$ rpki-client -vvf repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/71054E3C02E22D607A90FACC4DE7369B65367EBD.mft File: 71054E3C02E22D607A90FACC4DE7369B65367EBD.mft (raw, json) Hash identifier: M9bnXgsVJQnO/up1emw6TyPI7PS1ld51mKtqIM3AcgA= Subject key identifier: 04:FB:62:9A:E5:89:34:45:E1:66:43:51:9C:89:47:10:83:E0:FB:A0 Authority key identifier: 71:05:4E:3C:02:E2:2D:60:7A:90:FA:CC:4D:E7:36:9B:65:36:7E:BD Certificate issuer: /CN=71054E3C02E22D607A90FACC4DE7369B65367EBD Certificate serial: 7E09D0E529645BB7A4A0514C29F4310F7B7D19D9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71054E3C02E22D607A90FACC4DE7369B65367EBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/71054E3C02E22D607A90FACC4DE7369B65367EBD.mft Manifest number: 01BB Signing time: Wed 25 Mar 2026 21:00:53 +0000 Manifest this update: Wed 25 Mar 2026 20:55:53 +0000 Manifest next update: Sun 29 Mar 2026 04:39:53 +0000 Files and hashes: 1: 3130332e32392e31302e302f32342d3234203d3e20313431303634.roa (hash: g42xSqBdbww2iHC490qUVGv715w1+ed6Uwshy2/cUBk=) 2: 71054E3C02E22D607A90FACC4DE7369B65367EBD.crl (hash: frzKFtpuGMME6WrfPiGdXNBW+jiSnDKlrnspnaCaaFY=) 3: 3130332e32392e31312e302f32342d3234203d3e20313431303634.roa (hash: 7ZuQrAyTpSXLw2zTTFdrCC17EZNzNmUBwi/56OEgq84=) 4: 3130332e32392e31302e302f32332d3233203d3e20313431303634.roa (hash: ox/jPDjPCSM2yBDuW5lKFEBzvZUEEtg9kdQcbRM/Nsc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/71054E3C02E22D607A90FACC4DE7369B65367EBD.crl rsync://repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/71054E3C02E22D607A90FACC4DE7369B65367EBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71054E3C02E22D607A90FACC4DE7369B65367EBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 04:39:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:09:d0:e5:29:64:5b:b7:a4:a0:51:4c:29:f4:31:0f:7b:7d:19:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71054E3C02E22D607A90FACC4DE7369B65367EBD Validity Not Before: Mar 25 20:55:53 2026 GMT Not After : Mar 29 04:39:53 2026 GMT Subject: CN=04FB629AE5893445E16643519C89471083E0FBA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:58:2a:ff:87:44:7e:a8:1c:91:3e:d7:60:a4: 77:91:2f:3c:e9:86:53:0a:e3:f6:dd:a5:dd:68:f1: 46:b1:b9:55:45:53:3a:82:0f:91:b7:16:34:f5:09: 99:c1:5d:e4:35:ea:2e:69:3f:88:00:34:d6:14:b8: 7b:1a:47:1f:bd:9f:67:94:e3:a0:12:a0:ac:76:13: 8d:b0:f6:87:3d:0a:9f:a8:1d:11:86:8b:72:b4:b8: a4:e6:56:b0:9b:42:c2:0f:f2:68:08:17:48:37:50: 9d:16:01:41:32:87:3d:3a:0c:3a:9c:6d:0c:5c:f4: f4:96:c7:08:09:23:be:06:64:06:72:69:cd:56:38: 71:6e:5b:7f:c1:6f:d7:6d:6e:fa:6e:dc:1f:2e:58: c9:a2:a9:b0:22:04:1b:50:45:51:5d:a8:f6:02:f9: f4:24:8a:d3:cb:aa:08:69:01:0c:3f:10:44:09:1c: 0c:d3:c9:64:b6:08:3b:eb:4f:64:88:26:f4:eb:c3: 08:0e:2a:e4:97:58:5d:ea:0b:4e:69:9f:59:24:89: 50:6c:36:a8:5c:db:7b:96:52:4d:e7:08:94:d8:9b: 5c:b1:29:fb:41:cc:8c:f8:bf:3a:6d:f2:99:8e:f1: 9d:af:d1:20:44:82:bd:c7:87:90:67:e7:44:61:aa: 0a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:FB:62:9A:E5:89:34:45:E1:66:43:51:9C:89:47:10:83:E0:FB:A0 X509v3 Authority Key Identifier: keyid:71:05:4E:3C:02:E2:2D:60:7A:90:FA:CC:4D:E7:36:9B:65:36:7E:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/71054E3C02E22D607A90FACC4DE7369B65367EBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71054E3C02E22D607A90FACC4DE7369B65367EBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/71054E3C02E22D607A90FACC4DE7369B65367EBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:be:38:88:39:30:42:ff:29:42:60:27:6b:12:cd:3f:3e:fb: b5:bd:2d:a7:ef:1a:9b:66:b6:05:97:74:d5:cb:c6:b5:20:98: a9:16:76:10:af:8a:1f:82:14:c0:4a:65:d9:5d:73:8e:05:9f: 3b:d7:89:4b:9c:be:d0:17:51:81:d4:3b:b2:c2:4b:42:b1:2d: ec:07:32:d2:f7:cc:15:4d:d0:0b:c7:73:32:fd:85:73:00:fd: 4a:b0:60:25:e7:b2:1d:28:2f:f1:24:41:5c:7a:82:c0:e4:34: 25:c6:57:e5:7a:f8:6e:25:b7:bc:07:d2:e1:a1:24:53:6c:1d: d5:17:d5:e7:4b:75:29:35:83:e9:08:8a:dd:3c:34:f5:b0:5c: 14:df:82:24:24:6e:93:13:d7:dc:d9:25:88:3d:46:dd:9c:1d: 55:d5:1d:51:7e:2a:af:03:db:f9:33:0d:c3:5a:eb:55:0e:14: bf:ff:39:61:00:19:9c:73:c2:60:9b:37:79:0b:31:25:3d:2f: 3c:c8:4a:89:33:a7:b3:81:29:18:73:01:cb:15:b4:11:c9:08: b6:89:0c:ea:78:49:de:c2:98:fc:32:d3:80:97:f4:66:31:4d: b2:4c:66:3f:09:85:6d:0f:81:03:12:76:c7:e9:61:e3:31:df: b3:97:b3:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfgnQ5SlkW7ekoFFMKfQxD3t9GdkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzEwNTRFM0MwMkUyMkQ2MDdBOTBGQUNDNERFNzM2OUI2 NTM2N0VCRDAeFw0yNjAzMjUyMDU1NTNaFw0yNjAzMjkwNDM5NTNaMDMxMTAvBgNV BAMTKDA0RkI2MjlBRTU4OTM0NDVFMTY2NDM1MTlDODk0NzEwODNFMEZCQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFWCr/h0R+qByRPtdgpHeRLzzp hlMK4/bdpd1o8UaxuVVFUzqCD5G3FjT1CZnBXeQ16i5pP4gANNYUuHsaRx+9n2eU 46ASoKx2E42w9oc9Cp+oHRGGi3K0uKTmVrCbQsIP8mgIF0g3UJ0WAUEyhz06DDqc bQxc9PSWxwgJI74GZAZyac1WOHFuW3/Bb9dtbvpu3B8uWMmiqbAiBBtQRVFdqPYC +fQkitPLqghpAQw/EEQJHAzTyWS2CDvrT2SIJvTrwwgOKuSXWF3qC05pn1kkiVBs Nqhc23uWUk3nCJTYm1yxKftBzIz4vzpt8pmO8Z2v0SBEgr3Hh5Bn50Rhqgr7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBPtimuWJNEXhZkNRnIlHEIPg+6AwHwYDVR0j BBgwFoAUcQVOPALiLWB6kPrMTec2m2U2fr0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTUzMmM2NS04MGJlLTRmZGUtODdkMC0zNmM1YmQyODhjZDgvMC83MTA1NEUzQzAy RTIyRDYwN0E5MEZBQ0M0REU3MzY5QjY1MzY3RUJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzEwNTRFM0MwMkUyMkQ2MDdBOTBGQUNDNERFNzM2OUI2NTM2 N0VCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWE1MzJjNjUtODBiZS00ZmRlLTg3 ZDAtMzZjNWJkMjg4Y2Q4LzAvNzEwNTRFM0MwMkUyMkQ2MDdBOTBGQUNDNERFNzM2 OUI2NTM2N0VCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADa+OIg5MEL/KUJgJ2sSzT8++7W9LafvGptm tgWXdNXLxrUgmKkWdhCvih+CFMBKZdldc44FnzvXiUucvtAXUYHUO7LCS0KxLewH MtL3zBVN0AvHczL9hXMA/UqwYCXnsh0oL/EkQVx6gsDkNCXGV+V6+G4lt7wH0uGh JFNsHdUX1edLdSk1g+kIit08NPWwXBTfgiQkbpMT19zZJYg9Rt2cHVXVHVF+Kq8D 2/kzDcNa61UOFL//OWEAGZxzwmCbN3kLMSU9LzzISokzp7OBKRhzAcsVtBHJCLaJ DOp4Sd7CmPwy04CX9GYxTbJMZj8JhW0PgQMSdsfpYeMx37OXs8g= -----END CERTIFICATE-----Generated at Thu Mar 26 17:00:20 2026 by rpki-client