$ rpki-client -vvf repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.mft File: 71C1EFD5DFDE20418A49070671B01D675F9A8917.mft (raw, json) Hash identifier: egpslNNOq1ZwQYoCWr7sFWsgPsBvmJ/GdQDTrMbsYr8= Subject key identifier: 93:91:C2:3D:63:B0:14:44:54:9D:4D:AA:A6:DA:EA:83:D1:CA:3E:C9 Authority key identifier: 71:C1:EF:D5:DF:DE:20:41:8A:49:07:06:71:B0:1D:67:5F:9A:89:17 Certificate issuer: /CN=71C1EFD5DFDE20418A49070671B01D675F9A8917 Certificate serial: 1CB3F442D096617ABFD21991B83C2E0740B0A62F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71C1EFD5DFDE20418A49070671B01D675F9A8917.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.mft Manifest number: 02D8 Signing time: Sun 01 Mar 2026 16:51:55 +0000 Manifest this update: Sun 01 Mar 2026 16:46:55 +0000 Manifest next update: Wed 04 Mar 2026 19:03:55 +0000 Files and hashes: 1: 71C1EFD5DFDE20418A49070671B01D675F9A8917.crl (hash: zFd2GQXQE/0kViLE+RmJc5t/J2yn7qtjt9ejo0k2W5Q=) 2: 3130332e3137392e3231362e302f32332d3234203d3e20313339343439.roa (hash: 5sf8re0mhnirNB/CVBjr3dugWUOEZnIAdNv5SsfjaIQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.crl rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71C1EFD5DFDE20418A49070671B01D675F9A8917.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 19:03:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:b3:f4:42:d0:96:61:7a:bf:d2:19:91:b8:3c:2e:07:40:b0:a6:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C1EFD5DFDE20418A49070671B01D675F9A8917 Validity Not Before: Mar 1 16:46:55 2026 GMT Not After : Mar 4 19:03:55 2026 GMT Subject: CN=9391C23D63B01444549D4DAAA6DAEA83D1CA3EC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:44:69:60:a1:2e:4b:28:35:f4:ab:4f:c3:e4: 64:80:74:8e:5c:de:01:48:ff:92:37:ef:10:cb:f3: 14:37:44:db:9b:23:96:83:41:0d:9a:14:56:a8:9d: 68:fa:54:17:7c:a0:2d:d8:56:e5:92:8e:cc:28:e0: 1a:95:8f:f1:59:d2:a4:24:3e:17:ed:5f:fa:06:65: 31:5a:49:ee:cf:e9:73:71:f7:ea:fa:ab:21:46:95: c1:62:b1:16:11:9a:c1:a7:83:77:14:af:1f:0c:2e: 90:00:d7:23:63:ac:a7:9a:83:c3:ec:c8:c6:6e:c1: 26:99:47:1d:3c:45:8f:00:14:06:db:f8:4e:e7:74: 15:02:7b:c2:f6:e5:9f:7e:46:62:4c:1e:40:b4:a0: 65:f2:da:d6:17:01:14:8d:b6:7d:7d:ee:91:b6:e8: 69:ff:ee:c7:0e:43:54:80:b2:35:26:f7:4a:de:19: 17:93:13:66:18:b9:e3:db:55:f3:6d:32:20:b3:56: 8a:66:f1:8d:eb:b3:32:e4:72:ba:79:67:c8:c7:7a: e6:96:e4:22:cc:9b:79:6f:d8:83:c2:5e:ab:85:b9: d9:7e:84:ca:0d:07:12:f9:66:8e:aa:af:46:53:64: d6:27:e3:b2:65:f5:eb:19:de:60:19:80:f7:6a:af: df:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:91:C2:3D:63:B0:14:44:54:9D:4D:AA:A6:DA:EA:83:D1:CA:3E:C9 X509v3 Authority Key Identifier: keyid:71:C1:EF:D5:DF:DE:20:41:8A:49:07:06:71:B0:1D:67:5F:9A:89:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71C1EFD5DFDE20418A49070671B01D675F9A8917.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:6f:b6:88:24:18:d7:88:32:4a:2b:32:95:fc:90:d5:ca:0c: 7b:c7:7f:be:b8:88:29:14:94:11:a9:00:6e:25:66:fd:75:94: 24:98:5a:24:fa:15:68:8b:a4:40:1a:1b:91:bd:c2:ce:47:aa: 7f:66:28:0f:7c:8a:54:ae:83:d1:0d:d8:35:18:5a:87:2b:7f: aa:8a:e8:b7:47:d0:95:9a:12:78:5b:61:87:d1:3e:ca:23:66: d5:0e:69:63:e4:09:17:36:04:7a:e6:9a:d4:f8:b9:3e:78:20: f7:b4:45:bd:ea:cf:91:80:d5:3c:46:5c:bc:8a:93:b7:73:7a: 94:c8:8e:e7:c5:71:0a:1b:08:28:43:10:ce:8d:e3:46:4e:b8: 1e:77:8a:5b:b1:a9:2b:6e:b4:14:bd:8c:1e:1b:0e:15:68:2d: 27:95:5a:ae:14:ea:9b:1d:b9:e8:03:25:5a:06:32:00:9c:eb: 1d:75:3a:22:08:2d:bb:a3:dc:8a:05:33:4e:d5:eb:30:42:87: 80:49:4e:f5:2d:c6:98:83:24:36:89:f3:21:cc:5c:05:ac:20: 31:c0:11:5b:f9:21:af:4a:6a:c9:8d:c7:df:51:47:7c:bd:2b: 88:b6:a5:91:f8:67:b5:1e:e2:cd:06:75:50:9a:f4:10:f1:76: 65:09:9d:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHLP0QtCWYXq/0hmRuDwuB0Cwpi8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDMUVGRDVERkRFMjA0MThBNDkwNzA2NzFCMDFENjc1 RjlBODkxNzAeFw0yNjAzMDExNjQ2NTVaFw0yNjAzMDQxOTAzNTVaMDMxMTAvBgNV BAMTKDkzOTFDMjNENjNCMDE0NDQ1NDlENERBQUE2REFFQTgzRDFDQTNFQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrRGlgoS5LKDX0q0/D5GSAdI5c 3gFI/5I37xDL8xQ3RNubI5aDQQ2aFFaonWj6VBd8oC3YVuWSjswo4BqVj/FZ0qQk PhftX/oGZTFaSe7P6XNx9+r6qyFGlcFisRYRmsGng3cUrx8MLpAA1yNjrKeag8Ps yMZuwSaZRx08RY8AFAbb+E7ndBUCe8L25Z9+RmJMHkC0oGXy2tYXARSNtn197pG2 6Gn/7scOQ1SAsjUm90reGReTE2YYuePbVfNtMiCzVopm8Y3rszLkcrp5Z8jHeuaW 5CLMm3lv2IPCXquFudl+hMoNBxL5Zo6qr0ZTZNYn47Jl9esZ3mAZgPdqr9/XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk5HCPWOwFERUnU2qptrqg9HKPskwHwYDVR0j BBgwFoAUccHv1d/eIEGKSQcGcbAdZ1+aiRcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NWVhYjQ0Mi03NDgwLTQ1ODEtODFkZC0yM2EyMDA2MTQzODIvMC83MUMxRUZENURG REUyMDQxOEE0OTA3MDY3MUIwMUQ2NzVGOUE4OTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzFDMUVGRDVERkRFMjA0MThBNDkwNzA2NzFCMDFENjc1RjlB ODkxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDVlYWI0NDItNzQ4MC00NTgxLTgx ZGQtMjNhMjAwNjE0MzgyLzAvNzFDMUVGRDVERkRFMjA0MThBNDkwNzA2NzFCMDFE Njc1RjlBODkxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGJvtogkGNeIMkorMpX8kNXKDHvHf764iCkU lBGpAG4lZv11lCSYWiT6FWiLpEAaG5G9ws5Hqn9mKA98ilSug9EN2DUYWocrf6qK 6LdH0JWaEnhbYYfRPsojZtUOaWPkCRc2BHrmmtT4uT54IPe0Rb3qz5GA1TxGXLyK k7dzepTIjufFcQobCChDEM6N40ZOuB53iluxqStutBS9jB4bDhVoLSeVWq4U6psd uegDJVoGMgCc6x11OiIILbuj3IoFM07V6zBCh4BJTvUtxpiDJDaJ8yHMXAWsIDHA EVv5Ia9KasmNx99RR3y9K4i2pZH4Z7Ue4s0GdVCa9BDxdmUJnS0= -----END CERTIFICATE-----Generated at Mon Mar 2 15:43:05 2026 by rpki-client