$ rpki-client -vvf rpki-rsync.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.mft File: 71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.mft (raw, json) Hash identifier: Jg8IwUbT/LQmiwhLcl91XJm5SSPpfqdQ4bhmCcheScw= Subject key identifier: 24:ED:6A:8F:2E:A8:40:ED:8A:3B:A6:87:D9:3F:B1:78:7D:DD:40:31 Authority key identifier: 71:EA:AE:94:B4:B9:7C:5E:D5:3A:52:F7:20:BB:E5:EA:78:EF:DE:5B Certificate issuer: /CN=71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B Certificate serial: 307986C7A688E99EA61B1C894252BEDEA91AC326 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.mft Manifest number: 6D Signing time: Thu 23 Jul 2026 11:39:18 +0000 Manifest this update: Thu 23 Jul 2026 11:34:18 +0000 Manifest next update: Fri 24 Jul 2026 12:58:18 +0000 Files and hashes: 1: 3130332e3134342e3130332e302f32342d3234203d3e20313339343231.roa (hash: NVvHOXca2LITMgeQ8pj0e3M7sUAPWn5Q20ai1Hw8JHw=) 2: 3130332e3134342e3130322e302f32342d3234203d3e20313339343231.roa (hash: nH3r82YwlmcelOXc3c6hCqTAafYwlMIm171yaloUlQU=) 3: 71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.crl (hash: DNsHiGJ6l49pWTcG2LHzpQQaCRS3BJ1Ugyo1yDQ+1MM=) 4: 3130332e3134342e3130322e302f32332d3234203d3e20313339343231.roa (hash: aW/uUXbkxJYBViD7wNIMNmfKm91NHMXKaNMrrbbLaYo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.crl rsync://rpki-rsync.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 12:58:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:79:86:c7:a6:88:e9:9e:a6:1b:1c:89:42:52:be:de:a9:1a:c3:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B Validity Not Before: Jul 23 11:34:18 2026 GMT Not After : Jul 24 12:58:18 2026 GMT Subject: CN=24ED6A8F2EA840ED8A3BA687D93FB1787DDD4031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5e:d1:ed:d6:f4:f5:8f:69:4c:23:ce:41:fe: b9:fa:23:ee:57:5e:56:3a:58:e9:18:e0:18:12:74: 35:6d:37:d3:46:6f:6e:ca:80:2b:64:89:d4:02:3f: ee:27:ba:ea:a2:bb:3c:61:6c:30:39:ab:9b:3c:5e: d0:88:65:f0:b9:74:6c:0f:ab:10:b3:38:e8:e6:c6: ed:43:27:20:9b:8a:48:ab:1b:ff:c7:24:b7:66:7e: ff:d6:ef:87:9a:7a:8a:1b:49:d1:b7:7c:3e:6f:10: b1:1c:65:1f:b9:f0:e2:3b:66:7e:4c:e6:ec:e5:93: 3f:50:d4:4c:a5:2c:d5:95:31:62:05:4d:a0:be:dc: 5a:06:7f:a4:1c:94:c7:ac:cf:39:bb:f1:15:94:e5: 7f:8e:c4:91:64:a9:a1:a1:79:09:09:4c:89:76:c0: ff:fb:d1:7a:ab:44:af:7a:da:f6:cb:b1:e6:6a:3f: 9c:82:e1:63:83:f8:2c:02:5a:cc:2e:f5:9a:91:a0: f9:0c:13:5a:da:7e:45:a9:b0:8c:e5:16:f4:b5:7e: 6b:b7:6e:97:cc:25:0f:a2:06:ec:4b:46:7b:6b:fc: 65:6b:be:d7:25:da:bb:6b:49:85:87:31:ef:95:e4: c3:f0:30:00:aa:34:0a:c5:6e:ea:17:7c:8e:a5:7a: 19:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:ED:6A:8F:2E:A8:40:ED:8A:3B:A6:87:D9:3F:B1:78:7D:DD:40:31 X509v3 Authority Key Identifier: keyid:71:EA:AE:94:B4:B9:7C:5E:D5:3A:52:F7:20:BB:E5:EA:78:EF:DE:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:7e:26:68:b5:c0:a1:36:fc:e4:2c:da:3e:47:12:2a:9b:77: 84:6a:02:2c:78:c0:7f:3a:83:57:7b:28:0f:72:3e:be:15:c9: 46:69:9c:e1:b2:9f:a2:68:8d:b1:81:d2:c1:bd:7e:01:e7:69: 40:2c:d6:75:5a:b1:5c:6f:f9:fb:55:fc:10:6b:0d:f9:47:e3: a7:67:07:6b:5f:56:dc:25:9b:1b:0a:d1:4f:45:29:0b:0c:19: dd:19:d6:56:52:d1:94:8b:58:2a:02:dc:3e:54:b8:e1:26:5b: de:81:30:93:11:95:a4:31:e1:3a:70:c0:76:b0:f3:ec:73:49: de:c4:4f:a6:94:e7:60:56:82:c9:ed:ce:36:df:41:91:8c:1d: f8:f8:93:81:81:0c:cd:ac:6f:44:d8:1e:a0:77:e7:cd:c6:6b: 68:ef:cd:82:ac:be:a4:53:03:5f:f7:03:8a:8d:de:06:ad:7c: fd:2a:f4:38:14:ea:51:fd:94:5a:ee:f1:66:ea:44:00:2e:ef: 6f:bf:62:f2:c3:b2:d5:6f:59:36:de:f4:af:c0:16:d4:3c:59: be:32:f8:ae:5a:17:26:7c:10:8f:f3:f7:41:68:df:74:0e:0d: d3:63:61:2c:15:26:25:53:b2:2f:70:51:6f:85:79:5f:28:e8: b2:a9:de:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMHmGx6aI6Z6mGxyJQlK+3qkawyYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFFQUFFOTRCNEI5N0M1RUQ1M0E1MkY3MjBCQkU1RUE3 OEVGREU1QjAeFw0yNjA3MjMxMTM0MThaFw0yNjA3MjQxMjU4MThaMDMxMTAvBgNV BAMTKDI0RUQ2QThGMkVBODQwRUQ4QTNCQTY4N0Q5M0ZCMTc4N0RERDQwMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqXtHt1vT1j2lMI85B/rn6I+5X XlY6WOkY4BgSdDVtN9NGb27KgCtkidQCP+4nuuqiuzxhbDA5q5s8XtCIZfC5dGwP qxCzOOjmxu1DJyCbikirG//HJLdmfv/W74eaeoobSdG3fD5vELEcZR+58OI7Zn5M 5uzlkz9Q1EylLNWVMWIFTaC+3FoGf6QclMeszzm78RWU5X+OxJFkqaGheQkJTIl2 wP/70XqrRK962vbLseZqP5yC4WOD+CwCWswu9ZqRoPkME1rafkWpsIzlFvS1fmu3 bpfMJQ+iBuxLRntr/GVrvtcl2rtrSYWHMe+V5MPwMACqNArFbuoXfI6lehk5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJO1qjy6oQO2KO6aH2T+xeH3dQDEwHwYDVR0j BBgwFoAUcequlLS5fF7VOlL3ILvl6njv3lswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmE1MzQxZTgtMjJkOC00NDljLWE3NTMtZTQ3YmJmYzQ4NTM4LzAvNzFFQUFFOTRC NEI5N0M1RUQ1M0E1MkY3MjBCQkU1RUE3OEVGREU1Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MUVBQUU5NEI0Qjk3QzVFRDUzQTUyRjcyMEJCRTVFQTc4RUZE RTVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmE1MzQxZTgtMjJkOC00NDljLWE3 NTMtZTQ3YmJmYzQ4NTM4LzAvNzFFQUFFOTRCNEI5N0M1RUQ1M0E1MkY3MjBCQkU1 RUE3OEVGREU1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF1+Jmi1wKE2/OQs2j5HEiqbd4RqAix4wH86 g1d7KA9yPr4VyUZpnOGyn6JojbGB0sG9fgHnaUAs1nVasVxv+ftV/BBrDflH46dn B2tfVtwlmxsK0U9FKQsMGd0Z1lZS0ZSLWCoC3D5UuOEmW96BMJMRlaQx4TpwwHaw 8+xzSd7ET6aU52BWgsntzjbfQZGMHfj4k4GBDM2sb0TYHqB3583Ga2jvzYKsvqRT A1/3A4qN3gatfP0q9DgU6lH9lFru8WbqRAAu72+/YvLDstVvWTbe9K/AFtQ8Wb4y +K5aFyZ8EI/z90Fo33QODdNjYSwVJiVTsi9wUW+FeV8o6LKp3i8= -----END CERTIFICATE-----Generated at Fri Jul 24 04:13:10 2026 by rpki-client