$ rpki-client -vvf rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.mft File: F71AC7E6F0D6271DD977776557E16AE02A4AD77C.mft (raw, json) Hash identifier: XQIcCEOzEsd2o3pOpKkdTyT/paHwGpJSg06UmiYLMqE= Subject key identifier: 5A:5F:F4:6D:05:FC:53:B8:F8:8F:F0:33:13:98:15:D5:BC:6E:0F:B1 Authority key identifier: F7:1A:C7:E6:F0:D6:27:1D:D9:77:77:65:57:E1:6A:E0:2A:4A:D7:7C Certificate issuer: /CN=F71AC7E6F0D6271DD977776557E16AE02A4AD77C Certificate serial: 2F36E924D1DCA07DE6021D6DBF39F660D826684B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:25:26 +0000 Manifest this update: Tue 12 May 2026 19:20:26 +0000 Manifest next update: Wed 13 May 2026 22:54:26 +0000 Files and hashes: 1: F71AC7E6F0D6271DD977776557E16AE02A4AD77C.crl (hash: ES4/Z/HXzi/9GSHV90CM2qC5Bxys4eCBtR301zlWHlw=) 2: 323030313a6466333a393263303a3a2f34382d3438203d3e20313532343231.roa (hash: IbtvV4jtC6vMhj+esxB6AgoSBLjpNUY18dIXWSiEQx4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.crl rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:36:e9:24:d1:dc:a0:7d:e6:02:1d:6d:bf:39:f6:60:d8:26:68:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F71AC7E6F0D6271DD977776557E16AE02A4AD77C Validity Not Before: May 12 19:20:26 2026 GMT Not After : May 13 22:54:26 2026 GMT Subject: CN=5A5FF46D05FC53B8F88FF033139815D5BC6E0FB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:77:3d:ce:81:92:71:af:c3:c7:7d:26:4e:71: e3:9d:ae:bc:ce:7d:0d:20:5c:60:59:ce:23:37:bc: 06:7f:d4:8a:91:71:38:fd:e0:e6:69:aa:64:cb:7f: ee:07:73:12:dc:93:dd:31:3f:b1:01:04:ca:fd:d1: e4:39:54:38:a6:7d:d8:83:60:71:70:e8:9d:ef:c4: 86:56:bb:35:83:dc:80:9d:38:f3:25:39:21:26:3a: f2:64:2e:5a:05:52:34:ff:bc:1b:63:5e:ba:cc:8a: 05:34:5a:92:ff:99:b7:69:b3:0c:46:6d:ad:5e:06: af:4b:df:1a:bc:2c:30:ce:dc:b5:3d:e4:19:43:b7: b4:a3:a8:56:8b:f8:b9:70:eb:7c:37:4c:31:ad:ac: 69:9f:e0:01:39:03:08:39:ee:43:39:d0:7c:bf:e4: 4d:65:5d:83:05:65:f1:62:a6:b3:76:91:d9:9b:13: c8:02:a5:48:01:35:71:68:55:6f:3e:5a:08:c5:79: 67:de:1e:6e:de:70:4e:b8:ef:02:d3:d4:b9:11:47: 2d:e6:0a:29:22:9a:40:4b:b9:23:8a:61:68:a7:a9: 11:04:d4:fc:61:f5:23:b2:84:bf:58:e4:94:88:01: 90:3c:9c:f9:02:96:2e:c6:14:6b:7a:e4:6b:f4:b4: 15:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:5F:F4:6D:05:FC:53:B8:F8:8F:F0:33:13:98:15:D5:BC:6E:0F:B1 X509v3 Authority Key Identifier: keyid:F7:1A:C7:E6:F0:D6:27:1D:D9:77:77:65:57:E1:6A:E0:2A:4A:D7:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:bb:62:41:3c:9f:95:80:63:f5:3e:62:6c:f2:59:fa:1c:2d: 55:ee:30:40:64:4a:5e:72:33:db:39:d2:8e:dd:c3:2a:88:9c: 14:05:a5:a8:84:a1:65:eb:ae:4b:24:48:a8:cd:ab:2b:3a:eb: c2:57:0f:54:80:91:ff:63:5e:59:b5:d3:76:1f:11:e9:c2:15: e4:46:2e:7e:42:d7:bc:b3:cc:7d:25:64:c9:bc:80:c8:f3:ae: 8d:9d:30:ee:f7:d5:0f:76:f7:8b:f4:ea:b0:bf:b0:a5:1f:24: 73:c2:fb:1c:dd:e7:85:6a:ac:d9:cc:f6:91:e5:b3:66:be:01: 48:bc:49:ac:24:6b:a4:28:6b:c1:e4:60:f1:92:4e:f4:eb:69: d8:ae:b5:63:9c:25:65:df:38:99:6d:9e:4c:0d:94:dc:1a:9c: 8e:1e:5f:4a:91:74:4d:7b:e4:6e:92:d0:49:00:e3:28:2a:56: 9a:34:a2:d4:b3:0c:66:01:cf:bd:aa:11:ae:58:3c:63:95:f4: 25:af:ee:16:96:0d:19:6f:03:eb:58:6f:9a:66:f6:3d:2c:b4: 0e:d5:3f:de:20:f8:1a:41:09:78:3b:c2:c8:3f:8d:54:eb:f4: 2d:48:0b:fa:cb:90:29:b9:4b:44:c3:27:d3:fb:fd:ab:c3:4d: b4:60:39:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULzbpJNHcoH3mAh1tvzn2YNgmaEswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjcxQUM3RTZGMEQ2MjcxREQ5Nzc3NzY1NTdFMTZBRTAy QTRBRDc3QzAeFw0yNjA1MTIxOTIwMjZaFw0yNjA1MTMyMjU0MjZaMDMxMTAvBgNV BAMTKDVBNUZGNDZEMDVGQzUzQjhGODhGRjAzMzEzOTgxNUQ1QkM2RTBGQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGdz3OgZJxr8PHfSZOceOdrrzO fQ0gXGBZziM3vAZ/1IqRcTj94OZpqmTLf+4HcxLck90xP7EBBMr90eQ5VDimfdiD YHFw6J3vxIZWuzWD3ICdOPMlOSEmOvJkLloFUjT/vBtjXrrMigU0WpL/mbdpswxG ba1eBq9L3xq8LDDO3LU95BlDt7SjqFaL+Llw63w3TDGtrGmf4AE5Awg57kM50Hy/ 5E1lXYMFZfFiprN2kdmbE8gCpUgBNXFoVW8+WgjFeWfeHm7ecE647wLT1LkRRy3m CikimkBLuSOKYWinqREE1Pxh9SOyhL9Y5JSIAZA8nPkCli7GFGt65Gv0tBUxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWl/0bQX8U7j4j/AzE5gV1bxuD7EwHwYDVR0j BBgwFoAU9xrH5vDWJx3Zd3dlV+Fq4CpK13wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWE0Zjc5MzQtY2RjNy00MDgyLTgzZmItZGY3ZDRmODIxOWFmLzEvRjcxQUM3RTZG MEQ2MjcxREQ5Nzc3NzY1NTdFMTZBRTAyQTRBRDc3Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GNzFBQzdFNkYwRDYyNzFERDk3Nzc3NjU1N0UxNkFFMDJBNEFE NzdDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWE0Zjc5MzQtY2RjNy00MDgyLTgz ZmItZGY3ZDRmODIxOWFmLzEvRjcxQUM3RTZGMEQ2MjcxREQ5Nzc3NzY1NTdFMTZB RTAyQTRBRDc3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAy7YkE8n5WAY/U+YmzyWfocLVXuMEBkSl5y M9s50o7dwyqInBQFpaiEoWXrrkskSKjNqys668JXD1SAkf9jXlm103YfEenCFeRG Ln5C17yzzH0lZMm8gMjzro2dMO731Q9294v06rC/sKUfJHPC+xzd54VqrNnM9pHl s2a+AUi8Sawka6Qoa8HkYPGSTvTradiutWOcJWXfOJltnkwNlNwanI4eX0qRdE17 5G6S0EkA4ygqVpo0otSzDGYBz72qEa5YPGOV9CWv7haWDRlvA+tYb5pm9j0stA7V P94g+BpBCXg7wsg/jVTr9C1IC/rLkCm5S0TDJ9P7/avDTbRgOdo= -----END CERTIFICATE-----Generated at Wed May 13 01:38:30 2026 by rpki-client