
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.mft
File: 71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.mft (raw, json)
Hash identifier: M0k8Y6smy3hnqrrqP6/++mg6ZC7UIwh26wZCKUQYCGM=
Subject key identifier: 56:F1:DA:62:61:50:E3:2C:E4:97:5B:59:90:AE:0C:64:6D:6F:32:7A
Authority key identifier: 71:E3:BB:71:0F:59:21:46:B8:2A:3C:1C:FC:F3:6A:2B:D1:C5:A7:95
Certificate issuer: /CN=71E3BB710F592146B82A3C1CFCF36A2BD1C5A795
Certificate serial: 7074C77A4A3145C3D859935F0F8F6A55B35D2871
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.mft
Manifest number: 70
Signing time: Thu 23 Jul 2026 15:13:32 +0000
Manifest this update: Thu 23 Jul 2026 15:08:32 +0000
Manifest next update: Fri 24 Jul 2026 16:55:32 +0000
Files and hashes: 1: 71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.crl (hash: nBCnR8T/J3BrQ6Klu6T8cxtsb2AkdWaB10PE69y6aUQ=)
2: 3130332e37362e33312e302f32342d3234203d3e20313530343732.roa (hash: rUHpYIR2vJnsoxcjoNwsrIMb/p49L2kYzJuwadosSIk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.crl
rsync://rpki-rsync.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 16:55:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:74:c7:7a:4a:31:45:c3:d8:59:93:5f:0f:8f:6a:55:b3:5d:28:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71E3BB710F592146B82A3C1CFCF36A2BD1C5A795
Validity
Not Before: Jul 23 15:08:32 2026 GMT
Not After : Jul 24 16:55:32 2026 GMT
Subject: CN=56F1DA626150E32CE4975B5990AE0C646D6F327A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f5:ad:cc:35:a8:82:71:c1:d0:74:1e:c5:37:
a0:ca:0d:00:6f:0b:4e:32:54:49:22:4a:af:e9:a0:
22:bf:30:5a:bd:90:84:01:3f:24:4b:99:75:c9:5c:
f1:6b:8e:47:b6:50:81:9f:08:5e:8b:9a:45:36:7b:
6e:ee:23:d7:ec:8a:dd:72:8d:4f:b2:f5:6e:f8:d3:
d0:0b:1c:09:25:74:35:32:3d:15:19:d4:b0:c8:66:
09:b7:3a:3b:b9:95:26:b7:ea:87:74:2b:11:0e:25:
25:ba:4e:b2:90:24:5b:76:46:5a:67:99:f6:df:38:
a6:71:5c:99:5e:05:eb:69:86:af:c8:83:7e:08:e7:
db:1e:4c:d7:b6:8d:b5:2c:86:f8:95:8a:c8:a4:ff:
12:be:9a:99:c4:c9:15:bc:bf:df:77:cb:c9:ab:a8:
d4:0b:70:90:f9:1c:cc:19:99:be:98:66:e7:d1:fa:
57:81:54:06:1e:3d:15:ab:a7:84:48:c1:6a:53:9e:
13:7b:5c:d3:f9:75:a6:6d:03:8a:b5:a3:a8:8f:61:
98:48:c3:77:4f:4b:bf:cf:ca:5c:9f:64:0c:44:7f:
8c:15:a6:c2:7a:3f:9e:e8:26:4c:2d:08:8f:d0:ac:
36:38:54:6a:9d:ba:c5:fa:cb:bb:1e:10:ca:ad:31:
5e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F1:DA:62:61:50:E3:2C:E4:97:5B:59:90:AE:0C:64:6D:6F:32:7A
X509v3 Authority Key Identifier:
keyid:71:E3:BB:71:0F:59:21:46:B8:2A:3C:1C:FC:F3:6A:2B:D1:C5:A7:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:b5:fe:31:59:c3:aa:ab:cd:94:a4:60:ca:44:5b:1d:c3:46:
97:c7:26:4e:0f:2e:cb:1e:04:7d:b9:ca:4f:fb:7c:80:68:f9:
8f:d4:ed:d1:49:f4:a2:1e:cb:7d:d8:d3:a7:11:d6:9e:b9:fa:
7f:00:59:5e:4a:d0:3c:45:3b:11:53:8d:42:79:c4:4d:7e:e9:
dc:52:8d:3e:91:ad:ba:76:d0:22:48:f4:6c:56:f9:fe:12:70:
8a:93:5d:ed:77:11:f6:c5:ed:6b:9e:24:53:07:79:fc:ee:31:
58:ec:61:2e:a2:0f:df:5d:07:25:cf:3d:99:b9:b3:0a:d2:03:
c0:bf:53:f6:bc:1d:59:89:79:18:36:b8:ab:4b:b4:6b:bf:d5:
8b:15:b2:55:21:b4:d6:fb:1a:82:f8:ae:51:93:9a:b8:6a:72:
3e:52:e4:fe:96:b1:cc:9e:ef:5e:8b:de:88:a5:4f:50:99:81:
50:c7:68:f1:85:60:58:d5:ce:85:99:5b:4e:6a:b9:a0:08:2f:
48:12:5a:fd:6a:46:a5:cc:19:fe:a3:76:97:d7:87:69:9f:1b:
bf:45:b8:a9:1e:1c:86:83:49:a1:90:3f:c4:6a:51:5f:d7:10:
0a:20:a7:0d:db:55:0a:7c:77:20:29:d7:21:c1:76:a1:b8:0d:
80:a6:65:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:57:42 2026 by rpki-client