$ rpki-client -vvvf rpki-rsync.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.mft File: 71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.mft (raw, json) Hash identifier: ru0p64qdY1ugjWJ7qIX0oU8LK+UWVcfrRjo3w3B4Vlg= Subject key identifier: A3:EF:ED:D7:B5:BC:75:3A:91:1A:E2:11:EE:8F:C7:2D:D6:1C:3A:10 Authority key identifier: 71:A4:5C:05:D7:D5:DF:9D:16:E9:C3:B0:60:75:35:DB:2B:90:6B:32 Certificate issuer: /CN=71A45C05D7D5DF9D16E9C3B0607535DB2B906B32 Certificate serial: 7535E3E1A07AAB2CD80B1B1E979DDFE1B59B0971 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.mft Manifest number: BE Signing time: Mon 21 Sep 2026 03:30:52 +0000 Manifest this update: Mon 21 Sep 2026 03:25:52 +0000 Manifest next update: Tue 22 Sep 2026 07:10:52 +0000 Files and hashes: 1: 71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.crl (hash: LEU8ZnWB57pWltZ6SlVoP+ZsuB+rq8YfimSV0qc5SCk=) 2: 3130332e35362e39332e302f32342d3234203d3e203538343737.roa (hash: vqVbxn6Wjao5k2JYe2+RI+TcQAfRr5R7zs7bd5wdsLk=) 3: 3130332e35362e39322e302f32342d3234203d3e203538343737.roa (hash: d1IJ4T81r3K/uk2231YZmItFa5G4LBBNAf/1wVmUa9c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.crl rsync://rpki-rsync.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:35:e3:e1:a0:7a:ab:2c:d8:0b:1b:1e:97:9d:df:e1:b5:9b:09:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71A45C05D7D5DF9D16E9C3B0607535DB2B906B32 Validity Not Before: Sep 21 03:25:52 2026 GMT Not After : Sep 22 07:10:52 2026 GMT Subject: CN=A3EFEDD7B5BC753A911AE211EE8FC72DD61C3A10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:05:8b:bb:30:ef:07:d7:98:80:e5:0f:5a:85: 9c:41:9b:1e:e4:16:48:f5:7d:af:0a:43:af:15:3b: 4e:a5:74:72:ed:02:58:55:5f:b9:93:ea:80:eb:71: 62:2c:ca:51:19:bb:88:19:9e:e2:30:46:a7:38:df: df:10:c2:71:ef:2b:9e:b7:b4:f7:c4:96:4f:83:ec: b8:b7:e8:87:7c:e9:30:65:e5:3f:62:96:e6:82:02: 58:e2:1e:bd:81:e3:c8:3f:27:e7:c4:42:e9:30:fc: e0:20:fc:ed:29:d7:67:b7:c3:9a:37:47:ac:b0:08: 73:e8:e3:48:31:e3:64:82:50:1b:f1:2d:14:ea:36: 5a:de:c0:ef:91:60:35:0e:58:97:4d:a6:b3:99:96: 38:0f:d7:8e:09:b0:b4:da:3d:5f:2d:c3:51:79:42: d8:83:23:4a:a0:fc:68:11:02:53:9e:83:d3:79:41: d0:21:ea:eb:c4:8f:fd:18:77:77:f5:2c:65:75:8b: 53:e5:7c:ae:75:08:3b:5e:a3:ab:6b:a6:0b:29:1e: 44:8d:7f:96:6f:cd:48:21:2a:bd:3c:41:5f:19:b7: e7:d3:38:03:75:8a:7a:e8:35:32:a4:d6:0d:d0:e7: fd:90:40:b7:4b:9f:b5:4b:08:21:b1:1e:0b:3c:82: 94:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:EF:ED:D7:B5:BC:75:3A:91:1A:E2:11:EE:8F:C7:2D:D6:1C:3A:10 X509v3 Authority Key Identifier: keyid:71:A4:5C:05:D7:D5:DF:9D:16:E9:C3:B0:60:75:35:DB:2B:90:6B:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:da:c4:02:33:a0:31:a9:fc:9b:cf:3d:0f:da:51:b4:17:e6: 49:2c:c1:24:67:a1:a1:9b:b6:71:31:a5:8b:96:b3:71:d4:7a: 6a:0e:fa:3c:c3:fb:6e:d3:e6:12:02:79:17:b2:04:89:5b:c9: 30:b3:fc:e3:86:d5:f2:a2:c7:1e:89:2f:0e:c5:a6:74:bc:d9: 9d:07:7e:8d:93:65:28:34:67:33:33:7b:f8:d8:7c:09:da:31: 77:c7:96:54:65:a6:70:df:4f:ab:41:6c:b3:93:a1:a4:06:49: 64:3e:c9:e8:7d:3a:c5:c8:86:11:52:91:5b:c3:ab:b1:34:92: f0:a4:0d:e2:b4:84:ac:99:4b:cf:36:90:95:08:aa:ee:43:c9: d3:d7:a2:01:e5:fb:30:34:97:ea:a1:6d:59:a6:d9:78:85:bf: 42:93:ff:d8:3b:5d:ed:33:fd:66:5e:85:c5:7c:9b:88:d1:61: 4c:04:db:32:4c:55:25:30:f8:80:90:21:25:b0:1c:f6:25:43: 9b:f9:bb:dd:ff:14:a4:c0:8f:aa:21:5c:71:79:52:ea:c3:49: bb:69:10:fc:1b:a7:4c:bf:73:4e:47:4c:ed:f1:40:c9:ba:cf: 14:9e:86:53:5f:57:68:78:59:02:a4:d8:ba:52:51:79:36:de: da:e7:5b:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdTXj4aB6qyzYCxsel53f4bWbCXEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFBNDVDMDVEN0Q1REY5RDE2RTlDM0IwNjA3NTM1REIy QjkwNkIzMjAeFw0yNjA5MjEwMzI1NTJaFw0yNjA5MjIwNzEwNTJaMDMxMTAvBgNV BAMTKEEzRUZFREQ3QjVCQzc1M0E5MTFBRTIxMUVFOEZDNzJERDYxQzNBMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClBYu7MO8H15iA5Q9ahZxBmx7k Fkj1fa8KQ68VO06ldHLtAlhVX7mT6oDrcWIsylEZu4gZnuIwRqc4398QwnHvK563 tPfElk+D7Li36Id86TBl5T9iluaCAljiHr2B48g/J+fEQukw/OAg/O0p12e3w5o3 R6ywCHPo40gx42SCUBvxLRTqNlrewO+RYDUOWJdNprOZljgP144JsLTaPV8tw1F5 QtiDI0qg/GgRAlOeg9N5QdAh6uvEj/0Yd3f1LGV1i1PlfK51CDteo6trpgspHkSN f5ZvzUghKr08QV8Zt+fTOAN1inroNTKk1g3Q5/2QQLdLn7VLCCGxHgs8gpRrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo+/t17W8dTqRGuIR7o/HLdYcOhAwHwYDVR0j BBgwFoAUcaRcBdfV350W6cOwYHU12yuQazIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzI2Y2QyNmYtZmJkYS00Y2Q4LWEwMWMtYjAxNTU1MTMwMTVmLzAvNzFBNDVDMDVE N0Q1REY5RDE2RTlDM0IwNjA3NTM1REIyQjkwNkIzMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MUE0NUMwNUQ3RDVERjlEMTZFOUMzQjA2MDc1MzVEQjJCOTA2 QjMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzI2Y2QyNmYtZmJkYS00Y2Q4LWEw MWMtYjAxNTU1MTMwMTVmLzAvNzFBNDVDMDVEN0Q1REY5RDE2RTlDM0IwNjA3NTM1 REIyQjkwNkIzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACPaxAIzoDGp/JvPPQ/aUbQX5kkswSRnoaGb tnExpYuWs3HUemoO+jzD+27T5hICeReyBIlbyTCz/OOG1fKixx6JLw7FpnS82Z0H fo2TZSg0ZzMze/jYfAnaMXfHllRlpnDfT6tBbLOToaQGSWQ+yeh9OsXIhhFSkVvD q7E0kvCkDeK0hKyZS882kJUIqu5DydPXogHl+zA0l+qhbVmm2XiFv0KT/9g7Xe0z /WZehcV8m4jRYUwE2zJMVSUw+ICQISWwHPYlQ5v5u93/FKTAj6ohXHF5UurDSbtp EPwbp0y/c05HTO3xQMm6zxSehlNfV2h4WQKk2LpSUXk23trnWzA= -----END CERTIFICATE-----Generated at Mon Sep 21 09:06:04 2026 by rpki-client