$ rpki-client -vvf rpki-rsync.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.mft File: 71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.mft (raw, json) Hash identifier: jQn/5M4pVIfcXnvM3QcXVlpFLTeAc0lUtlqu5JdSYPI= Subject key identifier: 15:73:EB:7B:5C:36:61:0F:62:9E:95:5D:60:D3:2F:D5:FC:18:2B:2D Authority key identifier: 71:B6:07:4C:81:1D:4B:60:D7:9A:64:DA:0B:9D:D3:8E:9A:E7:8B:69 Certificate issuer: /CN=71B6074C811D4B60D79A64DA0B9DD38E9AE78B69 Certificate serial: 2944CF979A4EA952B38E12DBA29C2B32294810EB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 06:17:02 +0000 Manifest this update: Fri 24 Jul 2026 06:12:02 +0000 Manifest next update: Sat 25 Jul 2026 07:21:02 +0000 Files and hashes: 1: 3130332e3131322e3234342e302f32332d3234203d3e20313336313037.roa (hash: nN+scnQd2Bf1TJPwjOUkyJEyMV9Spsgs/notSfMcxTE=) 2: 3130332e3233332e3130322e302f32332d3234203d3e20313336313037.roa (hash: lwD0HUqunMfmcrBMFPjo8Wy84U1nW2Gl16rAlt9je9I=) 3: 71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.crl (hash: SUNzdqEJmXE5W+ikEpefOF6X1+FdlxOuJmkEveZZdH8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.crl rsync://rpki-rsync.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:44:cf:97:9a:4e:a9:52:b3:8e:12:db:a2:9c:2b:32:29:48:10:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71B6074C811D4B60D79A64DA0B9DD38E9AE78B69 Validity Not Before: Jul 24 06:12:02 2026 GMT Not After : Jul 25 07:21:02 2026 GMT Subject: CN=1573EB7B5C36610F629E955D60D32FD5FC182B2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:82:a7:f5:37:bb:ab:87:47:cb:d0:d5:45:2d: c8:61:f3:d8:5e:97:af:28:35:33:c7:23:00:82:38: 3a:4c:11:60:0a:cd:93:5c:70:c4:16:3f:c4:59:e9: 4a:34:1d:91:04:55:18:10:aa:b5:8f:6a:64:a8:a8: c5:d5:f9:ed:08:56:d2:9e:f0:11:37:e5:93:33:15: f0:2c:65:8a:b8:90:86:3c:38:1d:ae:3f:82:f7:87: bc:cd:5b:b3:78:da:bb:56:05:28:1a:cb:0d:7a:aa: 21:ba:0b:b4:3a:3c:77:6d:37:52:12:d8:18:f3:d6: fa:39:c6:02:c9:89:7b:7a:af:2a:df:f1:a3:5d:0a: 7e:2a:9f:c7:a8:8a:da:02:28:19:94:99:17:bd:88: 5c:e5:7f:c3:18:e5:fc:46:45:44:fe:14:91:77:dd: 64:53:dd:7b:d6:30:6b:63:91:69:ae:48:6f:c5:1a: 91:39:e4:c6:f6:40:35:7c:bd:45:09:e2:57:8a:03: 52:f0:82:d5:b9:fe:67:0b:e3:35:d8:0f:b1:ed:be: 1d:67:55:8d:0e:77:b0:a8:a4:40:93:f2:82:fd:04: 92:c5:19:24:40:29:36:9a:92:0c:e3:db:b7:09:8a: 13:08:05:c7:11:bc:30:23:3e:c8:19:76:92:62:11: d5:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:73:EB:7B:5C:36:61:0F:62:9E:95:5D:60:D3:2F:D5:FC:18:2B:2D X509v3 Authority Key Identifier: keyid:71:B6:07:4C:81:1D:4B:60:D7:9A:64:DA:0B:9D:D3:8E:9A:E7:8B:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:7d:ff:9d:72:72:ee:34:84:fb:f8:4a:d3:4c:18:f0:a7:f6: 36:bf:3b:dc:e0:c8:ab:e5:47:c9:a4:72:53:d0:25:6f:13:99: 2c:65:80:72:ac:d4:bd:48:42:cc:92:65:c2:74:17:84:28:46: de:4d:ac:12:b1:ce:17:a0:96:f3:a0:7b:05:bf:e8:c2:86:fb: f1:20:2b:5c:43:4b:49:cf:85:1c:36:79:43:70:72:e7:b6:8b: 1b:35:f8:a9:00:be:5e:b4:a4:9b:e0:92:04:17:45:f8:db:2e: 3b:b4:a0:df:0b:94:ef:93:ba:9a:73:4f:7b:50:23:c5:0d:28: b4:79:d0:e8:b9:e0:b4:10:ec:cd:48:f3:28:42:37:57:d3:21: d3:b3:75:19:90:ee:24:de:64:50:19:f3:3d:83:d2:99:96:1b: c8:72:aa:63:d9:aa:b5:cb:7a:b7:c3:b1:a3:69:ff:5e:e5:4d: 95:71:5e:0e:d8:2b:c0:ef:83:ba:57:e8:26:c7:c6:c2:51:ce: 0f:7d:78:4e:3c:7a:87:ec:ae:96:e5:0e:4c:42:91:5b:a0:38: b4:6c:a9:3d:be:e1:4a:a4:59:2f:b4:10:86:88:5e:19:e7:e8: 7c:00:57:83:a5:43:c2:03:cd:dd:18:f0:4b:6b:d7:18:8c:ae: 86:2d:0f:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKUTPl5pOqVKzjhLbopwrMilIEOswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFCNjA3NEM4MTFENEI2MEQ3OUE2NERBMEI5REQzOEU5 QUU3OEI2OTAeFw0yNjA3MjQwNjEyMDJaFw0yNjA3MjUwNzIxMDJaMDMxMTAvBgNV BAMTKDE1NzNFQjdCNUMzNjYxMEY2MjlFOTU1RDYwRDMyRkQ1RkMxODJCMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXgqf1N7urh0fL0NVFLchh89he l68oNTPHIwCCODpMEWAKzZNccMQWP8RZ6Uo0HZEEVRgQqrWPamSoqMXV+e0IVtKe 8BE35ZMzFfAsZYq4kIY8OB2uP4L3h7zNW7N42rtWBSgayw16qiG6C7Q6PHdtN1IS 2Bjz1vo5xgLJiXt6ryrf8aNdCn4qn8eoitoCKBmUmRe9iFzlf8MY5fxGRUT+FJF3 3WRT3XvWMGtjkWmuSG/FGpE55Mb2QDV8vUUJ4leKA1LwgtW5/mcL4zXYD7Htvh1n VY0Od7CopECT8oL9BJLFGSRAKTaakgzj27cJihMIBccRvDAjPsgZdpJiEdWHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFXPre1w2YQ9inpVdYNMv1fwYKy0wHwYDVR0j BBgwFoAUcbYHTIEdS2DXmmTaC53Tjprni2kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWE0NzIzMWYtMDJkZC00OWU4LWFhMjUtMmQ1NGMwYTk5OWNhLzAvNzFCNjA3NEM4 MTFENEI2MEQ3OUE2NERBMEI5REQzOEU5QUU3OEI2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MUI2MDc0QzgxMUQ0QjYwRDc5QTY0REEwQjlERDM4RTlBRTc4 QjY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWE0NzIzMWYtMDJkZC00OWU4LWFh MjUtMmQ1NGMwYTk5OWNhLzAvNzFCNjA3NEM4MTFENEI2MEQ3OUE2NERBMEI5REQz OEU5QUU3OEI2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALt9/51ycu40hPv4StNMGPCn9ja/O9zgyKvl R8mkclPQJW8TmSxlgHKs1L1IQsySZcJ0F4QoRt5NrBKxzheglvOgewW/6MKG+/Eg K1xDS0nPhRw2eUNwcue2ixs1+KkAvl60pJvgkgQXRfjbLju0oN8LlO+TuppzT3tQ I8UNKLR50Oi54LQQ7M1I8yhCN1fTIdOzdRmQ7iTeZFAZ8z2D0pmWG8hyqmPZqrXL erfDsaNp/17lTZVxXg7YK8Dvg7pX6CbHxsJRzg99eE48eofsrpblDkxCkVugOLRs qT2+4UqkWS+0EIaIXhnn6HwAV4OlQ8IDzd0Y8Etr1xiMroYtD/c= -----END CERTIFICATE-----Generated at Fri Jul 24 10:02:46 2026 by rpki-client