$ rpki-client -vvf rpki-rsync.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.mft File: 71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.mft (raw, json) Hash identifier: IrrLdbLRoTMW4K4uZh+5/zRcmiJVXpvn+rEM85j9Rgs= Subject key identifier: 4D:D4:80:79:81:A3:B5:CD:A3:F3:FD:68:C4:32:82:76:D0:5F:4F:1B Authority key identifier: 71:A4:5C:05:D7:D5:DF:9D:16:E9:C3:B0:60:75:35:DB:2B:90:6B:32 Certificate issuer: /CN=71A45C05D7D5DF9D16E9C3B0607535DB2B906B32 Certificate serial: 2A9662015AA73883AC0D8F591BFA9EA7D116E061 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 13:00:54 +0000 Manifest this update: Thu 23 Jul 2026 12:55:54 +0000 Manifest next update: Fri 24 Jul 2026 15:55:54 +0000 Files and hashes: 1: 71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.crl (hash: THh1i0itQs6TRQUwRI73sW24gN8bPFXBkqJwWBT+iVY=) 2: 3130332e35362e39322e302f32342d3234203d3e203538343737.roa (hash: d1IJ4T81r3K/uk2231YZmItFa5G4LBBNAf/1wVmUa9c=) 3: 3130332e35362e39332e302f32342d3234203d3e203538343737.roa (hash: vqVbxn6Wjao5k2JYe2+RI+TcQAfRr5R7zs7bd5wdsLk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.crl rsync://rpki-rsync.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 15:55:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:96:62:01:5a:a7:38:83:ac:0d:8f:59:1b:fa:9e:a7:d1:16:e0:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71A45C05D7D5DF9D16E9C3B0607535DB2B906B32 Validity Not Before: Jul 23 12:55:54 2026 GMT Not After : Jul 24 15:55:54 2026 GMT Subject: CN=4DD4807981A3B5CDA3F3FD68C4328276D05F4F1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:90:18:52:70:44:f2:ad:fc:1f:45:99:5e:bd: 48:4d:49:10:e1:f4:dc:04:1e:a6:11:e2:ec:fe:90: 1e:38:81:49:ac:ca:1d:3d:08:dc:fd:f4:e5:54:20: e7:00:e8:4c:6a:38:29:7a:eb:65:95:15:c7:af:52: dc:de:08:24:b5:8b:ec:6a:40:01:b3:1d:7f:9c:b4: 1a:d2:62:69:df:ad:7c:d7:09:c7:65:0a:35:4a:b8: a4:03:bf:0b:48:96:e0:6b:d7:c9:02:50:4a:1e:ab: af:ec:98:9d:56:64:a8:dc:84:4b:cd:05:16:ea:e6: 8b:ac:7b:36:41:71:b5:e0:e2:5f:a3:49:d6:0a:9c: 1a:e3:54:78:82:9e:5d:4a:6c:95:48:66:96:96:f2: a8:89:ea:4e:5f:cc:18:a7:8f:2d:fe:57:01:77:83: 06:24:94:8b:b9:2b:8c:b2:d1:5a:f0:a7:0c:76:45: 5b:d5:91:42:f2:23:04:3d:c7:16:34:37:a7:ab:b0: 91:a0:9d:64:69:f2:7e:bb:67:6b:48:a9:7a:27:fd: a6:07:6b:06:eb:85:51:4b:2e:aa:9c:1a:6e:32:b2: d3:5c:75:ab:a4:9b:b9:b4:47:0c:70:76:5f:4d:98: fe:4e:ab:7f:49:0a:93:b6:38:2b:ce:99:b3:e5:7e: a2:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:D4:80:79:81:A3:B5:CD:A3:F3:FD:68:C4:32:82:76:D0:5F:4F:1B X509v3 Authority Key Identifier: keyid:71:A4:5C:05:D7:D5:DF:9D:16:E9:C3:B0:60:75:35:DB:2B:90:6B:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:02:1f:c9:91:b4:74:c0:5b:6f:28:b1:95:df:6e:44:32:7a: e9:02:35:d5:59:e5:a6:d8:12:ee:c1:3c:36:35:64:a7:22:91: 30:6c:a3:c2:5d:55:bf:76:3c:70:54:6d:cf:dd:db:a8:62:a8: 10:9c:0e:e8:2d:d0:15:c7:4d:9f:9f:88:04:61:0f:44:96:f4: 3c:7d:a2:52:79:85:df:dc:f8:d2:2a:95:b7:25:da:65:ac:5b: d2:77:8f:42:33:f0:f4:58:8c:50:12:af:7e:7c:12:d1:27:6e: c0:91:bd:9c:f1:47:22:66:54:af:6b:3d:d4:9f:af:2b:7e:53: 55:60:ab:b6:cf:31:27:59:b7:59:2f:9b:8b:30:a9:dd:1a:8d: 5b:44:dc:87:62:da:35:b5:59:af:a4:94:73:61:2e:d3:84:04: 9b:0a:f2:95:b1:47:6f:68:3a:1f:12:c4:c5:53:a5:11:db:2a: 70:3b:2b:b8:2b:bc:f0:2b:ca:80:72:5e:44:a5:6b:62:43:f4: c6:a5:26:e5:e9:d6:12:5a:4a:6a:2d:7c:1b:bd:2a:3a:67:d1: b0:ca:c7:76:3a:9d:32:a4:d5:02:c9:dc:9f:6f:4d:7a:19:42: 84:76:4c:7d:ea:62:4e:e7:28:5a:f1:e5:2a:4a:e2:e7:6b:f1: 14:76:70:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKpZiAVqnOIOsDY9ZG/qep9EW4GEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFBNDVDMDVEN0Q1REY5RDE2RTlDM0IwNjA3NTM1REIy QjkwNkIzMjAeFw0yNjA3MjMxMjU1NTRaFw0yNjA3MjQxNTU1NTRaMDMxMTAvBgNV BAMTKDRERDQ4MDc5ODFBM0I1Q0RBM0YzRkQ2OEM0MzI4Mjc2RDA1RjRGMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCukBhScETyrfwfRZlevUhNSRDh 9NwEHqYR4uz+kB44gUmsyh09CNz99OVUIOcA6ExqOCl662WVFcevUtzeCCS1i+xq QAGzHX+ctBrSYmnfrXzXCcdlCjVKuKQDvwtIluBr18kCUEoeq6/smJ1WZKjchEvN BRbq5ousezZBcbXg4l+jSdYKnBrjVHiCnl1KbJVIZpaW8qiJ6k5fzBinjy3+VwF3 gwYklIu5K4yy0Vrwpwx2RVvVkULyIwQ9xxY0N6ersJGgnWRp8n67Z2tIqXon/aYH awbrhVFLLqqcGm4ystNcdaukm7m0Rwxwdl9NmP5Oq39JCpO2OCvOmbPlfqIFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTdSAeYGjtc2j8/1oxDKCdtBfTxswHwYDVR0j BBgwFoAUcaRcBdfV350W6cOwYHU12yuQazIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzI2Y2QyNmYtZmJkYS00Y2Q4LWEwMWMtYjAxNTU1MTMwMTVmLzAvNzFBNDVDMDVE N0Q1REY5RDE2RTlDM0IwNjA3NTM1REIyQjkwNkIzMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MUE0NUMwNUQ3RDVERjlEMTZFOUMzQjA2MDc1MzVEQjJCOTA2 QjMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzI2Y2QyNmYtZmJkYS00Y2Q4LWEw MWMtYjAxNTU1MTMwMTVmLzAvNzFBNDVDMDVEN0Q1REY5RDE2RTlDM0IwNjA3NTM1 REIyQjkwNkIzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ4CH8mRtHTAW28osZXfbkQyeukCNdVZ5abY Eu7BPDY1ZKcikTBso8JdVb92PHBUbc/d26hiqBCcDugt0BXHTZ+fiARhD0SW9Dx9 olJ5hd/c+NIqlbcl2mWsW9J3j0Iz8PRYjFASr358EtEnbsCRvZzxRyJmVK9rPdSf ryt+U1Vgq7bPMSdZt1kvm4swqd0ajVtE3Idi2jW1Wa+klHNhLtOEBJsK8pWxR29o Oh8SxMVTpRHbKnA7K7grvPAryoByXkSla2JD9MalJuXp1hJaSmotfBu9Kjpn0bDK x3Y6nTKk1QLJ3J9vTXoZQoR2TH3qYk7nKFrx5SpK4udr8RR2cNE= -----END CERTIFICATE-----Generated at Fri Jul 24 01:23:13 2026 by rpki-client