$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.mft File: A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.mft (raw, json) Hash identifier: kucfL2mzvARy8o82KuRpiG4LKIUQ8jA2r4nDfQ/263U= Subject key identifier: 6E:03:B5:BA:06:EE:1B:8E:91:55:D3:36:98:64:0C:3A:CC:05:D1:3C Authority key identifier: A7:1C:6F:39:EB:BF:CC:0D:F1:0C:4D:6D:BB:72:55:E6:92:8C:5C:47 Certificate issuer: /CN=A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47 Certificate serial: 5175011DA7FE0A210B8570C02BFC2E83D3516B53 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.mft Manifest number: FF Signing time: Tue 10 Nov 2026 01:27:20 +0000 Manifest this update: Tue 10 Nov 2026 01:22:20 +0000 Manifest next update: Wed 11 Nov 2026 01:39:20 +0000 Files and hashes: 1: 3130332e3137322e3131382e302f32332d3234203d3e20313432333935.roa (hash: gHOFFAMzJX67LZAd50wxnRJO1gH2l+8DoQ6h8IDez6o=) 2: A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.crl (hash: pEIxXj/KaLVp4KnVBFYivkDhuMIuhGawFdGWyiSW2Yo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.crl rsync://rpki-rsync.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 01:39:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:75:01:1d:a7:fe:0a:21:0b:85:70:c0:2b:fc:2e:83:d3:51:6b:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47 Validity Not Before: Nov 10 01:22:20 2026 GMT Not After : Nov 11 01:39:20 2026 GMT Subject: CN=6E03B5BA06EE1B8E9155D33698640C3ACC05D13C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c0:d1:82:05:21:d0:80:c7:e1:59:dd:44:ad: 53:53:0a:21:95:82:0d:7e:0c:12:9a:07:aa:e6:77: 69:cf:f7:89:27:8e:82:19:55:87:9b:f0:31:ad:42: bd:fd:f3:e3:95:cd:52:5c:5a:17:31:7f:a5:8a:11: c6:2e:32:7a:5b:7d:bd:83:0e:78:c6:ac:03:45:a5: 66:3c:de:34:48:9d:43:77:2a:fb:86:e6:99:ee:f2: 6d:7d:2f:65:d9:50:b6:09:16:c4:72:ed:fa:f2:b8: 47:dd:ab:6b:a4:90:45:e1:22:13:ca:0a:b1:d4:e0: 31:a0:2a:47:99:5d:12:ad:07:a8:57:ee:c5:28:b3: da:dd:2c:e8:8e:2e:b1:40:bd:38:fe:91:e2:49:2c: 45:c6:e5:bd:39:a8:13:6b:29:c2:8d:0c:81:4e:41: 70:bb:76:bd:cd:1b:8e:cf:5c:0f:d0:da:7e:0f:99: 04:e0:15:ac:c8:1f:de:71:22:15:99:c5:1c:52:04: 09:15:e1:dd:06:f1:ae:71:8e:58:6a:08:47:2a:c1: 98:30:89:93:41:94:0b:3b:7f:14:61:5d:72:3d:ba: 0c:d7:30:13:b2:bb:bd:44:f0:9a:e8:a8:d6:a5:d1: 8a:b9:6f:47:3a:c1:d4:17:fd:fd:c4:80:28:53:ae: 68:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:03:B5:BA:06:EE:1B:8E:91:55:D3:36:98:64:0C:3A:CC:05:D1:3C X509v3 Authority Key Identifier: keyid:A7:1C:6F:39:EB:BF:CC:0D:F1:0C:4D:6D:BB:72:55:E6:92:8C:5C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:e5:c7:4c:f2:95:45:18:15:d6:90:80:c0:d9:c7:7b:c9:e8: d4:d7:c7:2a:25:0a:22:77:6e:39:6d:d4:40:4e:30:e3:09:19: 64:da:b5:70:59:51:4d:9d:6a:fb:67:90:45:13:c5:ff:04:74: 4c:a8:cc:d1:54:86:f6:ff:7c:bf:44:6c:50:67:3d:6c:1d:7c: 28:7d:12:57:02:43:ed:25:c2:09:24:17:1b:02:e4:14:50:a9: 51:94:07:d1:57:6a:12:04:57:9a:3c:bf:cd:e0:10:fa:d0:64: b3:9e:e3:8d:da:05:59:70:89:70:53:46:c7:cb:5c:bb:a1:7d: 02:6c:42:a5:f8:39:ef:1a:97:f5:d7:0f:b2:e4:f8:4a:27:0d: 8e:02:ee:ce:d4:5c:f8:c7:10:24:06:67:d8:cf:1f:23:15:4d: 68:b9:0b:b4:73:3a:28:49:70:11:a9:29:a1:f2:34:a0:5a:60: fb:77:de:08:b3:ad:d0:d4:40:7a:c8:ac:17:a0:c1:6b:29:d3: 08:10:51:7d:a3:3b:94:ff:57:d6:83:2d:60:74:ad:53:62:d9: 91:b9:71:57:b5:6e:45:b3:d1:d5:25:c5:3d:29:36:a7:a9:55: cf:4b:66:12:48:82:16:da:31:90:68:e8:19:f1:74:c7:65:75: 01:34:bb:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUXUBHaf+CiELhXDAK/wug9NRa1MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcxQzZGMzlFQkJGQ0MwREYxMEM0RDZEQkI3MjU1RTY5 MjhDNUM0NzAeFw0yNjExMTAwMTIyMjBaFw0yNjExMTEwMTM5MjBaMDMxMTAvBgNV BAMTKDZFMDNCNUJBMDZFRTFCOEU5MTU1RDMzNjk4NjQwQzNBQ0MwNUQxM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3wNGCBSHQgMfhWd1ErVNTCiGV gg1+DBKaB6rmd2nP94knjoIZVYeb8DGtQr398+OVzVJcWhcxf6WKEcYuMnpbfb2D DnjGrANFpWY83jRInUN3KvuG5pnu8m19L2XZULYJFsRy7fryuEfdq2ukkEXhIhPK CrHU4DGgKkeZXRKtB6hX7sUos9rdLOiOLrFAvTj+keJJLEXG5b05qBNrKcKNDIFO QXC7dr3NG47PXA/Q2n4PmQTgFazIH95xIhWZxRxSBAkV4d0G8a5xjlhqCEcqwZgw iZNBlAs7fxRhXXI9ugzXMBOyu71E8JroqNal0Yq5b0c6wdQX/f3EgChTrmh1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbgO1ugbuG46RVdM2mGQMOswF0TwwHwYDVR0j BBgwFoAUpxxvOeu/zA3xDE1tu3JV5pKMXEcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjA0ZTk3ZDMtNzFjMy00ZDBhLThiMDQtNzA4OGZlMzgyYmMzLzAvQTcxQzZGMzlF QkJGQ0MwREYxMEM0RDZEQkI3MjU1RTY5MjhDNUM0Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNzFDNkYzOUVCQkZDQzBERjEwQzRENkRCQjcyNTVFNjkyOEM1 QzQ3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjA0ZTk3ZDMtNzFjMy00ZDBhLThi MDQtNzA4OGZlMzgyYmMzLzAvQTcxQzZGMzlFQkJGQ0MwREYxMEM0RDZEQkI3MjU1 RTY5MjhDNUM0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALLlx0zylUUYFdaQgMDZx3vJ6NTXxyolCiJ3 bjlt1EBOMOMJGWTatXBZUU2davtnkEUTxf8EdEyozNFUhvb/fL9EbFBnPWwdfCh9 ElcCQ+0lwgkkFxsC5BRQqVGUB9FXahIEV5o8v83gEPrQZLOe443aBVlwiXBTRsfL XLuhfQJsQqX4Oe8al/XXD7Lk+EonDY4C7s7UXPjHECQGZ9jPHyMVTWi5C7RzOihJ cBGpKaHyNKBaYPt33gizrdDUQHrIrBegwWsp0wgQUX2jO5T/V9aDLWB0rVNi2ZG5 cVe1bkWz0dUlxT0pNqepVc9LZhJIghbaMZBo6BnxdMdldQE0ux0= -----END CERTIFICATE-----Generated at Tue Nov 10 11:16:44 2026 by rpki-client