$ rpki-client -vvf repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft File: 71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft (raw, json) Hash identifier: LREjrCBHML7NosweHkpsQxlcuoXa1JrLBotaTGvOP6U= Subject key identifier: 0A:F2:56:17:A5:A4:72:49:D7:C5:D7:16:C9:E3:F8:DE:3D:69:F8:BE Authority key identifier: 71:E5:1A:9B:65:D8:A1:23:51:3A:35:0F:0D:99:F9:8D:6C:9B:72:E2 Certificate issuer: /CN=71E51A9B65D8A123513A350F0D99F98D6C9B72E2 Certificate serial: 121192E61FF941699BAA2C7E01982A9A013867B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft Manifest number: 040F Signing time: Sun 01 Mar 2026 19:41:23 +0000 Manifest this update: Sun 01 Mar 2026 19:36:23 +0000 Manifest next update: Thu 05 Mar 2026 03:40:23 +0000 Files and hashes: 1: 3130332e3130372e3138372e302f32342d3234203d3e20313337333030.roa (hash: qbGMe4OJOUlVBBlNS/T+BUhcFyXomn3ouFjeMKM/9vg=) 2: 71E51A9B65D8A123513A350F0D99F98D6C9B72E2.crl (hash: 0Z7iz7zB6NZGpkWiso9tAyIO5nOa69fFCPkQVF0lvTk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.crl rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 03:40:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:11:92:e6:1f:f9:41:69:9b:aa:2c:7e:01:98:2a:9a:01:38:67:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71E51A9B65D8A123513A350F0D99F98D6C9B72E2 Validity Not Before: Mar 1 19:36:23 2026 GMT Not After : Mar 5 03:40:23 2026 GMT Subject: CN=0AF25617A5A47249D7C5D716C9E3F8DE3D69F8BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0f:ed:37:3e:57:1b:79:95:b0:55:c2:c3:c8: 28:aa:b4:fa:c7:96:ea:cd:92:4f:24:3c:a7:40:c6: 49:56:13:21:72:a6:f6:4a:61:8e:44:15:dc:30:06: 1c:e0:b7:6a:36:aa:5a:1b:a7:91:a2:f1:b5:d0:4e: b2:e8:54:3e:53:7e:d5:13:52:71:5c:06:6e:4b:d1: 5f:50:ea:55:b6:01:f2:6a:96:00:3a:01:79:1f:82: e4:6d:09:96:ae:3c:58:76:f1:14:9b:3e:a8:fb:0a: f6:db:3c:9b:07:89:18:6f:ac:0f:dc:10:a0:f3:d7: ef:8f:fe:d3:9c:d4:53:57:f0:d6:d4:c2:14:46:87: c3:78:8e:ba:73:8d:a9:8b:7e:46:cc:8a:48:78:fb: 4b:05:9d:ad:57:81:46:f8:91:e8:e6:3f:ad:f5:64: 16:e2:6e:3f:63:b9:a3:af:a2:62:71:c1:56:a7:5a: 48:37:79:86:35:52:63:cf:97:ce:7a:57:a5:93:10: 6a:a6:0e:02:ae:58:ba:dd:81:e7:e5:7d:f1:b9:3d: b4:bc:3d:34:bf:e9:fc:56:39:df:82:2d:7a:e4:9e: 43:6a:e8:23:de:dd:8c:43:2f:4e:a1:b9:3d:9d:47: 9f:fa:80:62:3c:b7:78:55:a1:ed:19:94:f5:73:b4: 3e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:F2:56:17:A5:A4:72:49:D7:C5:D7:16:C9:E3:F8:DE:3D:69:F8:BE X509v3 Authority Key Identifier: keyid:71:E5:1A:9B:65:D8:A1:23:51:3A:35:0F:0D:99:F9:8D:6C:9B:72:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:fa:33:2a:28:84:0f:42:75:af:f4:9e:8e:cd:2f:8c:98:ec: c3:bc:38:6c:3b:1d:be:cc:f6:67:b1:57:7f:3e:71:68:53:4c: 7b:72:f2:9b:d1:8e:24:66:02:fb:f0:63:75:ab:73:6c:2a:0c: 2d:87:82:08:4e:ad:89:57:1c:74:d2:31:f3:eb:3c:b3:98:47: 02:b4:fd:77:98:71:1c:e7:42:00:01:15:6f:e2:23:65:53:53: d7:14:8c:af:63:3c:ac:79:11:bd:df:ff:33:c3:b2:f8:e7:80: c6:a2:1c:b5:bf:eb:33:f8:44:42:f6:ab:00:bd:67:b0:6f:1f: 25:ff:7d:3e:83:77:38:5d:b3:0b:59:49:6d:03:f4:e5:a3:70: 07:52:33:12:eb:06:ca:ef:15:9e:fa:f9:c0:c6:87:54:c2:87: 6a:3b:62:0f:4c:73:3b:eb:cb:63:74:ed:10:b9:92:3e:f8:e6: a5:b5:11:98:8d:15:75:0c:b4:56:3d:13:b0:0c:4c:91:d7:8e: 0c:30:6f:9a:89:e4:27:e2:c4:84:6d:6e:4c:d3:84:2c:7f:64: 89:db:11:cb:e5:06:5d:e4:e1:a0:78:19:f9:e7:df:94:19:34: 13:de:41:ea:08:12:b4:03:fa:0e:36:af:c3:f5:29:2c:7f:e6: 71:0c:7c:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEhGS5h/5QWmbqix+AZgqmgE4Z7gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFFNTFBOUI2NUQ4QTEyMzUxM0EzNTBGMEQ5OUY5OEQ2 QzlCNzJFMjAeFw0yNjAzMDExOTM2MjNaFw0yNjAzMDUwMzQwMjNaMDMxMTAvBgNV BAMTKDBBRjI1NjE3QTVBNDcyNDlEN0M1RDcxNkM5RTNGOERFM0Q2OUY4QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1D+03PlcbeZWwVcLDyCiqtPrH lurNkk8kPKdAxklWEyFypvZKYY5EFdwwBhzgt2o2qlobp5Gi8bXQTrLoVD5TftUT UnFcBm5L0V9Q6lW2AfJqlgA6AXkfguRtCZauPFh28RSbPqj7CvbbPJsHiRhvrA/c EKDz1++P/tOc1FNX8NbUwhRGh8N4jrpzjamLfkbMikh4+0sFna1XgUb4kejmP631 ZBbibj9juaOvomJxwVanWkg3eYY1UmPPl856V6WTEGqmDgKuWLrdgeflffG5PbS8 PTS/6fxWOd+CLXrknkNq6CPe3YxDL06huT2dR5/6gGI8t3hVoe0ZlPVztD55AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCvJWF6WkcknXxdcWyeP43j1p+L4wHwYDVR0j BBgwFoAUceUam2XYoSNROjUPDZn5jWybcuIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDQ4YmQwNC1mNzg3LTQxNGEtYTUwMS01MTM4YTZkNmIzZTEvMC83MUU1MUE5QjY1 RDhBMTIzNTEzQTM1MEYwRDk5Rjk4RDZDOUI3MkUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzFFNTFBOUI2NUQ4QTEyMzUxM0EzNTBGMEQ5OUY5OEQ2QzlC NzJFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ0OGJkMDQtZjc4Ny00MTRhLWE1 MDEtNTEzOGE2ZDZiM2UxLzAvNzFFNTFBOUI2NUQ4QTEyMzUxM0EzNTBGMEQ5OUY5 OEQ2QzlCNzJFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMv6MyoohA9Cda/0no7NL4yY7MO8OGw7Hb7M 9mexV38+cWhTTHty8pvRjiRmAvvwY3Wrc2wqDC2HgghOrYlXHHTSMfPrPLOYRwK0 /XeYcRznQgABFW/iI2VTU9cUjK9jPKx5Eb3f/zPDsvjngMaiHLW/6zP4REL2qwC9 Z7BvHyX/fT6DdzhdswtZSW0D9OWjcAdSMxLrBsrvFZ76+cDGh1TCh2o7Yg9Mczvr y2N07RC5kj745qW1EZiNFXUMtFY9E7AMTJHXjgwwb5qJ5CfixIRtbkzThCx/ZInb EcvlBl3k4aB4Gfnn35QZNBPeQeoIErQD+g42r8P1KSx/5nEMfNA= -----END CERTIFICATE-----Generated at Mon Mar 2 15:57:59 2026 by rpki-client