$ rpki-client -vvf rpki-rsync.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.mft File: 71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.mft (raw, json) Hash identifier: rJ9yJxsXH7rLx2o4Gg3fjNTnPQnNxfa4dRwqYzVN9RU= Subject key identifier: EE:2B:3E:9C:33:21:30:77:C4:E1:3B:37:5E:6D:DB:05:22:DE:ED:C2 Authority key identifier: 71:EA:AE:94:B4:B9:7C:5E:D5:3A:52:F7:20:BB:E5:EA:78:EF:DE:5B Certificate issuer: /CN=71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B Certificate serial: 787E0DD439244712D2BC561066DC74BF54E0B4CB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.mft Manifest number: 10 Signing time: Wed 13 May 2026 17:08:16 +0000 Manifest this update: Wed 13 May 2026 17:03:16 +0000 Manifest next update: Thu 14 May 2026 19:57:16 +0000 Files and hashes: 1: 71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.crl (hash: rsb7zmZNkCeOue/MP8+iHc2Xb+I309Usl4w4vFVeQes=) 2: 3130332e3134342e3130332e302f32342d3234203d3e20313339343231.roa (hash: NVvHOXca2LITMgeQ8pj0e3M7sUAPWn5Q20ai1Hw8JHw=) 3: 3130332e3134342e3130322e302f32332d3234203d3e20313339343231.roa (hash: aW/uUXbkxJYBViD7wNIMNmfKm91NHMXKaNMrrbbLaYo=) 4: 3130332e3134342e3130322e302f32342d3234203d3e20313339343231.roa (hash: nH3r82YwlmcelOXc3c6hCqTAafYwlMIm171yaloUlQU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.crl rsync://rpki-rsync.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 19:57:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:7e:0d:d4:39:24:47:12:d2:bc:56:10:66:dc:74:bf:54:e0:b4:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B Validity Not Before: May 13 17:03:16 2026 GMT Not After : May 14 19:57:16 2026 GMT Subject: CN=EE2B3E9C33213077C4E13B375E6DDB0522DEEDC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f1:15:86:74:d5:37:28:37:60:7b:1e:a2:e4: e9:be:d7:4e:10:ea:1f:e6:c0:1e:2f:30:84:b1:07: 67:ff:bc:54:7a:3e:b8:5a:85:b3:48:85:72:13:39: 16:b4:42:9b:a3:aa:37:ac:7f:a2:cb:1c:a6:d2:4e: 04:1c:43:d5:60:75:37:53:e5:d9:75:e5:d4:59:7f: cb:c6:89:00:78:90:79:b6:b5:f6:4b:d2:66:78:59: f5:dc:47:9c:b8:bd:44:5d:6f:07:ab:c3:86:a1:70: 98:85:2d:37:28:39:9a:1f:8d:62:9c:c3:33:21:38: 17:00:2a:9b:cd:4a:b9:3b:b3:f5:2c:4f:8e:4c:a5: 57:2f:dd:8f:5c:17:c9:52:ad:27:14:6c:d6:3c:26: b5:18:ce:ad:9a:db:c5:26:70:f2:72:aa:9e:82:ea: af:95:fd:d4:08:87:62:db:b5:cc:a9:5c:1a:9f:14: 3c:d4:e4:d8:4a:40:a8:8f:30:e6:19:a7:b3:f5:0f: d9:f1:2b:8c:34:71:fa:eb:6f:09:f7:eb:91:fa:2f: 42:8f:44:84:cf:1b:6a:27:57:59:5b:88:48:79:54: 4b:da:0e:58:3e:6b:9e:e5:e9:0b:6c:7e:3f:da:ae: f2:92:47:74:8f:8a:94:2b:27:99:32:b1:d0:db:3d: 00:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:2B:3E:9C:33:21:30:77:C4:E1:3B:37:5E:6D:DB:05:22:DE:ED:C2 X509v3 Authority Key Identifier: keyid:71:EA:AE:94:B4:B9:7C:5E:D5:3A:52:F7:20:BB:E5:EA:78:EF:DE:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:f7:83:78:8e:ee:d8:0d:ef:00:55:f4:fb:a8:d8:15:c5:7d: 0a:ec:52:c2:b6:f2:50:b4:84:66:8f:6a:89:4b:e0:5e:44:36: 63:ef:e9:be:81:6a:f3:ef:43:f7:ed:4e:4d:1f:e5:d6:79:80: ee:2e:c8:fb:f8:ed:ce:00:f5:4c:eb:16:43:3d:6f:2f:12:2a: c9:65:c7:64:a2:b6:5f:b7:f5:a8:8c:81:a2:1d:e2:cb:76:f1: c2:f2:1f:58:f9:79:77:df:38:f5:08:65:60:90:b5:30:4c:26: 9f:0f:af:82:26:66:dc:3a:75:46:ff:83:71:49:f8:e6:4e:e8: 47:cc:e5:e5:f0:a9:86:0a:f5:a1:ac:21:2e:10:36:8e:fc:e1: 00:b6:dd:99:64:0a:3d:e7:b1:21:c8:de:54:04:3e:7a:0d:08: 16:47:48:91:8c:ff:c5:c8:cd:2a:8b:97:47:14:d4:99:4b:a5: 78:9d:03:bd:f9:19:c2:44:9a:a7:bf:f6:8f:c9:ee:ec:11:c0: 05:c7:f1:66:48:a9:76:40:7f:5f:1a:4d:1e:1d:b9:bd:54:43: 36:bd:b6:68:6d:d5:87:60:d6:93:84:b6:90:92:f8:72:86:3d: 69:5a:cd:b6:cb:4f:ed:08:48:31:1c:97:f5:8f:08:64:33:97: 04:ca:a9:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeH4N1DkkRxLSvFYQZtx0v1TgtMswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFFQUFFOTRCNEI5N0M1RUQ1M0E1MkY3MjBCQkU1RUE3 OEVGREU1QjAeFw0yNjA1MTMxNzAzMTZaFw0yNjA1MTQxOTU3MTZaMDMxMTAvBgNV BAMTKEVFMkIzRTlDMzMyMTMwNzdDNEUxM0IzNzVFNkREQjA1MjJERUVEQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC68RWGdNU3KDdgex6i5Om+104Q 6h/mwB4vMISxB2f/vFR6PrhahbNIhXITORa0Qpujqjesf6LLHKbSTgQcQ9VgdTdT 5dl15dRZf8vGiQB4kHm2tfZL0mZ4WfXcR5y4vURdbwerw4ahcJiFLTcoOZofjWKc wzMhOBcAKpvNSrk7s/UsT45MpVcv3Y9cF8lSrScUbNY8JrUYzq2a28UmcPJyqp6C 6q+V/dQIh2LbtcypXBqfFDzU5NhKQKiPMOYZp7P1D9nxK4w0cfrrbwn365H6L0KP RITPG2onV1lbiEh5VEvaDlg+a57l6Qtsfj/arvKSR3SPipQrJ5kysdDbPQCBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7is+nDMhMHfE4Ts3Xm3bBSLe7cIwHwYDVR0j BBgwFoAUcequlLS5fF7VOlL3ILvl6njv3lswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmE1MzQxZTgtMjJkOC00NDljLWE3NTMtZTQ3YmJmYzQ4NTM4LzAvNzFFQUFFOTRC NEI5N0M1RUQ1M0E1MkY3MjBCQkU1RUE3OEVGREU1Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MUVBQUU5NEI0Qjk3QzVFRDUzQTUyRjcyMEJCRTVFQTc4RUZE RTVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmE1MzQxZTgtMjJkOC00NDljLWE3 NTMtZTQ3YmJmYzQ4NTM4LzAvNzFFQUFFOTRCNEI5N0M1RUQ1M0E1MkY3MjBCQkU1 RUE3OEVGREU1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHb3g3iO7tgN7wBV9Puo2BXFfQrsUsK28lC0 hGaPaolL4F5ENmPv6b6BavPvQ/ftTk0f5dZ5gO4uyPv47c4A9UzrFkM9by8SKsll x2Sitl+39aiMgaId4st28cLyH1j5eXffOPUIZWCQtTBMJp8Pr4ImZtw6dUb/g3FJ +OZO6EfM5eXwqYYK9aGsIS4QNo784QC23ZlkCj3nsSHI3lQEPnoNCBZHSJGM/8XI zSqLl0cU1JlLpXidA735GcJEmqe/9o/J7uwRwAXH8WZIqXZAf18aTR4dub1UQza9 tmht1Ydg1pOEtpCS+HKGPWlazbbLT+0ISDEcl/WPCGQzlwTKqTk= -----END CERTIFICATE-----Generated at Thu May 14 12:17:27 2026 by rpki-client