$ rpki-client -vvvf rpki-rsync.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/71468BECC53B96325385ED8BB32F3639F1F5E487.mft File: 71468BECC53B96325385ED8BB32F3639F1F5E487.mft (raw, json) Hash identifier: g0Mq+1ooB1hy3+aIOCbIcu2gk4r3fjEOwKFbqqQBLCw= Subject key identifier: 49:01:97:69:5E:36:A2:E4:B7:07:EE:78:05:AD:92:70:A5:08:E9:02 Authority key identifier: 71:46:8B:EC:C5:3B:96:32:53:85:ED:8B:B3:2F:36:39:F1:F5:E4:87 Certificate issuer: /CN=71468BECC53B96325385ED8BB32F3639F1F5E487 Certificate serial: 0CBD8F1FF6C97723690EC500E3850503D2AB9216 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71468BECC53B96325385ED8BB32F3639F1F5E487.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/71468BECC53B96325385ED8BB32F3639F1F5E487.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 11:22:36 +0000 Manifest this update: Thu 17 Sep 2026 11:17:36 +0000 Manifest next update: Fri 18 Sep 2026 12:56:36 +0000 Files and hashes: 1: 71468BECC53B96325385ED8BB32F3639F1F5E487.crl (hash: w8LyBTic7Xh99CCWp/Lp/xJU9HkOXOMnczeJa79uiGE=) 2: 3130332e36362e33362e302f32342d3234203d3e20313530323233.roa (hash: cbw+qMwfHCXDiTnr7sY/MlfwfCUda213WDrCyTfAh4Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/71468BECC53B96325385ED8BB32F3639F1F5E487.crl rsync://rpki-rsync.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/71468BECC53B96325385ED8BB32F3639F1F5E487.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71468BECC53B96325385ED8BB32F3639F1F5E487.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:bd:8f:1f:f6:c9:77:23:69:0e:c5:00:e3:85:05:03:d2:ab:92:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71468BECC53B96325385ED8BB32F3639F1F5E487 Validity Not Before: Sep 17 11:17:36 2026 GMT Not After : Sep 18 12:56:36 2026 GMT Subject: CN=490197695E36A2E4B707EE7805AD9270A508E902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:57:f3:75:a6:ae:8d:e8:a5:be:34:59:4c:79: 5c:75:06:6a:0f:da:67:a1:51:c0:6f:cc:c6:3c:8a: a9:41:c2:21:1d:1c:af:fe:0c:eb:f2:5b:7d:9a:b8: 4e:af:01:62:f1:ad:7b:15:6e:ef:59:0e:40:83:16: 3e:ee:75:66:56:8a:c0:84:ca:ff:e6:0c:34:d5:94: c9:8c:7a:b3:4d:4a:6b:9f:ed:cc:5c:82:62:bb:6e: 7e:8e:4f:07:e7:f4:12:27:b9:4e:fa:3f:78:1d:36: 78:9b:40:dc:2c:3e:98:09:f8:36:9a:ed:a9:98:37: b3:ae:64:eb:ef:37:0d:46:db:51:62:b2:cc:20:c3: 4c:40:b9:ad:0c:98:f4:55:94:9d:81:8f:c0:f8:ec: 39:0d:13:67:c4:f0:8b:d1:36:c1:34:3c:d1:13:e7: 80:9c:65:21:64:a7:ad:82:94:16:b5:6f:45:19:ee: 5c:fa:d3:ef:8b:e2:18:c5:ff:a7:fa:ff:cc:ba:dd: 18:58:ea:30:9f:b4:63:10:a5:eb:27:44:1c:f9:be: 7f:6b:e0:b5:52:1c:02:7b:39:10:61:9a:28:59:8c: 78:42:66:3f:83:a4:97:e9:3e:0a:56:3e:4e:37:01: b4:5b:59:f2:be:4c:bc:ae:99:18:71:d4:dd:f9:65: 64:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:01:97:69:5E:36:A2:E4:B7:07:EE:78:05:AD:92:70:A5:08:E9:02 X509v3 Authority Key Identifier: keyid:71:46:8B:EC:C5:3B:96:32:53:85:ED:8B:B3:2F:36:39:F1:F5:E4:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/71468BECC53B96325385ED8BB32F3639F1F5E487.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71468BECC53B96325385ED8BB32F3639F1F5E487.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/71468BECC53B96325385ED8BB32F3639F1F5E487.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:7d:38:84:b9:75:7e:8c:76:51:ff:c1:1c:35:4d:be:59:e4: 7e:2e:f2:61:19:04:59:6a:2e:48:a1:a8:b1:5d:57:64:81:47: 5d:ba:41:95:55:29:41:92:76:20:63:4d:d5:6a:05:5d:09:d1: 45:e6:5c:ac:62:4c:16:63:be:fe:16:55:27:a6:b4:17:8d:15: bb:37:3a:78:9c:37:b1:ca:16:76:65:3c:1d:0c:c5:ec:c4:e8: 55:92:4b:d6:49:2b:05:e2:9b:03:cf:61:08:ac:83:3d:63:24: 33:61:d8:62:12:d3:c1:ad:a6:67:84:29:f8:e5:80:2f:0b:54: 88:da:79:52:bc:30:5c:ea:15:d6:56:41:e2:a5:33:bc:78:02: 09:27:da:4d:f2:2f:b7:09:2e:e3:8d:de:36:f0:e1:ed:f5:16: 71:9e:ba:23:71:91:96:a4:2e:d1:47:1f:12:8d:1b:17:51:33: 08:ad:e3:0f:0b:a7:54:4f:ee:f1:43:af:ec:8c:53:4e:02:99: a0:c6:28:b1:d5:66:bd:ef:79:86:7e:cb:4f:9a:e0:b7:73:77: d0:18:90:86:4f:6f:8c:fc:3b:88:16:5d:b5:8b:e7:18:20:a8: 9a:6b:02:9a:10:7e:93:ba:21:e6:dc:9c:21:0f:83:3f:b6:04: 31:aa:14:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDL2PH/bJdyNpDsUA44UFA9KrkhYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE0NjhCRUNDNTNCOTYzMjUzODVFRDhCQjMyRjM2MzlG MUY1RTQ4NzAeFw0yNjA5MTcxMTE3MzZaFw0yNjA5MTgxMjU2MzZaMDMxMTAvBgNV BAMTKDQ5MDE5NzY5NUUzNkEyRTRCNzA3RUU3ODA1QUQ5MjcwQTUwOEU5MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3V/N1pq6N6KW+NFlMeVx1BmoP 2mehUcBvzMY8iqlBwiEdHK/+DOvyW32auE6vAWLxrXsVbu9ZDkCDFj7udWZWisCE yv/mDDTVlMmMerNNSmuf7cxcgmK7bn6OTwfn9BInuU76P3gdNnibQNwsPpgJ+Daa 7amYN7OuZOvvNw1G21Fisswgw0xAua0MmPRVlJ2Bj8D47DkNE2fE8IvRNsE0PNET 54CcZSFkp62ClBa1b0UZ7lz60++L4hjF/6f6/8y63RhY6jCftGMQpesnRBz5vn9r 4LVSHAJ7ORBhmihZjHhCZj+DpJfpPgpWPk43AbRbWfK+TLyumRhx1N35ZWTFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSQGXaV42ouS3B+54Ba2ScKUI6QIwHwYDVR0j BBgwFoAUcUaL7MU7ljJThe2Lsy82OfH15IcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTJkYmQ3ODUtNmJjYS00OTNiLThhNjUtM2I1Mjc3MDA3ZmVkLzAvNzE0NjhCRUND NTNCOTYzMjUzODVFRDhCQjMyRjM2MzlGMUY1RTQ4Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MTQ2OEJFQ0M1M0I5NjMyNTM4NUVEOEJCMzJGMzYzOUYxRjVF NDg3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTJkYmQ3ODUtNmJjYS00OTNiLThh NjUtM2I1Mjc3MDA3ZmVkLzAvNzE0NjhCRUNDNTNCOTYzMjUzODVFRDhCQjMyRjM2 MzlGMUY1RTQ4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABt9OIS5dX6MdlH/wRw1Tb5Z5H4u8mEZBFlq LkihqLFdV2SBR126QZVVKUGSdiBjTdVqBV0J0UXmXKxiTBZjvv4WVSemtBeNFbs3 OnicN7HKFnZlPB0MxezE6FWSS9ZJKwXimwPPYQisgz1jJDNh2GIS08GtpmeEKfjl gC8LVIjaeVK8MFzqFdZWQeKlM7x4Agkn2k3yL7cJLuON3jbw4e31FnGeuiNxkZak LtFHHxKNGxdRMwit4w8Lp1RP7vFDr+yMU04CmaDGKLHVZr3veYZ+y0+a4Ldzd9AY kIZPb4z8O4gWXbWL5xggqJprApoQfpO6IebcnCEPgz+2BDGqFNM= -----END CERTIFICATE-----Generated at Thu Sep 17 15:09:57 2026 by rpki-client