$ rpki-client -vvf repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft File: 71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft (raw, json) Hash identifier: 2J8b0a5PHEkGlZcQjrd5K5o3aj/Ru+tVFJBfm2qoCFw= Subject key identifier: BC:04:FC:87:EB:FF:CC:B5:A3:17:C2:B3:2E:42:DB:18:9D:42:C5:3B Authority key identifier: 71:E5:1A:9B:65:D8:A1:23:51:3A:35:0F:0D:99:F9:8D:6C:9B:72:E2 Certificate issuer: /CN=71E51A9B65D8A123513A350F0D99F98D6C9B72E2 Certificate serial: 7068270778BCA38DB4F5FECEADC591176364BBE2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft Manifest number: 0423 Signing time: Thu 16 Apr 2026 11:01:26 +0000 Manifest this update: Thu 16 Apr 2026 10:56:26 +0000 Manifest next update: Sun 19 Apr 2026 12:11:26 +0000 Files and hashes: 1: 3130332e3130372e3138372e302f32342d3234203d3e20313337333030.roa (hash: qbGMe4OJOUlVBBlNS/T+BUhcFyXomn3ouFjeMKM/9vg=) 2: 71E51A9B65D8A123513A350F0D99F98D6C9B72E2.crl (hash: mBYOhJGXU5iBvyPAI29+ZIe3ukeCa4HsqtsGg7twLQc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.crl rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 12:11:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:68:27:07:78:bc:a3:8d:b4:f5:fe:ce:ad:c5:91:17:63:64:bb:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71E51A9B65D8A123513A350F0D99F98D6C9B72E2 Validity Not Before: Apr 16 10:56:26 2026 GMT Not After : Apr 19 12:11:26 2026 GMT Subject: CN=BC04FC87EBFFCCB5A317C2B32E42DB189D42C53B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6f:1c:98:66:dd:c5:61:6b:0f:99:a9:1a:03: 72:fe:db:c7:a8:4b:1c:19:5e:36:ff:55:d0:50:30: 66:56:f9:6d:e3:0f:64:f3:2e:78:d4:eb:59:2a:ed: 78:4d:49:06:d7:87:bd:be:3b:7b:7b:31:44:d6:27: 20:a6:dd:4f:e9:ef:bb:a9:a0:76:e4:6e:83:ce:d4: 14:a0:89:6d:fa:92:1a:3c:97:3b:cd:ae:83:3e:bf: 37:3c:ac:14:01:e7:3a:81:5d:60:17:6d:bb:3e:72: 22:9f:90:c8:e8:e2:1f:5d:66:06:3c:1e:18:36:2b: b9:19:ec:20:25:93:4d:20:b4:51:bc:40:98:a7:07: 05:ba:f3:f0:89:e8:40:62:eb:d3:f0:45:9a:d3:45: 85:f7:2a:f0:ed:14:33:f0:24:f6:d0:4c:1d:59:22: c0:e8:ca:29:0a:7c:63:c1:96:84:bb:10:3d:0a:6d: b8:88:7d:bf:ce:6d:87:22:28:84:91:a7:54:60:ae: 30:85:1d:cf:ce:77:cd:5f:5e:c4:ae:ee:b9:69:63: 4d:2b:39:ea:9f:3c:7e:52:f7:c0:58:04:df:13:43: c7:c9:90:54:ea:ec:c3:ee:5a:bd:9d:ef:ad:74:96: 00:26:dc:b8:8d:5f:f3:37:6c:a3:92:ed:3e:63:be: d1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:04:FC:87:EB:FF:CC:B5:A3:17:C2:B3:2E:42:DB:18:9D:42:C5:3B X509v3 Authority Key Identifier: keyid:71:E5:1A:9B:65:D8:A1:23:51:3A:35:0F:0D:99:F9:8D:6C:9B:72:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:e9:78:a2:86:27:ed:d4:65:48:a7:8a:07:e8:90:78:70:e2: d1:78:df:77:34:71:0c:87:9b:0c:79:24:ca:d7:3b:8c:ce:0f: ea:7f:f6:87:d6:fe:56:82:64:97:8c:47:1c:a1:fd:64:43:a2: d7:81:b8:b6:f0:36:d8:6a:51:2a:38:16:f5:9c:2c:45:48:02: 51:39:3f:63:cb:94:4c:7d:bc:d0:7e:f9:1a:28:93:9c:c2:41: ab:40:82:af:cf:1d:27:15:80:44:32:1d:cf:45:c8:08:f1:c8: a1:13:fc:2a:69:66:8c:4e:87:be:05:03:12:8c:a1:ab:27:e6: 1d:9c:15:e6:c0:b2:08:f3:69:82:d8:20:50:ca:86:0d:f8:9b: 51:19:9c:43:8f:31:2f:a7:b3:34:10:a5:d5:c3:a9:4c:bf:ca: 16:d2:0b:34:51:13:e8:02:f4:0b:45:63:c4:f5:11:81:c0:67: 28:fd:99:f6:56:b9:59:8a:6c:a8:09:1b:82:8b:48:44:b3:7d: 73:38:81:59:af:fc:b2:92:d7:1c:3a:0d:e0:28:83:61:9c:ca: 57:25:cd:d7:f7:f2:d9:d1:8a:5f:55:81:18:30:4b:f1:1c:43: 72:f3:06:07:c6:3c:39:20:4b:e7:c2:fa:d9:bc:d5:15:14:15: 95:0c:4b:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcGgnB3i8o4209f7OrcWRF2Nku+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFFNTFBOUI2NUQ4QTEyMzUxM0EzNTBGMEQ5OUY5OEQ2 QzlCNzJFMjAeFw0yNjA0MTYxMDU2MjZaFw0yNjA0MTkxMjExMjZaMDMxMTAvBgNV BAMTKEJDMDRGQzg3RUJGRkNDQjVBMzE3QzJCMzJFNDJEQjE4OUQ0MkM1M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKbxyYZt3FYWsPmakaA3L+28eo SxwZXjb/VdBQMGZW+W3jD2TzLnjU61kq7XhNSQbXh72+O3t7MUTWJyCm3U/p77up oHbkboPO1BSgiW36kho8lzvNroM+vzc8rBQB5zqBXWAXbbs+ciKfkMjo4h9dZgY8 Hhg2K7kZ7CAlk00gtFG8QJinBwW68/CJ6EBi69PwRZrTRYX3KvDtFDPwJPbQTB1Z IsDoyikKfGPBloS7ED0KbbiIfb/ObYciKISRp1RgrjCFHc/Od81fXsSu7rlpY00r OeqfPH5S98BYBN8TQ8fJkFTq7MPuWr2d7610lgAm3LiNX/M3bKOS7T5jvtHFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvAT8h+v/zLWjF8KzLkLbGJ1CxTswHwYDVR0j BBgwFoAUceUam2XYoSNROjUPDZn5jWybcuIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDQ4YmQwNC1mNzg3LTQxNGEtYTUwMS01MTM4YTZkNmIzZTEvMC83MUU1MUE5QjY1 RDhBMTIzNTEzQTM1MEYwRDk5Rjk4RDZDOUI3MkUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzFFNTFBOUI2NUQ4QTEyMzUxM0EzNTBGMEQ5OUY5OEQ2QzlC NzJFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ0OGJkMDQtZjc4Ny00MTRhLWE1 MDEtNTEzOGE2ZDZiM2UxLzAvNzFFNTFBOUI2NUQ4QTEyMzUxM0EzNTBGMEQ5OUY5 OEQ2QzlCNzJFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJfpeKKGJ+3UZUinigfokHhw4tF433c0cQyH mwx5JMrXO4zOD+p/9ofW/laCZJeMRxyh/WRDoteBuLbwNthqUSo4FvWcLEVIAlE5 P2PLlEx9vNB++Rook5zCQatAgq/PHScVgEQyHc9FyAjxyKET/CppZoxOh74FAxKM oasn5h2cFebAsgjzaYLYIFDKhg34m1EZnEOPMS+nszQQpdXDqUy/yhbSCzRRE+gC 9AtFY8T1EYHAZyj9mfZWuVmKbKgJG4KLSESzfXM4gVmv/LKS1xw6DeAog2Gcylcl zdf38tnRil9VgRgwS/EcQ3LzBgfGPDkgS+fC+tm81RUUFZUMS0c= -----END CERTIFICATE-----Generated at Fri Apr 17 22:05:16 2026 by rpki-client