$ rpki-client -vvf repo-rpki.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/1/71541EF74561083EF5B89C20FF0ECD5E565A4C9E.mft File: 71541EF74561083EF5B89C20FF0ECD5E565A4C9E.mft (raw, json) Hash identifier: pvsP1N63LBrZH1AW1HY3INLOB+J0nd23laVgZ++tjkU= Subject key identifier: 60:00:53:86:35:BE:8B:73:16:DB:BA:67:E5:6B:B7:C4:A9:81:02:E1 Authority key identifier: 71:54:1E:F7:45:61:08:3E:F5:B8:9C:20:FF:0E:CD:5E:56:5A:4C:9E Certificate issuer: /CN=71541EF74561083EF5B89C20FF0ECD5E565A4C9E Certificate serial: 0A0412C3F36F971A1F90A2138AAB4B55CB5127E2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/71541EF74561083EF5B89C20FF0ECD5E565A4C9E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/1/71541EF74561083EF5B89C20FF0ECD5E565A4C9E.mft Manifest number: 05 Signing time: Wed 15 Apr 2026 21:12:21 +0000 Manifest this update: Wed 15 Apr 2026 21:07:21 +0000 Manifest next update: Sun 19 Apr 2026 03:50:21 +0000 Files and hashes: 1: 71541EF74561083EF5B89C20FF0ECD5E565A4C9E.crl (hash: Q2LyFuSaC5XC5QfcFwMJjjTw/0vmTb6CR6cdhjkdiUQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/1/71541EF74561083EF5B89C20FF0ECD5E565A4C9E.crl rsync://repo-rpki.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/1/71541EF74561083EF5B89C20FF0ECD5E565A4C9E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/71541EF74561083EF5B89C20FF0ECD5E565A4C9E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 03:50:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:04:12:c3:f3:6f:97:1a:1f:90:a2:13:8a:ab:4b:55:cb:51:27:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71541EF74561083EF5B89C20FF0ECD5E565A4C9E Validity Not Before: Apr 15 21:07:21 2026 GMT Not After : Apr 19 03:50:21 2026 GMT Subject: CN=6000538635BE8B7316DBBA67E56BB7C4A98102E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:08:77:a2:70:9c:e4:29:6f:92:7b:f2:cf:d4: 6d:c4:e8:ed:44:b6:2d:80:c9:f9:e6:1d:1f:4d:1a: 07:40:7a:55:f6:d6:0a:57:7d:2d:02:7b:5c:b4:05: 7b:88:a8:2a:3a:00:dc:c0:ea:e3:f8:b5:d3:23:d4: 15:8a:f9:a4:eb:12:9f:d4:56:d6:20:c8:ae:12:39: 88:c5:94:9d:f4:67:ba:0f:f6:47:87:a7:dc:78:98: c9:35:55:a3:5c:8e:46:43:1a:db:69:b2:27:c9:6a: 22:e6:c5:a4:cc:d4:68:95:9f:75:52:24:43:ce:c5: b9:6d:a9:2d:91:16:c0:f3:82:77:10:c4:79:92:d9: 05:98:36:47:e0:92:98:4b:0c:6e:c8:da:da:af:b5: ae:80:bd:5f:e8:cd:ff:06:02:2c:a9:1b:00:c4:c0: c9:e6:01:12:cc:1d:70:93:46:3a:26:f8:4e:ef:2e: 83:be:02:4e:70:c1:14:c3:31:43:96:97:40:58:27: e2:69:4a:21:62:94:f0:14:d2:80:a4:cb:7b:ba:f1: 5d:92:dd:21:89:5e:a6:91:0f:0d:0a:e7:5e:e1:8e: 15:c0:ae:6e:8c:b9:26:43:96:c7:e3:63:9f:2c:91: 47:7e:a3:cc:a6:e0:93:f4:a1:8b:c7:77:42:a4:2a: d6:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:00:53:86:35:BE:8B:73:16:DB:BA:67:E5:6B:B7:C4:A9:81:02:E1 X509v3 Authority Key Identifier: keyid:71:54:1E:F7:45:61:08:3E:F5:B8:9C:20:FF:0E:CD:5E:56:5A:4C:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/1/71541EF74561083EF5B89C20FF0ECD5E565A4C9E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/71541EF74561083EF5B89C20FF0ECD5E565A4C9E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/1/71541EF74561083EF5B89C20FF0ECD5E565A4C9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:92:7f:0e:2e:bd:9b:24:c9:82:d4:df:da:bf:5a:88:1e:f8: 19:18:28:be:8a:fc:22:2a:a7:1e:95:1a:05:60:6b:c0:f3:66: 51:56:82:81:e8:d7:20:68:1f:2c:fb:6a:34:0b:60:63:9e:3f: ca:0f:0d:46:94:03:57:01:6a:9c:ae:15:2f:cc:21:2b:c4:10: db:6f:57:71:d5:e2:e5:89:6c:5a:69:f2:46:49:ce:5e:b3:91: 0d:fc:74:9d:71:ba:bf:6a:1e:d4:ad:18:87:c8:8d:1c:0b:0d: 62:66:84:8d:fa:9e:d0:1d:f8:9c:ac:af:c0:d9:86:84:ac:7b: 06:c2:fd:41:6d:0c:d5:ad:35:9a:a2:89:3c:cf:0e:92:11:f0: 10:60:23:41:a6:30:39:22:11:fa:c1:ba:73:88:3a:ea:f6:30: 0c:fa:e2:3d:cd:f1:ed:5e:68:48:cf:7b:e4:8c:ab:64:06:0f: e2:6a:a2:ac:ee:72:bb:26:ca:26:d1:61:48:74:05:27:d7:25: fb:59:dc:f5:07:b4:b8:93:c1:a1:24:51:e2:fc:0e:0b:4f:0a: 3d:37:eb:2b:5d:aa:0a:cc:5d:db:1a:18:5d:39:2e:26:bc:9f: 07:28:57:6b:ff:18:88:63:c9:db:e4:a9:12:94:16:47:7d:78: 06:31:6a:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCgQSw/NvlxofkKITiqtLVctRJ+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE1NDFFRjc0NTYxMDgzRUY1Qjg5QzIwRkYwRUNENUU1 NjVBNEM5RTAeFw0yNjA0MTUyMTA3MjFaFw0yNjA0MTkwMzUwMjFaMDMxMTAvBgNV BAMTKDYwMDA1Mzg2MzVCRThCNzMxNkRCQkE2N0U1NkJCN0M0QTk4MTAyRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCCHeicJzkKW+Se/LP1G3E6O1E ti2AyfnmHR9NGgdAelX21gpXfS0Ce1y0BXuIqCo6ANzA6uP4tdMj1BWK+aTrEp/U VtYgyK4SOYjFlJ30Z7oP9keHp9x4mMk1VaNcjkZDGttpsifJaiLmxaTM1GiVn3VS JEPOxbltqS2RFsDzgncQxHmS2QWYNkfgkphLDG7I2tqvta6AvV/ozf8GAiypGwDE wMnmARLMHXCTRjom+E7vLoO+Ak5wwRTDMUOWl0BYJ+JpSiFilPAU0oCky3u68V2S 3SGJXqaRDw0K517hjhXArm6MuSZDlsfjY58skUd+o8ym4JP0oYvHd0KkKtYnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYABThjW+i3MW27pn5Wu3xKmBAuEwHwYDVR0j BBgwFoAUcVQe90VhCD71uJwg/w7NXlZaTJ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MDY4NTMwNy04NGVhLTRmZTMtYmI3Yy1mYjI4OTUzNzg3NDIvMS83MTU0MUVGNzQ1 NjEwODNFRjVCODlDMjBGRjBFQ0Q1RTU2NUE0QzlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzAvNzE1NDFFRjc0NTYxMDgzRUY1Qjg5QzIwRkYwRUNENUU1NjVB NEM5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzA2ODUzMDctODRlYS00ZmUzLWJi N2MtZmIyODk1Mzc4NzQyLzEvNzE1NDFFRjc0NTYxMDgzRUY1Qjg5QzIwRkYwRUNE NUU1NjVBNEM5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKySfw4uvZskyYLU39q/Woge+BkYKL6K/CIq px6VGgVga8DzZlFWgoHo1yBoHyz7ajQLYGOeP8oPDUaUA1cBapyuFS/MISvEENtv V3HV4uWJbFpp8kZJzl6zkQ38dJ1xur9qHtStGIfIjRwLDWJmhI36ntAd+Jysr8DZ hoSsewbC/UFtDNWtNZqiiTzPDpIR8BBgI0GmMDkiEfrBunOIOur2MAz64j3N8e1e aEjPe+SMq2QGD+JqoqzucrsmyibRYUh0BSfXJftZ3PUHtLiTwaEkUeL8DgtPCj03 6ytdqgrMXdsaGF05Lia8nwcoV2v/GIhjydvkqRKUFkd9eAYxaiY= -----END CERTIFICATE-----Generated at Fri Apr 17 19:18:31 2026 by rpki-client