$ rpki-client -vvvf rpki-rsync.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/71BEA54A40125136212043443871943E11E47CE8.mft File: 71BEA54A40125136212043443871943E11E47CE8.mft (raw, json) Hash identifier: lEeZv74Z59G5fiQTUtyabjJM+HlnT7DMTqFMgRANFtM= Subject key identifier: DE:19:D9:81:1F:26:29:AB:50:DC:20:C1:F9:81:1B:CF:8E:A7:0F:EE Authority key identifier: 71:BE:A5:4A:40:12:51:36:21:20:43:44:38:71:94:3E:11:E4:7C:E8 Certificate issuer: /CN=71BEA54A40125136212043443871943E11E47CE8 Certificate serial: 649A87DF33C3D9349EAE9D4F8755AAFEE22BA6BB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71BEA54A40125136212043443871943E11E47CE8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/71BEA54A40125136212043443871943E11E47CE8.mft Manifest number: BC Signing time: Mon 21 Sep 2026 04:16:52 +0000 Manifest this update: Mon 21 Sep 2026 04:11:52 +0000 Manifest next update: Tue 22 Sep 2026 08:00:52 +0000 Files and hashes: 1: 3130332e3233342e31382e302f32332d3233203d3e20313531353036.roa (hash: PHU5h1LHUlDbfO+kxPjDf9ATbrrXtorAw7bNDenM+FM=) 2: 3130332e3233342e31392e302f32342d3234203d3e20313531353036.roa (hash: SJitFwYKCLnaXZQ4OdV1EreS23s72a/7Op1qTgfnrGo=) 3: 3130332e3233342e31382e302f32342d3234203d3e20313531353036.roa (hash: VJzo4/caWYAHukBH2w0BGX1Ka+vdrCFh1viFJ7tFkV8=) 4: 71BEA54A40125136212043443871943E11E47CE8.crl (hash: 9AuBODpSXKvY505y7huZ5MXZIO3gAdyHruVKzLfTkRM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/71BEA54A40125136212043443871943E11E47CE8.crl rsync://rpki-rsync.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/71BEA54A40125136212043443871943E11E47CE8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71BEA54A40125136212043443871943E11E47CE8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:9a:87:df:33:c3:d9:34:9e:ae:9d:4f:87:55:aa:fe:e2:2b:a6:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71BEA54A40125136212043443871943E11E47CE8 Validity Not Before: Sep 21 04:11:52 2026 GMT Not After : Sep 22 08:00:52 2026 GMT Subject: CN=DE19D9811F2629AB50DC20C1F9811BCF8EA70FEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:98:bc:4c:6b:20:4e:a9:80:d4:97:b6:55:5f: f0:33:77:d0:7c:94:de:91:0f:fc:9d:34:59:b2:83: 5d:2e:a0:1d:ea:d2:13:c2:92:13:cc:57:b6:88:92: 84:29:8e:46:1c:67:87:b6:c2:07:54:2f:31:73:1a: f6:d6:d8:e5:07:95:33:aa:b0:26:2f:fa:bb:7a:54: 65:92:fd:30:5f:e6:53:00:6c:0e:df:e5:bb:a8:48: 85:f4:6a:5a:67:c0:bc:b4:4d:74:7b:f7:3a:f5:d5: 68:33:af:1a:64:f2:7c:cc:93:30:78:aa:95:7d:ca: ab:41:54:a5:81:dd:4b:a6:59:f6:c9:a7:9e:2c:27: e5:fd:07:b9:6e:6b:db:e8:33:a2:33:0d:bd:89:87: 7f:f3:ab:f0:0f:55:75:e9:0c:41:f0:f9:54:11:c3: 62:10:97:8d:34:1d:7d:e6:fe:d3:e8:87:a6:5a:fe: 85:71:ce:f9:33:5c:aa:62:b7:fc:44:8c:47:df:1a: 25:b9:9a:aa:8a:ff:7d:4d:2e:66:f7:61:a6:50:c4: 56:1d:ee:d8:e7:55:04:8e:ad:1b:ef:7f:3d:6b:bf: 26:9f:49:41:48:bd:bb:57:70:d6:4e:b8:90:9d:ec: 2c:ac:bd:fd:45:52:b0:98:8d:23:ec:eb:d2:d8:64: 27:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:19:D9:81:1F:26:29:AB:50:DC:20:C1:F9:81:1B:CF:8E:A7:0F:EE X509v3 Authority Key Identifier: keyid:71:BE:A5:4A:40:12:51:36:21:20:43:44:38:71:94:3E:11:E4:7C:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/71BEA54A40125136212043443871943E11E47CE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71BEA54A40125136212043443871943E11E47CE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/71BEA54A40125136212043443871943E11E47CE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:25:3a:c5:f6:82:0d:13:fe:95:99:5e:f3:7d:dd:20:8f:af: 04:25:94:02:6c:1f:65:cb:58:7f:e4:3f:79:a6:89:44:1e:c5: 15:19:31:a0:89:1a:8e:69:5d:00:cb:f4:01:e3:e8:15:c3:da: 24:0a:b8:51:75:de:1a:3a:d0:e4:e9:58:05:39:b6:09:39:52: b3:0f:87:de:50:fe:c6:39:80:aa:cd:dc:b4:ec:d2:86:9b:f6: e7:97:ca:5c:9b:92:4f:cd:0a:dc:99:e1:e5:6f:98:d6:f4:78: c3:14:bd:ba:04:af:4c:f6:99:48:e0:2a:38:eb:e4:77:f6:08: 8d:ce:bf:29:3d:5c:e3:86:89:d6:d5:37:df:9c:f3:f7:76:2c: 1e:27:a7:aa:71:47:db:5a:76:81:a9:35:7a:ff:5e:a0:c2:14: 65:07:1c:20:85:64:b1:12:a4:fc:35:18:43:54:1a:09:bf:67: 42:1a:b9:4e:22:d3:43:38:69:01:2f:75:66:6b:84:15:d5:a2: 0e:c7:80:76:71:40:50:ae:82:62:b4:d9:f3:ea:7e:b9:a3:fe: f3:5b:b2:aa:1b:02:12:fa:8f:25:ab:85:29:7b:67:52:ca:94: 6a:d0:82:2d:a3:27:6b:80:bd:db:b6:75:5d:8b:e8:79:2b:1b: 6d:1a:5e:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZJqH3zPD2TSerp1Ph1Wq/uIrprswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFCRUE1NEE0MDEyNTEzNjIxMjA0MzQ0Mzg3MTk0M0Ux MUU0N0NFODAeFw0yNjA5MjEwNDExNTJaFw0yNjA5MjIwODAwNTJaMDMxMTAvBgNV BAMTKERFMTlEOTgxMUYyNjI5QUI1MERDMjBDMUY5ODExQkNGOEVBNzBGRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClmLxMayBOqYDUl7ZVX/Azd9B8 lN6RD/ydNFmyg10uoB3q0hPCkhPMV7aIkoQpjkYcZ4e2wgdULzFzGvbW2OUHlTOq sCYv+rt6VGWS/TBf5lMAbA7f5buoSIX0alpnwLy0TXR79zr11Wgzrxpk8nzMkzB4 qpV9yqtBVKWB3UumWfbJp54sJ+X9B7lua9voM6IzDb2Jh3/zq/APVXXpDEHw+VQR w2IQl400HX3m/tPoh6Za/oVxzvkzXKpit/xEjEffGiW5mqqK/31NLmb3YaZQxFYd 7tjnVQSOrRvvfz1rvyafSUFIvbtXcNZOuJCd7Cysvf1FUrCYjSPs69LYZCe9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3hnZgR8mKatQ3CDB+YEbz46nD+4wHwYDVR0j BBgwFoAUcb6lSkASUTYhIENEOHGUPhHkfOgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzg4MzI5Y2EtZThmNy00ZDNkLWFjZTQtODA3ZjhhYTU4YWUwLzAvNzFCRUE1NEE0 MDEyNTEzNjIxMjA0MzQ0Mzg3MTk0M0UxMUU0N0NFOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MUJFQTU0QTQwMTI1MTM2MjEyMDQzNDQzODcxOTQzRTExRTQ3 Q0U4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzg4MzI5Y2EtZThmNy00ZDNkLWFj ZTQtODA3ZjhhYTU4YWUwLzAvNzFCRUE1NEE0MDEyNTEzNjIxMjA0MzQ0Mzg3MTk0 M0UxMUU0N0NFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEQlOsX2gg0T/pWZXvN93SCPrwQllAJsH2XL WH/kP3mmiUQexRUZMaCJGo5pXQDL9AHj6BXD2iQKuFF13ho60OTpWAU5tgk5UrMP h95Q/sY5gKrN3LTs0oab9ueXylybkk/NCtyZ4eVvmNb0eMMUvboEr0z2mUjgKjjr 5Hf2CI3Ovyk9XOOGidbVN9+c8/d2LB4np6pxR9tadoGpNXr/XqDCFGUHHCCFZLES pPw1GENUGgm/Z0IauU4i00M4aQEvdWZrhBXVog7HgHZxQFCugmK02fPqfrmj/vNb sqobAhL6jyWrhSl7Z1LKlGrQgi2jJ2uAvdu2dV2L6HkrG20aXg0= -----END CERTIFICATE-----Generated at Mon Sep 21 20:11:45 2026 by rpki-client