
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.mft
File: 71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.mft (raw, json)
Hash identifier: l8+0AxDsC5iyJbOfk4YCAub9e098BlcGPemI4a3yM2k=
Subject key identifier: E3:88:8A:BF:0F:E1:5C:61:4F:B8:05:F3:E6:68:6D:9B:2C:9A:05:52
Authority key identifier: 71:E3:BB:71:0F:59:21:46:B8:2A:3C:1C:FC:F3:6A:2B:D1:C5:A7:95
Certificate issuer: /CN=71E3BB710F592146B82A3C1CFCF36A2BD1C5A795
Certificate serial: 073C804E4EC3FA9424579C2BF5E9496425E71408
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.mft
Manifest number: D1
Signing time: Sat 03 Oct 2026 18:38:18 +0000
Manifest this update: Sat 03 Oct 2026 18:33:18 +0000
Manifest next update: Sun 04 Oct 2026 21:10:18 +0000
Files and hashes: 1: 71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.crl (hash: J6gkYe4YqLqjVvGHUVuaXdNZPyZCKeJmMSoE+j+K1NU=)
2: 3130332e37362e33312e302f32342d3234203d3e20313530343732.roa (hash: rUHpYIR2vJnsoxcjoNwsrIMb/p49L2kYzJuwadosSIk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.crl
rsync://rpki-rsync.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 15:53:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:3c:80:4e:4e:c3:fa:94:24:57:9c:2b:f5:e9:49:64:25:e7:14:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71E3BB710F592146B82A3C1CFCF36A2BD1C5A795
Validity
Not Before: Oct 3 18:33:18 2026 GMT
Not After : Oct 4 21:10:18 2026 GMT
Subject: CN=E3888ABF0FE15C614FB805F3E6686D9B2C9A0552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:7a:3f:3c:c9:10:22:88:9e:fd:21:f3:ea:7a:
ef:0f:92:eb:54:39:81:d6:82:d5:c1:70:02:02:f2:
01:58:84:30:14:3e:d3:c9:1b:66:32:92:35:55:67:
28:f8:23:5d:2d:2f:a5:99:a2:2d:71:61:e8:fb:c9:
6a:23:20:7c:aa:ac:20:91:f4:21:0c:50:a7:5a:d3:
39:9b:62:5a:54:11:17:26:c4:07:b3:4c:6a:1c:66:
a5:01:13:a7:60:c6:c0:b5:d0:31:b4:64:1f:6e:24:
9a:b0:c3:89:8e:08:d1:36:c4:fe:25:37:07:ed:47:
2c:75:1f:5d:1f:3f:b1:1d:28:6f:6e:80:56:c9:01:
52:59:1b:14:60:8a:34:3f:0e:ba:93:63:a5:6d:77:
e9:5b:35:20:73:2a:98:8c:c6:91:9e:e0:3e:47:52:
d5:75:cf:3f:52:41:15:f7:48:39:c3:a1:bd:92:27:
4e:5c:49:18:e6:40:86:da:35:d2:dd:10:a4:30:9c:
18:8e:4f:56:b3:15:bc:81:87:8f:0c:62:fa:ed:d8:
9c:b4:02:7e:7b:21:d0:f3:e5:e1:b2:8f:fd:d0:09:
d0:a6:b8:09:d2:44:f7:2f:6e:65:a2:31:6f:6d:19:
0e:d7:d2:16:b9:de:2a:24:33:d5:41:49:9e:d1:3d:
95:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:88:8A:BF:0F:E1:5C:61:4F:B8:05:F3:E6:68:6D:9B:2C:9A:05:52
X509v3 Authority Key Identifier:
keyid:71:E3:BB:71:0F:59:21:46:B8:2A:3C:1C:FC:F3:6A:2B:D1:C5:A7:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:66:9f:7f:8b:55:94:c0:f1:ae:27:a7:26:1a:19:8a:3d:b8:
8e:2b:10:79:68:7a:e5:13:21:ad:ad:24:69:35:6b:cb:0c:00:
71:c7:37:98:75:66:92:0d:a1:e8:da:43:49:3e:d3:ce:d0:dc:
c9:01:ae:83:58:b4:e0:8a:21:93:b1:95:47:e1:2c:c4:10:7f:
a3:bf:89:fc:93:38:87:f5:64:a1:9b:1a:9b:b8:4e:e3:13:1a:
8e:ae:1a:75:c0:cd:1a:a8:e2:5e:91:24:45:58:01:14:c4:0e:
3f:7f:c1:5d:bd:c3:ea:0a:9e:10:fe:a6:50:3c:ed:89:cb:68:
e0:d0:5e:ec:3a:d6:92:4a:16:30:5d:b1:29:72:a0:f9:d1:fc:
f6:55:f7:8c:ef:65:6d:ab:61:98:42:3b:b4:fd:62:67:f4:21:
e7:99:30:2c:05:e1:e5:9b:8a:ab:76:7c:bf:10:18:c3:25:1c:
a9:ec:6d:12:99:7a:f7:a0:79:e1:81:52:78:6d:36:8e:5a:9b:
ed:63:51:2e:a3:6c:20:67:fc:c6:81:28:7c:06:3d:80:92:34:
06:e1:1b:ed:f8:73:91:a3:04:fd:ed:af:31:02:83:b2:41:d7:
62:b8:b8:1f:6f:ff:91:87:f1:e9:06:7b:03:3a:91:6c:a1:55:
c5:d5:98:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 23:20:29 2026 by rpki-client