$ rpki-client -vvf rpki-rsync.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/71BEA54A40125136212043443871943E11E47CE8.mft File: 71BEA54A40125136212043443871943E11E47CE8.mft (raw, json) Hash identifier: 01UY/wwkj7M1brrFE9+5YtNPlsxK83rsa1jDpdfkYUg= Subject key identifier: 75:00:E6:E7:D4:99:DE:4B:72:8F:67:8F:44:9E:CC:0E:89:88:85:E0 Authority key identifier: 71:BE:A5:4A:40:12:51:36:21:20:43:44:38:71:94:3E:11:E4:7C:E8 Certificate issuer: /CN=71BEA54A40125136212043443871943E11E47CE8 Certificate serial: 69E583AE121BE4222A9F9A8FD4D8B1FC26AC22BF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71BEA54A40125136212043443871943E11E47CE8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/71BEA54A40125136212043443871943E11E47CE8.mft Manifest number: 6D Signing time: Thu 23 Jul 2026 21:21:02 +0000 Manifest this update: Thu 23 Jul 2026 21:16:02 +0000 Manifest next update: Fri 24 Jul 2026 23:11:02 +0000 Files and hashes: 1: 71BEA54A40125136212043443871943E11E47CE8.crl (hash: bfhATaFTnGz2TRMviNDSoBoo7hPf4rby9zMCR2Fz4xY=) 2: 3130332e3233342e31392e302f32342d3234203d3e20313531353036.roa (hash: SJitFwYKCLnaXZQ4OdV1EreS23s72a/7Op1qTgfnrGo=) 3: 3130332e3233342e31382e302f32332d3233203d3e20313531353036.roa (hash: PHU5h1LHUlDbfO+kxPjDf9ATbrrXtorAw7bNDenM+FM=) 4: 3130332e3233342e31382e302f32342d3234203d3e20313531353036.roa (hash: VJzo4/caWYAHukBH2w0BGX1Ka+vdrCFh1viFJ7tFkV8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/71BEA54A40125136212043443871943E11E47CE8.crl rsync://rpki-rsync.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/71BEA54A40125136212043443871943E11E47CE8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71BEA54A40125136212043443871943E11E47CE8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 23:11:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:e5:83:ae:12:1b:e4:22:2a:9f:9a:8f:d4:d8:b1:fc:26:ac:22:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71BEA54A40125136212043443871943E11E47CE8 Validity Not Before: Jul 23 21:16:02 2026 GMT Not After : Jul 24 23:11:02 2026 GMT Subject: CN=7500E6E7D499DE4B728F678F449ECC0E898885E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:76:ff:ed:df:61:e2:df:b6:29:80:d8:5d:34: 36:7b:94:b3:81:4d:2d:46:1f:97:fd:7f:93:79:67: 6c:ca:02:59:7e:f0:b1:07:cf:78:9d:30:31:0e:5c: 04:3a:2b:06:9b:f5:6f:cc:15:40:7f:57:ef:4f:bb: ed:fe:29:56:a0:62:92:13:0a:41:0a:76:53:60:69: e0:92:34:d9:94:2d:85:a3:dd:08:ce:9b:e8:b9:45: c8:eb:c0:80:1e:3d:58:0d:b9:e4:e9:c6:f2:a2:68: 2b:61:a8:b8:e4:8d:9c:48:8c:61:1e:08:a0:07:22: c0:cb:62:7c:ab:6a:67:c8:39:7c:72:2b:e7:b4:16: 33:fe:c5:2c:14:9e:07:81:df:4b:70:40:c8:65:da: 70:1d:d1:55:2c:4b:9b:3f:d9:ba:20:6f:ca:6f:54: 7a:d7:6d:90:5a:ad:79:13:05:f3:0b:65:c4:e6:73: f2:1d:ba:1f:45:e4:28:ad:8f:70:56:67:74:6d:93: c8:71:b5:33:17:32:08:f8:2c:c7:f4:51:1a:c0:88: 80:79:7a:b1:68:1a:4f:b4:07:f9:9c:cf:4c:54:fc: 03:8b:ce:bb:ce:7c:7e:6e:b0:ff:98:42:d0:b9:19: 92:e7:b8:a5:07:08:ee:51:20:b3:f3:d1:1b:7e:26: 3b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:00:E6:E7:D4:99:DE:4B:72:8F:67:8F:44:9E:CC:0E:89:88:85:E0 X509v3 Authority Key Identifier: keyid:71:BE:A5:4A:40:12:51:36:21:20:43:44:38:71:94:3E:11:E4:7C:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/71BEA54A40125136212043443871943E11E47CE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71BEA54A40125136212043443871943E11E47CE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/71BEA54A40125136212043443871943E11E47CE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:b4:c2:21:28:90:fb:ea:6c:6d:bd:5b:b6:21:e8:db:5c:8e: 97:5c:98:55:81:0d:c6:47:45:df:5a:de:50:7b:d3:6b:e5:03: c7:c1:5e:c1:33:8a:fb:e5:fb:26:b3:f7:57:92:68:73:ab:72: 3b:33:88:60:3e:74:98:8b:ec:2d:3d:32:a8:9f:41:2d:56:bf: c1:d6:15:da:f6:50:8f:26:fe:9f:e7:54:82:45:32:c9:93:b4: a6:0d:5a:fc:14:b0:50:74:58:6e:54:1f:ee:5d:40:3b:c9:04: 99:5e:a9:2b:59:cb:25:44:71:dd:6c:6a:07:d6:02:96:f8:51: 02:e8:e2:60:f4:0e:89:32:93:2e:be:b2:41:ec:a3:02:49:fe: 1a:d4:06:29:c6:c3:17:3d:16:4c:55:fe:38:29:ff:16:5d:14: 9d:60:de:bf:fe:9d:e0:19:5b:9a:f3:b2:8b:4b:4a:e9:a9:07: 8a:1c:11:40:b0:41:09:e2:d6:d2:be:61:9b:02:3f:77:b3:61: 50:40:1f:49:7a:e6:9c:ec:9c:24:c8:8a:e2:37:5e:ec:f8:f1: bf:d6:2a:b9:72:81:6c:71:99:11:05:f9:dd:77:d2:89:a5:b7: b3:1e:3d:ad:a3:47:e7:e8:a4:2b:00:d2:d0:dc:4d:59:aa:98: ec:cd:ac:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaeWDrhIb5CIqn5qP1Nix/CasIr8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFCRUE1NEE0MDEyNTEzNjIxMjA0MzQ0Mzg3MTk0M0Ux MUU0N0NFODAeFw0yNjA3MjMyMTE2MDJaFw0yNjA3MjQyMzExMDJaMDMxMTAvBgNV BAMTKDc1MDBFNkU3RDQ5OURFNEI3MjhGNjc4RjQ0OUVDQzBFODk4ODg1RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6dv/t32Hi37YpgNhdNDZ7lLOB TS1GH5f9f5N5Z2zKAll+8LEHz3idMDEOXAQ6Kwab9W/MFUB/V+9Pu+3+KVagYpIT CkEKdlNgaeCSNNmULYWj3QjOm+i5RcjrwIAePVgNueTpxvKiaCthqLjkjZxIjGEe CKAHIsDLYnyramfIOXxyK+e0FjP+xSwUngeB30twQMhl2nAd0VUsS5s/2bogb8pv VHrXbZBarXkTBfMLZcTmc/Iduh9F5Citj3BWZ3Rtk8hxtTMXMgj4LMf0URrAiIB5 erFoGk+0B/mcz0xU/AOLzrvOfH5usP+YQtC5GZLnuKUHCO5RILPz0Rt+JjvzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdQDm59SZ3ktyj2ePRJ7MDomIheAwHwYDVR0j BBgwFoAUcb6lSkASUTYhIENEOHGUPhHkfOgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzg4MzI5Y2EtZThmNy00ZDNkLWFjZTQtODA3ZjhhYTU4YWUwLzAvNzFCRUE1NEE0 MDEyNTEzNjIxMjA0MzQ0Mzg3MTk0M0UxMUU0N0NFOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MUJFQTU0QTQwMTI1MTM2MjEyMDQzNDQzODcxOTQzRTExRTQ3 Q0U4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzg4MzI5Y2EtZThmNy00ZDNkLWFj ZTQtODA3ZjhhYTU4YWUwLzAvNzFCRUE1NEE0MDEyNTEzNjIxMjA0MzQ0Mzg3MTk0 M0UxMUU0N0NFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI+0wiEokPvqbG29W7Yh6NtcjpdcmFWBDcZH Rd9a3lB702vlA8fBXsEzivvl+yaz91eSaHOrcjsziGA+dJiL7C09MqifQS1Wv8HW Fdr2UI8m/p/nVIJFMsmTtKYNWvwUsFB0WG5UH+5dQDvJBJleqStZyyVEcd1sagfW Apb4UQLo4mD0Dokyky6+skHsowJJ/hrUBinGwxc9FkxV/jgp/xZdFJ1g3r/+neAZ W5rzsotLSumpB4ocEUCwQQni1tK+YZsCP3ezYVBAH0l65pzsnCTIiuI3Xuz48b/W KrlygWxxmREF+d130omlt7MePa2jR+fopCsA0tDcTVmqmOzNrLk= -----END CERTIFICATE-----Generated at Fri Jul 24 03:05:36 2026 by rpki-client