$ rpki-client -vvf repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft File: 71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft (raw, json) Hash identifier: Gfx9mppV5Lt+AOZTSsg9Gp16L2Z9bHYNSYCGVk0n+8E= Subject key identifier: C7:23:00:FA:23:59:34:C0:BB:B9:7E:6C:6F:20:27:7A:81:BA:BD:AD Authority key identifier: 71:E5:1A:9B:65:D8:A1:23:51:3A:35:0F:0D:99:F9:8D:6C:9B:72:E2 Certificate issuer: /CN=71E51A9B65D8A123513A350F0D99F98D6C9B72E2 Certificate serial: 6282CA26EB834233691B3225BE5CFB3A14E81C79 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft Manifest number: 0419 Signing time: Wed 25 Mar 2026 05:51:23 +0000 Manifest this update: Wed 25 Mar 2026 05:46:23 +0000 Manifest next update: Sat 28 Mar 2026 12:24:23 +0000 Files and hashes: 1: 3130332e3130372e3138372e302f32342d3234203d3e20313337333030.roa (hash: qbGMe4OJOUlVBBlNS/T+BUhcFyXomn3ouFjeMKM/9vg=) 2: 71E51A9B65D8A123513A350F0D99F98D6C9B72E2.crl (hash: sbAXUGud5lMz22Rjni3kZzBdJLbySJ4VAmcFTf+bG6g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.crl rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 12:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:82:ca:26:eb:83:42:33:69:1b:32:25:be:5c:fb:3a:14:e8:1c:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71E51A9B65D8A123513A350F0D99F98D6C9B72E2 Validity Not Before: Mar 25 05:46:23 2026 GMT Not After : Mar 28 12:24:23 2026 GMT Subject: CN=C72300FA235934C0BBB97E6C6F20277A81BABDAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:bf:1d:87:7e:7d:b6:06:c6:cd:b2:e3:f6:06: a2:01:4d:ff:c7:21:db:ad:d6:0e:28:ff:34:6a:88: 6c:1e:63:26:f6:74:b1:3f:a3:f9:6d:0d:74:ea:4b: 92:2b:52:00:46:82:f2:16:d7:b0:30:0f:87:18:49: 7e:2e:a8:68:2e:49:47:4f:8e:78:6e:7e:eb:9b:48: 55:61:6f:4f:ed:87:54:ef:af:ea:02:59:2a:f6:f1: 0d:04:ba:4b:5f:53:83:a9:a3:49:31:30:23:aa:e9: bd:a2:f4:88:e0:77:e3:b1:3d:1d:fe:6f:ac:0d:cf: 41:d2:7b:1a:51:75:dd:f3:fa:8a:eb:fe:66:cb:c2: cd:2a:89:e6:66:a1:58:ea:bf:f0:7c:18:dd:cc:1d: 3a:c4:4e:b8:f7:35:35:d7:5f:7f:06:c6:ed:be:4d: f4:3d:52:b0:5e:2e:ff:5a:ad:fb:9b:de:c6:85:26: e5:16:08:08:8e:38:78:cc:16:87:ef:1b:aa:47:08: e5:d2:c1:99:06:6b:4f:07:ca:f4:2c:31:ac:62:b3: df:2a:4e:4c:c7:cd:25:65:88:b6:74:2a:7e:6a:48: 73:f1:e9:ce:8d:12:e3:3c:73:91:d1:a3:f0:cb:54: 6f:e3:42:c2:ab:11:8a:ce:0d:3c:ea:71:9d:06:fc: 88:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:23:00:FA:23:59:34:C0:BB:B9:7E:6C:6F:20:27:7A:81:BA:BD:AD X509v3 Authority Key Identifier: keyid:71:E5:1A:9B:65:D8:A1:23:51:3A:35:0F:0D:99:F9:8D:6C:9B:72:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:f3:31:da:38:1c:16:a2:5f:f6:e8:2a:51:b6:23:46:f9:7a: 51:c9:41:f0:84:07:a1:2a:fd:14:c7:b0:97:1c:38:70:8e:ea: ad:ce:21:5a:6b:60:1b:70:79:4d:6b:25:83:19:f5:ac:98:00: af:dc:80:aa:e4:e8:9a:b6:76:0b:59:17:d1:29:ec:0d:2f:e5: 9c:d1:e3:e6:ea:0c:ac:73:84:e9:ee:0e:eb:b8:cd:7b:b6:fc: d1:dd:37:ea:4b:52:c2:3e:bf:ae:0d:8c:50:59:1b:02:3d:3b: 8e:58:a2:d9:6a:56:b9:75:f4:96:5e:ac:14:4e:1c:71:6c:ca: c4:8b:ab:88:f8:44:65:f7:36:9a:de:a4:a9:cb:0b:e3:e7:8f: c5:79:65:4f:4c:c8:c7:3b:53:f6:20:92:67:5e:5f:0c:b3:da: 7e:b4:78:e0:16:da:36:b5:65:06:dc:70:60:42:0d:83:41:e2: 70:1a:91:af:d0:d9:f0:eb:31:74:25:b4:4e:1a:91:9b:bc:60: 67:e2:8a:6e:93:25:ce:20:72:4b:67:80:b8:6f:41:6d:df:87: 31:49:d8:86:c7:7d:ac:bc:8a:1d:95:90:8a:0c:0c:18:98:42: 21:02:8b:6e:ca:bb:ac:54:37:41:ff:64:3b:70:16:b5:2b:61: 00:3e:79:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYoLKJuuDQjNpGzIlvlz7OhToHHkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFFNTFBOUI2NUQ4QTEyMzUxM0EzNTBGMEQ5OUY5OEQ2 QzlCNzJFMjAeFw0yNjAzMjUwNTQ2MjNaFw0yNjAzMjgxMjI0MjNaMDMxMTAvBgNV BAMTKEM3MjMwMEZBMjM1OTM0QzBCQkI5N0U2QzZGMjAyNzdBODFCQUJEQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlvx2Hfn22BsbNsuP2BqIBTf/H Idut1g4o/zRqiGweYyb2dLE/o/ltDXTqS5IrUgBGgvIW17AwD4cYSX4uqGguSUdP jnhufuubSFVhb0/th1Tvr+oCWSr28Q0EuktfU4Opo0kxMCOq6b2i9Ijgd+OxPR3+ b6wNz0HSexpRdd3z+orr/mbLws0qieZmoVjqv/B8GN3MHTrETrj3NTXXX38Gxu2+ TfQ9UrBeLv9arfub3saFJuUWCAiOOHjMFofvG6pHCOXSwZkGa08HyvQsMaxis98q TkzHzSVliLZ0Kn5qSHPx6c6NEuM8c5HRo/DLVG/jQsKrEYrODTzqcZ0G/Ij9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxyMA+iNZNMC7uX5sbyAneoG6va0wHwYDVR0j BBgwFoAUceUam2XYoSNROjUPDZn5jWybcuIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDQ4YmQwNC1mNzg3LTQxNGEtYTUwMS01MTM4YTZkNmIzZTEvMC83MUU1MUE5QjY1 RDhBMTIzNTEzQTM1MEYwRDk5Rjk4RDZDOUI3MkUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzFFNTFBOUI2NUQ4QTEyMzUxM0EzNTBGMEQ5OUY5OEQ2QzlC NzJFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ0OGJkMDQtZjc4Ny00MTRhLWE1 MDEtNTEzOGE2ZDZiM2UxLzAvNzFFNTFBOUI2NUQ4QTEyMzUxM0EzNTBGMEQ5OUY5 OEQ2QzlCNzJFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKnzMdo4HBaiX/boKlG2I0b5elHJQfCEB6Eq /RTHsJccOHCO6q3OIVprYBtweU1rJYMZ9ayYAK/cgKrk6Jq2dgtZF9Ep7A0v5ZzR 4+bqDKxzhOnuDuu4zXu2/NHdN+pLUsI+v64NjFBZGwI9O45YotlqVrl19JZerBRO HHFsysSLq4j4RGX3NprepKnLC+Pnj8V5ZU9MyMc7U/YgkmdeXwyz2n60eOAW2ja1 ZQbccGBCDYNB4nAaka/Q2fDrMXQltE4akZu8YGfiim6TJc4gcktngLhvQW3fhzFJ 2IbHfay8ih2VkIoMDBiYQiECi27Ku6xUN0H/ZDtwFrUrYQA+eXo= -----END CERTIFICATE-----Generated at Fri Mar 27 02:02:27 2026 by rpki-client