$ rpki-client -vvvf rpki-rsync.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.mft File: 71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.mft (raw, json) Hash identifier: MUMWQQEnVuoB3oel9wOOFgx3ptG4aDvWs+JXqNX5eg0= Subject key identifier: 67:77:5E:68:9F:4D:28:42:21:01:AA:A0:3D:F4:D3:3B:FB:A5:8E:E6 Authority key identifier: 71:A4:5C:05:D7:D5:DF:9D:16:E9:C3:B0:60:75:35:DB:2B:90:6B:32 Certificate issuer: /CN=71A45C05D7D5DF9D16E9C3B0607535DB2B906B32 Certificate serial: 669C8590C1D764CB7683FD3D9AB7AE73B2CEFDF2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 04:41:27 +0000 Manifest this update: Thu 24 Sep 2026 04:36:27 +0000 Manifest next update: Fri 25 Sep 2026 08:05:27 +0000 Files and hashes: 1: 3130332e35362e39322e302f32342d3234203d3e203538343737.roa (hash: d1IJ4T81r3K/uk2231YZmItFa5G4LBBNAf/1wVmUa9c=) 2: 3130332e35362e39332e302f32342d3234203d3e203538343737.roa (hash: vqVbxn6Wjao5k2JYe2+RI+TcQAfRr5R7zs7bd5wdsLk=) 3: 71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.crl (hash: 6qzvBoShib32U7HQ74swLdnzVMFhP0Q0RsSDHcQWpnc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.crl rsync://rpki-rsync.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 08:05:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:9c:85:90:c1:d7:64:cb:76:83:fd:3d:9a:b7:ae:73:b2:ce:fd:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71A45C05D7D5DF9D16E9C3B0607535DB2B906B32 Validity Not Before: Sep 24 04:36:27 2026 GMT Not After : Sep 25 08:05:27 2026 GMT Subject: CN=67775E689F4D28422101AAA03DF4D33BFBA58EE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:86:dd:92:29:17:37:74:af:dc:94:9b:b0:46: 73:5d:1e:98:c8:18:88:01:2c:01:b8:da:02:cd:71: 61:b5:db:d5:96:4f:f4:c6:b5:58:31:7b:09:06:8f: 98:95:76:c2:c1:a2:f2:c0:e7:19:c1:ec:1d:ff:c4: c4:ab:9d:7e:cf:7f:17:18:20:12:66:d1:75:32:28: 7d:dd:dc:23:1b:96:cd:9e:99:8c:ec:88:f7:49:3f: 2e:b7:1e:25:1e:53:f9:37:6b:87:3a:e0:cf:0c:7a: ab:f5:f3:55:b0:8b:3b:f7:bd:de:ab:14:3e:2e:6b: e7:ac:cc:db:23:bd:7b:14:84:3b:0c:ab:52:94:41: 69:b4:06:fd:a1:63:44:38:60:a2:1b:1f:60:c7:03: 3a:09:29:b6:16:5a:bd:ac:cd:0b:97:5d:fa:b1:51: 6b:5a:05:03:8d:9d:6b:cf:9f:a7:56:be:6f:17:0a: 4c:83:29:21:8f:8e:e1:c5:de:96:d2:66:ad:1a:00: d2:7d:40:8a:f5:41:e2:39:e8:53:03:a3:bc:d8:b0: 71:55:ed:9b:82:de:9e:29:90:06:95:b6:31:c9:8d: ff:c6:53:ad:30:55:1f:38:0b:1d:0f:f7:d9:fb:d5: cb:b6:fb:fd:6b:d3:7a:f2:3d:66:6b:0f:45:b3:3b: 40:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:77:5E:68:9F:4D:28:42:21:01:AA:A0:3D:F4:D3:3B:FB:A5:8E:E6 X509v3 Authority Key Identifier: keyid:71:A4:5C:05:D7:D5:DF:9D:16:E9:C3:B0:60:75:35:DB:2B:90:6B:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:32:db:92:ec:d4:1c:56:c1:7c:b3:0a:06:f4:19:99:7c:ee: eb:26:0d:17:f1:2c:fe:ca:cc:be:8d:65:6d:e5:fb:ae:bd:2f: 37:03:da:60:f2:3e:9e:7a:ab:c0:ce:fb:59:8e:25:9b:4c:e4: 74:f0:fd:53:39:cb:3b:37:3e:4a:76:e1:71:64:fd:9b:9c:85: 80:5b:d9:9a:0c:d0:19:be:76:6a:d0:d2:b7:27:82:86:83:93: e5:3b:09:6b:e1:1a:75:dc:0f:cb:f7:11:ca:16:6d:5f:eb:aa: 1e:dc:d8:73:63:bb:26:78:45:68:f5:8d:39:cb:4c:fc:ba:78: 1e:bc:80:e9:87:fc:21:7c:e3:7b:03:20:f0:f5:02:9d:4c:26: b1:94:f9:5b:2b:eb:ae:0d:bf:86:f2:a3:c1:6c:d9:1a:a0:aa: 2f:cb:07:7a:0e:89:8d:e5:b7:32:a8:76:68:26:02:20:99:04: 32:6e:e4:0a:b5:58:fc:a3:81:14:97:0e:4e:61:56:52:1c:e0: c6:2a:3d:d0:39:ff:cb:00:12:bf:35:57:c2:4d:82:60:d0:d8: 17:1b:ad:7e:d1:49:7d:bf:7d:8f:04:cf:67:86:6d:ec:b3:ef: 8d:bd:a0:5c:b4:e7:0c:3e:6c:cf:dd:0f:47:9f:97:65:86:2a: 64:a1:c9:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZpyFkMHXZMt2g/09mreuc7LO/fIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFBNDVDMDVEN0Q1REY5RDE2RTlDM0IwNjA3NTM1REIy QjkwNkIzMjAeFw0yNjA5MjQwNDM2MjdaFw0yNjA5MjUwODA1MjdaMDMxMTAvBgNV BAMTKDY3Nzc1RTY4OUY0RDI4NDIyMTAxQUFBMDNERjREMzNCRkJBNThFRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+ht2SKRc3dK/clJuwRnNdHpjI GIgBLAG42gLNcWG129WWT/TGtVgxewkGj5iVdsLBovLA5xnB7B3/xMSrnX7PfxcY IBJm0XUyKH3d3CMbls2emYzsiPdJPy63HiUeU/k3a4c64M8Meqv181Wwizv3vd6r FD4ua+eszNsjvXsUhDsMq1KUQWm0Bv2hY0Q4YKIbH2DHAzoJKbYWWr2szQuXXfqx UWtaBQONnWvPn6dWvm8XCkyDKSGPjuHF3pbSZq0aANJ9QIr1QeI56FMDo7zYsHFV 7ZuC3p4pkAaVtjHJjf/GU60wVR84Cx0P99n71cu2+/1r03ryPWZrD0WzO0ATAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ3deaJ9NKEIhAaqgPfTTO/uljuYwHwYDVR0j BBgwFoAUcaRcBdfV350W6cOwYHU12yuQazIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzI2Y2QyNmYtZmJkYS00Y2Q4LWEwMWMtYjAxNTU1MTMwMTVmLzAvNzFBNDVDMDVE N0Q1REY5RDE2RTlDM0IwNjA3NTM1REIyQjkwNkIzMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MUE0NUMwNUQ3RDVERjlEMTZFOUMzQjA2MDc1MzVEQjJCOTA2 QjMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzI2Y2QyNmYtZmJkYS00Y2Q4LWEw MWMtYjAxNTU1MTMwMTVmLzAvNzFBNDVDMDVEN0Q1REY5RDE2RTlDM0IwNjA3NTM1 REIyQjkwNkIzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADoy25Ls1BxWwXyzCgb0GZl87usmDRfxLP7K zL6NZW3l+669LzcD2mDyPp56q8DO+1mOJZtM5HTw/VM5yzs3Pkp24XFk/ZuchYBb 2ZoM0Bm+dmrQ0rcngoaDk+U7CWvhGnXcD8v3EcoWbV/rqh7c2HNjuyZ4RWj1jTnL TPy6eB68gOmH/CF843sDIPD1Ap1MJrGU+Vsr664Nv4byo8Fs2Rqgqi/LB3oOiY3l tzKodmgmAiCZBDJu5Aq1WPyjgRSXDk5hVlIc4MYqPdA5/8sAEr81V8JNgmDQ2Bcb rX7RSX2/fY8Ez2eGbeyz7429oFy05ww+bM/dD0efl2WGKmShyTw= -----END CERTIFICATE-----Generated at Fri Sep 25 01:04:41 2026 by rpki-client