$ rpki-client -vvvf rpki-rsync.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.mft File: A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.mft (raw, json) Hash identifier: SCUUbUV3TsQ1Q8Jnj7t0Tpwag+gib+9aB+EBXHKDb1U= Subject key identifier: 81:FF:0F:AE:FA:C2:F4:E4:7C:58:F0:4F:62:40:B6:55:E7:D2:59:B2 Authority key identifier: A7:1E:2C:60:07:7F:6A:8C:A8:D3:EF:78:AF:C7:1B:07:29:45:8F:4C Certificate issuer: /CN=A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C Certificate serial: 1A482BD72930FE1EC71B7AF290DD99F6978166C3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.mft Manifest number: 0107 Signing time: Sat 14 Nov 2026 21:21:11 +0000 Manifest this update: Sat 14 Nov 2026 21:16:11 +0000 Manifest next update: Sun 15 Nov 2026 23:08:11 +0000 Files and hashes: 1: 3130332e39342e3234382e302f32332d3234203d3e203633383738.roa (hash: 9oG14yFX0JqA/A4Gb5KSL8SJiMaQk5xxtaHwWhta8TI=) 2: A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.crl (hash: iXl18KIdJb67/eIKPjcc21roDfWZPNeZcQx8Ys1ZPP4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.crl rsync://rpki-rsync.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 23:08:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:48:2b:d7:29:30:fe:1e:c7:1b:7a:f2:90:dd:99:f6:97:81:66:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C Validity Not Before: Nov 14 21:16:11 2026 GMT Not After : Nov 15 23:08:11 2026 GMT Subject: CN=81FF0FAEFAC2F4E47C58F04F6240B655E7D259B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9a:8a:e5:b8:4e:59:2c:94:95:b2:d6:58:43: 88:dc:d0:eb:c5:85:ec:d7:fd:4b:6a:b9:84:a5:b1: c8:3c:02:b6:9a:50:36:09:f5:12:42:3c:4f:f0:64: 66:ed:00:50:f4:e7:e9:da:ca:66:cc:51:be:49:1f: 9f:50:e8:40:e0:16:f3:9e:8b:c1:44:c9:1c:18:8c: fe:60:64:33:72:a1:5c:d5:b0:d4:90:81:d1:66:2a: 18:ee:2d:31:27:77:a3:c6:8b:6b:f3:ee:e3:11:62: 65:6b:2a:10:33:78:3e:3d:63:5c:d1:c8:6e:2a:74: a7:87:98:63:12:2a:fd:1e:3b:e3:bf:79:98:61:cb: 46:42:14:63:fa:53:1c:f3:9e:9e:c8:0b:20:fd:2c: 09:8f:ea:dc:2e:87:1d:94:2d:40:c6:6d:99:97:98: 85:92:a2:26:88:14:21:b3:7c:bd:41:ef:3a:44:99: 26:eb:2a:5f:81:92:a0:d6:62:c1:40:db:5d:15:25: 2b:83:36:07:07:72:2d:b8:8f:fa:8a:88:41:42:a8: da:00:cb:38:3e:68:c0:aa:23:5a:ec:e7:19:6b:61: 2f:53:c7:ea:42:4a:2a:af:47:64:c4:36:4c:d2:a8: a6:eb:e4:67:6c:4e:d8:ee:79:84:0a:34:50:1a:11: f3:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:FF:0F:AE:FA:C2:F4:E4:7C:58:F0:4F:62:40:B6:55:E7:D2:59:B2 X509v3 Authority Key Identifier: keyid:A7:1E:2C:60:07:7F:6A:8C:A8:D3:EF:78:AF:C7:1B:07:29:45:8F:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:ab:39:67:15:6b:fb:5b:39:7e:aa:33:1f:f2:97:b8:9e:fd: fa:19:dc:35:da:50:c6:92:5b:c2:f9:ad:48:51:2a:5e:6f:a5: 67:50:1a:bd:4a:87:75:ad:b1:63:88:a7:fe:08:a3:91:90:0d: f7:47:79:0f:63:a1:b0:a8:05:92:b9:3d:e1:52:82:7b:ef:c2: b8:b9:9a:4a:56:3e:ff:77:3e:fb:db:d8:39:f0:3c:40:7b:95: 7f:eb:ea:e6:25:00:c1:2d:84:21:19:90:f3:af:ab:09:87:65: 86:17:65:60:98:1c:cc:ff:19:e3:a9:4d:68:86:da:9d:ab:b5: 8a:a5:d9:36:00:92:37:a1:9f:88:b8:65:46:90:b0:cd:75:e8: 02:7e:22:2c:3a:61:71:cf:f5:87:f5:66:0c:04:e0:db:22:85: b6:22:44:dc:de:ff:49:34:b5:e4:4a:9d:f2:05:33:7e:6d:80: ab:7b:3f:72:41:59:05:17:09:37:ce:d5:8e:2a:de:df:a9:b4: 57:36:23:7a:e2:a8:64:a0:83:20:88:d8:a1:b4:dd:f7:9e:5b: 2c:93:07:36:8a:da:1c:69:cd:01:93:05:a4:43:f8:f4:61:e7: b8:20:a3:60:ce:92:09:01:20:c1:e7:44:cd:3a:f2:73:5d:35: db:7f:56:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGkgr1ykw/h7HG3rykN2Z9peBZsMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcxRTJDNjAwNzdGNkE4Q0E4RDNFRjc4QUZDNzFCMDcy OTQ1OEY0QzAeFw0yNjExMTQyMTE2MTFaFw0yNjExMTUyMzA4MTFaMDMxMTAvBgNV BAMTKDgxRkYwRkFFRkFDMkY0RTQ3QzU4RjA0RjYyNDBCNjU1RTdEMjU5QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCumorluE5ZLJSVstZYQ4jc0OvF hezX/UtquYSlscg8AraaUDYJ9RJCPE/wZGbtAFD05+naymbMUb5JH59Q6EDgFvOe i8FEyRwYjP5gZDNyoVzVsNSQgdFmKhjuLTEnd6PGi2vz7uMRYmVrKhAzeD49Y1zR yG4qdKeHmGMSKv0eO+O/eZhhy0ZCFGP6Uxzznp7ICyD9LAmP6twuhx2ULUDGbZmX mIWSoiaIFCGzfL1B7zpEmSbrKl+BkqDWYsFA210VJSuDNgcHci24j/qKiEFCqNoA yzg+aMCqI1rs5xlrYS9Tx+pCSiqvR2TENkzSqKbr5GdsTtjueYQKNFAaEfO9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgf8PrvrC9OR8WPBPYkC2VefSWbIwHwYDVR0j BBgwFoAUpx4sYAd/aoyo0+94r8cbBylFj0wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjhkNmNhOWItNTg0Zi00MGYxLWJkNjEtMTg1OGU3ZWJhM2VhLzAvQTcxRTJDNjAw NzdGNkE4Q0E4RDNFRjc4QUZDNzFCMDcyOTQ1OEY0Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNzFFMkM2MDA3N0Y2QThDQThEM0VGNzhBRkM3MUIwNzI5NDU4 RjRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjhkNmNhOWItNTg0Zi00MGYxLWJk NjEtMTg1OGU3ZWJhM2VhLzAvQTcxRTJDNjAwNzdGNkE4Q0E4RDNFRjc4QUZDNzFC MDcyOTQ1OEY0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACarOWcVa/tbOX6qMx/yl7ie/foZ3DXaUMaS W8L5rUhRKl5vpWdQGr1Kh3WtsWOIp/4Io5GQDfdHeQ9jobCoBZK5PeFSgnvvwri5 mkpWPv93Pvvb2DnwPEB7lX/r6uYlAMEthCEZkPOvqwmHZYYXZWCYHMz/GeOpTWiG 2p2rtYql2TYAkjehn4i4ZUaQsM116AJ+Iiw6YXHP9Yf1ZgwE4NsihbYiRNze/0k0 teRKnfIFM35tgKt7P3JBWQUXCTfO1Y4q3t+ptFc2I3riqGSggyCI2KG03feeWyyT BzaK2hxpzQGTBaRD+PRh57ggo2DOkgkBIMHnRM068nNdNdt/VqM= -----END CERTIFICATE-----Generated at Sun Nov 15 13:13:04 2026 by rpki-client