$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.mft File: 71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.mft (raw, json) Hash identifier: 6aUHah5tUf0pJpT8uv1hqulDkVHhoVA1CBKosTCUPjM= Subject key identifier: 6A:23:B1:5B:D5:20:31:26:E7:66:72:40:92:25:2A:47:A4:DC:5E:89 Authority key identifier: 71:B6:07:4C:81:1D:4B:60:D7:9A:64:DA:0B:9D:D3:8E:9A:E7:8B:69 Certificate issuer: /CN=71B6074C811D4B60D79A64DA0B9DD38E9AE78B69 Certificate serial: 6BEDC9361B1111013B28156B93B36012E955EDC5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 03:55:29 +0000 Manifest this update: Thu 24 Sep 2026 03:50:29 +0000 Manifest next update: Fri 25 Sep 2026 06:14:29 +0000 Files and hashes: 1: 71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.crl (hash: 2NB2uJcBpLUDu3dr+kQ63Aehoibv+vVF9WpX6qtgUkw=) 2: 3130332e3131322e3234342e302f32332d3234203d3e20313336313037.roa (hash: nN+scnQd2Bf1TJPwjOUkyJEyMV9Spsgs/notSfMcxTE=) 3: 3130332e3233332e3130322e302f32332d3234203d3e20313336313037.roa (hash: lwD0HUqunMfmcrBMFPjo8Wy84U1nW2Gl16rAlt9je9I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.crl rsync://rpki-rsync.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 05:55:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:ed:c9:36:1b:11:11:01:3b:28:15:6b:93:b3:60:12:e9:55:ed:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71B6074C811D4B60D79A64DA0B9DD38E9AE78B69 Validity Not Before: Sep 24 03:50:29 2026 GMT Not After : Sep 25 06:14:29 2026 GMT Subject: CN=6A23B15BD5203126E766724092252A47A4DC5E89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:0a:68:c0:8a:ab:c8:e0:e6:01:c2:e3:91:db: 1f:2c:d8:34:a8:08:86:ba:de:7f:2a:cd:0d:6f:d4: 33:8c:b8:1f:17:e9:de:fd:b4:a0:ae:49:4a:69:79: 07:82:62:17:c2:00:3f:8f:d7:ee:27:40:3f:f4:06: 18:3f:c2:c8:67:71:ee:08:aa:1c:96:a0:9d:13:86: c2:0f:24:a5:c4:e5:9d:f0:06:60:91:02:9d:ab:17: 9d:e9:fc:68:ed:39:34:c9:2a:07:20:da:f6:c5:e2: dd:7d:97:77:6a:c2:f4:e7:c3:84:a6:9c:48:89:5e: 29:2e:84:7a:ea:9b:7b:60:43:fa:93:7b:c1:09:ad: 5c:ca:a8:45:a9:3a:25:9b:03:70:e3:c5:5c:90:a6: 35:33:f2:32:4e:d4:07:b6:2d:0c:30:c6:16:30:b0: 0b:c7:62:c0:32:53:6c:18:ac:ae:85:99:8d:a8:c3: 07:40:d0:f0:65:30:68:2d:8a:97:99:76:04:13:5b: 77:63:33:4e:16:e4:0c:1b:f4:6e:53:56:55:57:72: 43:db:35:a8:d0:e3:33:73:21:97:cf:e4:7d:c5:6f: f9:1d:43:92:a7:91:44:7b:9f:2e:83:da:12:9c:40: 46:0f:fd:f6:15:5d:ce:b2:db:ea:ae:66:13:df:d6: 57:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:23:B1:5B:D5:20:31:26:E7:66:72:40:92:25:2A:47:A4:DC:5E:89 X509v3 Authority Key Identifier: keyid:71:B6:07:4C:81:1D:4B:60:D7:9A:64:DA:0B:9D:D3:8E:9A:E7:8B:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:66:9f:44:9d:1a:99:12:80:f0:ad:23:cb:1d:36:47:f1:b0: 79:29:b9:0b:10:13:0c:24:3e:ca:0a:92:66:47:04:b8:84:7e: 00:62:77:ed:96:25:38:08:01:81:3f:78:24:5c:0e:37:9c:93: aa:7a:a6:ff:2f:30:96:d3:53:1e:c3:dd:6f:ab:ef:45:e6:be: ad:3e:4d:2d:6c:6c:e3:cb:6d:af:46:a1:7f:19:38:67:48:ff: f3:a1:df:85:96:ce:3b:2a:38:b9:22:d7:e1:86:d2:76:9e:f9: 1e:6c:76:28:17:54:e2:1a:f0:f6:98:e2:54:da:93:f1:8e:4e: 57:24:21:e3:6d:36:90:09:57:6e:29:2b:85:c6:c4:35:ad:41: 42:86:75:4f:01:4d:e1:c7:ff:8b:a9:29:17:11:6f:02:06:6d: 1c:df:c8:ba:d0:ad:39:2d:74:21:54:84:af:f3:ba:29:51:db: a0:ba:98:83:cc:83:a1:a7:ae:b5:32:25:e9:11:36:7e:9d:eb: bb:83:da:8c:31:61:01:44:44:9f:05:f1:8a:0e:3f:c4:d6:11: e1:70:b6:d9:d5:fb:f9:2d:cb:82:c0:d4:64:55:34:a2:17:83: 15:fc:de:2f:ad:5d:57:30:40:75:ec:a0:ec:c5:f7:dc:9c:df: cf:95:6e:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa+3JNhsREQE7KBVrk7NgEulV7cUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFCNjA3NEM4MTFENEI2MEQ3OUE2NERBMEI5REQzOEU5 QUU3OEI2OTAeFw0yNjA5MjQwMzUwMjlaFw0yNjA5MjUwNjE0MjlaMDMxMTAvBgNV BAMTKDZBMjNCMTVCRDUyMDMxMjZFNzY2NzI0MDkyMjUyQTQ3QTREQzVFODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfCmjAiqvI4OYBwuOR2x8s2DSo CIa63n8qzQ1v1DOMuB8X6d79tKCuSUppeQeCYhfCAD+P1+4nQD/0Bhg/wshnce4I qhyWoJ0ThsIPJKXE5Z3wBmCRAp2rF53p/GjtOTTJKgcg2vbF4t19l3dqwvTnw4Sm nEiJXikuhHrqm3tgQ/qTe8EJrVzKqEWpOiWbA3DjxVyQpjUz8jJO1Ae2LQwwxhYw sAvHYsAyU2wYrK6FmY2owwdA0PBlMGgtipeZdgQTW3djM04W5Awb9G5TVlVXckPb NajQ4zNzIZfP5H3Fb/kdQ5KnkUR7ny6D2hKcQEYP/fYVXc6y2+quZhPf1ldlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaiOxW9UgMSbnZnJAkiUqR6TcXokwHwYDVR0j BBgwFoAUcbYHTIEdS2DXmmTaC53Tjprni2kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWE0NzIzMWYtMDJkZC00OWU4LWFhMjUtMmQ1NGMwYTk5OWNhLzAvNzFCNjA3NEM4 MTFENEI2MEQ3OUE2NERBMEI5REQzOEU5QUU3OEI2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MUI2MDc0QzgxMUQ0QjYwRDc5QTY0REEwQjlERDM4RTlBRTc4 QjY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWE0NzIzMWYtMDJkZC00OWU4LWFh MjUtMmQ1NGMwYTk5OWNhLzAvNzFCNjA3NEM4MTFENEI2MEQ3OUE2NERBMEI5REQz OEU5QUU3OEI2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFBmn0SdGpkSgPCtI8sdNkfxsHkpuQsQEwwk PsoKkmZHBLiEfgBid+2WJTgIAYE/eCRcDjeck6p6pv8vMJbTUx7D3W+r70Xmvq0+ TS1sbOPLba9GoX8ZOGdI//Oh34WWzjsqOLki1+GG0nae+R5sdigXVOIa8PaY4lTa k/GOTlckIeNtNpAJV24pK4XGxDWtQUKGdU8BTeHH/4upKRcRbwIGbRzfyLrQrTkt dCFUhK/zuilR26C6mIPMg6GnrrUyJekRNn6d67uD2owxYQFERJ8F8YoOP8TWEeFw ttnV+/kty4LA1GRVNKIXgxX83i+tXVcwQHXsoOzF99yc38+VbqY= -----END CERTIFICATE-----Generated at Thu Sep 24 09:39:15 2026 by rpki-client