1: 54:7a:aa:06:fc:a0:60:8e:fe:68:57:33:e7:26:78: 8f:8d:cd:12:1e:68:b3:68:88:45:eb:09:95:51:8b: 1d:99:d9:bf:37:b6:6b:52:ae:b4:3c:34:d2:93:3c: 5f:20:57:2f:10:6a:8c:ab:26:74:97:77:c4:41:2e: 9d:07:1f:46:f8:31:a0:0d:b9:56:3f:25:dd:aa:27: 68:e2:52:31:65:53:dd:77:45:d9:5d:36:15:ea:16: 60:fb:38:e9:8f:5e:3c:a6:18:96:80:a2:52:1b:22: 50:5e:f5:0c:8c:88:cf:49:fa:e3:80:80:0d:6b:b8: f5:83:1c:4c:00:a3:2b:49:95:a1:81:ee:21:dc:35: 80:69:05:8d:37:75:7c:69:71:b8:f9:8f:7c:88:4b: db:82:ad:92:20:64:a5:da:b0:db:14:fb:50:7f:e0: ef:fb:fa:c8:90:09:c6:ff:6d:c1:5c:fe:93:6e:06: ab:cc:69:3b:e0:ec:ba:73:00:94:5d:66:bc:3a:4c: 1a:cc:f5:65:4f:9a:36:aa:47:ee:f1:3f:86:11:2f: d6:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:25:E5:1F:86:CC:E6:AC:26:7D:C1:00:05:48:EF:85:88:F2:AF:16 X509v3 Authority Key Identifier: keyid:71:46:8B:EC:C5:3B:96:32:53:85:ED:8B:B3:2F:36:39:F1:F5:E4:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/71468BECC53B96325385ED8BB32F3639F1F5E487.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71468BECC53B96325385ED8BB32F3639F1F5E487.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/71468BECC53B96325385ED8BB32F3639F1F5E487.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:b3:e9:98:a0:5b:59:da:b4:32:ea:24:cb:d3:76:c2:ea:ae: 8a:38:1e:6f:b5:01:26:6b:00:af:00:11:5d:dc:e0:47:ff:fe: 2a:97:63:19:04:eb:ef:fa:ad:2e:21:a0:36:8f:c9:4b:35:db: 23:87:6d:b8:c2:be:4e:c2:4d:5e:2d:2f:90:43:3d:0f:6f:d4: de:67:ea:fa:3e:ef:02:b2:49:16:10:ba:08:a0:49:20:60:44: 7b:72:27:11:78:55:c4:aa:b9:eb:e9:71:27:75:76:8a:b4:93: 64:e8:62:9b:7c:68:2d:0a:88:6a:f9:37:41:2e:c8:c7:24:6e: 24:49:35:74:db:39:55:1b:15:0d:a7:03:27:7c:4b:a8:42:3c: 3a:e3:43:1f:67:23:73:84:51:74:69:f1:4f:e0:a1:51:e7:26: e5:d5:99:b9:7a:35:44:f3:96:40:b6:7b:3e:df:4f:09:d0:aa: 55:23:26:95:f6:cd:77:1e:c8:0a:f2:73:e5:ab:a5:cb:74:12: c8:f9:cc:44:82:5e:de:56:3e:58:4e:3d:93:0d:22:29:3e:5c: df:8d:fc:e6:10:c6:c6:e1:9a:31:2f:2c:00:ec:50:21:70:6f: 44:76:1c:47:e9:80:79:20:fc:c8:43:8a:ba:1a:e4:c7:ef:91: ef:51:d4:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKLXoka5SnOng7E2YUytx4gxzRtIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE0NjhCRUNDNTNCOTYzMjUzODVFRDhCQjMyRjM2MzlG MUY1RTQ4NzAeFw0yNjA2MDIxNDEyMjhaFw0yNjA2MDMxNTMzMjhaMDMxMTAvBgNV BAMTKEZCMjVFNTFGODZDQ0U2QUMyNjdEQzEwMDA1NDhFRjg1ODhGMkFGMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGUHDuUDugc4eIFCHaYqpUWWcI awM4kLODIIGBRrlmudaSGTVOKBcnuEgp0VR6qgb8oGCO/mhXM+cmeI+NzRIeaLNo iEXrCZVRix2Z2b83tmtSrrQ8NNKTPF8gVy8QaoyrJnSXd8RBLp0HH0b4MaANuVY/ Jd2qJ2jiUjFlU913RdldNhXqFmD7OOmPXjymGJaAolIbIlBe9QyMiM9J+uOAgA1r uPWDHEwAoytJlaGB7iHcNYBpBY03dXxpcbj5j3yIS9uCrZIgZKXasNsU+1B/4O/7 +siQCcb/bcFc/pNuBqvMaTvg7LpzAJRdZrw6TBrM9WVPmjaqR+7xP4YRL9aBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+yXlH4bM5qwmfcEABUjvhYjyrxYwHwYDVR0j BBgwFoAUcUaL7MU7ljJThe2Lsy82OfH15IcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTJkYmQ3ODUtNmJjYS00OTNiLThhNjUtM2I1Mjc3MDA3ZmVkLzAvNzE0NjhCRUND NTNCOTYzMjUzODVFRDhCQjMyRjM2MzlGMUY1RTQ4Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MTQ2OEJFQ0M1M0I5NjMyNTM4NUVEOEJCMzJGMzYzOUYxRjVF NDg3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTJkYmQ3ODUtNmJjYS00OTNiLThh NjUtM2I1Mjc3MDA3ZmVkLzAvNzE0NjhCRUNDNTNCOTYzMjUzODVFRDhCQjMyRjM2 MzlGMUY1RTQ4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJGz6ZigW1natDLqJMvTdsLqroo4Hm+1ASZr AK8AEV3c4Ef//iqXYxkE6+/6rS4hoDaPyUs12yOHbbjCvk7CTV4tL5BDPQ9v1N5n 6vo+7wKySRYQugigSSBgRHtyJxF4VcSquevpcSd1doq0k2ToYpt8aC0KiGr5N0Eu yMckbiRJNXTbOVUbFQ2nAyd8S6hCPDrjQx9nI3OEUXRp8U/goVHnJuXVmbl6NUTz lkC2ez7fTwnQqlUjJpX2zXceyAryc+Wrpct0Esj5zESCXt5WPlhOPZMNIik+XN+N /OYQxsbhmjEvLADsUCFwb0R2HEfpgHkg/MhDiroa5Mfvke9R1EE= -----END CERTIFICATE-----Generated at Wed Jun 3 04:40:52 2026 by rpki-client