$ rpki-client -vvvf rpki-rsync.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/71BEA54A40125136212043443871943E11E47CE8.mft File: 71BEA54A40125136212043443871943E11E47CE8.mft (raw, json) Hash identifier: yIbO3K4eMQwg6g2pztX+hci37qYB/EExrDcIprDORe8= Subject key identifier: 2A:A1:96:0B:23:95:D4:CD:81:37:8D:72:72:37:D5:69:C9:8A:C7:31 Authority key identifier: 71:BE:A5:4A:40:12:51:36:21:20:43:44:38:71:94:3E:11:E4:7C:E8 Certificate issuer: /CN=71BEA54A40125136212043443871943E11E47CE8 Certificate serial: 121A996DD1C2A64B70A9D7C789A204D3958632C9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71BEA54A40125136212043443871943E11E47CE8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/71BEA54A40125136212043443871943E11E47CE8.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 22:07:59 +0000 Manifest this update: Thu 24 Sep 2026 22:02:59 +0000 Manifest next update: Fri 25 Sep 2026 23:14:59 +0000 Files and hashes: 1: 3130332e3233342e31382e302f32342d3234203d3e20313531353036.roa (hash: VJzo4/caWYAHukBH2w0BGX1Ka+vdrCFh1viFJ7tFkV8=) 2: 71BEA54A40125136212043443871943E11E47CE8.crl (hash: /YsyaAapNKrvQPejg5zr4nrMeIMMv4pnFDdCUQFOqvA=) 3: 3130332e3233342e31382e302f32332d3233203d3e20313531353036.roa (hash: PHU5h1LHUlDbfO+kxPjDf9ATbrrXtorAw7bNDenM+FM=) 4: 3130332e3233342e31392e302f32342d3234203d3e20313531353036.roa (hash: SJitFwYKCLnaXZQ4OdV1EreS23s72a/7Op1qTgfnrGo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/71BEA54A40125136212043443871943E11E47CE8.crl rsync://rpki-rsync.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/71BEA54A40125136212043443871943E11E47CE8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71BEA54A40125136212043443871943E11E47CE8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:1a:99:6d:d1:c2:a6:4b:70:a9:d7:c7:89:a2:04:d3:95:86:32:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71BEA54A40125136212043443871943E11E47CE8 Validity Not Before: Sep 24 22:02:59 2026 GMT Not After : Sep 25 23:14:59 2026 GMT Subject: CN=2AA1960B2395D4CD81378D727237D569C98AC731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3f:ca:48:05:26:13:bd:36:ca:79:51:93:6d: 69:27:97:8d:82:cd:b5:17:ef:df:41:99:75:ea:5a: d4:66:b0:c1:3c:d8:f2:52:77:12:06:7f:68:35:36: 7c:21:6d:f1:e9:5f:d8:c6:a1:b4:86:ba:ce:55:4f: 9d:d8:a4:7e:11:23:6d:cd:d6:7f:2c:e7:8a:68:46: 08:f2:f0:58:6c:fd:18:20:d8:24:43:6c:a7:f6:b4: dd:86:a7:38:ff:99:2a:d4:c8:6e:39:bc:12:32:fa: 95:ae:ed:42:31:b4:83:d4:70:a4:e3:7f:cd:f8:2f: 1f:ee:87:96:99:5a:43:44:12:21:83:9e:1b:e7:3e: 80:e8:f0:1c:f1:b1:02:28:00:b8:d0:cd:45:2c:8b: f3:1d:48:30:7d:65:ef:f6:d8:c2:f9:62:62:53:f4: 78:9d:44:04:c4:84:88:1f:a5:1b:65:03:17:f7:27: 2d:b3:b1:91:f6:9c:08:58:fb:07:31:9e:79:e6:fa: 55:ac:8e:b8:67:cf:58:7c:c7:cd:ac:da:73:50:27: dc:e4:e9:98:d5:1b:e8:ff:06:7a:19:2a:cd:a5:de: a4:86:4c:c2:a9:32:ac:6a:19:c9:ae:67:39:7b:03: 3f:b1:50:ba:89:00:80:ec:7f:c0:a8:7c:cd:2e:2d: 60:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:A1:96:0B:23:95:D4:CD:81:37:8D:72:72:37:D5:69:C9:8A:C7:31 X509v3 Authority Key Identifier: keyid:71:BE:A5:4A:40:12:51:36:21:20:43:44:38:71:94:3E:11:E4:7C:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/71BEA54A40125136212043443871943E11E47CE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71BEA54A40125136212043443871943E11E47CE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/71BEA54A40125136212043443871943E11E47CE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:9c:4e:ae:bb:fa:31:72:51:89:28:5c:d6:06:d0:61:5c:8e: 82:0b:c7:a8:06:17:91:51:69:25:cd:ac:4d:b0:be:9d:cb:3c: e1:32:84:17:99:7f:a6:6f:3a:d8:9e:d7:26:2e:d5:05:f8:91: 1e:28:42:54:01:b3:fd:b0:8e:0c:e9:45:1b:b0:ef:04:aa:c7: e4:5b:19:13:77:73:b7:ed:32:61:99:79:ea:cb:08:27:98:11: 72:97:30:d7:14:07:39:f1:bb:58:1a:31:d8:da:7c:60:9f:14: 2d:6d:11:89:bd:86:81:b1:b1:58:88:80:e2:8d:b6:86:79:b4: 1d:c4:d7:97:8e:19:73:54:fd:f7:4a:b9:87:a9:59:ca:15:b5: ed:69:6d:39:b7:9c:35:02:07:2b:84:15:5d:75:64:c1:7e:75: 73:cb:3a:29:ee:bb:f4:63:9c:c3:ed:18:bd:93:ce:84:e3:40: eb:2a:21:26:ea:b1:96:f3:f5:62:ab:80:cb:32:f4:3c:a6:a0: ee:ad:27:e8:4f:26:c9:77:9e:40:33:fb:62:ec:f4:fd:3e:04: 04:fb:f8:31:ff:02:17:3a:22:93:a1:28:3b:ef:7a:71:aa:c7: 91:60:95:4d:99:cd:ea:90:b8:6a:43:4b:ff:a8:4d:05:b9:3b: df:b0:7d:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEhqZbdHCpktwqdfHiaIE05WGMskwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFCRUE1NEE0MDEyNTEzNjIxMjA0MzQ0Mzg3MTk0M0Ux MUU0N0NFODAeFw0yNjA5MjQyMjAyNTlaFw0yNjA5MjUyMzE0NTlaMDMxMTAvBgNV BAMTKDJBQTE5NjBCMjM5NUQ0Q0Q4MTM3OEQ3MjcyMzdENTY5Qzk4QUM3MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAP8pIBSYTvTbKeVGTbWknl42C zbUX799BmXXqWtRmsME82PJSdxIGf2g1NnwhbfHpX9jGobSGus5VT53YpH4RI23N 1n8s54poRgjy8Fhs/Rgg2CRDbKf2tN2Gpzj/mSrUyG45vBIy+pWu7UIxtIPUcKTj f834Lx/uh5aZWkNEEiGDnhvnPoDo8BzxsQIoALjQzUUsi/MdSDB9Ze/22ML5YmJT 9HidRATEhIgfpRtlAxf3Jy2zsZH2nAhY+wcxnnnm+lWsjrhnz1h8x82s2nNQJ9zk 6ZjVG+j/BnoZKs2l3qSGTMKpMqxqGcmuZzl7Az+xULqJAIDsf8CofM0uLWAZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKqGWCyOV1M2BN41ycjfVacmKxzEwHwYDVR0j BBgwFoAUcb6lSkASUTYhIENEOHGUPhHkfOgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzg4MzI5Y2EtZThmNy00ZDNkLWFjZTQtODA3ZjhhYTU4YWUwLzAvNzFCRUE1NEE0 MDEyNTEzNjIxMjA0MzQ0Mzg3MTk0M0UxMUU0N0NFOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MUJFQTU0QTQwMTI1MTM2MjEyMDQzNDQzODcxOTQzRTExRTQ3 Q0U4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzg4MzI5Y2EtZThmNy00ZDNkLWFj ZTQtODA3ZjhhYTU4YWUwLzAvNzFCRUE1NEE0MDEyNTEzNjIxMjA0MzQ0Mzg3MTk0 M0UxMUU0N0NFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHmcTq67+jFyUYkoXNYG0GFcjoILx6gGF5FR aSXNrE2wvp3LPOEyhBeZf6ZvOtie1yYu1QX4kR4oQlQBs/2wjgzpRRuw7wSqx+Rb GRN3c7ftMmGZeerLCCeYEXKXMNcUBznxu1gaMdjafGCfFC1tEYm9hoGxsViIgOKN toZ5tB3E15eOGXNU/fdKuYepWcoVte1pbTm3nDUCByuEFV11ZMF+dXPLOinuu/Rj nMPtGL2TzoTjQOsqISbqsZbz9WKrgMsy9DymoO6tJ+hPJsl3nkAz+2Ls9P0+BAT7 +DH/Ahc6IpOhKDvvenGqx5FglU2ZzeqQuGpDS/+oTQW5O9+wfSU= -----END CERTIFICATE-----Generated at Thu Sep 24 23:38:31 2026 by rpki-client