$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.mft File: F71AC7E6F0D6271DD977776557E16AE02A4AD77C.mft (raw, json) Hash identifier: Ud0EXANyANQS1kKRrH7ZuRzDzbP9RkalzshU9k/+88k= Subject key identifier: 41:5C:0A:7B:1C:CC:40:D7:08:02:8B:4F:F4:65:C9:50:BB:AC:47:63 Authority key identifier: F7:1A:C7:E6:F0:D6:27:1D:D9:77:77:65:57:E1:6A:E0:2A:4A:D7:7C Certificate issuer: /CN=F71AC7E6F0D6271DD977776557E16AE02A4AD77C Certificate serial: 2A6CEF4870E1A9A5F65344332ABE6DA2A1268D1B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.mft Manifest number: BE Signing time: Sun 20 Sep 2026 15:36:18 +0000 Manifest this update: Sun 20 Sep 2026 15:31:18 +0000 Manifest next update: Mon 21 Sep 2026 16:14:18 +0000 Files and hashes: 1: F71AC7E6F0D6271DD977776557E16AE02A4AD77C.crl (hash: 5JMGl7q9BJ8Moh3Mtxfg67fvwS0al+GTi2GVQSzp5aQ=) 2: 323030313a6466333a393263303a3a2f34382d3438203d3e20313532343231.roa (hash: IbtvV4jtC6vMhj+esxB6AgoSBLjpNUY18dIXWSiEQx4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.crl rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 16:14:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:6c:ef:48:70:e1:a9:a5:f6:53:44:33:2a:be:6d:a2:a1:26:8d:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F71AC7E6F0D6271DD977776557E16AE02A4AD77C Validity Not Before: Sep 20 15:31:18 2026 GMT Not After : Sep 21 16:14:18 2026 GMT Subject: CN=415C0A7B1CCC40D708028B4FF465C950BBAC4763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4c:2a:9f:df:0e:54:de:00:ea:ef:ce:75:de: d2:3e:62:32:74:ec:c0:bc:05:13:cf:d3:24:1b:5c: 2e:6c:c2:6a:c4:04:f0:3a:1c:96:af:89:61:21:4c: f1:bd:44:77:6f:e0:19:94:c1:b5:c6:ff:cf:ce:ee: bc:74:52:e2:49:00:11:27:8b:c7:0a:f1:97:36:e3: 50:da:48:af:f7:07:38:d2:7d:52:df:2e:13:09:b0: 42:6d:3b:48:44:c4:aa:03:26:ae:d7:f6:12:36:b6: 86:86:ba:ea:87:69:af:e9:50:11:f4:a5:09:84:2c: 9f:b0:44:9f:e0:61:45:48:f4:94:d3:ca:51:24:62: 3f:8c:6a:af:ee:d2:9f:ea:55:2a:d7:74:35:07:0e: 04:55:bd:1d:d3:44:59:e2:bc:cd:24:26:d9:4a:4c: 74:c4:1b:79:f2:cc:1c:cb:d6:e5:c1:68:a4:3e:33: 71:24:63:8f:35:fe:7f:20:65:25:3e:4c:c2:8c:80: 5a:a8:34:4a:65:dc:71:47:76:f4:c5:95:a2:19:b8: 86:4e:cd:8f:87:4b:33:ae:04:bc:90:de:1e:ef:7d: 4e:97:9d:83:ea:35:b7:d4:ce:22:ec:55:22:ca:fc: b9:d5:80:ea:d1:d3:68:03:40:77:3a:6b:a6:82:b5: f2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:5C:0A:7B:1C:CC:40:D7:08:02:8B:4F:F4:65:C9:50:BB:AC:47:63 X509v3 Authority Key Identifier: keyid:F7:1A:C7:E6:F0:D6:27:1D:D9:77:77:65:57:E1:6A:E0:2A:4A:D7:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:f1:bf:c4:00:d8:2a:88:1b:42:42:cf:56:9a:0d:3b:d1:49: 03:66:9d:33:52:4a:b7:99:7a:77:cf:6b:b9:9b:55:88:6a:34: 08:21:24:67:81:23:42:46:1b:17:c9:32:9f:30:1f:08:9a:02: 9b:30:5c:9a:89:78:94:d2:79:70:73:b7:d7:7c:7b:f4:e3:dc: 2f:43:64:0d:56:78:97:e8:56:3a:cc:9a:0b:9c:df:71:b6:7f: 34:79:1c:5e:05:de:27:6b:71:8b:ac:4c:9b:e2:51:0d:06:1f: 06:13:9a:39:83:ed:66:da:0a:00:07:c3:4b:5c:52:38:33:a4: 0a:86:af:61:6b:8c:50:35:60:c0:f1:2d:42:d7:a8:a1:55:2e: 89:85:7f:7f:2e:af:af:8f:d2:1d:64:b2:d4:06:38:67:55:43: a7:bf:13:dc:36:b5:5a:65:f0:48:a7:e8:3a:4f:18:80:72:9f: 60:4a:64:23:6d:6e:0a:9f:21:20:80:06:e8:f5:7d:e0:ff:99: 27:1e:53:f3:cd:95:11:37:a8:68:78:cd:dc:e5:ef:e0:fd:cf: b8:c0:e8:ac:96:1a:cf:63:14:60:1c:4b:e4:27:8c:b3:77:4b: 5e:a4:bd:2e:98:01:ca:3d:92:4e:dc:b5:be:99:e0:eb:5f:8d: a8:38:22:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKmzvSHDhqaX2U0QzKr5toqEmjRswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjcxQUM3RTZGMEQ2MjcxREQ5Nzc3NzY1NTdFMTZBRTAy QTRBRDc3QzAeFw0yNjA5MjAxNTMxMThaFw0yNjA5MjExNjE0MThaMDMxMTAvBgNV BAMTKDQxNUMwQTdCMUNDQzQwRDcwODAyOEI0RkY0NjVDOTUwQkJBQzQ3NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5TCqf3w5U3gDq78513tI+YjJ0 7MC8BRPP0yQbXC5swmrEBPA6HJaviWEhTPG9RHdv4BmUwbXG/8/O7rx0UuJJABEn i8cK8Zc241DaSK/3BzjSfVLfLhMJsEJtO0hExKoDJq7X9hI2toaGuuqHaa/pUBH0 pQmELJ+wRJ/gYUVI9JTTylEkYj+Maq/u0p/qVSrXdDUHDgRVvR3TRFnivM0kJtlK THTEG3nyzBzL1uXBaKQ+M3EkY481/n8gZSU+TMKMgFqoNEpl3HFHdvTFlaIZuIZO zY+HSzOuBLyQ3h7vfU6XnYPqNbfUziLsVSLK/LnVgOrR02gDQHc6a6aCtfJhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQVwKexzMQNcIAotP9GXJULusR2MwHwYDVR0j BBgwFoAU9xrH5vDWJx3Zd3dlV+Fq4CpK13wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWE0Zjc5MzQtY2RjNy00MDgyLTgzZmItZGY3ZDRmODIxOWFmLzEvRjcxQUM3RTZG MEQ2MjcxREQ5Nzc3NzY1NTdFMTZBRTAyQTRBRDc3Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GNzFBQzdFNkYwRDYyNzFERDk3Nzc3NjU1N0UxNkFFMDJBNEFE NzdDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWE0Zjc5MzQtY2RjNy00MDgyLTgz ZmItZGY3ZDRmODIxOWFmLzEvRjcxQUM3RTZGMEQ2MjcxREQ5Nzc3NzY1NTdFMTZB RTAyQTRBRDc3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFjxv8QA2CqIG0JCz1aaDTvRSQNmnTNSSreZ enfPa7mbVYhqNAghJGeBI0JGGxfJMp8wHwiaApswXJqJeJTSeXBzt9d8e/Tj3C9D ZA1WeJfoVjrMmguc33G2fzR5HF4F3idrcYusTJviUQ0GHwYTmjmD7WbaCgAHw0tc UjgzpAqGr2FrjFA1YMDxLULXqKFVLomFf38ur6+P0h1kstQGOGdVQ6e/E9w2tVpl 8Ein6DpPGIByn2BKZCNtbgqfISCABuj1feD/mSceU/PNlRE3qGh4zdzl7+D9z7jA 6KyWGs9jFGAcS+QnjLN3S16kvS6YAco9kk7ctb6Z4Otfjag4IlU= -----END CERTIFICATE-----Generated at Mon Sep 21 07:20:12 2026 by rpki-client