$ rpki-client -vvf repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.mft File: 71876CD3DD087E9543A347F614A4D24A87A40F95.mft (raw, json) Hash identifier: vy6atOliFlVeQ6+PT+JqNW/N8gRI7lkBQlfsNWrIraQ= Subject key identifier: 71:1B:24:15:91:F0:38:D4:6A:12:75:EF:57:9F:7B:96:DC:83:B9:60 Authority key identifier: 71:87:6C:D3:DD:08:7E:95:43:A3:47:F6:14:A4:D2:4A:87:A4:0F:95 Certificate issuer: /CN=71876CD3DD087E9543A347F614A4D24A87A40F95 Certificate serial: 71D76E7B57A7550EC7E54F89B5E2563E46902E44 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71876CD3DD087E9543A347F614A4D24A87A40F95.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.mft Manifest number: 0213 Signing time: Thu 16 Apr 2026 21:10:53 +0000 Manifest this update: Thu 16 Apr 2026 21:05:53 +0000 Manifest next update: Sun 19 Apr 2026 22:30:53 +0000 Files and hashes: 1: 3130332e3130372e3230362e302f32342d3234203d3e20313431313238.roa (hash: o+ObFNPOeoy9QHMr9JkuLi0Oplv3Nwb5WNwb7QDMg90=) 2: 71876CD3DD087E9543A347F614A4D24A87A40F95.crl (hash: tPSZ1a6elqb9ZJRUHnzS2I8hNx+wN4s4sRsNBLq/IdY=) 3: 3130332e3135382e3133302e302f32342d3234203d3e20313431313238.roa (hash: InJPaa/K/Tdw95KsetWVBO6eC2FHgWnfV4A1F9baTg0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.crl rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71876CD3DD087E9543A347F614A4D24A87A40F95.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 22:30:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:d7:6e:7b:57:a7:55:0e:c7:e5:4f:89:b5:e2:56:3e:46:90:2e:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71876CD3DD087E9543A347F614A4D24A87A40F95 Validity Not Before: Apr 16 21:05:53 2026 GMT Not After : Apr 19 22:30:53 2026 GMT Subject: CN=711B241591F038D46A1275EF579F7B96DC83B960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f4:f1:d5:e4:89:4c:69:15:36:39:79:ac:07: 4e:9e:b4:96:79:e6:98:cc:fa:e9:f1:0d:31:07:a7: c8:89:68:64:94:56:f6:27:7a:11:38:5a:42:5f:16: 46:06:74:02:9d:0c:6f:5a:f9:57:2c:82:64:8a:00: 4e:57:f6:b8:f8:da:f5:ed:8c:3c:a5:83:c3:a9:5e: e2:67:dc:cc:7e:9e:24:30:ca:70:a2:24:66:cb:e7: d9:65:45:ad:99:b1:d3:be:29:6e:c1:09:7e:53:65: c4:1e:8f:fe:d0:0a:4b:ce:6c:c2:48:d6:03:3f:3e: 9c:33:49:5e:d6:64:8b:07:00:ae:c4:22:b1:f5:7a: dc:f2:13:19:85:52:08:1d:cc:b6:83:be:ef:ef:7b: 36:55:92:2a:86:fd:68:3e:51:0b:1d:ea:b7:bc:1c: bf:7d:ee:53:7f:27:d6:5d:47:83:c5:ee:16:c8:a3: 8a:92:67:9a:d5:d7:6b:94:83:e2:fb:b4:24:60:4c: f9:7b:f7:7b:94:aa:90:4e:4f:bd:5f:66:c5:2d:e5: a2:cb:1b:59:d6:3b:fd:98:0a:50:cb:20:70:7b:fb: ff:11:9c:d8:1d:9e:8f:18:ea:6d:8b:10:a0:b7:c8: 95:84:a1:f6:f8:77:ed:cf:8e:89:0f:b3:52:cd:3e: 4d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:1B:24:15:91:F0:38:D4:6A:12:75:EF:57:9F:7B:96:DC:83:B9:60 X509v3 Authority Key Identifier: keyid:71:87:6C:D3:DD:08:7E:95:43:A3:47:F6:14:A4:D2:4A:87:A4:0F:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71876CD3DD087E9543A347F614A4D24A87A40F95.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:35:91:f7:57:87:3d:0c:50:23:f4:15:79:36:c7:61:42:73: 15:e3:1c:af:45:a0:2b:80:e6:20:e1:5e:84:f2:b5:38:bd:e4: 60:1c:c1:25:cb:ad:ee:b9:8f:41:67:65:7b:1e:58:ee:e6:38: 20:f7:1d:7b:24:ad:8e:02:65:43:bc:10:00:ed:3e:76:8f:43: 21:6b:e9:42:a2:84:24:72:9c:71:74:17:41:a4:51:03:b7:ae: b0:82:02:63:34:c8:b1:19:b6:43:6d:67:9e:90:2b:eb:74:38: 23:6f:d0:65:27:b9:8a:fa:eb:b6:78:16:fe:df:6a:e4:87:c7: 92:af:91:26:7e:ec:d4:ce:a3:5c:79:b5:17:77:10:8c:75:45: b3:a8:f4:bb:59:9f:d1:67:fe:67:8c:e3:60:02:bb:79:d5:aa: b1:a5:26:1c:3e:61:d1:05:48:ae:0e:70:0c:1f:65:13:a8:4f: 2d:a8:29:9e:99:99:61:fc:5f:87:4c:89:1d:69:64:58:ed:5e: dc:74:e1:85:7a:91:2c:5d:86:43:fc:19:40:5b:89:1e:44:23: 78:67:3a:7d:ab:7b:ca:aa:72:7d:00:b4:e2:04:5b:e4:65:28: e0:3f:00:63:f3:4f:0c:d2:a6:f3:6b:d1:32:ed:5e:17:04:55: 20:99:c0:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcddue1enVQ7H5U+JteJWPkaQLkQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE4NzZDRDNERDA4N0U5NTQzQTM0N0Y2MTRBNEQyNEE4 N0E0MEY5NTAeFw0yNjA0MTYyMTA1NTNaFw0yNjA0MTkyMjMwNTNaMDMxMTAvBgNV BAMTKDcxMUIyNDE1OTFGMDM4RDQ2QTEyNzVFRjU3OUY3Qjk2REM4M0I5NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC59PHV5IlMaRU2OXmsB06etJZ5 5pjM+unxDTEHp8iJaGSUVvYnehE4WkJfFkYGdAKdDG9a+VcsgmSKAE5X9rj42vXt jDylg8OpXuJn3Mx+niQwynCiJGbL59llRa2ZsdO+KW7BCX5TZcQej/7QCkvObMJI 1gM/PpwzSV7WZIsHAK7EIrH1etzyExmFUggdzLaDvu/vezZVkiqG/Wg+UQsd6re8 HL997lN/J9ZdR4PF7hbIo4qSZ5rV12uUg+L7tCRgTPl793uUqpBOT71fZsUt5aLL G1nWO/2YClDLIHB7+/8RnNgdno8Y6m2LEKC3yJWEofb4d+3PjokPs1LNPk1xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcRskFZHwONRqEnXvV597ltyDuWAwHwYDVR0j BBgwFoAUcYds090IfpVDo0f2FKTSSoekD5UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NWRlY2E4Mi04OWFiLTQ1ODItOGU4Mi04ZWM4YTUxZmVjNDIvMC83MTg3NkNEM0RE MDg3RTk1NDNBMzQ3RjYxNEE0RDI0QTg3QTQwRjk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzE4NzZDRDNERDA4N0U5NTQzQTM0N0Y2MTRBNEQyNEE4N0E0 MEY5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTVkZWNhODItODlhYi00NTgyLThl ODItOGVjOGE1MWZlYzQyLzAvNzE4NzZDRDNERDA4N0U5NTQzQTM0N0Y2MTRBNEQy NEE4N0E0MEY5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEQ1kfdXhz0MUCP0FXk2x2FCcxXjHK9FoCuA 5iDhXoTytTi95GAcwSXLre65j0FnZXseWO7mOCD3HXskrY4CZUO8EADtPnaPQyFr 6UKihCRynHF0F0GkUQO3rrCCAmM0yLEZtkNtZ56QK+t0OCNv0GUnuYr667Z4Fv7f auSHx5KvkSZ+7NTOo1x5tRd3EIx1RbOo9LtZn9Fn/meM42ACu3nVqrGlJhw+YdEF SK4OcAwfZROoTy2oKZ6ZmWH8X4dMiR1pZFjtXtx04YV6kSxdhkP8GUBbiR5EI3hn On2re8qqcn0AtOIEW+RlKOA/AGPzTwzSpvNr0TLtXhcEVSCZwL8= -----END CERTIFICATE-----Generated at Fri Apr 17 23:38:24 2026 by rpki-client