$ rpki-client -vvf rpki-rsync.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/71BEA54A40125136212043443871943E11E47CE8.mft File: 71BEA54A40125136212043443871943E11E47CE8.mft (raw, json) Hash identifier: KART/5ni8FUsKRSbOx7/rYNCDgTJOFYDpjgTj44Q+ew= Subject key identifier: 5C:CA:63:35:E5:8F:BD:25:13:36:09:DA:74:53:CB:B4:66:2B:A3:72 Authority key identifier: 71:BE:A5:4A:40:12:51:36:21:20:43:44:38:71:94:3E:11:E4:7C:E8 Certificate issuer: /CN=71BEA54A40125136212043443871943E11E47CE8 Certificate serial: 215C9383E396122D70D286A9714FDF097178E559 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71BEA54A40125136212043443871943E11E47CE8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/71BEA54A40125136212043443871943E11E47CE8.mft Manifest number: 0E Signing time: Tue 12 May 2026 07:08:18 +0000 Manifest this update: Tue 12 May 2026 07:03:18 +0000 Manifest next update: Wed 13 May 2026 10:08:18 +0000 Files and hashes: 1: 71BEA54A40125136212043443871943E11E47CE8.crl (hash: Rp8vg9j1nTIFrhs01G3q7pWyIJjHm9Ondi4kFmM9dIM=) 2: 3130332e3233342e31382e302f32342d3234203d3e20313531353036.roa (hash: VJzo4/caWYAHukBH2w0BGX1Ka+vdrCFh1viFJ7tFkV8=) 3: 3130332e3233342e31392e302f32342d3234203d3e20313531353036.roa (hash: SJitFwYKCLnaXZQ4OdV1EreS23s72a/7Op1qTgfnrGo=) 4: 3130332e3233342e31382e302f32332d3233203d3e20313531353036.roa (hash: PHU5h1LHUlDbfO+kxPjDf9ATbrrXtorAw7bNDenM+FM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/71BEA54A40125136212043443871943E11E47CE8.crl rsync://rpki-rsync.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/71BEA54A40125136212043443871943E11E47CE8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71BEA54A40125136212043443871943E11E47CE8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:5c:93:83:e3:96:12:2d:70:d2:86:a9:71:4f:df:09:71:78:e5:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71BEA54A40125136212043443871943E11E47CE8 Validity Not Before: May 12 07:03:18 2026 GMT Not After : May 13 10:08:18 2026 GMT Subject: CN=5CCA6335E58FBD25133609DA7453CBB4662BA372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:02:95:33:fe:52:a4:32:96:a6:76:e0:8a:96: 96:58:67:ad:de:7f:31:ca:eb:bf:95:1b:b4:70:47: 98:d1:8e:ca:59:dc:22:db:d1:bb:9a:c0:6f:9c:d7: 63:c4:31:c2:64:93:c8:9f:8a:ea:d6:c6:bf:52:92: 5b:ef:d3:04:e5:41:25:a0:c8:83:bb:24:db:a8:e1: 35:08:7f:a1:d1:dc:c5:a5:68:68:a0:b4:40:db:80: 39:9d:30:f7:06:e7:0c:cf:8f:a4:3c:6d:81:ab:85: cb:1c:cf:76:cc:7d:6c:44:0d:b5:07:6a:8a:1c:03: d5:e5:37:ab:25:33:a3:4f:0b:e6:0e:e1:91:a0:a3: 49:07:07:56:c8:ac:76:27:0b:c2:1c:cd:ad:eb:06: af:84:2e:52:7e:77:42:9f:8a:bf:db:c1:fd:9f:29: 8d:92:9d:a4:55:69:2a:57:86:21:33:e9:7f:b0:ed: 55:65:48:4d:83:8a:73:f6:41:bb:5f:c2:bb:f0:62: ad:02:35:55:40:f5:f1:a2:8e:ca:93:27:e0:c2:6e: 33:e6:cd:92:e0:8b:3a:ac:f5:66:83:15:c7:17:a6: 26:62:ed:02:5b:fc:a1:8c:b4:98:77:93:d2:e3:6a: a3:52:a1:6e:f0:3f:c7:f0:98:f8:86:1c:86:34:23: 06:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:CA:63:35:E5:8F:BD:25:13:36:09:DA:74:53:CB:B4:66:2B:A3:72 X509v3 Authority Key Identifier: keyid:71:BE:A5:4A:40:12:51:36:21:20:43:44:38:71:94:3E:11:E4:7C:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/71BEA54A40125136212043443871943E11E47CE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71BEA54A40125136212043443871943E11E47CE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/71BEA54A40125136212043443871943E11E47CE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:27:8f:8c:93:38:32:ab:03:28:d4:87:88:99:1e:b4:ce:d7: 4c:93:c4:46:fa:d4:43:35:88:43:38:5e:5b:27:f8:84:00:e3: 42:af:b2:cb:42:75:fa:43:aa:fb:f3:b4:f4:e6:5e:43:32:d2: db:93:f2:e8:51:27:88:2e:ec:a9:95:19:44:9b:de:f4:0d:d7: a7:1f:2d:a8:f2:bd:b7:cd:5b:17:9e:aa:4d:1e:ff:14:37:b5: 3d:39:87:9f:9d:f5:23:0e:3e:97:01:12:5f:b3:99:18:cb:9a: 7f:8e:12:dc:f6:98:8a:41:ab:c9:84:32:2a:e0:ac:40:b8:f7: dd:9a:ad:c1:5a:ae:bd:32:b4:11:39:a9:d9:90:cd:66:0b:e3: 2d:2c:05:0d:a3:2d:47:35:4a:b6:b8:90:4b:87:80:24:47:8f: 3d:20:57:da:e2:0f:50:0e:9a:70:e4:6a:79:0e:2c:4a:6d:d9: fb:3d:67:60:cb:b7:3a:cc:f0:8b:39:4c:d1:a2:b1:9d:cf:54: 91:47:74:4f:19:f2:29:ab:03:1c:73:38:82:1a:8f:55:70:6e: e8:29:86:28:c3:0e:80:a6:8e:68:71:05:14:b0:26:af:93:6a: 63:2b:52:06:c2:67:d9:ad:4c:1c:de:1b:a1:c0:d9:e0:97:fa: fe:49:36:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIVyTg+OWEi1w0oapcU/fCXF45VkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFCRUE1NEE0MDEyNTEzNjIxMjA0MzQ0Mzg3MTk0M0Ux MUU0N0NFODAeFw0yNjA1MTIwNzAzMThaFw0yNjA1MTMxMDA4MThaMDMxMTAvBgNV BAMTKDVDQ0E2MzM1RTU4RkJEMjUxMzM2MDlEQTc0NTNDQkI0NjYyQkEzNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7ApUz/lKkMpamduCKlpZYZ63e fzHK67+VG7RwR5jRjspZ3CLb0buawG+c12PEMcJkk8ifiurWxr9Sklvv0wTlQSWg yIO7JNuo4TUIf6HR3MWlaGigtEDbgDmdMPcG5wzPj6Q8bYGrhcscz3bMfWxEDbUH aoocA9XlN6slM6NPC+YO4ZGgo0kHB1bIrHYnC8Icza3rBq+ELlJ+d0Kfir/bwf2f KY2SnaRVaSpXhiEz6X+w7VVlSE2DinP2QbtfwrvwYq0CNVVA9fGijsqTJ+DCbjPm zZLgizqs9WaDFccXpiZi7QJb/KGMtJh3k9LjaqNSoW7wP8fwmPiGHIY0IwZBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXMpjNeWPvSUTNgnadFPLtGYro3IwHwYDVR0j BBgwFoAUcb6lSkASUTYhIENEOHGUPhHkfOgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzg4MzI5Y2EtZThmNy00ZDNkLWFjZTQtODA3ZjhhYTU4YWUwLzAvNzFCRUE1NEE0 MDEyNTEzNjIxMjA0MzQ0Mzg3MTk0M0UxMUU0N0NFOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MUJFQTU0QTQwMTI1MTM2MjEyMDQzNDQzODcxOTQzRTExRTQ3 Q0U4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzg4MzI5Y2EtZThmNy00ZDNkLWFj ZTQtODA3ZjhhYTU4YWUwLzAvNzFCRUE1NEE0MDEyNTEzNjIxMjA0MzQ0Mzg3MTk0 M0UxMUU0N0NFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFwnj4yTODKrAyjUh4iZHrTO10yTxEb61EM1 iEM4Xlsn+IQA40KvsstCdfpDqvvztPTmXkMy0tuT8uhRJ4gu7KmVGUSb3vQN16cf LajyvbfNWxeeqk0e/xQ3tT05h5+d9SMOPpcBEl+zmRjLmn+OEtz2mIpBq8mEMirg rEC4992arcFarr0ytBE5qdmQzWYL4y0sBQ2jLUc1Sra4kEuHgCRHjz0gV9riD1AO mnDkankOLEpt2fs9Z2DLtzrM8Is5TNGisZ3PVJFHdE8Z8imrAxxzOIIaj1Vwbugp hijDDoCmjmhxBRSwJq+TamMrUgbCZ9mtTBzeG6HA2eCX+v5JNhU= -----END CERTIFICATE-----Generated at Wed May 13 03:16:01 2026 by rpki-client