$ rpki-client -vvf repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft File: A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft (raw, json) Hash identifier: fvkctisZhc21qfhJGq8TRQMsTlMGmIvfiktNpvOdR0o= Subject key identifier: F4:D5:FF:32:46:3A:F6:7A:A2:BD:0D:8F:CA:5A:81:70:28:F6:70:7B Authority key identifier: A7:1B:AA:66:62:38:47:B7:BD:9E:A7:C4:0B:CB:CA:85:5E:52:E8:EB Certificate issuer: /CN=A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB Certificate serial: 06FE67050F4A4FD16FD5DDF4C56C836DF4590F85 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft Manifest number: 0110 Signing time: Wed 15 Apr 2026 20:11:05 +0000 Manifest this update: Wed 15 Apr 2026 20:06:05 +0000 Manifest next update: Sun 19 Apr 2026 03:54:05 +0000 Files and hashes: 1: A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.crl (hash: QFKBZopbK3H2vPnmwEceEOiVfsnCeBopH02LAkYlgaE=) 2: 3136302e32302e33362e302f32332d3234203d3e20313532373631.roa (hash: e3Ye+8KBt0e+GgLTg5uGXR8hoI4RqWYobVVv7ZziGMY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.crl rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 03:54:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:fe:67:05:0f:4a:4f:d1:6f:d5:dd:f4:c5:6c:83:6d:f4:59:0f:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB Validity Not Before: Apr 15 20:06:05 2026 GMT Not After : Apr 19 03:54:05 2026 GMT Subject: CN=F4D5FF32463AF67AA2BD0D8FCA5A817028F6707B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:6b:e7:b2:14:7b:e1:8d:ef:b3:21:8f:bf:3e: 8a:96:2e:26:ed:b7:8d:8f:9d:e6:73:6a:28:fa:c4: 61:70:42:71:82:e3:b8:66:c8:ba:22:8b:9f:ac:7d: db:6f:6d:e8:a5:bd:13:c5:3b:46:25:57:a9:08:82: a4:59:91:81:6b:b4:a8:c8:4c:a3:87:c5:13:d0:43: 4a:64:54:59:9b:46:45:52:27:2a:47:3f:3a:7a:0e: d2:38:24:0a:37:89:53:fb:8d:91:c0:ef:fa:a7:9c: 42:3f:d4:a3:50:38:8b:43:c6:b9:86:ac:d9:ae:9d: cd:9e:53:3c:7e:6b:36:38:f3:25:08:93:97:77:be: f9:66:89:7e:1a:42:3b:18:ef:63:84:88:4c:fd:a4: 81:1e:92:1c:e3:c7:c1:1b:3b:99:e1:f2:b4:ba:1f: 99:2a:f9:cc:34:d6:b5:19:45:09:c4:84:d0:41:72: 19:a5:87:8a:8d:20:72:06:44:af:12:a2:a8:ea:07: 75:6c:a2:e7:bf:ba:27:70:0f:3a:a8:c9:24:ac:d5: c1:dc:82:52:7b:c7:28:8c:47:e2:d2:02:c6:66:70: 5f:bb:67:d5:34:1a:17:f0:3c:c3:a2:89:6e:5d:c7: 51:f9:ab:ce:27:59:e6:a9:40:f1:4d:cb:d0:db:e4: 4b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:D5:FF:32:46:3A:F6:7A:A2:BD:0D:8F:CA:5A:81:70:28:F6:70:7B X509v3 Authority Key Identifier: keyid:A7:1B:AA:66:62:38:47:B7:BD:9E:A7:C4:0B:CB:CA:85:5E:52:E8:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:cf:17:ba:e8:a0:d7:7f:9f:4d:2b:0d:56:99:c6:f3:a8:be: 13:5a:ee:ef:f2:d0:d8:30:a7:1b:ab:00:80:c5:65:45:ad:16: ed:a8:34:b5:df:d7:b0:ff:b7:ee:76:4a:6a:57:e5:63:e1:fe: 05:bc:f4:35:3a:12:51:b1:38:47:23:9c:28:c4:c5:db:00:e2: 2c:35:1f:21:70:fa:52:43:bd:f4:b0:16:bc:4a:a1:60:22:82: ef:b8:61:bf:22:ba:92:52:80:3b:90:bb:f1:82:56:70:2b:39: e2:21:79:ab:fc:f2:79:ab:4a:52:2b:e7:2a:67:db:e6:5e:2d: a0:e7:17:ea:ea:1d:b0:89:e9:ab:e0:ff:be:37:90:24:fc:21: 2b:24:9c:a6:58:e0:54:fe:55:50:85:74:ea:88:e8:24:66:00: c3:9c:d4:61:1f:33:28:88:d1:5f:6f:2c:34:ba:24:66:28:0b: 7e:74:cb:5a:c1:04:81:d4:d7:72:24:9e:8a:62:c7:a9:95:54: 3c:13:36:7b:98:e3:ec:1d:69:bb:42:25:f2:26:f9:36:7e:4e: d1:79:04:de:02:80:70:0a:62:50:3c:02:2c:58:15:a7:ce:57: c3:3a:ec:a1:bb:fd:a8:10:d6:db:d2:ef:1d:13:c8:df:16:5e: 29:4f:d0:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBv5nBQ9KT9Fv1d30xWyDbfRZD4UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcxQkFBNjY2MjM4NDdCN0JEOUVBN0M0MEJDQkNBODU1 RTUyRThFQjAeFw0yNjA0MTUyMDA2MDVaFw0yNjA0MTkwMzU0MDVaMDMxMTAvBgNV BAMTKEY0RDVGRjMyNDYzQUY2N0FBMkJEMEQ4RkNBNUE4MTcwMjhGNjcwN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDba+eyFHvhje+zIY+/PoqWLibt t42PneZzaij6xGFwQnGC47hmyLoii5+sfdtvbeilvRPFO0YlV6kIgqRZkYFrtKjI TKOHxRPQQ0pkVFmbRkVSJypHPzp6DtI4JAo3iVP7jZHA7/qnnEI/1KNQOItDxrmG rNmunc2eUzx+azY48yUIk5d3vvlmiX4aQjsY72OEiEz9pIEekhzjx8EbO5nh8rS6 H5kq+cw01rUZRQnEhNBBchmlh4qNIHIGRK8SoqjqB3Vsoue/uidwDzqoySSs1cHc glJ7xyiMR+LSAsZmcF+7Z9U0GhfwPMOiiW5dx1H5q84nWeapQPFNy9Db5EvtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9NX/MkY69nqivQ2PylqBcCj2cHswHwYDVR0j BBgwFoAUpxuqZmI4R7e9nqfEC8vKhV5S6OswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODFlZjQ0MC01YTVmLTRhNGYtYjUwOS1iMTAzMjQ1YzVjZjEvMC9BNzFCQUE2NjYy Mzg0N0I3QkQ5RUE3QzQwQkNCQ0E4NTVFNTJFOEVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTcxQkFBNjY2MjM4NDdCN0JEOUVBN0M0MEJDQkNBODU1RTUy RThFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjgxZWY0NDAtNWE1Zi00YTRmLWI1 MDktYjEwMzI0NWM1Y2YxLzAvQTcxQkFBNjY2MjM4NDdCN0JEOUVBN0M0MEJDQkNB ODU1RTUyRThFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKLPF7rooNd/n00rDVaZxvOovhNa7u/y0Ngw pxurAIDFZUWtFu2oNLXf17D/t+52SmpX5WPh/gW89DU6ElGxOEcjnCjExdsA4iw1 HyFw+lJDvfSwFrxKoWAigu+4Yb8iupJSgDuQu/GCVnArOeIheav88nmrSlIr5ypn 2+ZeLaDnF+rqHbCJ6avg/743kCT8ISsknKZY4FT+VVCFdOqI6CRmAMOc1GEfMyiI 0V9vLDS6JGYoC350y1rBBIHU13Iknopix6mVVDwTNnuY4+wdabtCJfIm+TZ+TtF5 BN4CgHAKYlA8AixYFafOV8M67KG7/agQ1tvS7x0TyN8WXilP0J4= -----END CERTIFICATE-----Generated at Fri Apr 17 22:49:23 2026 by rpki-client