$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.mft File: 71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.mft (raw, json) Hash identifier: ky1QK15TQT0xYUJO/TbWF0vZJ5ug9aW56EepK+7ITvM= Subject key identifier: 88:CB:08:3D:34:0B:25:FA:3F:3D:6B:33:8E:29:6E:5E:8C:50:17:44 Authority key identifier: 71:EA:AE:94:B4:B9:7C:5E:D5:3A:52:F7:20:BB:E5:EA:78:EF:DE:5B Certificate issuer: /CN=71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B Certificate serial: 685535F073BA93C7FB8EEDB837A9796D7322AF0F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.mft Manifest number: BD Signing time: Mon 21 Sep 2026 04:16:54 +0000 Manifest this update: Mon 21 Sep 2026 04:11:54 +0000 Manifest next update: Tue 22 Sep 2026 06:28:54 +0000 Files and hashes: 1: 71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.crl (hash: /iUpTs34MyOGmFypDQzaS4Yy6wRWRITXJ8sKAZyVOkg=) 2: 3130332e3134342e3130332e302f32342d3234203d3e20313339343231.roa (hash: NVvHOXca2LITMgeQ8pj0e3M7sUAPWn5Q20ai1Hw8JHw=) 3: 3130332e3134342e3130322e302f32342d3234203d3e20313339343231.roa (hash: nH3r82YwlmcelOXc3c6hCqTAafYwlMIm171yaloUlQU=) 4: 3130332e3134342e3130322e302f32332d3234203d3e20313339343231.roa (hash: aW/uUXbkxJYBViD7wNIMNmfKm91NHMXKaNMrrbbLaYo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.crl rsync://rpki-rsync.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:55:35:f0:73:ba:93:c7:fb:8e:ed:b8:37:a9:79:6d:73:22:af:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B Validity Not Before: Sep 21 04:11:54 2026 GMT Not After : Sep 22 06:28:54 2026 GMT Subject: CN=88CB083D340B25FA3F3D6B338E296E5E8C501744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d9:4c:9b:4e:af:4d:48:cc:be:43:35:6e:02: ea:bc:de:31:b3:71:12:c3:86:32:66:95:8b:00:02: 0a:9a:59:c1:b5:52:c7:fc:0e:a7:da:54:be:dd:7a: f4:e3:f2:1b:87:14:88:2b:f3:71:7b:8d:2f:d4:70: 61:35:4a:3f:d3:ae:61:2c:76:ab:82:d2:fb:b1:e3: 20:ce:96:20:59:9e:1d:0a:a0:1f:7c:a1:83:70:47: ef:32:c0:0f:69:4b:02:55:d9:f8:db:97:15:39:f4: 91:2d:02:38:60:2a:e2:5d:b2:26:00:80:a1:36:ae: c0:a1:86:ec:04:b2:54:4a:95:69:56:0f:0d:53:7c: 80:1e:9f:95:fb:d0:8a:6d:2d:94:ed:94:89:53:6f: ce:14:8f:c7:4b:8a:b9:75:b2:69:bc:46:5a:5b:bb: 98:f1:76:06:1f:34:3e:56:99:38:7a:08:37:4a:38: 78:2d:2b:b1:a0:bf:f5:37:1b:1e:56:df:e5:b4:00: 32:f2:56:b3:77:7e:b1:32:c9:29:87:fc:35:9d:52: 96:66:df:3d:62:34:e3:4c:d9:02:7a:e4:a2:7c:cf: a7:fd:fa:db:4a:77:9d:8f:70:cf:2f:70:09:e2:16: b4:6f:76:d7:b8:19:d3:88:54:31:31:37:50:56:6d: 6b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:CB:08:3D:34:0B:25:FA:3F:3D:6B:33:8E:29:6E:5E:8C:50:17:44 X509v3 Authority Key Identifier: keyid:71:EA:AE:94:B4:B9:7C:5E:D5:3A:52:F7:20:BB:E5:EA:78:EF:DE:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:dd:01:7c:a9:37:e0:4e:62:61:74:1a:37:86:ea:ea:41:67: 56:6b:dc:3d:d7:65:f1:85:6b:cd:2a:0f:9f:22:d6:79:ed:01: ff:35:32:7f:68:3b:4b:5b:96:41:2f:5c:17:7e:18:6b:90:17: e1:36:f2:64:85:22:ee:f6:2e:8c:60:96:1b:eb:c8:e0:f1:6b: 91:1e:f4:74:3f:04:63:73:93:a4:9b:37:3d:ff:5f:24:6a:0c: b1:53:22:ea:59:5a:47:19:08:cb:cb:a0:ff:3d:f6:32:24:98: ad:8c:ef:ad:43:c2:25:c5:c8:b2:b7:1c:30:17:81:65:96:89: b5:de:f2:df:4a:82:ff:40:b4:e0:82:4f:d6:9f:cb:b1:7e:1c: 63:05:63:c6:f6:94:85:49:de:4e:e7:f1:c4:19:07:85:e2:15: c6:4c:71:49:42:9f:05:ec:3b:64:90:fa:80:55:dc:97:e1:1a: 2e:79:94:58:69:83:11:1f:8b:ec:55:25:5e:f8:df:4b:a9:08: e1:f0:38:b8:38:de:f4:05:ba:56:96:e1:cd:f9:ec:2c:96:95: a4:1e:44:e6:a9:be:7f:97:91:d2:3c:90:39:01:a9:93:32:0c: c2:88:b6:15:23:35:f4:31:95:fd:5a:04:cc:9e:d1:3d:96:0d: e1:9c:f6:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaFU18HO6k8f7ju24N6l5bXMirw8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFFQUFFOTRCNEI5N0M1RUQ1M0E1MkY3MjBCQkU1RUE3 OEVGREU1QjAeFw0yNjA5MjEwNDExNTRaFw0yNjA5MjIwNjI4NTRaMDMxMTAvBgNV BAMTKDg4Q0IwODNEMzQwQjI1RkEzRjNENkIzMzhFMjk2RTVFOEM1MDE3NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM2UybTq9NSMy+QzVuAuq83jGz cRLDhjJmlYsAAgqaWcG1Usf8DqfaVL7devTj8huHFIgr83F7jS/UcGE1Sj/TrmEs dquC0vux4yDOliBZnh0KoB98oYNwR+8ywA9pSwJV2fjblxU59JEtAjhgKuJdsiYA gKE2rsChhuwEslRKlWlWDw1TfIAen5X70IptLZTtlIlTb84Uj8dLirl1smm8Rlpb u5jxdgYfND5WmTh6CDdKOHgtK7Ggv/U3Gx5W3+W0ADLyVrN3frEyySmH/DWdUpZm 3z1iNONM2QJ65KJ8z6f9+ttKd52PcM8vcAniFrRvdte4GdOIVDExN1BWbWvHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiMsIPTQLJfo/PWszjiluXoxQF0QwHwYDVR0j BBgwFoAUcequlLS5fF7VOlL3ILvl6njv3lswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmE1MzQxZTgtMjJkOC00NDljLWE3NTMtZTQ3YmJmYzQ4NTM4LzAvNzFFQUFFOTRC NEI5N0M1RUQ1M0E1MkY3MjBCQkU1RUE3OEVGREU1Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MUVBQUU5NEI0Qjk3QzVFRDUzQTUyRjcyMEJCRTVFQTc4RUZE RTVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmE1MzQxZTgtMjJkOC00NDljLWE3 NTMtZTQ3YmJmYzQ4NTM4LzAvNzFFQUFFOTRCNEI5N0M1RUQ1M0E1MkY3MjBCQkU1 RUE3OEVGREU1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH/dAXypN+BOYmF0GjeG6upBZ1Zr3D3XZfGF a80qD58i1nntAf81Mn9oO0tblkEvXBd+GGuQF+E28mSFIu72LoxglhvryODxa5Ee 9HQ/BGNzk6SbNz3/XyRqDLFTIupZWkcZCMvLoP899jIkmK2M761DwiXFyLK3HDAX gWWWibXe8t9Kgv9AtOCCT9afy7F+HGMFY8b2lIVJ3k7n8cQZB4XiFcZMcUlCnwXs O2SQ+oBV3JfhGi55lFhpgxEfi+xVJV7430upCOHwOLg43vQFulaW4c357CyWlaQe ROapvn+XkdI8kDkBqZMyDMKIthUjNfQxlf1aBMye0T2WDeGc9rM= -----END CERTIFICATE-----Generated at Mon Sep 21 14:29:45 2026 by rpki-client