$ rpki-client -vvvf rpki-rsync.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.mft File: A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.mft (raw, json) Hash identifier: 76m5f9U+ksvfUEjOhtPnVDKjW9DAKYMWB/4PjVqitvk= Subject key identifier: CA:3A:80:18:41:69:A5:6F:37:54:C5:7E:28:CF:CA:9D:EF:BA:CF:C4 Authority key identifier: A7:1E:2C:60:07:7F:6A:8C:A8:D3:EF:78:AF:C7:1B:07:29:45:8F:4C Certificate issuer: /CN=A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C Certificate serial: 7F7FB6EB424498FDF77D6B7362C875A50EFAB3DA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.mft Manifest number: BF Signing time: Mon 21 Sep 2026 20:31:59 +0000 Manifest this update: Mon 21 Sep 2026 20:26:59 +0000 Manifest next update: Wed 23 Sep 2026 00:13:59 +0000 Files and hashes: 1: 3130332e39342e3234382e302f32332d3234203d3e203633383738.roa (hash: 9oG14yFX0JqA/A4Gb5KSL8SJiMaQk5xxtaHwWhta8TI=) 2: A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.crl (hash: cZf8oIbbZpTjhVGBuc0H8R9mRkAjmh4Oi3vBl6DWt/w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.crl rsync://rpki-rsync.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 00:13:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:7f:b6:eb:42:44:98:fd:f7:7d:6b:73:62:c8:75:a5:0e:fa:b3:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C Validity Not Before: Sep 21 20:26:59 2026 GMT Not After : Sep 23 00:13:59 2026 GMT Subject: CN=CA3A80184169A56F3754C57E28CFCA9DEFBACFC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b8:4d:56:70:ae:79:fa:a0:89:23:da:d8:34: 89:1f:d0:17:9c:fd:19:f0:17:5f:75:d7:99:f7:0b: 90:cf:94:38:83:3a:f9:42:e6:5c:70:47:48:74:e6: 2e:61:8a:0b:59:ab:56:38:72:d6:e2:fc:ce:21:50: ac:db:17:37:bb:6e:9b:e0:54:1b:42:4c:72:1d:ed: 6d:69:58:b2:44:b3:f4:84:80:bd:6a:dd:b9:02:e7: ce:e9:25:53:66:88:e1:27:df:27:32:39:b9:f7:05: c2:b6:d5:05:56:8c:67:f3:81:ce:c5:04:2f:db:59: 7d:74:fa:b9:a0:a6:6f:d1:2f:b6:70:df:e1:bc:cd: fb:a7:cb:fa:9a:f8:92:75:7e:37:5e:0c:40:eb:42: cb:62:9c:93:50:79:02:85:7d:33:bc:6e:e7:82:41: e1:f9:b4:d2:1d:fb:87:a3:e7:8b:62:bd:1e:ba:66: 38:13:e4:01:d8:5e:71:ee:41:10:19:6f:25:c0:47: ca:fc:ea:20:05:3c:97:a8:dc:2d:e8:fc:74:8b:23: a8:da:d4:6d:bf:5e:eb:6d:c2:dd:dc:74:55:4d:20: 33:52:5b:81:3e:a3:24:47:31:1f:b6:17:41:28:e7: 21:3d:70:34:63:0a:00:86:6f:a8:42:65:89:6b:4d: f6:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:3A:80:18:41:69:A5:6F:37:54:C5:7E:28:CF:CA:9D:EF:BA:CF:C4 X509v3 Authority Key Identifier: keyid:A7:1E:2C:60:07:7F:6A:8C:A8:D3:EF:78:AF:C7:1B:07:29:45:8F:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:49:5b:e5:e7:b3:f8:eb:38:79:55:01:02:37:f9:33:b2:65: 66:2c:e3:a9:0e:21:60:3f:47:80:49:6e:bb:0e:dc:1f:61:7b: a6:c9:6a:24:4f:42:7f:0b:f6:22:1c:da:17:c0:e0:28:c8:9d: 20:f6:a7:6e:f4:df:0e:97:75:cc:45:d5:9e:ac:17:9e:54:05: ae:84:e7:b8:5e:ec:df:7f:1c:ce:de:38:e4:b6:bc:c8:44:d5: ae:0d:74:51:ca:b4:45:5f:e4:c1:8a:55:e9:ab:93:ce:45:46: a5:a8:5e:5d:19:07:f9:54:b5:70:4f:e6:0b:5c:5f:1b:98:3d: c5:c1:f6:5c:d0:35:df:3c:6e:d1:24:e7:61:51:cc:86:fe:f6: 08:e4:ea:37:5b:4a:a5:fe:f8:b6:06:c8:02:8e:5d:f7:67:ee: 2f:9f:17:3a:ad:c9:4e:2b:68:b5:e7:1d:11:3c:92:73:a2:26: f2:43:58:61:79:5c:29:32:70:e5:21:e8:be:f1:6b:51:f5:c5: 91:13:e0:18:84:a6:59:df:0f:75:a2:3c:0e:b8:0f:a2:cd:40: 95:e1:f2:2b:bf:ef:ea:7a:3d:6c:23:36:db:e0:0b:fb:ec:f9: 3c:e6:bc:85:9f:c8:d7:75:9f:c6:b7:98:cb:5d:99:2f:5c:61: 9a:f5:b6:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf3+260JEmP33fWtzYsh1pQ76s9owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcxRTJDNjAwNzdGNkE4Q0E4RDNFRjc4QUZDNzFCMDcy OTQ1OEY0QzAeFw0yNjA5MjEyMDI2NTlaFw0yNjA5MjMwMDEzNTlaMDMxMTAvBgNV BAMTKENBM0E4MDE4NDE2OUE1NkYzNzU0QzU3RTI4Q0ZDQTlERUZCQUNGQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYuE1WcK55+qCJI9rYNIkf0Bec /RnwF19115n3C5DPlDiDOvlC5lxwR0h05i5higtZq1Y4ctbi/M4hUKzbFze7bpvg VBtCTHId7W1pWLJEs/SEgL1q3bkC587pJVNmiOEn3ycyObn3BcK21QVWjGfzgc7F BC/bWX10+rmgpm/RL7Zw3+G8zfuny/qa+JJ1fjdeDEDrQstinJNQeQKFfTO8bueC QeH5tNId+4ej54tivR66ZjgT5AHYXnHuQRAZbyXAR8r86iAFPJeo3C3o/HSLI6ja 1G2/Xuttwt3cdFVNIDNSW4E+oyRHMR+2F0Eo5yE9cDRjCgCGb6hCZYlrTfYLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyjqAGEFppW83VMV+KM/Kne+6z8QwHwYDVR0j BBgwFoAUpx4sYAd/aoyo0+94r8cbBylFj0wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjhkNmNhOWItNTg0Zi00MGYxLWJkNjEtMTg1OGU3ZWJhM2VhLzAvQTcxRTJDNjAw NzdGNkE4Q0E4RDNFRjc4QUZDNzFCMDcyOTQ1OEY0Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNzFFMkM2MDA3N0Y2QThDQThEM0VGNzhBRkM3MUIwNzI5NDU4 RjRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjhkNmNhOWItNTg0Zi00MGYxLWJk NjEtMTg1OGU3ZWJhM2VhLzAvQTcxRTJDNjAwNzdGNkE4Q0E4RDNFRjc4QUZDNzFC MDcyOTQ1OEY0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEdJW+Xns/jrOHlVAQI3+TOyZWYs46kOIWA/ R4BJbrsO3B9he6bJaiRPQn8L9iIc2hfA4CjInSD2p2703w6XdcxF1Z6sF55UBa6E 57he7N9/HM7eOOS2vMhE1a4NdFHKtEVf5MGKVemrk85FRqWoXl0ZB/lUtXBP5gtc XxuYPcXB9lzQNd88btEk52FRzIb+9gjk6jdbSqX++LYGyAKOXfdn7i+fFzqtyU4r aLXnHRE8knOiJvJDWGF5XCkycOUh6L7xa1H1xZET4BiEplnfD3WiPA64D6LNQJXh 8iu/7+p6PWwjNtvgC/vs+TzmvIWfyNd1n8a3mMtdmS9cYZr1tk8= -----END CERTIFICATE-----Generated at Tue Sep 22 09:44:40 2026 by rpki-client