$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.mft File: 71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.mft (raw, json) Hash identifier: igNJJi4/GuXribgLyIn3Nt4mc0DpsP0Gp3MKgr6QH+Y= Subject key identifier: 76:31:B2:15:6C:EF:07:F0:79:33:6A:7B:14:59:86:DF:52:B0:5D:0D Authority key identifier: 71:E3:BB:71:0F:59:21:46:B8:2A:3C:1C:FC:F3:6A:2B:D1:C5:A7:95 Certificate issuer: /CN=71E3BB710F592146B82A3C1CFCF36A2BD1C5A795 Certificate serial: 272B9961900BD10BD604027FEBCD55D015A96E2B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.mft Manifest number: C4 Signing time: Thu 24 Sep 2026 08:10:40 +0000 Manifest this update: Thu 24 Sep 2026 08:05:40 +0000 Manifest next update: Fri 25 Sep 2026 10:08:40 +0000 Files and hashes: 1: 71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.crl (hash: HBFD+RXxD2EDskMUCyj690kABEGdRdWe7NkygpCXjuI=) 2: 3130332e37362e33312e302f32342d3234203d3e20313530343732.roa (hash: rUHpYIR2vJnsoxcjoNwsrIMb/p49L2kYzJuwadosSIk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.crl rsync://rpki-rsync.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:08:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:2b:99:61:90:0b:d1:0b:d6:04:02:7f:eb:cd:55:d0:15:a9:6e:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71E3BB710F592146B82A3C1CFCF36A2BD1C5A795 Validity Not Before: Sep 24 08:05:40 2026 GMT Not After : Sep 25 10:08:40 2026 GMT Subject: CN=7631B2156CEF07F079336A7B145986DF52B05D0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b6:55:fa:9f:d6:b8:de:97:20:dc:56:29:8f: 8d:16:81:0e:40:a3:31:d0:a7:75:24:97:48:9d:41: de:15:ca:ba:1a:92:b5:11:cb:1b:34:f8:0d:e0:f6: 68:30:50:e5:18:69:1d:50:4f:19:10:fd:a1:fc:5e: 1d:52:5e:01:28:ce:79:c7:84:e6:c6:76:22:7c:9c: f2:c5:ff:e4:89:e7:b0:df:17:1c:de:7c:20:ac:27: 36:dd:b8:65:b5:19:2f:41:ea:84:bf:b6:f1:3f:46: e7:79:4a:e3:3e:ed:9b:af:5a:8e:8d:34:b4:48:60: 15:3f:d1:c9:74:08:c2:b3:df:ea:a0:b0:7c:3d:52: fa:56:40:b2:b4:31:84:d0:33:97:09:92:2c:3e:41: f1:63:e5:77:c4:26:4b:d3:6e:d7:c3:b6:38:62:7f: e5:84:64:05:58:ba:95:41:d6:b1:81:6f:23:ae:57: c9:b3:f3:6d:9c:7a:3c:47:db:d5:20:37:b6:7a:3b: 5f:de:be:73:06:bd:94:2c:2c:ca:bd:9e:bd:3f:bb: 64:20:7a:8b:3f:c0:88:d7:43:55:e0:f0:fb:db:10: b8:0c:3c:e5:ca:b1:68:51:66:2d:a4:a0:4e:83:b7: 29:4c:9d:13:10:2a:e9:b5:79:c6:2e:0d:13:0d:85: 6d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:31:B2:15:6C:EF:07:F0:79:33:6A:7B:14:59:86:DF:52:B0:5D:0D X509v3 Authority Key Identifier: keyid:71:E3:BB:71:0F:59:21:46:B8:2A:3C:1C:FC:F3:6A:2B:D1:C5:A7:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:09:ef:ad:44:93:fe:d4:e8:b7:c4:c3:03:25:c0:55:d7:e8: 24:80:2c:bb:c3:55:33:c1:98:ea:2d:41:d0:90:87:5d:cd:fc: e5:32:e1:71:4e:e2:db:47:69:89:69:43:e0:bc:aa:a5:ee:52: de:ee:66:03:15:77:a0:e1:4c:c6:c8:19:11:64:f6:14:24:5d: e8:31:c1:0d:04:95:bf:ff:a0:b0:bc:96:d8:61:71:f4:ec:f9: 60:47:4e:bb:76:d5:1b:72:29:56:5e:82:0f:b7:0b:1b:16:29: d8:4d:0f:2e:a3:06:69:19:b3:a6:35:37:13:2e:c5:fb:ff:b5: 90:db:4e:de:b2:2a:9c:a4:94:0c:55:db:65:75:76:0d:8c:26: 8b:0e:55:89:80:7a:d1:06:29:2c:b9:19:17:76:bf:c2:a9:70: 9b:4f:4c:c2:14:11:8e:e0:5d:56:23:64:b4:94:47:95:bc:87: c5:a9:dc:3e:e5:9f:ad:81:d3:5b:f8:87:30:ae:05:b8:72:18: 5a:7b:de:78:b0:59:e2:a4:2f:8b:02:95:05:82:57:73:fc:27: ac:17:9b:3b:e2:06:26:63:b6:65:72:31:0c:3c:2b:98:03:ea: 8c:6b:3b:e2:1e:55:57:1b:60:83:2d:f1:08:23:ff:55:63:c7: ef:a1:4f:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJyuZYZAL0QvWBAJ/681V0BWpbiswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFFM0JCNzEwRjU5MjE0NkI4MkEzQzFDRkNGMzZBMkJE MUM1QTc5NTAeFw0yNjA5MjQwODA1NDBaFw0yNjA5MjUxMDA4NDBaMDMxMTAvBgNV BAMTKDc2MzFCMjE1NkNFRjA3RjA3OTMzNkE3QjE0NTk4NkRGNTJCMDVEMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKtlX6n9a43pcg3FYpj40WgQ5A ozHQp3Ukl0idQd4VyroakrURyxs0+A3g9mgwUOUYaR1QTxkQ/aH8Xh1SXgEoznnH hObGdiJ8nPLF/+SJ57DfFxzefCCsJzbduGW1GS9B6oS/tvE/Rud5SuM+7ZuvWo6N NLRIYBU/0cl0CMKz3+qgsHw9UvpWQLK0MYTQM5cJkiw+QfFj5XfEJkvTbtfDtjhi f+WEZAVYupVB1rGBbyOuV8mz822cejxH29UgN7Z6O1/evnMGvZQsLMq9nr0/u2Qg eos/wIjXQ1Xg8PvbELgMPOXKsWhRZi2koE6DtylMnRMQKum1ecYuDRMNhW3PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdjGyFWzvB/B5M2p7FFmG31KwXQ0wHwYDVR0j BBgwFoAUceO7cQ9ZIUa4Kjwc/PNqK9HFp5UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGQ2MWM3NTAtODgwZi00OThiLWE2OTgtMWY0NzgwZmE2OWZmLzAvNzFFM0JCNzEw RjU5MjE0NkI4MkEzQzFDRkNGMzZBMkJEMUM1QTc5NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MUUzQkI3MTBGNTkyMTQ2QjgyQTNDMUNGQ0YzNkEyQkQxQzVB Nzk1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGQ2MWM3NTAtODgwZi00OThiLWE2 OTgtMWY0NzgwZmE2OWZmLzAvNzFFM0JCNzEwRjU5MjE0NkI4MkEzQzFDRkNGMzZB MkJEMUM1QTc5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACsJ761Ek/7U6LfEwwMlwFXX6CSALLvDVTPB mOotQdCQh13N/OUy4XFO4ttHaYlpQ+C8qqXuUt7uZgMVd6DhTMbIGRFk9hQkXegx wQ0Elb//oLC8lthhcfTs+WBHTrt21RtyKVZegg+3CxsWKdhNDy6jBmkZs6Y1NxMu xfv/tZDbTt6yKpyklAxV22V1dg2MJosOVYmAetEGKSy5GRd2v8KpcJtPTMIUEY7g XVYjZLSUR5W8h8Wp3D7ln62B01v4hzCuBbhyGFp73niwWeKkL4sClQWCV3P8J6wX mzviBiZjtmVyMQw8K5gD6oxrO+IeVVcbYIMt8Qgj/1Vjx++hT74= -----END CERTIFICATE-----Generated at Thu Sep 24 19:26:54 2026 by rpki-client