$ rpki-client -vvf repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.mft File: 71C1EFD5DFDE20418A49070671B01D675F9A8917.mft (raw, json) Hash identifier: P/KeTI9iXAExSKqzmKYoNKjeFx7Mg2SmdoPbKAr80go= Subject key identifier: CF:DD:BD:62:D1:4D:33:B3:4B:9A:4E:B3:C9:CC:6C:53:D6:BC:71:2E Authority key identifier: 71:C1:EF:D5:DF:DE:20:41:8A:49:07:06:71:B0:1D:67:5F:9A:89:17 Certificate issuer: /CN=71C1EFD5DFDE20418A49070671B01D675F9A8917 Certificate serial: 259D466C981C0B8499F34E9287A4C14BF5180338 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71C1EFD5DFDE20418A49070671B01D675F9A8917.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.mft Manifest number: 02E3 Signing time: Wed 25 Mar 2026 15:02:04 +0000 Manifest this update: Wed 25 Mar 2026 14:57:04 +0000 Manifest next update: Sat 28 Mar 2026 20:28:04 +0000 Files and hashes: 1: 3130332e3137392e3231362e302f32332d3234203d3e20313339343439.roa (hash: 5sf8re0mhnirNB/CVBjr3dugWUOEZnIAdNv5SsfjaIQ=) 2: 71C1EFD5DFDE20418A49070671B01D675F9A8917.crl (hash: uZ52FBkgFg8DlonJFQwAl8OqJjuRv8It9mBk/6fxdQY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.crl rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71C1EFD5DFDE20418A49070671B01D675F9A8917.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 20:28:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:9d:46:6c:98:1c:0b:84:99:f3:4e:92:87:a4:c1:4b:f5:18:03:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C1EFD5DFDE20418A49070671B01D675F9A8917 Validity Not Before: Mar 25 14:57:04 2026 GMT Not After : Mar 28 20:28:04 2026 GMT Subject: CN=CFDDBD62D14D33B34B9A4EB3C9CC6C53D6BC712E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:75:2d:1f:75:7e:03:f7:97:71:45:fa:64:b1: fa:9f:27:1a:17:e4:aa:e0:71:d6:88:55:de:d4:7f: 47:b2:76:f3:d9:bb:8e:04:56:5e:f0:67:40:c4:f9: da:24:08:e5:8b:41:44:f4:54:11:21:6c:ce:c8:d3: 3c:23:05:fe:09:63:f0:dc:58:70:87:8f:b3:f3:42: c3:ad:c9:b9:76:8f:b3:e2:d6:52:09:0b:4a:d1:70: 37:75:51:bb:ca:69:4b:3f:c4:b7:02:57:d7:47:57: 2f:c8:96:80:25:f4:c9:cb:a5:f5:25:05:7c:b2:24: 85:c2:42:29:d0:ec:9f:00:32:98:b4:60:bc:42:ea: a2:2e:78:01:6c:21:35:76:a7:ed:21:47:2b:23:6c: 98:2d:dd:43:e6:25:e6:bb:25:5d:fe:7e:99:47:bd: e3:50:1a:1e:1e:6c:5b:fa:26:48:b4:a8:ea:d8:b3: 5c:c0:bc:79:f7:f5:02:c6:69:67:ab:a3:14:95:3d: d7:2f:50:a7:91:42:20:5e:c9:60:e3:1a:ff:d4:04: 00:4d:cb:8d:b6:9a:66:ce:2e:43:de:c4:6e:19:d4: 81:5f:28:e9:ff:6b:13:1d:49:06:75:7a:95:19:31: 0a:a9:98:c0:8d:82:47:4a:c0:e0:ed:d0:50:c9:61: 13:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:DD:BD:62:D1:4D:33:B3:4B:9A:4E:B3:C9:CC:6C:53:D6:BC:71:2E X509v3 Authority Key Identifier: keyid:71:C1:EF:D5:DF:DE:20:41:8A:49:07:06:71:B0:1D:67:5F:9A:89:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71C1EFD5DFDE20418A49070671B01D675F9A8917.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:94:4e:e6:4a:04:8e:90:33:9d:de:59:e3:37:09:a7:96:b2: 06:32:72:72:47:a1:b0:0a:82:6f:92:ec:49:5c:00:63:e9:02: c7:f0:0d:5a:97:9b:8f:0d:57:9f:93:a2:fa:7f:25:77:ee:92: 88:03:20:c9:a7:6e:6f:b8:3e:25:c7:a1:b0:93:4d:9e:89:4f: e3:46:06:e1:f0:16:be:40:b7:d4:1d:e4:44:1c:bf:56:33:51: 0e:51:d5:d8:6d:1b:b9:b1:43:58:d3:9f:24:97:e4:40:e9:f9: 4a:32:ad:09:f0:e9:d4:ee:4e:24:ac:66:ec:66:2e:74:32:73: 62:4b:d7:a0:f2:f0:21:2d:c3:1d:fc:4d:8e:6a:83:4f:e3:e6: a0:9a:69:13:14:f2:48:92:b0:eb:d1:8b:83:25:90:b6:d0:84: b5:76:b1:d3:fa:fd:a4:18:34:75:9a:8b:db:e7:8d:a6:da:79: c1:46:42:c8:b2:14:d7:e6:65:78:3a:19:4a:0f:a8:f2:dd:f4: 67:28:50:4c:49:ef:7f:da:02:29:e7:0b:6f:d9:0c:4e:42:43: 77:20:8f:88:cb:8f:67:30:a5:a0:2b:f4:54:86:8d:b6:e2:ef: cf:2d:21:42:b0:1e:33:3c:b9:b6:4b:a9:96:1b:7d:5f:a6:1e: c3:e9:02:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJZ1GbJgcC4SZ806Sh6TBS/UYAzgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDMUVGRDVERkRFMjA0MThBNDkwNzA2NzFCMDFENjc1 RjlBODkxNzAeFw0yNjAzMjUxNDU3MDRaFw0yNjAzMjgyMDI4MDRaMDMxMTAvBgNV BAMTKENGRERCRDYyRDE0RDMzQjM0QjlBNEVCM0M5Q0M2QzUzRDZCQzcxMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCdS0fdX4D95dxRfpksfqfJxoX 5KrgcdaIVd7Uf0eydvPZu44EVl7wZ0DE+dokCOWLQUT0VBEhbM7I0zwjBf4JY/Dc WHCHj7PzQsOtybl2j7Pi1lIJC0rRcDd1UbvKaUs/xLcCV9dHVy/IloAl9MnLpfUl BXyyJIXCQinQ7J8AMpi0YLxC6qIueAFsITV2p+0hRysjbJgt3UPmJea7JV3+fplH veNQGh4ebFv6Jki0qOrYs1zAvHn39QLGaWeroxSVPdcvUKeRQiBeyWDjGv/UBABN y422mmbOLkPexG4Z1IFfKOn/axMdSQZ1epUZMQqpmMCNgkdKwODt0FDJYRNHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz929YtFNM7NLmk6zycxsU9a8cS4wHwYDVR0j BBgwFoAUccHv1d/eIEGKSQcGcbAdZ1+aiRcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NWVhYjQ0Mi03NDgwLTQ1ODEtODFkZC0yM2EyMDA2MTQzODIvMC83MUMxRUZENURG REUyMDQxOEE0OTA3MDY3MUIwMUQ2NzVGOUE4OTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzFDMUVGRDVERkRFMjA0MThBNDkwNzA2NzFCMDFENjc1RjlB ODkxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDVlYWI0NDItNzQ4MC00NTgxLTgx ZGQtMjNhMjAwNjE0MzgyLzAvNzFDMUVGRDVERkRFMjA0MThBNDkwNzA2NzFCMDFE Njc1RjlBODkxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHCUTuZKBI6QM53eWeM3CaeWsgYycnJHobAK gm+S7ElcAGPpAsfwDVqXm48NV5+Tovp/JXfukogDIMmnbm+4PiXHobCTTZ6JT+NG BuHwFr5At9Qd5EQcv1YzUQ5R1dhtG7mxQ1jTnySX5EDp+UoyrQnw6dTuTiSsZuxm LnQyc2JL16Dy8CEtwx38TY5qg0/j5qCaaRMU8kiSsOvRi4MlkLbQhLV2sdP6/aQY NHWai9vnjabaecFGQsiyFNfmZXg6GUoPqPLd9GcoUExJ73/aAinnC2/ZDE5CQ3cg j4jLj2cwpaAr9FSGjbbi788tIUKwHjM8ubZLqZYbfV+mHsPpAqU= -----END CERTIFICATE-----Generated at Thu Mar 26 21:25:09 2026 by rpki-client