$ rpki-client -vvf rpki-rsync.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.mft File: 71645BDB97FEBD6E0D4F53A08CBF24077C24E403.mft (raw, json) Hash identifier: Yay656+hZo/Vf58Dt+vFiKJG4jdu3ksZIctIsP0I6zk= Subject key identifier: 9A:DC:A1:44:CB:49:D7:49:79:EB:87:E6:B4:28:17:0F:2D:96:41:6A Authority key identifier: 71:64:5B:DB:97:FE:BD:6E:0D:4F:53:A0:8C:BF:24:07:7C:24:E4:03 Certificate issuer: /CN=71645BDB97FEBD6E0D4F53A08CBF24077C24E403 Certificate serial: 5AE3B6C0013FFF230184913122181E96F378261C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.mft Manifest number: 13 Signing time: Sat 16 May 2026 00:32:12 +0000 Manifest this update: Sat 16 May 2026 00:27:12 +0000 Manifest next update: Sun 17 May 2026 04:00:12 +0000 Files and hashes: 1: 3130332e3131372e38322e302f32332d3234203d3e20313335343438.roa (hash: jSBSE01bFNIgx3G9PIWj722UJJ7hQspo49sh3BoclUs=) 2: 3132352e36322e39322e302f32322d3234203d3e20313338383032.roa (hash: fIe5ivOarf67OW2F9hXTn+7dCpQiLZXrcOnnAzgWfZQ=) 3: 71645BDB97FEBD6E0D4F53A08CBF24077C24E403.crl (hash: rNw7CNKrDrFc+1RC9aRrGc8cF9s0Xb99XwmmsUvHhhg=) 4: 3130332e39372e3235312e302f32342d3234203d3e20313335343438.roa (hash: 1ClnarbK+m27NSskMGx6t2ycJpMm9Bjfs5h4sHIhDls=) 5: 3133392e352e34302e302f32322d3234203d3e20313335343438.roa (hash: FLE2sS5KzMoMGu8AryL/UH7mCUV7o+5G4oSkkHyigRI=) 6: 34352e3132322e35322e302f32322d3234203d3e20313335343438.roa (hash: 8N1IzAB8pkX4/FYSEzrTQt1a1/sgsTYFhzCROR3Q7kU=) 7: 34352e3132352e37322e302f32322d3234203d3e20313335343438.roa (hash: 715qMLL3zWMsWmsxBXBWi9NPtVddaj245ppj1A5IigM=) 8: 3130332e36342e31342e302f32342d3234203d3e20313335343438.roa (hash: cnZhDjgBV18bkSYzt4GtOPM77vSmVw7AFFCEwfJop2Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.crl rsync://rpki-rsync.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 May 2026 04:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:e3:b6:c0:01:3f:ff:23:01:84:91:31:22:18:1e:96:f3:78:26:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71645BDB97FEBD6E0D4F53A08CBF24077C24E403 Validity Not Before: May 16 00:27:12 2026 GMT Not After : May 17 04:00:12 2026 GMT Subject: CN=9ADCA144CB49D74979EB87E6B428170F2D96416A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:79:17:54:ef:e1:a2:9d:a9:19:1a:55:0b:37: 09:5b:dc:43:04:0f:d1:7e:72:f1:9e:5c:4e:85:fa: 07:74:12:d6:e9:8a:e9:4b:01:0e:66:71:90:16:7f: 3f:c0:be:76:15:3b:dc:ad:a5:77:98:ac:02:e4:40: 91:ee:a1:67:9b:72:f6:fc:95:c7:4e:a6:84:81:43: 8d:d3:28:7b:dd:84:fd:c5:10:32:4e:b5:0c:3d:00: c3:be:43:1a:4e:4c:86:68:6b:44:06:3a:34:90:4c: a3:58:58:e9:54:4b:c3:1d:cd:32:4e:4e:ca:f3:dc: af:b9:14:5d:5a:23:6d:c6:31:25:bb:d4:9c:b7:93: ff:08:4b:2c:07:90:62:11:34:7c:c1:0b:2d:e5:03: 59:8a:af:db:e0:46:71:73:3f:11:db:81:47:56:fa: ba:b2:48:1a:17:2c:f3:d9:96:46:7d:9e:b1:a3:be: e1:6f:9f:46:90:b8:dd:dd:76:10:17:e0:dd:96:5a: c9:71:d2:88:75:82:d9:9f:aa:d4:46:5f:4a:d0:8a: fa:f7:80:8c:7f:aa:44:97:c5:35:e0:f6:33:45:e9: 16:79:d5:b2:62:3d:5d:7b:43:33:95:2d:b7:f7:62: 71:c4:df:36:3b:dc:bd:42:b9:a1:7e:63:f6:3d:74: 21:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:DC:A1:44:CB:49:D7:49:79:EB:87:E6:B4:28:17:0F:2D:96:41:6A X509v3 Authority Key Identifier: keyid:71:64:5B:DB:97:FE:BD:6E:0D:4F:53:A0:8C:BF:24:07:7C:24:E4:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:6d:be:b4:45:73:5e:2d:84:12:5e:55:96:82:00:d3:eb:95: fe:b0:0f:f3:92:03:d1:a9:64:23:2a:95:3f:65:22:97:fa:bc: 30:e0:8b:75:fa:96:a1:2d:65:58:8b:72:cb:18:5c:f8:77:06: a7:55:14:91:09:a3:6c:9a:1c:35:25:48:2e:65:6e:00:1a:8e: 46:51:32:3e:a0:c1:b9:d0:e8:bc:89:ba:bd:f4:81:3d:a4:25: 9f:af:dd:55:f6:92:69:8a:a3:0f:78:1d:36:b4:77:1b:a9:32: ce:3a:0d:fd:69:99:e4:47:75:69:d6:2b:e7:96:59:03:04:92: 55:54:38:63:55:93:72:03:b1:9a:8d:9d:4d:a2:57:0d:29:27: 6c:ed:05:84:61:d0:74:ba:80:8e:f1:84:9f:78:c9:1b:21:18: 6c:06:71:59:37:c0:04:4f:5b:08:89:73:19:99:e7:3f:3e:e2: e6:e0:61:63:eb:10:a6:b6:51:a6:90:9d:a1:c0:47:c0:09:12: 5f:ff:b9:4e:7d:18:aa:69:00:cf:1a:90:8b:34:53:b6:02:f3: 06:61:39:ae:6f:8c:d1:5e:13:82:ac:ef:28:28:ae:2f:17:6b: f6:2f:a5:97:1a:3d:af:b2:76:4c:e1:4b:a4:06:90:42:b8:17: a0:aa:88:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWuO2wAE//yMBhJExIhgelvN4JhwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE2NDVCREI5N0ZFQkQ2RTBENEY1M0EwOENCRjI0MDc3 QzI0RTQwMzAeFw0yNjA1MTYwMDI3MTJaFw0yNjA1MTcwNDAwMTJaMDMxMTAvBgNV BAMTKDlBRENBMTQ0Q0I0OUQ3NDk3OUVCODdFNkI0MjgxNzBGMkQ5NjQxNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxeRdU7+GinakZGlULNwlb3EME D9F+cvGeXE6F+gd0EtbpiulLAQ5mcZAWfz/AvnYVO9ytpXeYrALkQJHuoWebcvb8 lcdOpoSBQ43TKHvdhP3FEDJOtQw9AMO+QxpOTIZoa0QGOjSQTKNYWOlUS8MdzTJO Tsrz3K+5FF1aI23GMSW71Jy3k/8ISywHkGIRNHzBCy3lA1mKr9vgRnFzPxHbgUdW +rqySBoXLPPZlkZ9nrGjvuFvn0aQuN3ddhAX4N2WWslx0oh1gtmfqtRGX0rQivr3 gIx/qkSXxTXg9jNF6RZ51bJiPV17QzOVLbf3YnHE3zY73L1CuaF+Y/Y9dCEvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmtyhRMtJ10l564fmtCgXDy2WQWowHwYDVR0j BBgwFoAUcWRb25f+vW4NT1OgjL8kB3wk5AMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDU5YWNiOTctNmU4Ny00ZTMxLWE1NjktYTI2NjBkZjRmMmI4LzAvNzE2NDVCREI5 N0ZFQkQ2RTBENEY1M0EwOENCRjI0MDc3QzI0RTQwMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MTY0NUJEQjk3RkVCRDZFMEQ0RjUzQTA4Q0JGMjQwNzdDMjRF NDAzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDU5YWNiOTctNmU4Ny00ZTMxLWE1 NjktYTI2NjBkZjRmMmI4LzAvNzE2NDVCREI5N0ZFQkQ2RTBENEY1M0EwOENCRjI0 MDc3QzI0RTQwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJZtvrRFc14thBJeVZaCANPrlf6wD/OSA9Gp ZCMqlT9lIpf6vDDgi3X6lqEtZViLcssYXPh3BqdVFJEJo2yaHDUlSC5lbgAajkZR Mj6gwbnQ6LyJur30gT2kJZ+v3VX2kmmKow94HTa0dxupMs46Df1pmeRHdWnWK+eW WQMEklVUOGNVk3IDsZqNnU2iVw0pJ2ztBYRh0HS6gI7xhJ94yRshGGwGcVk3wARP WwiJcxmZ5z8+4ubgYWPrEKa2UaaQnaHAR8AJEl//uU59GKppAM8akIs0U7YC8wZh Oa5vjNFeE4Ks7ygori8Xa/YvpZcaPa+ydkzhS6QGkEK4F6CqiMU= -----END CERTIFICATE-----Generated at Sat May 16 17:01:06 2026 by rpki-client