$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.mft File: F71AC7E6F0D6271DD977776557E16AE02A4AD77C.mft (raw, json) Hash identifier: Urk//1lwqPli1PAx2rPdm4nadN6QULUvETzXDOdAt3Q= Subject key identifier: 66:59:B2:D8:9F:A7:E4:7E:A2:88:FB:5F:79:9C:53:00:B4:D6:5F:F7 Authority key identifier: F7:1A:C7:E6:F0:D6:27:1D:D9:77:77:65:57:E1:6A:E0:2A:4A:D7:7C Certificate issuer: /CN=F71AC7E6F0D6271DD977776557E16AE02A4AD77C Certificate serial: 7F3DAB35935E3A3CB2CAF6DA3287036AA6BE7B6C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.mft Manifest number: 0100 Signing time: Mon 09 Nov 2026 22:44:09 +0000 Manifest this update: Mon 09 Nov 2026 22:39:09 +0000 Manifest next update: Tue 10 Nov 2026 23:28:09 +0000 Files and hashes: 1: 323030313a6466333a393263303a3a2f34382d3438203d3e20313532343231.roa (hash: IbtvV4jtC6vMhj+esxB6AgoSBLjpNUY18dIXWSiEQx4=) 2: F71AC7E6F0D6271DD977776557E16AE02A4AD77C.crl (hash: alihxZBMcRmLjuG98t9g6hkCRKRYmMjeCQyWk1IRwY4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.crl rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 23:28:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:3d:ab:35:93:5e:3a:3c:b2:ca:f6:da:32:87:03:6a:a6:be:7b:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F71AC7E6F0D6271DD977776557E16AE02A4AD77C Validity Not Before: Nov 9 22:39:09 2026 GMT Not After : Nov 10 23:28:09 2026 GMT Subject: CN=6659B2D89FA7E47EA288FB5F799C5300B4D65FF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:34:cd:23:3d:65:50:ea:fa:e5:f5:8f:79:ac: ab:fa:9b:d1:8e:7b:9a:3f:e4:c4:e4:7e:89:22:62: 8f:da:bf:6e:cd:1d:04:1a:71:85:b1:c6:d1:0b:02: 17:bf:fc:fe:1b:e1:12:88:92:44:3d:af:8f:f4:b9: f4:f4:6c:22:b4:39:1b:d5:58:d4:43:a8:75:3b:aa: 07:37:03:3b:9c:80:62:4b:a9:e9:0d:6f:45:2a:aa: f5:ff:23:c9:f0:df:2b:8f:e0:2c:5b:2e:4f:01:03: b8:34:90:28:66:ec:0d:1a:12:2f:20:00:ce:4e:50: 8e:bf:f3:84:df:63:3c:a3:41:f9:c4:a6:24:d1:9e: df:03:b4:56:f7:66:7e:49:9d:b1:7e:e2:dc:ea:de: aa:89:47:d4:cf:3b:49:d1:6d:01:de:48:af:a7:60: 9c:ad:cb:bb:64:3c:ed:79:26:5d:e6:ee:7e:14:b9: 39:7d:7d:8b:f9:23:b2:09:08:9d:e0:2c:9d:b9:53: fa:91:88:a5:92:48:36:d8:c0:87:48:08:68:8e:e4: 52:90:3e:eb:a5:0a:b4:b0:19:05:40:1b:7e:90:26: 0f:55:cf:62:3e:7b:6c:92:d8:8a:a3:83:eb:00:16: 04:55:05:3c:da:b6:c7:03:87:ea:ca:6c:95:ec:dc: 7a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:59:B2:D8:9F:A7:E4:7E:A2:88:FB:5F:79:9C:53:00:B4:D6:5F:F7 X509v3 Authority Key Identifier: keyid:F7:1A:C7:E6:F0:D6:27:1D:D9:77:77:65:57:E1:6A:E0:2A:4A:D7:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:82:c2:2f:13:1f:30:9a:fa:d3:01:d9:be:77:5e:e6:2a:f7: f2:b9:16:01:27:cb:7e:79:74:06:ab:af:50:4d:54:1a:0c:b7: 76:b7:6a:13:78:36:a5:b5:a6:fe:8d:16:ac:33:83:03:dd:dd: 1c:da:0a:2a:98:bb:08:e7:7e:15:bd:05:df:88:42:c6:12:d7: 1b:3c:84:3f:10:80:aa:70:3c:69:67:a7:88:f6:ad:0b:d0:42: a8:05:9a:aa:65:75:b3:21:8b:21:e5:18:1b:22:4f:a8:42:f1: 4e:a1:61:4b:69:f0:1e:f5:99:af:ba:50:17:8a:5b:4c:31:ae: 4d:f6:23:00:58:aa:33:41:bf:0d:36:f9:2c:70:98:86:3e:42: bf:6f:2a:a0:3c:28:bf:8f:a5:cf:fe:26:dd:39:db:94:0f:ac: cd:1d:1d:ab:81:d3:24:e7:b8:12:f1:28:10:0d:84:75:3c:06: ae:72:f5:36:2a:30:f6:7a:e5:db:b5:9f:5a:56:0b:21:21:1a: 49:d6:39:04:c7:29:17:0f:13:86:ce:46:89:a1:67:0f:1b:6d: 97:3c:06:45:a1:fd:cd:8c:31:18:4b:41:d4:fa:73:ff:5a:f7: ab:2d:e9:27:4d:bf:9b:71:6f:51:cb:fd:6c:7a:dd:17:0a:63: 3e:12:e1:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfz2rNZNeOjyyyvbaMocDaqa+e2wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjcxQUM3RTZGMEQ2MjcxREQ5Nzc3NzY1NTdFMTZBRTAy QTRBRDc3QzAeFw0yNjExMDkyMjM5MDlaFw0yNjExMTAyMzI4MDlaMDMxMTAvBgNV BAMTKDY2NTlCMkQ4OUZBN0U0N0VBMjg4RkI1Rjc5OUM1MzAwQjRENjVGRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrNM0jPWVQ6vrl9Y95rKv6m9GO e5o/5MTkfokiYo/av27NHQQacYWxxtELAhe//P4b4RKIkkQ9r4/0ufT0bCK0ORvV WNRDqHU7qgc3AzucgGJLqekNb0UqqvX/I8nw3yuP4CxbLk8BA7g0kChm7A0aEi8g AM5OUI6/84TfYzyjQfnEpiTRnt8DtFb3Zn5JnbF+4tzq3qqJR9TPO0nRbQHeSK+n YJyty7tkPO15Jl3m7n4UuTl9fYv5I7IJCJ3gLJ25U/qRiKWSSDbYwIdICGiO5FKQ PuulCrSwGQVAG36QJg9Vz2I+e2yS2Iqjg+sAFgRVBTzatscDh+rKbJXs3Hp5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZlmy2J+n5H6iiPtfeZxTALTWX/cwHwYDVR0j BBgwFoAU9xrH5vDWJx3Zd3dlV+Fq4CpK13wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWE0Zjc5MzQtY2RjNy00MDgyLTgzZmItZGY3ZDRmODIxOWFmLzEvRjcxQUM3RTZG MEQ2MjcxREQ5Nzc3NzY1NTdFMTZBRTAyQTRBRDc3Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GNzFBQzdFNkYwRDYyNzFERDk3Nzc3NjU1N0UxNkFFMDJBNEFE NzdDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWE0Zjc5MzQtY2RjNy00MDgyLTgz ZmItZGY3ZDRmODIxOWFmLzEvRjcxQUM3RTZGMEQ2MjcxREQ5Nzc3NzY1NTdFMTZB RTAyQTRBRDc3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHqCwi8THzCa+tMB2b53XuYq9/K5FgEny355 dAarr1BNVBoMt3a3ahN4NqW1pv6NFqwzgwPd3RzaCiqYuwjnfhW9Bd+IQsYS1xs8 hD8QgKpwPGlnp4j2rQvQQqgFmqpldbMhiyHlGBsiT6hC8U6hYUtp8B71ma+6UBeK W0wxrk32IwBYqjNBvw02+SxwmIY+Qr9vKqA8KL+Ppc/+Jt0525QPrM0dHauB0yTn uBLxKBANhHU8Bq5y9TYqMPZ65du1n1pWCyEhGknWOQTHKRcPE4bORomhZw8bbZc8 BkWh/c2MMRhLQdT6c/9a96st6SdNv5txb1HL/Wx63RcKYz4S4SY= -----END CERTIFICATE-----Generated at Tue Nov 10 06:39:43 2026 by rpki-client