$ rpki-client -vvf rpki-rsync.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.mft File: 71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.mft (raw, json) Hash identifier: cLxv+RUn47HeM63TDwMojXmitTUbdZJmyqthZYELFYI= Subject key identifier: F7:B0:3E:DB:66:E5:95:A2:84:09:4E:92:FD:FE:84:38:25:DA:D1:1C Authority key identifier: 71:B6:07:4C:81:1D:4B:60:D7:9A:64:DA:0B:9D:D3:8E:9A:E7:8B:69 Certificate issuer: /CN=71B6074C811D4B60D79A64DA0B9DD38E9AE78B69 Certificate serial: 65B9E8391999CBD4234A5E0A547B9CB99A495C61 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 22:00:55 +0000 Manifest this update: Tue 16 Jun 2026 21:55:55 +0000 Manifest next update: Thu 18 Jun 2026 01:57:55 +0000 Files and hashes: 1: 3130332e3233332e3130322e302f32332d3234203d3e20313336313037.roa (hash: lwD0HUqunMfmcrBMFPjo8Wy84U1nW2Gl16rAlt9je9I=) 2: 71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.crl (hash: S+1yyGcqu5kOZpnX6R9XrrkVB/aIhy5Qe8kFva+cLnQ=) 3: 3130332e3131322e3234342e302f32332d3234203d3e20313336313037.roa (hash: nN+scnQd2Bf1TJPwjOUkyJEyMV9Spsgs/notSfMcxTE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.crl rsync://rpki-rsync.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 01:57:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:b9:e8:39:19:99:cb:d4:23:4a:5e:0a:54:7b:9c:b9:9a:49:5c:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71B6074C811D4B60D79A64DA0B9DD38E9AE78B69 Validity Not Before: Jun 16 21:55:55 2026 GMT Not After : Jun 18 01:57:55 2026 GMT Subject: CN=F7B03EDB66E595A284094E92FDFE843825DAD11C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a0:64:2d:72:ac:6b:27:29:fe:68:09:2e:a4: f9:8f:74:f2:87:88:fc:90:1c:65:d3:9c:7a:37:a1: 69:f7:ba:0c:c6:02:3b:35:73:b2:26:6f:aa:c8:24: 18:60:df:9a:09:08:bb:d3:68:f6:32:c0:a3:b1:5a: 89:84:8f:d7:45:3c:33:a8:3d:e2:e5:3c:a2:93:e6: 02:94:5b:cf:1b:9b:e4:22:3b:d4:6e:ee:7f:10:73: 7d:d2:dd:f0:8b:f6:81:07:c6:49:fb:9d:78:7a:33: b7:3b:dd:51:5e:5d:11:56:4a:b9:6f:88:b7:26:be: b1:7f:97:54:14:ad:4f:a8:3c:a8:a6:43:74:f1:ea: d1:b2:dc:5a:58:b8:02:14:10:08:5d:19:f5:62:92: b0:0f:66:56:49:ae:04:0e:1d:37:ee:eb:84:4a:0e: e9:9f:03:3c:8d:42:75:3d:de:a3:56:15:79:a7:97: 5d:02:aa:a6:f0:cb:73:78:6d:2d:4b:2d:de:20:ff: 68:cf:ca:3c:85:8f:1f:a7:10:66:ec:a6:87:14:f6: 5e:bf:46:af:db:1a:95:0a:61:9c:15:11:b3:fe:93: f8:7d:49:76:1b:9b:16:ea:8a:a7:26:0d:b0:00:77: 7f:62:63:39:bd:b0:ec:8c:b4:ff:2d:fa:5d:3e:74: ae:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:B0:3E:DB:66:E5:95:A2:84:09:4E:92:FD:FE:84:38:25:DA:D1:1C X509v3 Authority Key Identifier: keyid:71:B6:07:4C:81:1D:4B:60:D7:9A:64:DA:0B:9D:D3:8E:9A:E7:8B:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:2a:cc:99:f6:56:7d:43:cf:5e:24:34:91:6d:bf:99:e8:2a: 75:29:99:12:d1:ba:be:93:ef:a2:24:c0:93:73:7e:07:19:93: 1b:c5:85:b1:3e:10:a9:7c:6c:73:b5:5c:72:49:d9:75:b5:52: e2:75:5d:5a:0b:47:7e:72:2e:17:e9:56:68:ed:52:c6:b0:e4: 9d:d2:b0:24:2a:da:f0:dc:b7:25:e7:5f:a4:48:4e:a6:61:c2: bb:b0:c3:3a:8c:61:e8:8c:5b:8b:d1:73:82:8e:f7:3a:b9:1a: 27:e0:2b:5a:e7:dd:4a:b4:2a:4c:4b:e1:ba:47:15:1b:8f:35: 21:7a:66:16:db:4c:b0:26:ab:8d:5c:c8:f1:fa:d5:bf:26:2d: 84:44:eb:0f:16:aa:7d:eb:71:28:d7:ba:ff:88:28:c4:a1:6f: 99:d4:26:c0:f6:7e:7c:b5:12:e2:80:a6:e7:81:83:a6:ad:5b: ce:ec:08:6f:db:6f:8e:63:f5:17:33:d1:a7:17:99:9d:8a:95: e6:a8:5e:a2:14:aa:89:29:b6:de:1c:b9:6a:82:c9:94:04:95: 37:e9:44:25:d2:24:a6:52:71:05:38:f2:f5:a0:f8:c6:6a:bf: 5f:42:d0:5b:8d:3f:b9:82:70:b8:27:70:a0:4b:14:8e:17:b3: 41:2a:e1:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZbnoORmZy9QjSl4KVHucuZpJXGEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFCNjA3NEM4MTFENEI2MEQ3OUE2NERBMEI5REQzOEU5 QUU3OEI2OTAeFw0yNjA2MTYyMTU1NTVaFw0yNjA2MTgwMTU3NTVaMDMxMTAvBgNV BAMTKEY3QjAzRURCNjZFNTk1QTI4NDA5NEU5MkZERkU4NDM4MjVEQUQxMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvoGQtcqxrJyn+aAkupPmPdPKH iPyQHGXTnHo3oWn3ugzGAjs1c7Imb6rIJBhg35oJCLvTaPYywKOxWomEj9dFPDOo PeLlPKKT5gKUW88bm+QiO9Ru7n8Qc33S3fCL9oEHxkn7nXh6M7c73VFeXRFWSrlv iLcmvrF/l1QUrU+oPKimQ3Tx6tGy3FpYuAIUEAhdGfVikrAPZlZJrgQOHTfu64RK DumfAzyNQnU93qNWFXmnl10Cqqbwy3N4bS1LLd4g/2jPyjyFjx+nEGbspocU9l6/ Rq/bGpUKYZwVEbP+k/h9SXYbmxbqiqcmDbAAd39iYzm9sOyMtP8t+l0+dK7/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU97A+22bllaKECU6S/f6EOCXa0RwwHwYDVR0j BBgwFoAUcbYHTIEdS2DXmmTaC53Tjprni2kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWE0NzIzMWYtMDJkZC00OWU4LWFhMjUtMmQ1NGMwYTk5OWNhLzAvNzFCNjA3NEM4 MTFENEI2MEQ3OUE2NERBMEI5REQzOEU5QUU3OEI2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MUI2MDc0QzgxMUQ0QjYwRDc5QTY0REEwQjlERDM4RTlBRTc4 QjY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWE0NzIzMWYtMDJkZC00OWU4LWFh MjUtMmQ1NGMwYTk5OWNhLzAvNzFCNjA3NEM4MTFENEI2MEQ3OUE2NERBMEI5REQz OEU5QUU3OEI2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACEqzJn2Vn1Dz14kNJFtv5noKnUpmRLRur6T 76IkwJNzfgcZkxvFhbE+EKl8bHO1XHJJ2XW1UuJ1XVoLR35yLhfpVmjtUsaw5J3S sCQq2vDctyXnX6RITqZhwruwwzqMYeiMW4vRc4KO9zq5GifgK1rn3Uq0KkxL4bpH FRuPNSF6ZhbbTLAmq41cyPH61b8mLYRE6w8Wqn3rcSjXuv+IKMShb5nUJsD2fny1 EuKApueBg6atW87sCG/bb45j9Rcz0acXmZ2KleaoXqIUqokptt4cuWqCyZQElTfp RCXSJKZScQU48vWg+MZqv19C0FuNP7mCcLgncKBLFI4Xs0Eq4Yw= -----END CERTIFICATE-----Generated at Wed Jun 17 12:39:15 2026 by rpki-client