$ rpki-client -vvf repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft File: 71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft (raw, json) Hash identifier: QO9PTaEF5YsM8qVBV3MM4qU5y5fDs2M1/z2gQsvuzbk= Subject key identifier: A5:49:C2:56:9A:1A:D7:F1:48:88:E8:DE:CA:B7:CB:50:63:C5:3A:68 Authority key identifier: 71:FC:3F:7B:27:22:F6:A1:5C:55:7F:63:F8:F4:95:A9:CD:BC:A9:D7 Certificate issuer: /CN=71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7 Certificate serial: 634A1A22040A7D00F8BE7A723E46E22A9B7679F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft Manifest number: 0566 Signing time: Sat 18 Apr 2026 14:51:41 +0000 Manifest this update: Sat 18 Apr 2026 14:46:41 +0000 Manifest next update: Tue 21 Apr 2026 20:57:41 +0000 Files and hashes: 1: 71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.crl (hash: O1FzrBywA4RU0S0Vauf/sdTiANY6NfTolywQr40kCzI=) 2: 3130332e3134372e38322e302f32342d3234203d3e20313339393538.roa (hash: vC4SL0uw9D8xmCXitMGfoUsUZzvLg4me8B5U0xhWjR0=) 3: 3130332e3134372e38332e302f32342d3234203d3e20313339393538.roa (hash: +BIBQAINF/5Qw6Z/inMjF3BgXwfPJiU1L7MDXOLb6hY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.crl rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 20:57:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:4a:1a:22:04:0a:7d:00:f8:be:7a:72:3e:46:e2:2a:9b:76:79:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7 Validity Not Before: Apr 18 14:46:41 2026 GMT Not After : Apr 21 20:57:41 2026 GMT Subject: CN=A549C2569A1AD7F14888E8DECAB7CB5063C53A68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:58:a5:3a:74:26:cd:f5:7d:74:1b:66:22:12: 1f:02:1d:ac:9d:de:64:5c:9d:db:1a:e1:df:36:c2: ad:6b:d8:29:c9:fd:d1:4d:8b:7e:bb:ee:32:9d:0a: 0b:ca:02:ab:93:da:80:62:4f:71:36:28:fa:ec:78: ea:01:e9:f6:ec:95:96:44:f1:34:f1:49:f6:a1:9b: 6a:f9:5d:e7:03:f4:ae:37:54:12:38:53:48:97:f7: f1:90:5a:84:f4:21:1e:40:a7:f5:03:4b:67:77:b6: 26:87:7e:c3:0f:2e:95:a7:22:b1:76:3a:c3:04:15: 19:1a:1c:9f:d7:76:3d:92:37:49:9a:f2:53:b9:93: 29:0f:84:05:32:c5:cb:53:d6:d7:2a:d6:a0:e1:f9: 16:b6:83:df:61:03:93:2c:39:58:5a:e9:a4:9a:41: ad:c7:5c:8d:1e:09:86:d9:57:fe:bb:8c:1d:01:8a: fd:99:e1:89:8f:ff:06:fd:e6:47:92:60:05:37:1d: 67:57:5a:27:44:8c:b2:26:00:58:d6:8e:0b:ef:ac: d1:c3:82:52:c4:e0:b8:38:3c:36:db:bf:5b:2b:fb: 91:39:06:d0:fb:ae:18:77:8f:1d:81:bc:b3:45:5f: 24:3b:41:ee:fa:82:d0:86:c3:21:f7:9f:9d:bd:22: 60:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:49:C2:56:9A:1A:D7:F1:48:88:E8:DE:CA:B7:CB:50:63:C5:3A:68 X509v3 Authority Key Identifier: keyid:71:FC:3F:7B:27:22:F6:A1:5C:55:7F:63:F8:F4:95:A9:CD:BC:A9:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:1a:e6:c4:b3:4f:9d:63:1e:b2:fe:60:11:72:da:06:c1:13: c1:16:ba:f4:b0:9a:26:27:f9:22:02:bc:84:d2:41:6a:83:88: 18:57:87:bb:20:a3:9f:82:7f:0e:96:8c:dd:f6:c4:70:9e:97: 1f:af:03:32:0a:d5:9e:e2:23:f3:87:68:7a:e0:98:97:41:b9: 1a:5a:a1:d9:d7:44:22:30:44:a7:04:09:78:84:ae:dd:ed:f7: 10:36:61:37:ad:a6:0f:ea:53:a2:bc:cf:50:85:51:35:98:82: ee:d2:66:86:b4:47:4d:87:52:3e:72:ec:00:c0:4f:00:4a:39: e0:72:65:a4:e0:b6:ee:8f:ee:1f:bc:c3:d0:ba:51:81:70:89: 65:37:de:49:df:ea:a2:78:f7:6c:37:a9:b8:c8:81:5d:05:9c: 68:1c:a6:f5:3c:43:b3:8f:dc:68:50:66:10:64:c4:7f:81:81: 20:a0:0c:e3:a2:f4:43:68:3e:aa:d3:fa:54:78:0b:56:4a:a2: 90:e5:7e:af:ed:73:3b:3d:f1:ce:61:e6:94:60:6d:33:21:46: 98:63:b2:3b:68:92:61:82:c0:ff:bf:fe:59:44:05:84:68:fd: 92:f1:40:96:79:a1:9e:fa:71:56:aa:74:8c:a3:b5:94:97:71: 52:bf:02:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY0oaIgQKfQD4vnpyPkbiKpt2efMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFGQzNGN0IyNzIyRjZBMTVDNTU3RjYzRjhGNDk1QTlD REJDQTlENzAeFw0yNjA0MTgxNDQ2NDFaFw0yNjA0MjEyMDU3NDFaMDMxMTAvBgNV BAMTKEE1NDlDMjU2OUExQUQ3RjE0ODg4RThERUNBQjdDQjUwNjNDNTNBNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrWKU6dCbN9X10G2YiEh8CHayd 3mRcndsa4d82wq1r2CnJ/dFNi3677jKdCgvKAquT2oBiT3E2KPrseOoB6fbslZZE 8TTxSfahm2r5XecD9K43VBI4U0iX9/GQWoT0IR5Ap/UDS2d3tiaHfsMPLpWnIrF2 OsMEFRkaHJ/Xdj2SN0ma8lO5kykPhAUyxctT1tcq1qDh+Ra2g99hA5MsOVha6aSa Qa3HXI0eCYbZV/67jB0Biv2Z4YmP/wb95keSYAU3HWdXWidEjLImAFjWjgvvrNHD glLE4Lg4PDbbv1sr+5E5BtD7rhh3jx2BvLNFXyQ7Qe76gtCGwyH3n529ImCNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpUnCVpoa1/FIiOjeyrfLUGPFOmgwHwYDVR0j BBgwFoAUcfw/eyci9qFcVX9j+PSVqc28qdcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YWE1YWM2NS02MDcxLTQ2ZTItYmI5ZC1kNzcwZDExN2M0YjQvMC83MUZDM0Y3QjI3 MjJGNkExNUM1NTdGNjNGOEY0OTVBOUNEQkNBOUQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzFGQzNGN0IyNzIyRjZBMTVDNTU3RjYzRjhGNDk1QTlDREJD QTlENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWFhNWFjNjUtNjA3MS00NmUyLWJi OWQtZDc3MGQxMTdjNGI0LzAvNzFGQzNGN0IyNzIyRjZBMTVDNTU3RjYzRjhGNDk1 QTlDREJDQTlENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADwa5sSzT51jHrL+YBFy2gbBE8EWuvSwmiYn +SICvITSQWqDiBhXh7sgo5+Cfw6WjN32xHCelx+vAzIK1Z7iI/OHaHrgmJdBuRpa odnXRCIwRKcECXiErt3t9xA2YTetpg/qU6K8z1CFUTWYgu7SZoa0R02HUj5y7ADA TwBKOeByZaTgtu6P7h+8w9C6UYFwiWU33knf6qJ492w3qbjIgV0FnGgcpvU8Q7OP 3GhQZhBkxH+BgSCgDOOi9ENoPqrT+lR4C1ZKopDlfq/tczs98c5h5pRgbTMhRphj sjtokmGCwP+//llEBYRo/ZLxQJZ5oZ76cVaqdIyjtZSXcVK/Aio= -----END CERTIFICATE-----Generated at Sun Apr 19 15:38:04 2026 by rpki-client