$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.mft File: A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.mft (raw, json) Hash identifier: s9YVTGWYJw1LuyrTisdAsNRu88GAqpiJf2NQNK4YYgc= Subject key identifier: C1:F7:A5:A8:C4:A0:39:32:52:F9:80:F9:78:B6:D4:AA:65:45:DE:5D Authority key identifier: A7:1C:6F:39:EB:BF:CC:0D:F1:0C:4D:6D:BB:72:55:E6:92:8C:5C:47 Certificate issuer: /CN=A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47 Certificate serial: 3E760E50C75FA9F3C9EF30CAC564ACFA06470E73 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.mft Manifest number: BD Signing time: Sun 20 Sep 2026 17:18:20 +0000 Manifest this update: Sun 20 Sep 2026 17:13:20 +0000 Manifest next update: Mon 21 Sep 2026 19:40:20 +0000 Files and hashes: 1: A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.crl (hash: fMahoyUqej0v8L9sImJA0EqURsh5oJ1sm9LIL5QA4kA=) 2: 3130332e3137322e3131382e302f32332d3234203d3e20313432333935.roa (hash: gHOFFAMzJX67LZAd50wxnRJO1gH2l+8DoQ6h8IDez6o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.crl rsync://rpki-rsync.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:76:0e:50:c7:5f:a9:f3:c9:ef:30:ca:c5:64:ac:fa:06:47:0e:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47 Validity Not Before: Sep 20 17:13:20 2026 GMT Not After : Sep 21 19:40:20 2026 GMT Subject: CN=C1F7A5A8C4A0393252F980F978B6D4AA6545DE5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d2:33:62:23:d5:e4:07:6f:7c:6e:10:7f:12: 7f:9c:72:2f:8c:18:20:ad:f3:97:e0:c3:64:56:4c: 58:a0:9f:4f:a3:9e:d3:96:6e:e6:f0:22:45:ed:2d: 53:61:04:b6:dc:0b:e1:c7:da:09:77:8e:5a:30:8d: a0:c6:93:3c:1a:85:19:91:49:87:b3:94:3b:a2:86: 01:25:04:74:23:80:61:09:b3:0c:a7:18:17:1d:ef: 7c:3a:2e:ae:ba:6d:3a:9f:8f:d5:fa:de:19:0e:32: ff:dd:c6:a3:be:ca:7e:20:3b:46:49:dc:5a:e7:52: 58:e9:25:59:85:0d:ce:b8:de:38:a8:90:a0:45:02: e6:97:96:a1:71:98:05:8e:82:ca:33:af:ca:db:d2: 0e:5b:fe:97:89:40:98:0a:25:31:db:20:85:96:d0: 42:01:a4:df:8a:37:48:ba:d2:01:5e:73:f4:66:f2: d1:80:4f:32:c1:3d:6d:9e:a6:f4:9f:d9:fc:4c:b6: c6:99:d7:5a:c4:aa:11:2d:ff:83:fd:3c:88:16:b2: 9f:6c:9a:50:2f:b1:d6:25:77:a6:13:32:3c:df:3d: c0:e7:ea:50:3a:a6:18:2b:39:b9:50:25:fe:e8:8a: 35:cd:c8:10:98:f4:ce:11:a5:56:1a:52:db:bb:34: 59:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F7:A5:A8:C4:A0:39:32:52:F9:80:F9:78:B6:D4:AA:65:45:DE:5D X509v3 Authority Key Identifier: keyid:A7:1C:6F:39:EB:BF:CC:0D:F1:0C:4D:6D:BB:72:55:E6:92:8C:5C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:d9:8d:9f:54:df:23:06:6b:e7:9f:6b:01:18:8e:a8:cb:fc: 00:07:28:1f:08:55:38:1d:fb:26:8a:33:6a:5c:53:b4:ce:1c: 24:1a:30:31:ff:39:de:fa:b8:31:e6:30:9c:1d:4f:4c:b6:8b: 91:5a:69:c5:3a:5e:d8:c7:09:36:db:42:0a:13:8b:29:2a:7b: 86:e3:4e:95:0d:2b:e7:2a:b8:6c:1c:80:b7:14:b7:00:5b:52: aa:80:fa:86:58:7c:df:09:5f:72:d2:ec:6a:df:83:bf:92:9e: d1:f9:ba:6b:0b:25:d0:52:03:56:42:06:28:d2:70:5d:ec:6b: ab:ea:10:b1:bd:a5:97:2d:42:3f:0e:b4:9a:44:71:69:3c:25: b6:20:3f:e7:07:53:64:1b:6a:92:9d:35:a6:78:11:91:36:60: 06:ac:52:45:3a:0d:e6:f1:10:8a:e2:38:fa:ad:df:93:7c:a3: db:d8:3c:c0:2f:97:57:2f:c3:d2:41:4f:11:a0:ac:91:ad:27: 1c:a5:43:b4:92:cf:57:62:2b:81:0c:0a:e5:17:82:de:a3:3d: 44:ee:8e:58:e6:f5:70:3a:34:58:1b:06:62:15:0c:d1:d9:6d: 73:dd:89:ab:71:b3:66:ce:b1:d9:54:86:b4:d6:b4:2c:eb:9b: 5b:e4:69:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPnYOUMdfqfPJ7zDKxWSs+gZHDnMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcxQzZGMzlFQkJGQ0MwREYxMEM0RDZEQkI3MjU1RTY5 MjhDNUM0NzAeFw0yNjA5MjAxNzEzMjBaFw0yNjA5MjExOTQwMjBaMDMxMTAvBgNV BAMTKEMxRjdBNUE4QzRBMDM5MzI1MkY5ODBGOTc4QjZENEFBNjU0NURFNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw0jNiI9XkB298bhB/En+cci+M GCCt85fgw2RWTFign0+jntOWbubwIkXtLVNhBLbcC+HH2gl3jlowjaDGkzwahRmR SYezlDuihgElBHQjgGEJswynGBcd73w6Lq66bTqfj9X63hkOMv/dxqO+yn4gO0ZJ 3FrnUljpJVmFDc643jiokKBFAuaXlqFxmAWOgsozr8rb0g5b/peJQJgKJTHbIIWW 0EIBpN+KN0i60gFec/Rm8tGATzLBPW2epvSf2fxMtsaZ11rEqhEt/4P9PIgWsp9s mlAvsdYld6YTMjzfPcDn6lA6phgrOblQJf7oijXNyBCY9M4RpVYaUtu7NFnXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwfelqMSgOTJS+YD5eLbUqmVF3l0wHwYDVR0j BBgwFoAUpxxvOeu/zA3xDE1tu3JV5pKMXEcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjA0ZTk3ZDMtNzFjMy00ZDBhLThiMDQtNzA4OGZlMzgyYmMzLzAvQTcxQzZGMzlF QkJGQ0MwREYxMEM0RDZEQkI3MjU1RTY5MjhDNUM0Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNzFDNkYzOUVCQkZDQzBERjEwQzRENkRCQjcyNTVFNjkyOEM1 QzQ3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjA0ZTk3ZDMtNzFjMy00ZDBhLThi MDQtNzA4OGZlMzgyYmMzLzAvQTcxQzZGMzlFQkJGQ0MwREYxMEM0RDZEQkI3MjU1 RTY5MjhDNUM0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAvZjZ9U3yMGa+efawEYjqjL/AAHKB8IVTgd +yaKM2pcU7TOHCQaMDH/Od76uDHmMJwdT0y2i5FaacU6XtjHCTbbQgoTiykqe4bj TpUNK+cquGwcgLcUtwBbUqqA+oZYfN8JX3LS7Grfg7+SntH5umsLJdBSA1ZCBijS cF3sa6vqELG9pZctQj8OtJpEcWk8JbYgP+cHU2QbapKdNaZ4EZE2YAasUkU6Debx EIriOPqt35N8o9vYPMAvl1cvw9JBTxGgrJGtJxylQ7SSz1diK4EMCuUXgt6jPUTu jljm9XA6NFgbBmIVDNHZbXPdiatxs2bOsdlUhrTWtCzrm1vkaQs= -----END CERTIFICATE-----Generated at Mon Sep 21 07:20:43 2026 by rpki-client