$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.mft File: 71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.mft (raw, json) Hash identifier: 9TsGDgvd9CollCMBhyvpCzts0wzrpJdV8oZsZmjLBtI= Subject key identifier: DC:F7:25:BF:8A:63:85:17:4E:B6:35:26:48:FC:F7:EE:27:4D:0D:FB Authority key identifier: 71:E3:BB:71:0F:59:21:46:B8:2A:3C:1C:FC:F3:6A:2B:D1:C5:A7:95 Certificate issuer: /CN=71E3BB710F592146B82A3C1CFCF36A2BD1C5A795 Certificate serial: 69680CBF4C9FCDA57E52391FF6C9D5480AF625AC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.mft Manifest number: FA Signing time: Wed 04 Nov 2026 00:23:25 +0000 Manifest this update: Wed 04 Nov 2026 00:18:25 +0000 Manifest next update: Thu 05 Nov 2026 00:48:25 +0000 Files and hashes: 1: 71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.crl (hash: OIIxdUWMEhqlEUgsFm3ViT4Lnnya0DMJNTMUCzOWxxs=) 2: 3130332e37362e33312e302f32342d3234203d3e20313530343732.roa (hash: rUHpYIR2vJnsoxcjoNwsrIMb/p49L2kYzJuwadosSIk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.crl rsync://rpki-rsync.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 00:48:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:68:0c:bf:4c:9f:cd:a5:7e:52:39:1f:f6:c9:d5:48:0a:f6:25:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71E3BB710F592146B82A3C1CFCF36A2BD1C5A795 Validity Not Before: Nov 4 00:18:25 2026 GMT Not After : Nov 5 00:48:25 2026 GMT Subject: CN=DCF725BF8A6385174EB6352648FCF7EE274D0DFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:63:00:c8:7c:1e:7d:dc:6c:54:dd:c4:f6:b7: 7a:38:c0:76:e1:d2:a2:d6:13:ef:c3:56:0a:55:54: 15:d4:85:92:a6:88:04:d1:e2:47:03:4a:d1:9f:b2: 5f:76:e4:20:45:3a:ae:0c:5b:ca:ff:c1:45:b3:c4: 34:37:31:8e:a9:5f:fd:42:2a:ff:4b:1d:50:09:54: fe:44:a5:44:20:94:f5:7a:ac:76:ad:fb:5f:dc:8c: a0:41:65:0c:0f:92:0a:25:4a:6e:22:c5:a9:57:de: 22:1e:02:d8:ef:1b:42:8b:ae:e3:d1:01:de:0a:11: ab:3e:8d:e4:ec:26:ca:24:10:35:56:24:28:5e:18: 88:b8:b5:7e:9b:b2:86:df:5e:73:6c:c9:8f:3f:9c: 18:c9:85:a3:df:20:ef:07:81:04:70:a0:db:25:69: d7:9e:46:2e:d1:fc:00:00:9b:f8:ca:53:96:aa:6f: 81:4c:ac:21:25:cd:0a:2f:93:a6:77:95:cc:c8:e4: e8:fd:46:34:22:62:6e:0e:d7:52:ed:51:15:9c:f0: ca:5d:fd:34:c6:2e:da:89:a0:d9:30:41:a3:cf:ec: b5:d8:e7:14:12:b3:fb:88:f5:08:1e:33:97:b0:10: 42:e3:70:02:7f:3a:44:8f:27:eb:3c:74:63:cc:7f: b4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:F7:25:BF:8A:63:85:17:4E:B6:35:26:48:FC:F7:EE:27:4D:0D:FB X509v3 Authority Key Identifier: keyid:71:E3:BB:71:0F:59:21:46:B8:2A:3C:1C:FC:F3:6A:2B:D1:C5:A7:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:c6:dc:da:3f:9b:ef:24:6b:c7:f5:15:2c:50:14:db:5d:c4: 94:14:d2:32:cc:cb:ef:af:b6:8f:0e:7d:53:94:13:b8:c4:b1: 95:2b:76:4d:f0:3c:a1:46:a8:94:bb:61:97:22:57:c9:f6:6e: 52:8a:32:43:e4:a8:11:4e:63:97:47:da:cc:f7:f9:81:4e:38: 6b:ba:32:04:e2:75:94:eb:42:76:f4:ba:69:74:6a:0e:e3:00: 9a:0f:35:e5:2a:86:e3:27:05:b4:91:0a:83:5b:c9:a3:96:82: 2e:7e:63:85:45:d4:f2:49:e4:70:23:71:26:23:8d:45:b9:55: 9e:b9:93:4e:1c:80:a6:b9:13:bd:79:e1:fd:ea:f6:b2:25:10: 15:93:b0:6c:84:bc:d4:11:d7:49:fd:c2:af:32:86:ac:62:8f: 35:b8:5b:dc:59:f1:18:fc:3b:bf:ec:05:e8:8b:ca:9d:38:5b: ee:29:db:f4:c0:24:80:2d:65:71:d3:85:66:5b:79:da:33:d2: 65:c8:e7:79:5d:e7:ad:74:b1:8a:f1:f7:ad:86:28:17:08:d1: be:62:f8:d9:80:72:2b:44:2d:1a:ec:76:1e:f0:e9:f0:ff:11: 7c:c0:5d:bb:d8:1b:8d:0c:e6:2c:13:34:ad:03:62:bd:27:78: 9e:fa:63:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaWgMv0yfzaV+Ujkf9snVSAr2JawwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFFM0JCNzEwRjU5MjE0NkI4MkEzQzFDRkNGMzZBMkJE MUM1QTc5NTAeFw0yNjExMDQwMDE4MjVaFw0yNjExMDUwMDQ4MjVaMDMxMTAvBgNV BAMTKERDRjcyNUJGOEE2Mzg1MTc0RUI2MzUyNjQ4RkNGN0VFMjc0RDBERkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwYwDIfB593GxU3cT2t3o4wHbh 0qLWE+/DVgpVVBXUhZKmiATR4kcDStGfsl925CBFOq4MW8r/wUWzxDQ3MY6pX/1C Kv9LHVAJVP5EpUQglPV6rHat+1/cjKBBZQwPkgolSm4ixalX3iIeAtjvG0KLruPR Ad4KEas+jeTsJsokEDVWJCheGIi4tX6bsobfXnNsyY8/nBjJhaPfIO8HgQRwoNsl adeeRi7R/AAAm/jKU5aqb4FMrCElzQovk6Z3lczI5Oj9RjQiYm4O11LtURWc8Mpd /TTGLtqJoNkwQaPP7LXY5xQSs/uI9QgeM5ewEELjcAJ/OkSPJ+s8dGPMf7TPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3Pclv4pjhRdOtjUmSPz37idNDfswHwYDVR0j BBgwFoAUceO7cQ9ZIUa4Kjwc/PNqK9HFp5UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGQ2MWM3NTAtODgwZi00OThiLWE2OTgtMWY0NzgwZmE2OWZmLzAvNzFFM0JCNzEw RjU5MjE0NkI4MkEzQzFDRkNGMzZBMkJEMUM1QTc5NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MUUzQkI3MTBGNTkyMTQ2QjgyQTNDMUNGQ0YzNkEyQkQxQzVB Nzk1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGQ2MWM3NTAtODgwZi00OThiLWE2 OTgtMWY0NzgwZmE2OWZmLzAvNzFFM0JCNzEwRjU5MjE0NkI4MkEzQzFDRkNGMzZB MkJEMUM1QTc5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABHG3No/m+8ka8f1FSxQFNtdxJQU0jLMy++v to8OfVOUE7jEsZUrdk3wPKFGqJS7YZciV8n2blKKMkPkqBFOY5dH2sz3+YFOOGu6 MgTidZTrQnb0uml0ag7jAJoPNeUqhuMnBbSRCoNbyaOWgi5+Y4VF1PJJ5HAjcSYj jUW5VZ65k04cgKa5E7154f3q9rIlEBWTsGyEvNQR10n9wq8yhqxijzW4W9xZ8Rj8 O7/sBeiLyp04W+4p2/TAJIAtZXHThWZbedoz0mXI53ld5610sYrx962GKBcI0b5i +NmAcitELRrsdh7w6fD/EXzAXbvYG40M5iwTNK0DYr0neJ76Y0E= -----END CERTIFICATE-----Generated at Wed Nov 4 06:32:18 2026 by rpki-client