$ rpki-client -vvf rpki-rsync.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.mft File: A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.mft (raw, json) Hash identifier: kxoc8UwCLdQB+uAr0BVJ6EVA36l6qoYD0WC+kyzogSI= Subject key identifier: 6B:0B:27:65:B4:40:E7:0D:BE:79:79:9B:98:09:AF:1E:E8:D9:0C:6A Authority key identifier: A7:1E:2C:60:07:7F:6A:8C:A8:D3:EF:78:AF:C7:1B:07:29:45:8F:4C Certificate issuer: /CN=A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C Certificate serial: 1FB26A90D332A3E41CBD19C8E42B6E8FA1DAE4C8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.mft Manifest number: 0E Signing time: Tue 12 May 2026 01:44:19 +0000 Manifest this update: Tue 12 May 2026 01:39:19 +0000 Manifest next update: Wed 13 May 2026 04:28:19 +0000 Files and hashes: 1: 3130332e39342e3234382e302f32332d3234203d3e203633383738.roa (hash: 9oG14yFX0JqA/A4Gb5KSL8SJiMaQk5xxtaHwWhta8TI=) 2: A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.crl (hash: HMepSXKgurbjk5GTyKNmq7PVKJ2LZj+sFkLnveFDJP0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.crl rsync://rpki-rsync.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 04:28:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:b2:6a:90:d3:32:a3:e4:1c:bd:19:c8:e4:2b:6e:8f:a1:da:e4:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C Validity Not Before: May 12 01:39:19 2026 GMT Not After : May 13 04:28:19 2026 GMT Subject: CN=6B0B2765B440E70DBE79799B9809AF1EE8D90C6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:15:df:93:67:21:cc:0a:f8:8c:3b:3a:74:cb: 25:d3:a8:bd:ad:f8:67:ca:bb:31:4f:4a:31:d5:1c: 50:87:c0:ef:4d:49:a4:f1:fa:be:32:bc:f1:f1:ba: b4:ea:de:29:d5:99:02:87:5c:3d:96:a0:3a:1d:3c: 5c:2e:44:0c:df:3c:7f:58:5a:44:c9:28:ff:f7:ce: a4:82:76:a9:67:77:22:16:39:36:c6:36:1e:6f:54: 18:4d:1c:c9:83:a7:36:a2:af:0c:48:27:b5:a1:eb: 47:65:7e:14:2e:75:95:9f:43:9d:4d:88:10:3d:1f: dd:b1:b0:8b:31:e4:3f:a9:6f:6b:17:11:26:3e:94: 55:13:b7:4a:f9:9a:98:cb:2b:fc:92:86:cf:b9:59: cf:8b:95:6d:8d:0f:5f:2c:87:a0:e5:e3:7b:34:2f: 93:8b:88:d3:c2:f0:18:80:47:af:08:0b:a2:d0:07: 6f:81:3c:86:02:ee:50:3e:8b:b0:bf:c1:b1:af:ef: 3b:a4:4d:b2:ff:0f:59:b2:52:f0:11:4e:ee:1c:bf: 32:69:40:2f:fc:2c:f7:fa:54:e3:1c:61:02:cc:a2: 61:ba:8c:da:32:40:25:46:63:80:fa:96:c5:7b:2e: 22:d4:fc:e8:39:6d:bd:38:99:28:c1:74:3b:9a:ae: 80:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:0B:27:65:B4:40:E7:0D:BE:79:79:9B:98:09:AF:1E:E8:D9:0C:6A X509v3 Authority Key Identifier: keyid:A7:1E:2C:60:07:7F:6A:8C:A8:D3:EF:78:AF:C7:1B:07:29:45:8F:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:7b:a7:5a:ab:0f:08:22:1c:7f:b4:86:da:b4:54:93:f6:19: 34:e5:f6:fd:8f:d3:e3:34:cc:f9:b4:0b:5d:ca:b0:b7:1d:1e: e0:8e:e5:89:67:70:30:d4:0b:85:d5:0c:13:88:e4:54:ad:76: 34:e3:0b:10:34:eb:46:30:f8:52:9c:fd:9d:4e:33:04:6a:b5: 93:b0:e7:e2:3a:f4:fd:78:f6:dd:24:30:be:06:d7:06:72:d9: 99:bb:9a:5f:12:8e:1d:40:13:61:be:12:70:b9:bb:c4:ee:3e: 3b:80:2e:ed:3e:e7:5b:02:28:85:e3:46:80:46:a9:68:a2:a4: a6:b0:dc:bd:32:6a:e7:37:41:9a:2e:83:0f:98:f0:07:5e:87: 3f:a4:e3:97:34:a9:19:fb:46:5b:3c:63:63:d4:9a:6a:dd:bd: 2e:d8:c1:31:24:fc:c6:f3:83:a7:a4:2f:88:fe:16:f9:a8:1f: 5a:f8:fe:5a:20:e7:79:8e:a3:a8:2a:31:5e:78:ef:35:02:99: e1:0b:c0:65:19:a8:1a:c5:95:1e:ba:ee:75:ed:4f:78:5e:00: d8:a8:9c:5f:86:cd:03:02:2b:12:84:17:79:9d:cd:c2:21:d4: f2:dc:0a:4a:82:6e:a5:a4:fd:cc:58:e0:e3:f2:f8:df:e0:39: 4d:3f:5d:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH7JqkNMyo+QcvRnI5Ctuj6Ha5MgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcxRTJDNjAwNzdGNkE4Q0E4RDNFRjc4QUZDNzFCMDcy OTQ1OEY0QzAeFw0yNjA1MTIwMTM5MTlaFw0yNjA1MTMwNDI4MTlaMDMxMTAvBgNV BAMTKDZCMEIyNzY1QjQ0MEU3MERCRTc5Nzk5Qjk4MDlBRjFFRThEOTBDNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtFd+TZyHMCviMOzp0yyXTqL2t +GfKuzFPSjHVHFCHwO9NSaTx+r4yvPHxurTq3inVmQKHXD2WoDodPFwuRAzfPH9Y WkTJKP/3zqSCdqlndyIWOTbGNh5vVBhNHMmDpzairwxIJ7Wh60dlfhQudZWfQ51N iBA9H92xsIsx5D+pb2sXESY+lFUTt0r5mpjLK/yShs+5Wc+LlW2ND18sh6Dl43s0 L5OLiNPC8BiAR68IC6LQB2+BPIYC7lA+i7C/wbGv7zukTbL/D1myUvARTu4cvzJp QC/8LPf6VOMcYQLMomG6jNoyQCVGY4D6lsV7LiLU/Og5bb04mSjBdDuaroCdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUawsnZbRA5w2+eXmbmAmvHujZDGowHwYDVR0j BBgwFoAUpx4sYAd/aoyo0+94r8cbBylFj0wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjhkNmNhOWItNTg0Zi00MGYxLWJkNjEtMTg1OGU3ZWJhM2VhLzAvQTcxRTJDNjAw NzdGNkE4Q0E4RDNFRjc4QUZDNzFCMDcyOTQ1OEY0Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNzFFMkM2MDA3N0Y2QThDQThEM0VGNzhBRkM3MUIwNzI5NDU4 RjRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjhkNmNhOWItNTg0Zi00MGYxLWJk NjEtMTg1OGU3ZWJhM2VhLzAvQTcxRTJDNjAwNzdGNkE4Q0E4RDNFRjc4QUZDNzFC MDcyOTQ1OEY0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALZ7p1qrDwgiHH+0htq0VJP2GTTl9v2P0+M0 zPm0C13KsLcdHuCO5YlncDDUC4XVDBOI5FStdjTjCxA060Yw+FKc/Z1OMwRqtZOw 5+I69P149t0kML4G1wZy2Zm7ml8Sjh1AE2G+EnC5u8TuPjuALu0+51sCKIXjRoBG qWiipKaw3L0yauc3QZougw+Y8Adehz+k45c0qRn7Rls8Y2PUmmrdvS7YwTEk/Mbz g6ekL4j+FvmoH1r4/log53mOo6gqMV547zUCmeELwGUZqBrFlR667nXtT3heANio nF+GzQMCKxKEF3mdzcIh1PLcCkqCbqWk/cxY4OPy+N/gOU0/XRI= -----END CERTIFICATE-----Generated at Tue May 12 22:19:58 2026 by rpki-client