$ rpki-client -vvf rpki-rsync.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.mft File: 71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.mft (raw, json) Hash identifier: KiA6MwX2zx1eveSBkE5G+Qgdz8mmq8GOMVUlNyNqtKY= Subject key identifier: A3:43:4A:CC:A3:04:26:1D:B1:86:95:D8:2E:0F:A7:F7:0F:74:11:25 Authority key identifier: 71:B6:07:4C:81:1D:4B:60:D7:9A:64:DA:0B:9D:D3:8E:9A:E7:8B:69 Certificate issuer: /CN=71B6074C811D4B60D79A64DA0B9DD38E9AE78B69 Certificate serial: 6287E4DF72AD640557E75935FF61220CA161C7D3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:46:04 +0000 Manifest this update: Tue 12 May 2026 19:41:04 +0000 Manifest next update: Wed 13 May 2026 22:41:04 +0000 Files and hashes: 1: 3130332e3233332e3130322e302f32332d3234203d3e20313336313037.roa (hash: lwD0HUqunMfmcrBMFPjo8Wy84U1nW2Gl16rAlt9je9I=) 2: 71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.crl (hash: lH6HLTtige0tI/iI+jCgZZZ3URSzhIPk+cpnjQ6GwPM=) 3: 3130332e3131322e3234342e302f32332d3234203d3e20313336313037.roa (hash: nN+scnQd2Bf1TJPwjOUkyJEyMV9Spsgs/notSfMcxTE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.crl rsync://rpki-rsync.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:87:e4:df:72:ad:64:05:57:e7:59:35:ff:61:22:0c:a1:61:c7:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71B6074C811D4B60D79A64DA0B9DD38E9AE78B69 Validity Not Before: May 12 19:41:04 2026 GMT Not After : May 13 22:41:04 2026 GMT Subject: CN=A3434ACCA304261DB18695D82E0FA7F70F741125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:0c:91:a8:d0:4f:de:67:58:ec:65:2b:f8:c0: c3:ec:bb:5a:2a:36:ea:62:f1:bf:ea:6c:39:54:09: cd:59:ea:86:51:13:5f:0c:da:96:c8:bb:7e:0e:eb: 5a:4c:81:23:65:44:fd:a5:08:5d:70:37:ea:b3:55: a6:9c:27:78:91:b1:5b:15:5c:1e:8b:5f:89:4f:4c: 59:4a:9d:b5:bd:c5:13:e0:42:47:e8:a2:8d:1b:46: b4:36:b1:96:ad:cc:50:99:30:de:dc:22:53:89:89: 7e:2d:4c:0f:c4:3d:c8:55:9d:1c:ce:a2:30:3c:30: 2d:6d:db:c7:6f:e4:db:64:ad:6b:d8:b4:81:31:1f: cc:e2:23:22:d6:be:bc:54:dd:3e:17:65:8b:a6:c7: 03:39:ab:38:7c:03:c6:35:b0:ed:ac:ce:fb:31:9a: 62:cc:cb:86:b9:1b:e7:78:d6:d6:93:23:6d:48:e1: 7e:a9:06:5b:89:0a:42:ab:26:8a:47:77:7d:07:e0: 6f:19:36:ae:d8:69:26:63:b2:62:9a:b8:e7:c7:b5: 04:d7:30:16:58:d7:71:f3:84:5a:72:60:c3:7a:11: 0c:4a:70:e4:67:89:b6:66:07:b8:e7:3f:97:f4:2c: 90:ef:ce:24:7f:ee:9c:71:54:94:f5:88:a3:3c:75: 93:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:43:4A:CC:A3:04:26:1D:B1:86:95:D8:2E:0F:A7:F7:0F:74:11:25 X509v3 Authority Key Identifier: keyid:71:B6:07:4C:81:1D:4B:60:D7:9A:64:DA:0B:9D:D3:8E:9A:E7:8B:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:a7:e3:cd:97:8c:2d:7f:d9:66:67:1a:8e:01:70:34:18:41: bd:fb:77:95:98:eb:de:6c:32:f2:8c:02:1e:21:49:03:6a:8f: 18:5b:e6:7d:61:24:8f:58:b5:69:b9:23:6f:c1:7f:9a:e5:1d: 27:c1:58:f7:72:fb:32:9d:37:d2:6d:7e:06:52:6c:d2:22:a5: b6:25:60:37:fc:03:89:25:42:e1:dc:d4:2a:0f:91:26:c8:77: 61:5a:54:9c:3d:78:c5:46:6d:6a:4e:a0:11:79:c3:15:e5:11: fa:58:12:a4:d7:ad:b9:94:bb:40:43:51:88:98:da:98:94:ea: 4b:14:65:18:06:9f:03:cb:ec:a7:23:e6:ee:8e:29:bb:07:01: a5:19:c6:78:50:5f:a6:9c:73:7e:89:0b:e2:fd:30:8e:7a:da: 6f:a5:8e:ce:46:e7:bd:f1:e0:17:ce:d3:2e:11:e6:5d:ca:4d: 9d:f7:0e:ca:7d:3b:69:2c:c0:78:61:90:d1:30:3e:7d:ce:c1: de:f5:29:7e:df:10:f4:5d:43:d7:12:8d:08:97:85:3a:99:04: 6c:06:a9:46:27:4a:db:a4:90:52:66:53:1f:d2:7b:39:22:d8: eb:cc:d9:69:a4:02:81:10:87:0f:55:14:8f:ae:68:3d:71:47: 28:b9:b7:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYofk33KtZAVX51k1/2EiDKFhx9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFCNjA3NEM4MTFENEI2MEQ3OUE2NERBMEI5REQzOEU5 QUU3OEI2OTAeFw0yNjA1MTIxOTQxMDRaFw0yNjA1MTMyMjQxMDRaMDMxMTAvBgNV BAMTKEEzNDM0QUNDQTMwNDI2MURCMTg2OTVEODJFMEZBN0Y3MEY3NDExMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjDJGo0E/eZ1jsZSv4wMPsu1oq Nupi8b/qbDlUCc1Z6oZRE18M2pbIu34O61pMgSNlRP2lCF1wN+qzVaacJ3iRsVsV XB6LX4lPTFlKnbW9xRPgQkfooo0bRrQ2sZatzFCZMN7cIlOJiX4tTA/EPchVnRzO ojA8MC1t28dv5NtkrWvYtIExH8ziIyLWvrxU3T4XZYumxwM5qzh8A8Y1sO2szvsx mmLMy4a5G+d41taTI21I4X6pBluJCkKrJopHd30H4G8ZNq7YaSZjsmKauOfHtQTX MBZY13HzhFpyYMN6EQxKcORnibZmB7jnP5f0LJDvziR/7pxxVJT1iKM8dZMrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo0NKzKMEJh2xhpXYLg+n9w90ESUwHwYDVR0j BBgwFoAUcbYHTIEdS2DXmmTaC53Tjprni2kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWE0NzIzMWYtMDJkZC00OWU4LWFhMjUtMmQ1NGMwYTk5OWNhLzAvNzFCNjA3NEM4 MTFENEI2MEQ3OUE2NERBMEI5REQzOEU5QUU3OEI2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MUI2MDc0QzgxMUQ0QjYwRDc5QTY0REEwQjlERDM4RTlBRTc4 QjY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWE0NzIzMWYtMDJkZC00OWU4LWFh MjUtMmQ1NGMwYTk5OWNhLzAvNzFCNjA3NEM4MTFENEI2MEQ3OUE2NERBMEI5REQz OEU5QUU3OEI2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALen482XjC1/2WZnGo4BcDQYQb37d5WY695s MvKMAh4hSQNqjxhb5n1hJI9YtWm5I2/Bf5rlHSfBWPdy+zKdN9JtfgZSbNIipbYl YDf8A4klQuHc1CoPkSbId2FaVJw9eMVGbWpOoBF5wxXlEfpYEqTXrbmUu0BDUYiY 2piU6ksUZRgGnwPL7Kcj5u6OKbsHAaUZxnhQX6acc36JC+L9MI562m+ljs5G573x 4BfO0y4R5l3KTZ33Dsp9O2kswHhhkNEwPn3Owd71KX7fEPRdQ9cSjQiXhTqZBGwG qUYnStukkFJmUx/Sezki2OvM2WmkAoEQhw9VFI+uaD1xRyi5t9g= -----END CERTIFICATE-----Generated at Wed May 13 02:13:14 2026 by rpki-client