$ rpki-client -vvf rpki-rsync.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.mft File: 71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.mft (raw, json) Hash identifier: 9Nf92LrTLSYEPpWEXCE+yriiyewgE9gKsRsPzxxTVJc= Subject key identifier: BF:D2:7B:3D:CD:AB:47:75:77:1B:BD:44:B6:87:7C:E7:A2:18:A8:BE Authority key identifier: 71:A4:5C:05:D7:D5:DF:9D:16:E9:C3:B0:60:75:35:DB:2B:90:6B:32 Certificate issuer: /CN=71A45C05D7D5DF9D16E9C3B0607535DB2B906B32 Certificate serial: 437009FC5F7D2511515AC31934FF2C058B91D7AE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.mft Manifest number: 76 Signing time: Tue 28 Jul 2026 22:19:17 +0000 Manifest this update: Tue 28 Jul 2026 22:14:17 +0000 Manifest next update: Wed 29 Jul 2026 23:05:17 +0000 Files and hashes: 1: 71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.crl (hash: zUMZGVHxZIeT7PAjYdmFU5bVF8QSe7ZKlHKFtr5x6nM=) 2: 3130332e35362e39322e302f32342d3234203d3e203538343737.roa (hash: d1IJ4T81r3K/uk2231YZmItFa5G4LBBNAf/1wVmUa9c=) 3: 3130332e35362e39332e302f32342d3234203d3e203538343737.roa (hash: vqVbxn6Wjao5k2JYe2+RI+TcQAfRr5R7zs7bd5wdsLk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.crl rsync://rpki-rsync.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 23:05:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:70:09:fc:5f:7d:25:11:51:5a:c3:19:34:ff:2c:05:8b:91:d7:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71A45C05D7D5DF9D16E9C3B0607535DB2B906B32 Validity Not Before: Jul 28 22:14:17 2026 GMT Not After : Jul 29 23:05:17 2026 GMT Subject: CN=BFD27B3DCDAB4775771BBD44B6877CE7A218A8BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ef:c0:4c:03:21:1c:92:3a:b1:24:a6:64:0c: 9d:ac:07:2a:16:c4:a4:a3:9a:df:c7:1c:10:0a:21: 93:c6:30:d9:20:2f:2c:af:96:e5:68:ba:d2:ac:ff: 0e:f0:89:79:12:7f:34:d5:9e:63:37:61:71:3c:28: b8:73:ce:e2:b5:d5:df:b7:84:ca:7a:f3:56:76:7e: 15:92:a6:9d:fe:ff:e3:41:35:de:36:d6:1b:1b:f7: 0f:1f:de:66:9b:2c:d4:1d:bc:e4:22:b6:91:a1:5b: c1:c5:f3:db:66:da:69:2d:19:32:88:a4:c7:1b:53: 8a:e8:ea:d7:48:18:e0:08:93:e7:a7:18:b8:6b:6d: ec:e0:ce:fb:0c:a1:1a:c3:47:c7:a8:5e:75:9a:df: 9c:d3:c9:40:55:7c:8f:f5:ab:43:c4:6b:98:9b:db: 1b:99:f5:8f:46:44:85:a9:88:82:47:de:a0:f9:84: 4a:82:33:e3:a4:7d:ee:6b:f1:8e:84:3f:d0:f1:94: 32:17:7f:52:4a:90:e3:0d:62:e6:2e:4f:27:a2:85: f5:b5:91:12:10:96:93:44:83:a2:90:a1:81:c3:d0: dd:0a:44:95:d0:7e:8a:ab:dd:f1:48:18:cf:40:9b: 88:f5:9b:a3:33:46:e0:d9:fa:16:bf:3c:d4:62:a1: 44:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:D2:7B:3D:CD:AB:47:75:77:1B:BD:44:B6:87:7C:E7:A2:18:A8:BE X509v3 Authority Key Identifier: keyid:71:A4:5C:05:D7:D5:DF:9D:16:E9:C3:B0:60:75:35:DB:2B:90:6B:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:a9:37:9f:13:df:ee:f1:2d:1b:22:d4:67:9c:4e:f3:28:fc: b4:52:71:69:4d:c3:a4:02:c4:26:c5:13:a1:55:5a:a0:b1:3c: f4:7f:9c:55:2b:b1:f4:bc:4e:5d:79:12:2c:d4:b2:21:c6:34: 33:2e:bf:9d:21:79:0d:22:b2:c3:0c:be:75:87:5d:97:44:6e: 57:30:c5:78:7b:e2:0d:ba:75:43:3c:36:f6:ae:fa:7d:bf:3e: ae:42:5f:42:19:07:78:4f:b9:5f:d5:ab:ae:f7:b1:75:f9:e0: 68:65:c1:77:39:47:9b:0e:27:8e:10:2d:55:16:c7:31:e3:1a: ac:a2:99:2e:38:57:89:84:fe:b1:d5:67:f8:60:89:fe:c6:86: 22:18:27:99:57:e9:65:12:ca:16:29:00:91:f2:e3:37:be:d4: 72:a0:47:3a:1a:2f:99:8e:d6:6c:8c:9f:ec:f2:2d:dd:5d:5d: 30:76:7b:b6:50:f3:00:1b:38:c5:aa:4c:3b:e9:af:a6:1e:73: cf:41:7b:a0:c6:9d:40:ce:5f:c5:53:d9:45:bf:4f:ae:de:99: 4e:82:62:a1:e1:6a:5f:1a:c1:9f:4a:fe:a7:f1:e0:b8:be:cc: 31:00:ae:12:d5:b2:08:e9:00:ea:84:fd:4a:8c:e9:70:bb:0d: e3:70:1f:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ3AJ/F99JRFRWsMZNP8sBYuR164wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFBNDVDMDVEN0Q1REY5RDE2RTlDM0IwNjA3NTM1REIy QjkwNkIzMjAeFw0yNjA3MjgyMjE0MTdaFw0yNjA3MjkyMzA1MTdaMDMxMTAvBgNV BAMTKEJGRDI3QjNEQ0RBQjQ3NzU3NzFCQkQ0NEI2ODc3Q0U3QTIxOEE4QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH78BMAyEckjqxJKZkDJ2sByoW xKSjmt/HHBAKIZPGMNkgLyyvluVoutKs/w7wiXkSfzTVnmM3YXE8KLhzzuK11d+3 hMp681Z2fhWSpp3+/+NBNd421hsb9w8f3mabLNQdvOQitpGhW8HF89tm2mktGTKI pMcbU4ro6tdIGOAIk+enGLhrbezgzvsMoRrDR8eoXnWa35zTyUBVfI/1q0PEa5ib 2xuZ9Y9GRIWpiIJH3qD5hEqCM+Okfe5r8Y6EP9DxlDIXf1JKkOMNYuYuTyeihfW1 kRIQlpNEg6KQoYHD0N0KRJXQfoqr3fFIGM9Am4j1m6MzRuDZ+ha/PNRioUR5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv9J7Pc2rR3V3G71Etod856IYqL4wHwYDVR0j BBgwFoAUcaRcBdfV350W6cOwYHU12yuQazIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzI2Y2QyNmYtZmJkYS00Y2Q4LWEwMWMtYjAxNTU1MTMwMTVmLzAvNzFBNDVDMDVE N0Q1REY5RDE2RTlDM0IwNjA3NTM1REIyQjkwNkIzMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MUE0NUMwNUQ3RDVERjlEMTZFOUMzQjA2MDc1MzVEQjJCOTA2 QjMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzI2Y2QyNmYtZmJkYS00Y2Q4LWEw MWMtYjAxNTU1MTMwMTVmLzAvNzFBNDVDMDVEN0Q1REY5RDE2RTlDM0IwNjA3NTM1 REIyQjkwNkIzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG6pN58T3+7xLRsi1GecTvMo/LRScWlNw6QC xCbFE6FVWqCxPPR/nFUrsfS8Tl15EizUsiHGNDMuv50heQ0issMMvnWHXZdEblcw xXh74g26dUM8Nvau+n2/Pq5CX0IZB3hPuV/Vq673sXX54GhlwXc5R5sOJ44QLVUW xzHjGqyimS44V4mE/rHVZ/hgif7GhiIYJ5lX6WUSyhYpAJHy4ze+1HKgRzoaL5mO 1myMn+zyLd1dXTB2e7ZQ8wAbOMWqTDvpr6Yec89Be6DGnUDOX8VT2UW/T67emU6C YqHhal8awZ9K/qfx4Li+zDEArhLVsgjpAOqE/UqM6XC7DeNwH1M= -----END CERTIFICATE-----Generated at Wed Jul 29 11:12:40 2026 by rpki-client