$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.mft File: A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.mft (raw, json) Hash identifier: k7EDWW/bq+fpqxwn2vfE1bl1w/3s5ONHoyupOHmw1f8= Subject key identifier: DF:D5:11:91:35:E5:C5:1B:47:ED:19:16:18:FD:2B:FA:FF:8E:60:64 Authority key identifier: A7:1C:6F:39:EB:BF:CC:0D:F1:0C:4D:6D:BB:72:55:E6:92:8C:5C:47 Certificate issuer: /CN=A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47 Certificate serial: 29AA88D7F0D9A13670287F511EF44B299227F1AC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 19:35:05 +0000 Manifest this update: Wed 23 Sep 2026 19:30:05 +0000 Manifest next update: Thu 24 Sep 2026 21:03:05 +0000 Files and hashes: 1: A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.crl (hash: +BUuY2dZ+nyrTxEZS7COSCuG2Eg10RCmGphkUww4Fl8=) 2: 3130332e3137322e3131382e302f32332d3234203d3e20313432333935.roa (hash: gHOFFAMzJX67LZAd50wxnRJO1gH2l+8DoQ6h8IDez6o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.crl rsync://rpki-rsync.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 21:03:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:aa:88:d7:f0:d9:a1:36:70:28:7f:51:1e:f4:4b:29:92:27:f1:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47 Validity Not Before: Sep 23 19:30:05 2026 GMT Not After : Sep 24 21:03:05 2026 GMT Subject: CN=DFD5119135E5C51B47ED191618FD2BFAFF8E6064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c4:36:26:e3:06:f0:ac:7e:e1:c1:5d:3c:05: 2c:14:a1:8c:6c:ec:dc:05:3d:18:8c:52:68:88:1a: c1:ae:a9:34:ab:10:0a:87:62:9b:a4:37:cd:86:60: c1:59:01:cd:91:42:b5:fd:48:c5:05:0c:c7:45:e7: bf:99:b4:5f:7f:fd:79:6d:b1:b9:6d:da:41:0e:d1: 8a:c8:65:4d:00:b6:6d:af:e4:41:fe:4d:27:1e:c0: ee:7d:36:15:cf:b6:89:1b:53:ad:55:14:84:af:05: 6b:1f:03:ae:56:f0:bb:ff:1f:27:3f:d7:ba:12:66: f3:93:44:6e:9b:4d:ee:66:2d:5e:ad:f9:38:3d:e0: 44:7a:d6:02:3f:e0:16:dd:08:73:5c:69:76:99:0f: 3c:c3:01:9f:7e:95:79:ec:19:35:68:43:a9:c1:f1: 10:0d:ff:ca:d7:d4:c4:fe:48:93:27:bf:1c:e3:d4: 3d:9b:6d:4f:29:07:59:12:2e:5c:90:51:60:f3:5a: 22:67:d0:b7:95:34:67:55:b8:e0:79:36:fe:ca:06: 07:7e:95:0a:52:3e:82:59:d5:c6:41:a7:27:3b:77: a1:98:7f:59:95:71:db:51:c1:b6:3e:3a:e6:ac:c1: be:4f:59:27:11:98:40:5b:f8:ea:52:08:fe:5e:c3: 55:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:D5:11:91:35:E5:C5:1B:47:ED:19:16:18:FD:2B:FA:FF:8E:60:64 X509v3 Authority Key Identifier: keyid:A7:1C:6F:39:EB:BF:CC:0D:F1:0C:4D:6D:BB:72:55:E6:92:8C:5C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/A71C6F39EBBFCC0DF10C4D6DBB7255E6928C5C47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:64:61:f6:2a:db:a3:f7:1a:18:6a:8e:e1:ae:9d:aa:e1:ac: b0:c6:a5:68:18:55:68:51:ef:ae:2e:8e:94:90:4e:ad:a6:cb: ea:4b:1d:62:97:ad:45:ee:f6:8e:91:f3:03:cc:92:ae:95:3d: 14:4b:84:58:1f:85:4c:f4:ab:7d:b4:24:52:d3:ac:e2:8d:8a: 81:11:81:0c:30:93:55:33:02:10:7a:2d:5d:1b:84:c7:39:15: 21:1e:38:6a:1e:7b:ac:bf:e9:f6:3a:51:f5:45:27:56:4d:f4: c9:fa:07:f4:d5:87:5d:3d:e9:50:bb:79:9e:82:0a:2a:d9:12: bd:50:72:fc:81:75:60:d8:fa:d4:4b:8f:0e:7a:3b:6b:74:47: c7:fd:a4:24:7e:66:c6:b6:03:91:d8:86:20:95:80:14:2c:ac: f6:e8:55:a8:e7:58:1d:54:86:a6:42:fd:ca:98:8d:da:0a:e5: 41:db:77:39:01:70:39:ad:9d:f6:4d:e9:59:55:b2:5c:01:c1: 6a:3a:ac:9e:d7:c5:b6:8d:29:39:86:d9:a9:01:e7:08:70:48: c2:e2:cb:18:4b:60:84:76:27:df:6d:2a:f0:db:a5:91:2d:82: a7:1f:6f:41:c5:41:08:72:d8:e9:49:ed:e6:3d:94:71:5f:0e: 8b:bc:09:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKaqI1/DZoTZwKH9RHvRLKZIn8awwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcxQzZGMzlFQkJGQ0MwREYxMEM0RDZEQkI3MjU1RTY5 MjhDNUM0NzAeFw0yNjA5MjMxOTMwMDVaFw0yNjA5MjQyMTAzMDVaMDMxMTAvBgNV BAMTKERGRDUxMTkxMzVFNUM1MUI0N0VEMTkxNjE4RkQyQkZBRkY4RTYwNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9xDYm4wbwrH7hwV08BSwUoYxs 7NwFPRiMUmiIGsGuqTSrEAqHYpukN82GYMFZAc2RQrX9SMUFDMdF57+ZtF9//Xlt sblt2kEO0YrIZU0Atm2v5EH+TScewO59NhXPtokbU61VFISvBWsfA65W8Lv/Hyc/ 17oSZvOTRG6bTe5mLV6t+Tg94ER61gI/4BbdCHNcaXaZDzzDAZ9+lXnsGTVoQ6nB 8RAN/8rX1MT+SJMnvxzj1D2bbU8pB1kSLlyQUWDzWiJn0LeVNGdVuOB5Nv7KBgd+ lQpSPoJZ1cZBpyc7d6GYf1mVcdtRwbY+Ouaswb5PWScRmEBb+OpSCP5ew1VlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU39URkTXlxRtH7RkWGP0r+v+OYGQwHwYDVR0j BBgwFoAUpxxvOeu/zA3xDE1tu3JV5pKMXEcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjA0ZTk3ZDMtNzFjMy00ZDBhLThiMDQtNzA4OGZlMzgyYmMzLzAvQTcxQzZGMzlF QkJGQ0MwREYxMEM0RDZEQkI3MjU1RTY5MjhDNUM0Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNzFDNkYzOUVCQkZDQzBERjEwQzRENkRCQjcyNTVFNjkyOEM1 QzQ3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjA0ZTk3ZDMtNzFjMy00ZDBhLThi MDQtNzA4OGZlMzgyYmMzLzAvQTcxQzZGMzlFQkJGQ0MwREYxMEM0RDZEQkI3MjU1 RTY5MjhDNUM0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEhkYfYq26P3GhhqjuGunarhrLDGpWgYVWhR 764ujpSQTq2my+pLHWKXrUXu9o6R8wPMkq6VPRRLhFgfhUz0q320JFLTrOKNioER gQwwk1UzAhB6LV0bhMc5FSEeOGoee6y/6fY6UfVFJ1ZN9Mn6B/TVh1096VC7eZ6C CirZEr1QcvyBdWDY+tRLjw56O2t0R8f9pCR+Zsa2A5HYhiCVgBQsrPboVajnWB1U hqZC/cqYjdoK5UHbdzkBcDmtnfZN6VlVslwBwWo6rJ7XxbaNKTmG2akB5whwSMLi yxhLYIR2J99tKvDbpZEtgqcfb0HFQQhy2OlJ7eY9lHFfDou8CZ0= -----END CERTIFICATE-----Generated at Thu Sep 24 05:52:07 2026 by rpki-client