$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.mft File: 71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.mft (raw, json) Hash identifier: 8HiawwDs8MNS6uQIYweeL/kquMaCKpTWb/d/3LbQ8Lo= Subject key identifier: 62:39:6C:6E:5D:65:49:D8:21:92:A0:D6:E9:B1:C8:CE:0E:FE:F7:F6 Authority key identifier: 71:EA:AE:94:B4:B9:7C:5E:D5:3A:52:F7:20:BB:E5:EA:78:EF:DE:5B Certificate issuer: /CN=71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B Certificate serial: 6D028140501D57FC002E89C76E295A3D7BC3B306 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 10:44:26 +0000 Manifest this update: Wed 23 Sep 2026 10:39:26 +0000 Manifest next update: Thu 24 Sep 2026 10:54:26 +0000 Files and hashes: 1: 3130332e3134342e3130322e302f32342d3234203d3e20313339343231.roa (hash: nH3r82YwlmcelOXc3c6hCqTAafYwlMIm171yaloUlQU=) 2: 3130332e3134342e3130332e302f32342d3234203d3e20313339343231.roa (hash: NVvHOXca2LITMgeQ8pj0e3M7sUAPWn5Q20ai1Hw8JHw=) 3: 3130332e3134342e3130322e302f32332d3234203d3e20313339343231.roa (hash: aW/uUXbkxJYBViD7wNIMNmfKm91NHMXKaNMrrbbLaYo=) 4: 71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.crl (hash: Bxar1aIAzUIVIbplrBc8IbLi+UnPKInznAienBLD/jg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.crl rsync://rpki-rsync.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 10:54:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:02:81:40:50:1d:57:fc:00:2e:89:c7:6e:29:5a:3d:7b:c3:b3:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B Validity Not Before: Sep 23 10:39:26 2026 GMT Not After : Sep 24 10:54:26 2026 GMT Subject: CN=62396C6E5D6549D82192A0D6E9B1C8CE0EFEF7F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:69:9a:25:62:52:73:91:6d:c8:0f:cd:25:0c: ee:c1:08:16:55:06:14:46:0d:7e:ee:d5:cc:54:01: 2c:1e:a8:0c:4e:8e:3a:1a:6f:ff:b0:f2:75:29:6e: cb:af:10:7a:8f:df:ea:10:bf:95:9f:02:84:bd:50: 53:21:dc:88:aa:73:66:d9:bc:04:70:98:e2:0e:d5: 4a:8d:e3:72:40:37:a5:7a:c5:45:9b:b1:17:4e:be: 36:f5:39:7c:07:a9:d6:d4:c7:a5:b9:d0:48:95:d5: be:52:98:4f:f2:1d:64:c5:57:b1:09:5d:45:f4:fb: 00:b5:37:d0:4e:6c:0a:4f:3b:49:30:3a:60:9c:50: 36:c4:9a:50:a6:7f:4d:8c:c9:30:d2:e9:24:52:66: 50:d4:bd:e6:cb:56:ba:73:f5:b2:b1:5f:dc:94:f5: 09:6b:9a:2e:1e:ba:a9:20:4b:a4:2a:5b:28:e2:79: 06:55:80:7e:0b:f6:59:8a:5e:b9:b4:ad:c6:d3:83: 12:6a:62:2d:47:52:7e:c5:52:08:d8:cd:2d:64:ad: c6:73:b9:d1:b4:e1:d5:60:12:2e:26:09:f5:83:2c: e0:7c:ac:91:18:2b:30:d0:80:78:e3:47:d3:9a:0f: 31:ef:ac:24:2f:77:9e:63:f5:22:0d:1e:83:30:e2: bd:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:39:6C:6E:5D:65:49:D8:21:92:A0:D6:E9:B1:C8:CE:0E:FE:F7:F6 X509v3 Authority Key Identifier: keyid:71:EA:AE:94:B4:B9:7C:5E:D5:3A:52:F7:20:BB:E5:EA:78:EF:DE:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:32:44:b9:5d:d0:07:0c:12:a1:11:aa:17:b9:34:93:ab:1b: cc:53:65:a6:35:03:c2:d5:b2:5b:10:85:01:fd:65:18:d1:bb: 95:8f:cc:79:dc:5a:d5:41:e3:a8:5d:39:46:b7:08:b4:9e:f9: a6:56:f2:46:44:b6:21:f9:e3:71:5d:49:30:55:2e:7f:55:fc: ae:1b:e3:06:0c:21:d2:c1:52:40:0e:e5:db:f4:56:9f:36:a1: 05:03:e7:eb:52:c1:c6:f2:91:98:3a:10:4e:8f:6f:0a:02:58: ec:aa:89:95:69:ac:c4:75:85:4c:16:da:cc:b8:69:e3:c6:a8: 2e:a4:a4:05:b4:b8:50:03:14:f5:e2:8c:ff:4f:7b:b4:36:aa: 77:ef:36:c4:bd:77:c0:ef:fc:53:58:35:d8:af:b2:0b:ca:6e: 51:ab:85:2f:a9:4d:f5:be:53:6e:2f:b2:9b:76:da:f0:ac:b8: e9:5d:13:b2:ac:a0:b1:97:7e:79:c0:10:39:74:2e:c6:f2:d0: 28:24:e0:50:9b:f5:ca:ec:73:fa:5d:8d:46:62:49:4f:f7:ad: ef:4d:35:9f:17:c0:86:df:5d:52:a8:65:8b:ca:41:7d:c8:16: 4f:aa:3b:c6:5b:86:92:c2:cf:ce:91:21:0c:8a:b3:2f:bc:01: e6:99:96:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbQKBQFAdV/wALonHbilaPXvDswYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFFQUFFOTRCNEI5N0M1RUQ1M0E1MkY3MjBCQkU1RUE3 OEVGREU1QjAeFw0yNjA5MjMxMDM5MjZaFw0yNjA5MjQxMDU0MjZaMDMxMTAvBgNV BAMTKDYyMzk2QzZFNUQ2NTQ5RDgyMTkyQTBENkU5QjFDOENFMEVGRUY3RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgaZolYlJzkW3ID80lDO7BCBZV BhRGDX7u1cxUASweqAxOjjoab/+w8nUpbsuvEHqP3+oQv5WfAoS9UFMh3Iiqc2bZ vARwmOIO1UqN43JAN6V6xUWbsRdOvjb1OXwHqdbUx6W50EiV1b5SmE/yHWTFV7EJ XUX0+wC1N9BObApPO0kwOmCcUDbEmlCmf02MyTDS6SRSZlDUvebLVrpz9bKxX9yU 9Qlrmi4euqkgS6QqWyjieQZVgH4L9lmKXrm0rcbTgxJqYi1HUn7FUgjYzS1krcZz udG04dVgEi4mCfWDLOB8rJEYKzDQgHjjR9OaDzHvrCQvd55j9SINHoMw4r2fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYjlsbl1lSdghkqDW6bHIzg7+9/YwHwYDVR0j BBgwFoAUcequlLS5fF7VOlL3ILvl6njv3lswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmE1MzQxZTgtMjJkOC00NDljLWE3NTMtZTQ3YmJmYzQ4NTM4LzAvNzFFQUFFOTRC NEI5N0M1RUQ1M0E1MkY3MjBCQkU1RUE3OEVGREU1Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MUVBQUU5NEI0Qjk3QzVFRDUzQTUyRjcyMEJCRTVFQTc4RUZE RTVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmE1MzQxZTgtMjJkOC00NDljLWE3 NTMtZTQ3YmJmYzQ4NTM4LzAvNzFFQUFFOTRCNEI5N0M1RUQ1M0E1MkY3MjBCQkU1 RUE3OEVGREU1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJkyRLld0AcMEqERqhe5NJOrG8xTZaY1A8LV slsQhQH9ZRjRu5WPzHncWtVB46hdOUa3CLSe+aZW8kZEtiH543FdSTBVLn9V/K4b 4wYMIdLBUkAO5dv0Vp82oQUD5+tSwcbykZg6EE6PbwoCWOyqiZVprMR1hUwW2sy4 aePGqC6kpAW0uFADFPXijP9Pe7Q2qnfvNsS9d8Dv/FNYNdivsgvKblGrhS+pTfW+ U24vspt22vCsuOldE7KsoLGXfnnAEDl0Lsby0Cgk4FCb9crsc/pdjUZiSU/3re9N NZ8XwIbfXVKoZYvKQX3IFk+qO8ZbhpLCz86RIQyKsy+8AeaZllc= -----END CERTIFICATE-----Generated at Thu Sep 24 02:17:34 2026 by rpki-client