$ rpki-client -vvf rpki-rsync.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.mft File: 71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.mft (raw, json) Hash identifier: uvtViLW11nI9uZbxwp9jMXMPx820SMOvYa41XPkRP6g= Subject key identifier: 41:A8:0F:C8:EE:53:9F:61:DA:15:6F:25:9A:57:43:F9:02:7A:C4:15 Authority key identifier: 71:EA:AE:94:B4:B9:7C:5E:D5:3A:52:F7:20:BB:E5:EA:78:EF:DE:5B Certificate issuer: /CN=71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B Certificate serial: 03CC7465FEB5591173DD1887E9A426D236E79187 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.mft Manifest number: 0E Signing time: Tue 12 May 2026 05:25:50 +0000 Manifest this update: Tue 12 May 2026 05:20:50 +0000 Manifest next update: Wed 13 May 2026 07:19:50 +0000 Files and hashes: 1: 71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.crl (hash: mzQROHdlyteP5vlsd1DsqIW2zT5ulew3zqqBiWknFz0=) 2: 3130332e3134342e3130332e302f32342d3234203d3e20313339343231.roa (hash: NVvHOXca2LITMgeQ8pj0e3M7sUAPWn5Q20ai1Hw8JHw=) 3: 3130332e3134342e3130322e302f32342d3234203d3e20313339343231.roa (hash: nH3r82YwlmcelOXc3c6hCqTAafYwlMIm171yaloUlQU=) 4: 3130332e3134342e3130322e302f32332d3234203d3e20313339343231.roa (hash: aW/uUXbkxJYBViD7wNIMNmfKm91NHMXKaNMrrbbLaYo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.crl rsync://rpki-rsync.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:19:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:cc:74:65:fe:b5:59:11:73:dd:18:87:e9:a4:26:d2:36:e7:91:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B Validity Not Before: May 12 05:20:50 2026 GMT Not After : May 13 07:19:50 2026 GMT Subject: CN=41A80FC8EE539F61DA156F259A5743F9027AC415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:72:3b:86:60:bc:11:a1:2a:4c:c7:65:35:36: 78:94:e4:dd:71:96:00:1b:64:4c:f1:4b:f2:bd:b7: a5:96:5b:56:4f:2d:94:6d:20:28:63:5c:66:03:62: 29:95:65:26:e5:bd:ec:13:7f:ca:6a:00:e4:e5:b0: 40:7d:3f:b7:cc:df:a7:82:8a:5c:ee:91:2f:f6:9e: 19:ad:5a:e0:b5:8e:16:dc:68:da:41:2e:fb:95:be: f5:7d:1d:45:2e:dc:b6:75:6a:aa:d0:01:98:f4:c3: 8e:04:df:29:d0:6f:8e:3f:34:38:ad:96:17:49:f9: 22:e1:7a:ce:ac:8b:a2:22:9a:cd:c6:6e:fa:45:8f: 2c:3a:af:c8:dd:3f:49:fb:0d:a8:bb:48:82:38:ab: 1a:11:d2:a8:50:51:fc:12:51:73:0a:da:bc:30:4f: c6:e7:c1:06:03:59:d7:a1:c5:f2:99:5e:4b:31:25: 68:c9:82:28:20:c2:98:54:22:81:71:43:c3:8e:04: 5c:6c:f7:5c:b4:04:9a:4a:47:f2:6b:63:2a:df:33: 51:2a:6a:b0:5d:2d:98:23:29:39:f3:23:3c:48:83: 12:62:97:50:5c:91:8d:79:39:2d:42:4a:35:47:90: f6:2a:8a:40:4d:e1:80:10:56:0e:33:08:1d:fe:c0: 8c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A8:0F:C8:EE:53:9F:61:DA:15:6F:25:9A:57:43:F9:02:7A:C4:15 X509v3 Authority Key Identifier: keyid:71:EA:AE:94:B4:B9:7C:5E:D5:3A:52:F7:20:BB:E5:EA:78:EF:DE:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:3b:a3:62:51:0c:04:31:33:af:dc:f4:dd:25:5d:d4:e8:a9: 48:85:1e:a1:92:ef:0d:43:5d:e3:c4:79:5f:ac:81:f5:dc:d3: 9c:af:7d:5d:28:04:0b:e8:5b:f7:58:a3:63:1a:6d:c9:53:49: 8e:81:25:e4:5e:e1:9a:9f:b3:95:36:66:4c:28:3e:cc:a4:c0: 2e:e9:90:c9:53:74:e1:64:39:2e:ca:bb:bc:6e:c7:08:2d:e1: 6e:df:07:07:5a:a9:15:9a:12:71:bb:4e:4b:89:d4:c5:fc:a8: 3d:50:e0:1e:f6:5a:9a:20:de:01:fe:de:35:7c:40:5b:87:bc: 53:3f:5c:9f:d2:55:9d:b1:c6:5f:96:25:cd:81:4b:e3:2a:ab: be:78:84:57:43:6c:39:0e:e6:5f:71:19:6b:da:2a:29:6b:74: c4:8c:71:aa:b6:ad:1e:37:88:e6:c6:a2:a0:61:5a:d8:63:80: 6c:32:cb:27:f8:05:42:0e:f6:59:45:25:5a:6b:9a:29:15:d0: 08:11:51:e6:bf:70:54:5a:5c:20:d8:14:55:c4:0c:ec:6a:fb: ef:58:5e:01:29:d2:1c:24:84:81:34:8f:bd:4c:1f:10:32:0e: 92:fe:2b:89:a7:52:ff:51:3e:52:ab:d6:3d:92:bf:ad:69:f8: 3b:6b:4b:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA8x0Zf61WRFz3RiH6aQm0jbnkYcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFFQUFFOTRCNEI5N0M1RUQ1M0E1MkY3MjBCQkU1RUE3 OEVGREU1QjAeFw0yNjA1MTIwNTIwNTBaFw0yNjA1MTMwNzE5NTBaMDMxMTAvBgNV BAMTKDQxQTgwRkM4RUU1MzlGNjFEQTE1NkYyNTlBNTc0M0Y5MDI3QUM0MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDScjuGYLwRoSpMx2U1NniU5N1x lgAbZEzxS/K9t6WWW1ZPLZRtIChjXGYDYimVZSblvewTf8pqAOTlsEB9P7fM36eC ilzukS/2nhmtWuC1jhbcaNpBLvuVvvV9HUUu3LZ1aqrQAZj0w44E3ynQb44/NDit lhdJ+SLhes6si6Iims3GbvpFjyw6r8jdP0n7Dai7SII4qxoR0qhQUfwSUXMK2rww T8bnwQYDWdehxfKZXksxJWjJgiggwphUIoFxQ8OOBFxs91y0BJpKR/JrYyrfM1Eq arBdLZgjKTnzIzxIgxJil1BckY15OS1CSjVHkPYqikBN4YAQVg4zCB3+wIy3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQagPyO5Tn2HaFW8lmldD+QJ6xBUwHwYDVR0j BBgwFoAUcequlLS5fF7VOlL3ILvl6njv3lswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmE1MzQxZTgtMjJkOC00NDljLWE3NTMtZTQ3YmJmYzQ4NTM4LzAvNzFFQUFFOTRC NEI5N0M1RUQ1M0E1MkY3MjBCQkU1RUE3OEVGREU1Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MUVBQUU5NEI0Qjk3QzVFRDUzQTUyRjcyMEJCRTVFQTc4RUZE RTVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmE1MzQxZTgtMjJkOC00NDljLWE3 NTMtZTQ3YmJmYzQ4NTM4LzAvNzFFQUFFOTRCNEI5N0M1RUQ1M0E1MkY3MjBCQkU1 RUE3OEVGREU1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFM7o2JRDAQxM6/c9N0lXdToqUiFHqGS7w1D XePEeV+sgfXc05yvfV0oBAvoW/dYo2MabclTSY6BJeRe4Zqfs5U2ZkwoPsykwC7p kMlTdOFkOS7Ku7xuxwgt4W7fBwdaqRWaEnG7TkuJ1MX8qD1Q4B72Wpog3gH+3jV8 QFuHvFM/XJ/SVZ2xxl+WJc2BS+Mqq754hFdDbDkO5l9xGWvaKilrdMSMcaq2rR43 iObGoqBhWthjgGwyyyf4BUIO9llFJVprmikV0AgRUea/cFRaXCDYFFXEDOxq++9Y XgEp0hwkhIE0j71MHxAyDpL+K4mnUv9RPlKr1j2Sv61p+DtrSys= -----END CERTIFICATE-----Generated at Wed May 13 00:44:30 2026 by rpki-client