$ rpki-client -vvvf rpki-rsync.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/71BEA54A40125136212043443871943E11E47CE8.mft File: 71BEA54A40125136212043443871943E11E47CE8.mft (raw, json) Hash identifier: pJP5cTYOzWD3j1yPtQg+GJQBolxXK10980vOYQloOZw= Subject key identifier: 81:E5:EB:C5:53:F1:E8:24:D4:CB:A2:1A:0C:A4:BB:B2:27:97:30:90 Authority key identifier: 71:BE:A5:4A:40:12:51:36:21:20:43:44:38:71:94:3E:11:E4:7C:E8 Certificate issuer: /CN=71BEA54A40125136212043443871943E11E47CE8 Certificate serial: 272B026F454CC5BCA6889AB251CE4E04111DAA81 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71BEA54A40125136212043443871943E11E47CE8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/71BEA54A40125136212043443871943E11E47CE8.mft Manifest number: F5 Signing time: Mon 02 Nov 2026 11:52:44 +0000 Manifest this update: Mon 02 Nov 2026 11:47:44 +0000 Manifest next update: Tue 03 Nov 2026 13:37:44 +0000 Files and hashes: 1: 3130332e3233342e31392e302f32342d3234203d3e20313531353036.roa (hash: SJitFwYKCLnaXZQ4OdV1EreS23s72a/7Op1qTgfnrGo=) 2: 71BEA54A40125136212043443871943E11E47CE8.crl (hash: XuBqEpZRtvqJkJSZVgaZJ8xb9JoFFxBh+PkkRbG9wUk=) 3: 3130332e3233342e31382e302f32332d3233203d3e20313531353036.roa (hash: PHU5h1LHUlDbfO+kxPjDf9ATbrrXtorAw7bNDenM+FM=) 4: 3130332e3233342e31382e302f32342d3234203d3e20313531353036.roa (hash: VJzo4/caWYAHukBH2w0BGX1Ka+vdrCFh1viFJ7tFkV8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/71BEA54A40125136212043443871943E11E47CE8.crl rsync://rpki-rsync.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/71BEA54A40125136212043443871943E11E47CE8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71BEA54A40125136212043443871943E11E47CE8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 12:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:2b:02:6f:45:4c:c5:bc:a6:88:9a:b2:51:ce:4e:04:11:1d:aa:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71BEA54A40125136212043443871943E11E47CE8 Validity Not Before: Nov 2 11:47:44 2026 GMT Not After : Nov 3 13:37:44 2026 GMT Subject: CN=81E5EBC553F1E824D4CBA21A0CA4BBB227973090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:f2:d1:b1:7d:a1:60:f7:fb:35:c7:53:a4:9c: 8e:6b:e6:6b:11:e2:24:49:7e:91:2a:1a:c1:f8:46: 8e:ac:ad:e3:7b:90:51:65:43:0b:28:86:47:76:40: fc:70:19:8d:09:65:28:1b:71:1a:7c:eb:47:ae:c3: 6c:61:f6:e2:54:fd:12:56:bb:0f:bc:6f:7c:a3:a7: 8c:ab:e3:91:0d:92:eb:1c:1f:2f:94:ff:e4:37:81: 44:a8:3b:e5:9e:c5:c9:c2:eb:8b:d1:11:fa:5b:e8: 55:01:89:10:48:ce:ae:bd:fc:c8:0c:e4:c7:89:d0: 13:7d:fa:24:f2:f6:e7:1e:fe:3a:a6:72:43:13:1a: cf:11:89:92:69:9d:dc:3c:9f:c9:e5:05:3a:e8:11: 53:c7:7d:fe:9c:af:68:97:dc:5f:8d:ca:56:67:94: d8:3c:b9:2f:81:56:28:d4:e9:80:13:5e:d5:2c:fc: 7d:bd:7d:83:18:17:19:2b:08:17:7c:5b:5c:8a:ec: 2e:ef:e1:90:1a:de:de:c3:f8:ba:17:82:da:49:40: e0:c8:62:69:30:e9:55:91:70:69:c9:2d:fd:d9:42: 95:40:47:6a:18:d5:fc:c0:fe:02:a3:c6:b9:f6:5c: 78:94:b8:a2:42:e1:18:a8:75:00:36:e4:49:01:15: 20:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:E5:EB:C5:53:F1:E8:24:D4:CB:A2:1A:0C:A4:BB:B2:27:97:30:90 X509v3 Authority Key Identifier: keyid:71:BE:A5:4A:40:12:51:36:21:20:43:44:38:71:94:3E:11:E4:7C:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/71BEA54A40125136212043443871943E11E47CE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71BEA54A40125136212043443871943E11E47CE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/71BEA54A40125136212043443871943E11E47CE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:d7:14:d8:de:e2:98:e6:1b:bc:8c:91:dd:71:06:f4:7c:36: ac:1f:f0:65:2e:4a:67:58:81:1d:6f:7a:e1:a2:d1:10:fc:ec: 7c:3c:b1:8d:8d:77:44:20:cb:9d:25:17:b9:59:cc:a0:62:dd: 62:d4:bc:1d:ca:dc:ca:06:d5:46:3f:6b:8b:e9:e3:1e:9a:5f: c8:4d:ef:8f:5c:c8:4e:cb:5d:9a:4d:6f:f3:9d:8a:5f:3b:c2: 58:9c:da:dc:6a:44:d9:28:66:d9:f8:49:f5:20:9b:ce:83:62: 53:94:75:28:7f:46:7b:a0:ad:af:b1:5a:9a:0f:0c:00:fa:89: 97:08:08:29:15:b4:51:ce:21:7e:82:17:69:60:46:45:17:91: 28:db:5b:ea:76:ee:f9:08:67:d6:b8:d1:37:e0:d6:e9:cb:46: a8:a5:64:1f:2a:22:cd:37:15:9f:8c:ab:3f:19:02:1f:7a:ce: e8:6c:28:86:d7:88:b9:d5:e2:d4:a3:a9:19:15:ad:fb:26:b3: bb:cd:21:78:b1:f7:63:6d:fd:42:48:97:24:5f:f8:09:33:d4: 7c:7c:f8:e2:43:d6:c0:19:d7:16:20:fe:7d:f7:3d:fa:d3:b2: 78:a3:b4:5d:16:2a:63:d3:9a:17:dd:ea:58:ea:ca:df:b2:f9: ec:9e:9a:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJysCb0VMxbymiJqyUc5OBBEdqoEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFCRUE1NEE0MDEyNTEzNjIxMjA0MzQ0Mzg3MTk0M0Ux MUU0N0NFODAeFw0yNjExMDIxMTQ3NDRaFw0yNjExMDMxMzM3NDRaMDMxMTAvBgNV BAMTKDgxRTVFQkM1NTNGMUU4MjRENENCQTIxQTBDQTRCQkIyMjc5NzMwOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDx8tGxfaFg9/s1x1OknI5r5msR 4iRJfpEqGsH4Ro6sreN7kFFlQwsohkd2QPxwGY0JZSgbcRp860euw2xh9uJU/RJW uw+8b3yjp4yr45ENkuscHy+U/+Q3gUSoO+WexcnC64vREfpb6FUBiRBIzq69/MgM 5MeJ0BN9+iTy9uce/jqmckMTGs8RiZJpndw8n8nlBTroEVPHff6cr2iX3F+NylZn lNg8uS+BVijU6YATXtUs/H29fYMYFxkrCBd8W1yK7C7v4ZAa3t7D+LoXgtpJQODI Ymkw6VWRcGnJLf3ZQpVAR2oY1fzA/gKjxrn2XHiUuKJC4RiodQA25EkBFSA1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgeXrxVPx6CTUy6IaDKS7sieXMJAwHwYDVR0j BBgwFoAUcb6lSkASUTYhIENEOHGUPhHkfOgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzg4MzI5Y2EtZThmNy00ZDNkLWFjZTQtODA3ZjhhYTU4YWUwLzAvNzFCRUE1NEE0 MDEyNTEzNjIxMjA0MzQ0Mzg3MTk0M0UxMUU0N0NFOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MUJFQTU0QTQwMTI1MTM2MjEyMDQzNDQzODcxOTQzRTExRTQ3 Q0U4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzg4MzI5Y2EtZThmNy00ZDNkLWFj ZTQtODA3ZjhhYTU4YWUwLzAvNzFCRUE1NEE0MDEyNTEzNjIxMjA0MzQ0Mzg3MTk0 M0UxMUU0N0NFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAADXFNje4pjmG7yMkd1xBvR8Nqwf8GUuSmdY gR1veuGi0RD87Hw8sY2Nd0Qgy50lF7lZzKBi3WLUvB3K3MoG1UY/a4vp4x6aX8hN 749cyE7LXZpNb/Odil87wlic2txqRNkoZtn4SfUgm86DYlOUdSh/Rnugra+xWpoP DAD6iZcICCkVtFHOIX6CF2lgRkUXkSjbW+p27vkIZ9a40Tfg1unLRqilZB8qIs03 FZ+Mqz8ZAh96zuhsKIbXiLnV4tSjqRkVrfsms7vNIXix92Nt/UJIlyRf+Akz1Hx8 +OJD1sAZ1xYg/n33PfrTsnijtF0WKmPTmhfd6ljqyt+y+eyemvs= -----END CERTIFICATE-----Generated at Mon Nov 2 22:12:06 2026 by rpki-client