$ rpki-client -vvvf rpki-rsync.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.mft File: 71645BDB97FEBD6E0D4F53A08CBF24077C24E403.mft (raw, json) Hash identifier: HleYylhLBiSxrNCbdEoIA/o9lZ/lPnAfep/rO8sjl58= Subject key identifier: 09:57:40:2B:82:E6:2D:3C:3F:1A:2F:9C:74:A2:60:E0:3F:FA:5B:CA Authority key identifier: 71:64:5B:DB:97:FE:BD:6E:0D:4F:53:A0:8C:BF:24:07:7C:24:E4:03 Certificate issuer: /CN=71645BDB97FEBD6E0D4F53A08CBF24077C24E403 Certificate serial: 0D4F99C9E0626DD5FCEA5E96E1AD8346C52AF563 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 04:39:11 +0000 Manifest this update: Thu 17 Sep 2026 04:34:11 +0000 Manifest next update: Fri 18 Sep 2026 07:42:11 +0000 Files and hashes: 1: 3130332e3131372e38322e302f32332d3234203d3e20313335343438.roa (hash: jSBSE01bFNIgx3G9PIWj722UJJ7hQspo49sh3BoclUs=) 2: 34352e3132352e37322e302f32322d3234203d3e20313335343438.roa (hash: 715qMLL3zWMsWmsxBXBWi9NPtVddaj245ppj1A5IigM=) 3: 34352e3132322e35322e302f32322d3234203d3e20313335343438.roa (hash: 8N1IzAB8pkX4/FYSEzrTQt1a1/sgsTYFhzCROR3Q7kU=) 4: 3130332e36342e31342e302f32342d3234203d3e20313335343438.roa (hash: cnZhDjgBV18bkSYzt4GtOPM77vSmVw7AFFCEwfJop2Y=) 5: 3133392e352e34302e302f32322d3234203d3e20313335343438.roa (hash: FLE2sS5KzMoMGu8AryL/UH7mCUV7o+5G4oSkkHyigRI=) 6: 3130332e39372e3235312e302f32342d3234203d3e20313335343438.roa (hash: 1ClnarbK+m27NSskMGx6t2ycJpMm9Bjfs5h4sHIhDls=) 7: 3132352e36322e39322e302f32322d3234203d3e20313338383032.roa (hash: fIe5ivOarf67OW2F9hXTn+7dCpQiLZXrcOnnAzgWfZQ=) 8: 71645BDB97FEBD6E0D4F53A08CBF24077C24E403.crl (hash: xApElCpQx3lVyK3KdXt7jOzYaF2hVmp7JjN5auveRZM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.crl rsync://rpki-rsync.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:42:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:4f:99:c9:e0:62:6d:d5:fc:ea:5e:96:e1:ad:83:46:c5:2a:f5:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71645BDB97FEBD6E0D4F53A08CBF24077C24E403 Validity Not Before: Sep 17 04:34:11 2026 GMT Not After : Sep 18 07:42:11 2026 GMT Subject: CN=0957402B82E62D3C3F1A2F9C74A260E03FFA5BCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:63:6a:8d:5d:27:93:e5:18:9b:a3:e7:72:4a: 2d:67:87:24:95:62:b7:03:c7:fa:ac:ec:f1:7f:53: 99:1f:e4:fa:a4:00:47:4f:36:44:66:6d:70:e2:0a: 18:13:41:bf:0a:6d:2b:67:e4:18:a3:78:63:e8:dc: f6:26:07:62:50:7a:16:76:2c:69:a2:e8:b9:31:91: 0e:0c:9a:d4:03:fb:db:9a:8d:4c:53:44:ce:50:f0: 87:75:4f:e6:a4:d5:66:da:39:04:53:34:05:fa:33: c2:49:af:14:49:22:02:05:41:b9:ba:49:57:af:ad: ca:81:cd:6e:f2:a3:f1:ff:56:f6:40:33:d2:6f:48: 91:e4:ea:52:1f:9c:6d:66:e4:50:39:e6:5b:cb:d4: 18:7e:07:d5:f5:fa:a1:8d:57:74:eb:7e:3a:73:61: 34:c3:88:1e:7d:5f:7d:51:5d:0e:56:5f:9d:75:0e: de:21:40:a0:3f:0b:d3:fc:8a:cd:95:80:45:a3:8f: 46:d1:80:6a:17:28:50:e7:61:42:6e:b5:01:8b:a0: 63:d4:d2:83:61:cd:75:de:4d:7f:57:f9:7e:fc:ab: 3b:4e:2a:d9:f5:99:31:76:3c:46:8b:ab:8b:12:b3: 22:16:fc:27:23:71:6f:fe:aa:5e:a9:73:93:96:d1: 78:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:57:40:2B:82:E6:2D:3C:3F:1A:2F:9C:74:A2:60:E0:3F:FA:5B:CA X509v3 Authority Key Identifier: keyid:71:64:5B:DB:97:FE:BD:6E:0D:4F:53:A0:8C:BF:24:07:7C:24:E4:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:2a:a4:3e:b2:60:95:91:c8:02:c4:40:88:9d:cc:02:6d:fb: bc:11:ad:8e:a1:78:06:7c:8f:51:e7:7c:17:80:b6:bb:85:5b: 42:74:d8:87:b9:08:f7:f3:65:46:f8:7e:d3:51:d6:fe:43:9b: d3:4e:8a:9b:24:39:85:a7:a7:2a:6e:b4:4a:51:98:cd:0d:ee: 3d:87:0e:56:64:8c:80:cc:ff:f1:6e:7c:5d:6b:32:9b:65:e2: 89:6a:e9:c8:c4:03:0f:25:bd:57:e3:f3:c6:83:31:9e:fb:35: 04:15:57:1f:9f:ef:a1:9c:78:43:cb:31:82:a2:e0:63:4b:1e: ed:54:42:ac:76:02:c7:c5:12:80:7c:e3:59:dd:74:8a:39:70: a3:cc:87:d8:d1:2f:16:b8:46:ee:78:f8:81:2b:5e:a8:01:0d: 19:21:80:7f:c2:f6:9a:1a:59:c1:54:2e:3a:af:62:53:63:16: c6:b1:cf:cc:b8:80:cf:af:e4:22:ec:43:dc:dc:8e:0a:4d:4b: d4:4c:e4:fa:16:ed:a6:a3:4b:77:c9:f2:d0:ad:1a:6f:1b:26: 6d:e4:ba:95:86:ce:65:ae:22:28:16:b5:2d:f8:8a:d6:37:1b: 3f:82:d0:bc:ba:34:d6:ce:d5:af:64:36:0b:14:36:39:41:5f: b0:20:99:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDU+ZyeBibdX86l6W4a2DRsUq9WMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE2NDVCREI5N0ZFQkQ2RTBENEY1M0EwOENCRjI0MDc3 QzI0RTQwMzAeFw0yNjA5MTcwNDM0MTFaFw0yNjA5MTgwNzQyMTFaMDMxMTAvBgNV BAMTKDA5NTc0MDJCODJFNjJEM0MzRjFBMkY5Qzc0QTI2MEUwM0ZGQTVCQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFY2qNXSeT5Ribo+dySi1nhySV YrcDx/qs7PF/U5kf5PqkAEdPNkRmbXDiChgTQb8KbStn5BijeGPo3PYmB2JQehZ2 LGmi6LkxkQ4MmtQD+9uajUxTRM5Q8Id1T+ak1WbaOQRTNAX6M8JJrxRJIgIFQbm6 SVevrcqBzW7yo/H/VvZAM9JvSJHk6lIfnG1m5FA55lvL1Bh+B9X1+qGNV3Trfjpz YTTDiB59X31RXQ5WX511Dt4hQKA/C9P8is2VgEWjj0bRgGoXKFDnYUJutQGLoGPU 0oNhzXXeTX9X+X78qztOKtn1mTF2PEaLq4sSsyIW/CcjcW/+ql6pc5OW0XgZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCVdAK4LmLTw/Gi+cdKJg4D/6W8owHwYDVR0j BBgwFoAUcWRb25f+vW4NT1OgjL8kB3wk5AMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDU5YWNiOTctNmU4Ny00ZTMxLWE1NjktYTI2NjBkZjRmMmI4LzAvNzE2NDVCREI5 N0ZFQkQ2RTBENEY1M0EwOENCRjI0MDc3QzI0RTQwMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MTY0NUJEQjk3RkVCRDZFMEQ0RjUzQTA4Q0JGMjQwNzdDMjRF NDAzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDU5YWNiOTctNmU4Ny00ZTMxLWE1 NjktYTI2NjBkZjRmMmI4LzAvNzE2NDVCREI5N0ZFQkQ2RTBENEY1M0EwOENCRjI0 MDc3QzI0RTQwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFsqpD6yYJWRyALEQIidzAJt+7wRrY6heAZ8 j1HnfBeAtruFW0J02Ie5CPfzZUb4ftNR1v5Dm9NOipskOYWnpyputEpRmM0N7j2H DlZkjIDM//FufF1rMptl4olq6cjEAw8lvVfj88aDMZ77NQQVVx+f76GceEPLMYKi 4GNLHu1UQqx2AsfFEoB841nddIo5cKPMh9jRLxa4Ru54+IErXqgBDRkhgH/C9poa WcFULjqvYlNjFsaxz8y4gM+v5CLsQ9zcjgpNS9RM5PoW7aajS3fJ8tCtGm8bJm3k upWGzmWuIigWtS34itY3Gz+C0Ly6NNbO1a9kNgsUNjlBX7AgmQ4= -----END CERTIFICATE-----Generated at Thu Sep 17 13:49:41 2026 by rpki-client