$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.mft File: F71AC7E6F0D6271DD977776557E16AE02A4AD77C.mft (raw, json) Hash identifier: IT1sPvP6pJOTGLNONKehmZ4Z/pq4xOKAoI7NoDaRG08= Subject key identifier: 5B:76:22:FD:58:D9:05:49:BA:35:DB:57:C2:95:76:6A:AD:AC:10:21 Authority key identifier: F7:1A:C7:E6:F0:D6:27:1D:D9:77:77:65:57:E1:6A:E0:2A:4A:D7:7C Certificate issuer: /CN=F71AC7E6F0D6271DD977776557E16AE02A4AD77C Certificate serial: 13B074F6444CB3F1ADF3708C99B7C21DA19A5F83 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 14:54:34 +0000 Manifest this update: Wed 23 Sep 2026 14:49:34 +0000 Manifest next update: Thu 24 Sep 2026 16:49:34 +0000 Files and hashes: 1: 323030313a6466333a393263303a3a2f34382d3438203d3e20313532343231.roa (hash: IbtvV4jtC6vMhj+esxB6AgoSBLjpNUY18dIXWSiEQx4=) 2: F71AC7E6F0D6271DD977776557E16AE02A4AD77C.crl (hash: JDZxi8qpFCay/TnTQl+cq3piKNkBfg8QFyTvsclgWPQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.crl rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 16:49:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:b0:74:f6:44:4c:b3:f1:ad:f3:70:8c:99:b7:c2:1d:a1:9a:5f:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F71AC7E6F0D6271DD977776557E16AE02A4AD77C Validity Not Before: Sep 23 14:49:34 2026 GMT Not After : Sep 24 16:49:34 2026 GMT Subject: CN=5B7622FD58D90549BA35DB57C295766AADAC1021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5b:e1:5e:55:fa:ce:76:5c:7e:91:99:da:4e: 9d:14:a5:12:c4:d8:d7:47:33:dd:2f:c0:eb:9f:40: e3:bb:79:bf:1d:f9:c5:e4:17:ab:58:45:94:4c:73: 0e:ff:70:e2:3b:48:7e:0a:5d:80:58:bd:22:fe:7c: b5:04:e6:32:af:4f:2c:c5:05:37:aa:9e:94:87:a2: 24:ba:0f:f6:e4:df:fc:a3:f6:b6:ad:e8:f3:a6:cf: c0:b4:27:59:74:39:d0:d3:2b:a7:fb:33:7b:c4:e1: c3:e8:99:79:a6:63:d6:20:88:0d:fb:18:ca:7e:6e: 74:32:10:8f:f7:51:62:f2:34:f0:94:63:30:ad:26: 7b:d3:78:ec:40:30:fa:ca:e0:a5:36:be:09:e7:1c: e6:63:ca:3f:c0:88:2a:51:78:15:11:07:0d:e7:62: 42:17:7e:eb:0f:d7:d2:ff:c8:a7:19:6d:3a:ab:b0: 3f:08:a2:94:29:5f:bf:af:94:81:93:2c:8f:a5:ac: 1f:4a:5d:96:c1:c9:4d:b8:e3:ec:15:03:79:f5:fe: 39:e2:2c:22:b7:03:5d:e4:af:ed:be:7d:0b:02:11: 5e:41:c4:59:10:b3:46:8e:f3:9f:2e:cd:2e:23:e9: 37:58:e0:0d:59:91:05:ef:cd:f5:1a:b2:74:4c:83: 01:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:76:22:FD:58:D9:05:49:BA:35:DB:57:C2:95:76:6A:AD:AC:10:21 X509v3 Authority Key Identifier: keyid:F7:1A:C7:E6:F0:D6:27:1D:D9:77:77:65:57:E1:6A:E0:2A:4A:D7:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:43:ca:64:5a:c0:0a:21:67:e7:d5:3b:df:5e:33:7f:d9:33: 6c:b5:87:31:ef:95:46:98:a4:56:6f:c3:f3:7f:de:7c:ff:ad: 4d:19:19:a9:bc:f8:71:8c:77:37:4d:84:51:e0:50:98:a5:fc: 7d:9e:b8:aa:6f:a7:8a:27:13:b0:8b:62:c0:d1:ba:41:ae:f7: eb:ba:bb:c2:88:1e:f8:2e:66:15:0a:0f:70:0a:7a:d4:d4:5d: e7:c1:0b:a0:9e:83:c1:6a:f4:ee:bf:42:40:f6:c2:cf:6e:d4: 5a:bc:fb:cd:65:c1:0a:31:c8:68:a3:eb:42:d7:2b:49:fe:2e: ea:aa:36:02:f6:f3:59:43:a0:05:0d:fd:0b:03:81:4a:aa:62: 8c:db:77:41:64:8f:6d:f0:42:5d:9f:71:04:65:18:dc:12:d7: b7:63:8e:17:db:de:f0:b9:8a:65:bc:14:c1:f5:15:4b:cf:37: 8d:6f:a0:80:75:b1:87:5c:5e:96:b7:f6:48:1c:ea:93:97:f4: 67:a9:dc:88:29:af:53:20:de:6d:6d:0f:03:bc:83:40:62:1b: 13:55:f5:ac:d5:0b:23:70:56:ea:68:82:4b:fe:5f:9c:74:0d: 84:6b:0f:c6:61:b9:73:28:b5:4f:ce:ba:30:40:da:c1:01:e6: 35:3c:28:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE7B09kRMs/Gt83CMmbfCHaGaX4MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjcxQUM3RTZGMEQ2MjcxREQ5Nzc3NzY1NTdFMTZBRTAy QTRBRDc3QzAeFw0yNjA5MjMxNDQ5MzRaFw0yNjA5MjQxNjQ5MzRaMDMxMTAvBgNV BAMTKDVCNzYyMkZENThEOTA1NDlCQTM1REI1N0MyOTU3NjZBQURBQzEwMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7W+FeVfrOdlx+kZnaTp0UpRLE 2NdHM90vwOufQOO7eb8d+cXkF6tYRZRMcw7/cOI7SH4KXYBYvSL+fLUE5jKvTyzF BTeqnpSHoiS6D/bk3/yj9rat6POmz8C0J1l0OdDTK6f7M3vE4cPomXmmY9YgiA37 GMp+bnQyEI/3UWLyNPCUYzCtJnvTeOxAMPrK4KU2vgnnHOZjyj/AiCpReBURBw3n YkIXfusP19L/yKcZbTqrsD8IopQpX7+vlIGTLI+lrB9KXZbByU244+wVA3n1/jni LCK3A13kr+2+fQsCEV5BxFkQs0aO858uzS4j6TdY4A1ZkQXvzfUasnRMgwGjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW3Yi/VjZBUm6NdtXwpV2aq2sECEwHwYDVR0j BBgwFoAU9xrH5vDWJx3Zd3dlV+Fq4CpK13wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWE0Zjc5MzQtY2RjNy00MDgyLTgzZmItZGY3ZDRmODIxOWFmLzEvRjcxQUM3RTZG MEQ2MjcxREQ5Nzc3NzY1NTdFMTZBRTAyQTRBRDc3Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GNzFBQzdFNkYwRDYyNzFERDk3Nzc3NjU1N0UxNkFFMDJBNEFE NzdDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWE0Zjc5MzQtY2RjNy00MDgyLTgz ZmItZGY3ZDRmODIxOWFmLzEvRjcxQUM3RTZGMEQ2MjcxREQ5Nzc3NzY1NTdFMTZB RTAyQTRBRDc3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHJDymRawAohZ+fVO99eM3/ZM2y1hzHvlUaY pFZvw/N/3nz/rU0ZGam8+HGMdzdNhFHgUJil/H2euKpvp4onE7CLYsDRukGu9+u6 u8KIHvguZhUKD3AKetTUXefBC6Ceg8Fq9O6/QkD2ws9u1Fq8+81lwQoxyGij60LX K0n+LuqqNgL281lDoAUN/QsDgUqqYozbd0Fkj23wQl2fcQRlGNwS17djjhfb3vC5 imW8FMH1FUvPN41voIB1sYdcXpa39kgc6pOX9Gep3Igpr1Mg3m1tDwO8g0BiGxNV 9azVCyNwVupogkv+X5x0DYRrD8ZhuXMotU/OujBA2sEB5jU8KAY= -----END CERTIFICATE-----Generated at Thu Sep 24 01:03:22 2026 by rpki-client