$ rpki-client -vvf rpki-rsync.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.mft File: A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.mft (raw, json) Hash identifier: TPaeHv/c+ErNJmbHb+RRoNlj9ZGcB+uki7KrtaD5v5w= Subject key identifier: 7E:7F:64:A7:9D:BD:34:B1:01:C4:0E:92:58:8E:A3:FA:C4:34:5A:50 Authority key identifier: A7:1E:2C:60:07:7F:6A:8C:A8:D3:EF:78:AF:C7:1B:07:29:45:8F:4C Certificate issuer: /CN=A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C Certificate serial: 18945FF4F59987949F879CCEF88A709FD0D642D7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 19:59:31 +0000 Manifest this update: Thu 23 Jul 2026 19:54:31 +0000 Manifest next update: Fri 24 Jul 2026 20:52:31 +0000 Files and hashes: 1: 3130332e39342e3234382e302f32332d3234203d3e203633383738.roa (hash: 9oG14yFX0JqA/A4Gb5KSL8SJiMaQk5xxtaHwWhta8TI=) 2: A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.crl (hash: nl/XXY2el8OYmQ96BA0KsGm8rNTEIsyxrpAJVM0xlHU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.crl rsync://rpki-rsync.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:52:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:94:5f:f4:f5:99:87:94:9f:87:9c:ce:f8:8a:70:9f:d0:d6:42:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C Validity Not Before: Jul 23 19:54:31 2026 GMT Not After : Jul 24 20:52:31 2026 GMT Subject: CN=7E7F64A79DBD34B101C40E92588EA3FAC4345A50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9e:1d:d4:21:60:01:dd:b2:1a:1f:90:45:0d: 3f:ee:be:00:3e:9e:05:46:62:9e:6a:29:04:0d:02: b6:a8:52:cf:8f:84:1a:01:a8:1d:02:e5:3c:ca:3e: 45:64:9b:06:79:6c:cd:fe:c6:f5:fe:37:c8:0a:20: 2d:bc:ec:40:a6:a5:95:77:d0:d3:7f:df:68:70:41: 86:4f:cb:cf:3d:a5:ac:0f:c0:45:90:01:14:62:ab: 94:7a:85:58:be:c6:b9:8d:64:dc:3c:6f:49:99:45: 2e:29:f1:af:c6:ac:3d:85:42:86:0c:61:12:8c:7d: f5:1c:e1:89:90:88:d1:4d:36:7c:3a:25:d9:82:e6: cb:e3:46:05:40:af:5c:a1:00:df:8e:66:f6:96:ec: 09:8e:2f:8b:a9:63:08:a3:1f:62:35:dd:4c:91:32: 7c:e8:dd:99:7e:36:72:01:8f:6d:25:bf:c1:15:38: ae:40:47:0a:31:35:5b:96:5b:e5:60:cd:b5:4a:32: d6:61:05:dc:7c:b6:24:6d:4b:e8:23:be:37:8e:6e: 0b:c2:3e:78:67:c1:18:a6:e5:83:15:08:94:f6:1a: 44:fd:7d:09:8d:df:f2:f0:7c:aa:96:0e:79:d5:09: 7a:63:a8:ea:2a:c6:b7:f9:ab:8d:77:f1:65:e0:43: cb:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:7F:64:A7:9D:BD:34:B1:01:C4:0E:92:58:8E:A3:FA:C4:34:5A:50 X509v3 Authority Key Identifier: keyid:A7:1E:2C:60:07:7F:6A:8C:A8:D3:EF:78:AF:C7:1B:07:29:45:8F:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:ad:08:54:2b:94:51:03:9d:04:39:7c:41:d3:27:f2:e9:e7: 1c:93:be:c5:8d:cb:25:b7:d5:e9:f7:3b:35:b7:3d:bb:71:2b: 0f:b7:6b:5d:f3:f8:3e:f7:f1:97:1c:17:9f:d5:ef:f2:82:90: 8b:aa:f5:03:f8:69:57:e6:16:95:b7:13:e3:65:8a:ef:2c:87: 95:7e:e9:d0:f6:25:e4:2c:da:b2:83:dc:c2:e4:d3:5f:3a:33: 1e:e4:e2:a0:76:05:2a:e1:4a:58:f3:18:47:86:2b:3f:c0:19: e6:c5:98:98:3d:e1:e3:cc:c8:4d:bf:f2:e8:89:f7:94:e1:48: f3:34:7b:49:8c:0f:f6:ae:f3:c9:09:59:94:e5:1f:6e:3f:39: 81:dc:4c:5f:07:73:52:32:58:f1:e2:20:08:8f:9e:7f:c2:bf: 0b:40:55:5b:50:59:8e:f3:1e:80:9b:b2:52:bc:42:10:16:1d: 26:9b:f6:26:79:77:6f:9b:00:0d:b5:9a:4f:4f:52:a6:1e:e3: 2c:40:d7:fd:a5:96:77:e4:5a:e0:34:85:12:53:21:af:32:38: c8:ae:d5:44:a0:83:5b:b6:56:43:51:f6:91:82:44:a3:0b:7a: 09:43:58:b6:8d:24:40:e1:1f:af:fa:7f:55:0b:38:9b:85:bd: b8:b7:40:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGJRf9PWZh5Sfh5zO+Ipwn9DWQtcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcxRTJDNjAwNzdGNkE4Q0E4RDNFRjc4QUZDNzFCMDcy OTQ1OEY0QzAeFw0yNjA3MjMxOTU0MzFaFw0yNjA3MjQyMDUyMzFaMDMxMTAvBgNV BAMTKDdFN0Y2NEE3OURCRDM0QjEwMUM0MEU5MjU4OEVBM0ZBQzQzNDVBNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEnh3UIWAB3bIaH5BFDT/uvgA+ ngVGYp5qKQQNAraoUs+PhBoBqB0C5TzKPkVkmwZ5bM3+xvX+N8gKIC287ECmpZV3 0NN/32hwQYZPy889pawPwEWQARRiq5R6hVi+xrmNZNw8b0mZRS4p8a/GrD2FQoYM YRKMffUc4YmQiNFNNnw6JdmC5svjRgVAr1yhAN+OZvaW7AmOL4upYwijH2I13UyR Mnzo3Zl+NnIBj20lv8EVOK5ARwoxNVuWW+VgzbVKMtZhBdx8tiRtS+gjvjeObgvC PnhnwRim5YMVCJT2GkT9fQmN3/LwfKqWDnnVCXpjqOoqxrf5q4138WXgQ8sxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfn9kp529NLEBxA6SWI6j+sQ0WlAwHwYDVR0j BBgwFoAUpx4sYAd/aoyo0+94r8cbBylFj0wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjhkNmNhOWItNTg0Zi00MGYxLWJkNjEtMTg1OGU3ZWJhM2VhLzAvQTcxRTJDNjAw NzdGNkE4Q0E4RDNFRjc4QUZDNzFCMDcyOTQ1OEY0Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNzFFMkM2MDA3N0Y2QThDQThEM0VGNzhBRkM3MUIwNzI5NDU4 RjRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjhkNmNhOWItNTg0Zi00MGYxLWJk NjEtMTg1OGU3ZWJhM2VhLzAvQTcxRTJDNjAwNzdGNkE4Q0E4RDNFRjc4QUZDNzFC MDcyOTQ1OEY0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIutCFQrlFEDnQQ5fEHTJ/Lp5xyTvsWNyyW3 1en3OzW3PbtxKw+3a13z+D738ZccF5/V7/KCkIuq9QP4aVfmFpW3E+Nliu8sh5V+ 6dD2JeQs2rKD3MLk0186Mx7k4qB2BSrhSljzGEeGKz/AGebFmJg94ePMyE2/8uiJ 95ThSPM0e0mMD/au88kJWZTlH24/OYHcTF8Hc1IyWPHiIAiPnn/CvwtAVVtQWY7z HoCbslK8QhAWHSab9iZ5d2+bAA21mk9PUqYe4yxA1/2llnfkWuA0hRJTIa8yOMiu 1USgg1u2VkNR9pGCRKMLeglDWLaNJEDhH6/6f1ULOJuFvbi3QBI= -----END CERTIFICATE-----Generated at Fri Jul 24 10:00:17 2026 by rpki-client