$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.mft File: 71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.mft (raw, json) Hash identifier: +Ddr30loivTqBT7I/auyYEN6bMa+SIG2nuR12kTitB0= Subject key identifier: C7:D2:72:92:4A:15:CD:4A:C5:B5:E9:39:C6:40:E4:4A:E7:0F:2E:87 Authority key identifier: 71:B6:07:4C:81:1D:4B:60:D7:9A:64:DA:0B:9D:D3:8E:9A:E7:8B:69 Certificate issuer: /CN=71B6074C811D4B60D79A64DA0B9DD38E9AE78B69 Certificate serial: 793220E7276161085C7317B348EA11DFD38F6DDB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.mft Manifest number: BF Signing time: Mon 21 Sep 2026 19:56:06 +0000 Manifest this update: Mon 21 Sep 2026 19:51:06 +0000 Manifest next update: Tue 22 Sep 2026 23:47:06 +0000 Files and hashes: 1: 3130332e3131322e3234342e302f32332d3234203d3e20313336313037.roa (hash: nN+scnQd2Bf1TJPwjOUkyJEyMV9Spsgs/notSfMcxTE=) 2: 3130332e3233332e3130322e302f32332d3234203d3e20313336313037.roa (hash: lwD0HUqunMfmcrBMFPjo8Wy84U1nW2Gl16rAlt9je9I=) 3: 71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.crl (hash: fWB1yDatSIqBQ8AQ01ERg+uHIL/w+jxh0neN4yZ6yu8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.crl rsync://rpki-rsync.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 23:47:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:32:20:e7:27:61:61:08:5c:73:17:b3:48:ea:11:df:d3:8f:6d:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71B6074C811D4B60D79A64DA0B9DD38E9AE78B69 Validity Not Before: Sep 21 19:51:06 2026 GMT Not After : Sep 22 23:47:06 2026 GMT Subject: CN=C7D272924A15CD4AC5B5E939C640E44AE70F2E87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:dc:cf:6f:0b:47:7e:84:ea:72:00:41:b0:c9: a8:43:bf:94:16:01:64:6d:d4:4a:15:d8:02:4c:14: 28:e2:31:88:cb:07:bc:35:6d:94:c1:8a:63:1d:36: fa:2c:a0:86:d7:32:5f:90:26:d9:bb:ed:e3:8b:bb: cb:df:1c:d2:fb:e8:86:8c:c6:ca:a8:68:43:c2:f9: ba:25:de:15:62:5a:9d:93:44:ea:cc:c6:68:da:cf: d8:1b:63:86:62:7e:de:78:d3:3f:9e:ef:42:db:d8: 4f:f8:1e:d6:4d:3e:f4:f7:81:b7:e7:07:b8:85:9c: 3e:4a:92:42:17:10:a7:50:14:a1:bc:9e:4f:f2:02: 22:02:7f:e0:f6:e6:1a:88:0d:4d:57:b3:8c:46:a5: ff:90:ee:28:f3:e7:fe:b2:fb:5a:37:36:8a:b5:e0: 0e:80:a0:08:93:4e:2b:4f:00:42:74:d0:76:bf:1e: bb:ad:f6:66:62:73:68:74:d9:70:df:7e:bb:52:8d: 14:ff:c7:45:ff:8a:b2:3a:84:8b:2b:a5:78:9a:04: c0:af:94:4d:54:39:80:1a:df:85:5f:6f:f3:19:fe: a3:fe:d6:35:3a:90:dc:28:78:67:22:23:42:62:2b: 85:9a:17:98:19:50:ff:89:a5:bd:5e:2c:3b:36:07: 6c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:D2:72:92:4A:15:CD:4A:C5:B5:E9:39:C6:40:E4:4A:E7:0F:2E:87 X509v3 Authority Key Identifier: keyid:71:B6:07:4C:81:1D:4B:60:D7:9A:64:DA:0B:9D:D3:8E:9A:E7:8B:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:34:0b:dd:6f:a0:85:41:4b:9a:36:ef:b1:ef:82:64:4c:e1: 6d:9b:65:d9:ec:87:aa:b8:a5:aa:d0:7c:fc:21:a8:9a:28:c5: 32:85:3f:90:1b:2c:40:79:14:8d:2b:e5:79:5d:5b:0f:b2:7a: 3c:d1:a7:f3:0a:49:87:0c:84:c6:17:3e:dc:8e:81:3f:c3:31: 2a:32:23:27:54:15:01:f5:6f:5c:0d:05:9e:9d:81:ad:d7:9c: 23:58:5d:a8:7d:0c:9b:5b:04:2c:49:61:18:6c:83:2f:59:cb: eb:5c:e8:6f:4d:75:e4:1b:a2:a2:f9:61:30:f5:d8:46:4c:38: 47:3f:dd:ca:39:6f:37:fb:79:0c:13:e9:43:44:e0:11:3a:ae: fd:ef:2d:0d:58:34:75:36:5c:f0:0d:31:0f:ae:67:7b:0d:21: d2:da:45:c5:ff:ad:ac:bc:69:d3:86:1b:b7:9d:01:5d:80:b4: eb:b6:ed:59:c9:fe:35:42:eb:bc:80:54:05:4f:1e:7f:57:16: b1:5a:0e:57:7c:8f:21:6c:29:da:0e:98:24:30:41:73:87:7a: c6:22:9c:ca:19:ed:c6:b3:ee:c2:d2:46:3c:21:be:8d:04:ab: 83:99:84:ee:6c:1b:48:93:8d:4f:b2:22:f4:40:60:40:d8:c1: b5:08:d5:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeTIg5ydhYQhccxezSOoR39OPbdswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFCNjA3NEM4MTFENEI2MEQ3OUE2NERBMEI5REQzOEU5 QUU3OEI2OTAeFw0yNjA5MjExOTUxMDZaFw0yNjA5MjIyMzQ3MDZaMDMxMTAvBgNV BAMTKEM3RDI3MjkyNEExNUNENEFDNUI1RTkzOUM2NDBFNDRBRTcwRjJFODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI3M9vC0d+hOpyAEGwyahDv5QW AWRt1EoV2AJMFCjiMYjLB7w1bZTBimMdNvosoIbXMl+QJtm77eOLu8vfHNL76IaM xsqoaEPC+bol3hViWp2TROrMxmjaz9gbY4Zift540z+e70Lb2E/4HtZNPvT3gbfn B7iFnD5KkkIXEKdQFKG8nk/yAiICf+D25hqIDU1Xs4xGpf+Q7ijz5/6y+1o3Noq1 4A6AoAiTTitPAEJ00Ha/Hrut9mZic2h02XDffrtSjRT/x0X/irI6hIsrpXiaBMCv lE1UOYAa34Vfb/MZ/qP+1jU6kNwoeGciI0JiK4WaF5gZUP+Jpb1eLDs2B2zhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx9JykkoVzUrFtek5xkDkSucPLocwHwYDVR0j BBgwFoAUcbYHTIEdS2DXmmTaC53Tjprni2kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWE0NzIzMWYtMDJkZC00OWU4LWFhMjUtMmQ1NGMwYTk5OWNhLzAvNzFCNjA3NEM4 MTFENEI2MEQ3OUE2NERBMEI5REQzOEU5QUU3OEI2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MUI2MDc0QzgxMUQ0QjYwRDc5QTY0REEwQjlERDM4RTlBRTc4 QjY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWE0NzIzMWYtMDJkZC00OWU4LWFh MjUtMmQ1NGMwYTk5OWNhLzAvNzFCNjA3NEM4MTFENEI2MEQ3OUE2NERBMEI5REQz OEU5QUU3OEI2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGQ0C91voIVBS5o277HvgmRM4W2bZdnsh6q4 parQfPwhqJooxTKFP5AbLEB5FI0r5XldWw+yejzRp/MKSYcMhMYXPtyOgT/DMSoy IydUFQH1b1wNBZ6dga3XnCNYXah9DJtbBCxJYRhsgy9Zy+tc6G9NdeQboqL5YTD1 2EZMOEc/3co5bzf7eQwT6UNE4BE6rv3vLQ1YNHU2XPANMQ+uZ3sNIdLaRcX/ray8 adOGG7edAV2AtOu27VnJ/jVC67yAVAVPHn9XFrFaDld8jyFsKdoOmCQwQXOHesYi nMoZ7caz7sLSRjwhvo0Eq4OZhO5sG0iTjU+yIvRAYEDYwbUI1ZU= -----END CERTIFICATE-----Generated at Tue Sep 22 06:56:15 2026 by rpki-client