$ rpki-client -vvf rpki-rsync.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.mft File: 71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.mft (raw, json) Hash identifier: lc1EC5VC9OuNXmC8iGDriSURyBJYpVbHLNN/wzx6IIg= Subject key identifier: 1A:89:6D:68:96:99:9A:C8:D0:FB:BE:79:64:C6:3D:E2:6C:FE:61:AA Authority key identifier: 71:E3:BB:71:0F:59:21:46:B8:2A:3C:1C:FC:F3:6A:2B:D1:C5:A7:95 Certificate issuer: /CN=71E3BB710F592146B82A3C1CFCF36A2BD1C5A795 Certificate serial: 0897F194EDB066B9761D8AF6B57960B43165EB42 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.mft Manifest number: 2C Signing time: Wed 03 Jun 2026 01:16:18 +0000 Manifest this update: Wed 03 Jun 2026 01:11:18 +0000 Manifest next update: Thu 04 Jun 2026 03:44:18 +0000 Files and hashes: 1: 3130332e37362e33312e302f32342d3234203d3e20313530343732.roa (hash: rUHpYIR2vJnsoxcjoNwsrIMb/p49L2kYzJuwadosSIk=) 2: 71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.crl (hash: azo5SdMvfOGJLGEYS6B+a76OjhsSZ6sT/QhuU79PuxY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.crl rsync://rpki-rsync.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:97:f1:94:ed:b0:66:b9:76:1d:8a:f6:b5:79:60:b4:31:65:eb:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71E3BB710F592146B82A3C1CFCF36A2BD1C5A795 Validity Not Before: Jun 3 01:11:18 2026 GMT Not After : Jun 4 03:44:18 2026 GMT Subject: CN=1A896D6896999AC8D0FBBE7964C63DE26CFE61AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d9:ea:c4:fc:ab:8c:69:a3:01:02:87:ee:b7: 85:23:a8:73:e5:74:d3:16:b2:49:00:85:1b:a5:ed: 54:34:4a:ce:8d:3e:d3:a9:eb:e2:eb:7a:6b:42:07: d9:ae:38:f6:66:aa:99:7a:f8:f0:7d:10:a2:db:2c: 3f:b8:dc:a9:8a:03:5e:ca:0b:b5:11:eb:a4:42:41: 3c:35:c2:52:6e:76:a4:b1:4a:2f:df:a1:73:1b:12: 00:36:bf:65:d3:0d:7d:54:03:55:31:49:19:f2:0d: 9c:e1:6a:43:4c:76:22:16:b8:64:c6:2b:c4:eb:c8: 41:75:8e:83:fd:bf:bf:b4:a1:c3:59:30:22:30:40: 1d:fb:90:af:5a:f3:0c:78:98:d4:b5:d0:87:13:09: ad:6c:06:7b:0d:5a:3d:93:da:76:73:da:30:10:76: 7f:68:c5:5a:9d:64:77:0e:8a:3b:d1:b1:f7:38:7c: bd:a8:af:a1:b3:83:4e:4f:61:49:e7:b8:5e:34:b0: d7:4e:92:90:e9:84:fd:30:fe:29:c4:23:ec:7d:7e: 4f:60:bd:ac:1c:30:17:e0:f5:fe:f4:2c:66:88:71: 42:4f:7b:7c:05:ac:8b:24:ac:ff:e0:01:8d:08:c4: 13:fd:3e:1e:83:4b:ce:d0:ee:e8:09:17:77:da:f1: e9:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:89:6D:68:96:99:9A:C8:D0:FB:BE:79:64:C6:3D:E2:6C:FE:61:AA X509v3 Authority Key Identifier: keyid:71:E3:BB:71:0F:59:21:46:B8:2A:3C:1C:FC:F3:6A:2B:D1:C5:A7:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:9f:89:4b:62:3e:47:c7:88:23:3b:b4:59:7f:90:06:ce:bd: 20:14:d3:b5:35:8c:a1:09:96:cb:34:f6:61:5b:6b:fd:37:3e: f3:03:89:96:1e:ff:56:fc:59:fc:8f:80:14:10:a2:37:31:a8: d5:cd:30:8b:1e:83:53:01:20:d4:8d:21:95:12:2f:83:31:f8: 7d:d0:2f:fd:aa:40:a3:f7:61:2d:93:80:e7:f4:52:a5:ca:ce: d2:93:a4:c8:af:74:b5:a1:75:99:4f:13:0f:49:4b:00:25:b0: 08:34:03:1e:a5:f5:00:b2:ed:61:2e:d2:74:dc:ea:46:78:0e: 1c:c8:48:68:9c:a9:eb:83:b3:b6:5f:ac:f2:46:51:56:98:45: 18:30:f4:25:a0:84:de:51:58:d3:52:be:ed:48:f7:98:07:51: 79:8d:4b:e0:99:1f:94:87:05:81:5d:fe:2c:c3:68:0d:73:d7: f0:cf:61:12:4c:45:e2:48:c3:c6:03:11:78:27:cf:35:30:f4: 20:e9:60:27:2f:f7:cf:5e:ff:52:e7:e8:55:10:01:29:29:62: 7f:3e:40:a3:c9:cd:c9:a7:ae:aa:a5:70:02:ea:98:0a:c5:0f: 6f:6b:40:39:e6:d2:04:33:bb:07:68:78:1a:64:12:d3:30:fa: c2:f0:14:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCJfxlO2wZrl2HYr2tXlgtDFl60IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFFM0JCNzEwRjU5MjE0NkI4MkEzQzFDRkNGMzZBMkJE MUM1QTc5NTAeFw0yNjA2MDMwMTExMThaFw0yNjA2MDQwMzQ0MThaMDMxMTAvBgNV BAMTKDFBODk2RDY4OTY5OTlBQzhEMEZCQkU3OTY0QzYzREUyNkNGRTYxQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd2erE/KuMaaMBAofut4UjqHPl dNMWskkAhRul7VQ0Ss6NPtOp6+LremtCB9muOPZmqpl6+PB9EKLbLD+43KmKA17K C7UR66RCQTw1wlJudqSxSi/foXMbEgA2v2XTDX1UA1UxSRnyDZzhakNMdiIWuGTG K8TryEF1joP9v7+0ocNZMCIwQB37kK9a8wx4mNS10IcTCa1sBnsNWj2T2nZz2jAQ dn9oxVqdZHcOijvRsfc4fL2or6Gzg05PYUnnuF40sNdOkpDphP0w/inEI+x9fk9g vawcMBfg9f70LGaIcUJPe3wFrIskrP/gAY0IxBP9Ph6DS87Q7ugJF3fa8elFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGoltaJaZmsjQ+755ZMY94mz+YaowHwYDVR0j BBgwFoAUceO7cQ9ZIUa4Kjwc/PNqK9HFp5UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGQ2MWM3NTAtODgwZi00OThiLWE2OTgtMWY0NzgwZmE2OWZmLzAvNzFFM0JCNzEw RjU5MjE0NkI4MkEzQzFDRkNGMzZBMkJEMUM1QTc5NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MUUzQkI3MTBGNTkyMTQ2QjgyQTNDMUNGQ0YzNkEyQkQxQzVB Nzk1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGQ2MWM3NTAtODgwZi00OThiLWE2 OTgtMWY0NzgwZmE2OWZmLzAvNzFFM0JCNzEwRjU5MjE0NkI4MkEzQzFDRkNGMzZB MkJEMUM1QTc5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIyfiUtiPkfHiCM7tFl/kAbOvSAU07U1jKEJ lss09mFba/03PvMDiZYe/1b8WfyPgBQQojcxqNXNMIseg1MBINSNIZUSL4Mx+H3Q L/2qQKP3YS2TgOf0UqXKztKTpMivdLWhdZlPEw9JSwAlsAg0Ax6l9QCy7WEu0nTc 6kZ4DhzISGicqeuDs7ZfrPJGUVaYRRgw9CWghN5RWNNSvu1I95gHUXmNS+CZH5SH BYFd/izDaA1z1/DPYRJMReJIw8YDEXgnzzUw9CDpYCcv989e/1Ln6FUQASkpYn8+ QKPJzcmnrqqlcALqmArFD29rQDnm0gQzuwdoeBpkEtMw+sLwFEI= -----END CERTIFICATE-----Generated at Wed Jun 3 03:54:28 2026 by rpki-client