$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.mft File: 71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.mft (raw, json) Hash identifier: 1CCKVLQLH30w2kLRKG7FQsXuz+BftSuwygqH60nRBhc= Subject key identifier: AA:80:8E:0C:D0:92:69:EF:AB:C5:54:E7:DF:3B:8E:E2:B3:DE:13:C4 Authority key identifier: 71:B6:07:4C:81:1D:4B:60:D7:9A:64:DA:0B:9D:D3:8E:9A:E7:8B:69 Certificate issuer: /CN=71B6074C811D4B60D79A64DA0B9DD38E9AE78B69 Certificate serial: 39085057C6BFE32DD337DCA7B46BE152478356CB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.mft Manifest number: F9 Signing time: Wed 04 Nov 2026 02:05:35 +0000 Manifest this update: Wed 04 Nov 2026 02:00:35 +0000 Manifest next update: Thu 05 Nov 2026 04:13:35 +0000 Files and hashes: 1: 71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.crl (hash: ZzjS0MS7Rfd5BW4/P9J3JKnA+GoZC65R6NWJYCNqeO4=) 2: 3130332e3233332e3130322e302f32332d3234203d3e20313336313037.roa (hash: lwD0HUqunMfmcrBMFPjo8Wy84U1nW2Gl16rAlt9je9I=) 3: 3130332e3131322e3234342e302f32332d3234203d3e20313336313037.roa (hash: nN+scnQd2Bf1TJPwjOUkyJEyMV9Spsgs/notSfMcxTE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.crl rsync://rpki-rsync.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 04:13:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:08:50:57:c6:bf:e3:2d:d3:37:dc:a7:b4:6b:e1:52:47:83:56:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71B6074C811D4B60D79A64DA0B9DD38E9AE78B69 Validity Not Before: Nov 4 02:00:35 2026 GMT Not After : Nov 5 04:13:35 2026 GMT Subject: CN=AA808E0CD09269EFABC554E7DF3B8EE2B3DE13C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ca:68:b4:ea:22:67:b5:fe:c6:e3:f0:32:25: 2c:0e:ca:ed:92:25:7e:82:6c:fe:4e:fc:ea:ee:6c: 7a:37:e8:e8:0e:e0:20:97:1c:f1:4d:b8:00:8c:11: 99:22:14:48:88:25:5b:fd:5c:6f:a4:97:fd:5d:ed: 46:b1:ca:92:19:4b:f8:23:1c:cf:22:62:f8:c5:b0: 08:1a:d9:c8:11:2a:27:3f:cb:cd:85:98:d0:52:d9: 61:ac:e1:5c:95:f2:28:92:71:5a:03:23:b4:74:6b: 25:f2:9c:4a:a8:20:b2:e7:ea:da:85:03:db:5f:71: ad:07:64:10:ba:db:7e:0f:b5:5e:ff:e7:39:6d:26: 6a:13:5a:00:1f:96:a8:1e:78:76:00:0d:ca:19:a1: ff:55:2f:9c:f1:80:cf:26:e2:b9:a0:81:47:bf:5e: 5e:0f:99:44:a0:a3:16:5c:15:9d:8f:07:34:e7:46: 2a:c9:67:fb:ca:75:25:8b:bd:a7:e2:12:d8:f4:2b: bd:c2:07:29:57:c8:13:b0:64:d6:2b:4e:b0:97:1f: 93:e4:29:24:ab:08:f0:28:5d:8f:d2:34:e6:ba:f3: aa:52:33:76:19:b7:17:31:71:8b:bd:3e:03:02:8d: c7:64:00:12:72:2d:60:42:d5:8c:e1:8d:d3:c9:57: 11:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:80:8E:0C:D0:92:69:EF:AB:C5:54:E7:DF:3B:8E:E2:B3:DE:13:C4 X509v3 Authority Key Identifier: keyid:71:B6:07:4C:81:1D:4B:60:D7:9A:64:DA:0B:9D:D3:8E:9A:E7:8B:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:73:c2:50:6c:22:40:2d:cf:cb:98:de:66:79:ba:f2:e1:cb: 28:6e:fc:18:e5:6b:e1:63:33:c3:b8:aa:3b:5e:1b:ad:ba:e7: a2:8c:73:ea:7a:a1:a8:57:0e:97:80:23:14:e3:e7:0c:ff:0a: 6b:c1:84:a8:3c:38:f3:c9:82:46:f3:47:fb:07:6c:e4:66:c3: f4:aa:7f:52:b2:2f:96:d1:3b:89:81:cb:ef:74:8c:74:ee:3f: 06:e7:4b:f1:67:7d:06:e2:a7:8a:4d:83:c1:d6:ab:ab:b5:e5: cf:06:04:14:8e:78:1d:85:22:67:32:9e:2a:2e:95:bc:e7:2b: 82:eb:d8:0f:a4:1d:87:7b:e3:bb:60:68:96:33:0e:09:be:4c: 63:98:68:35:fb:ca:4e:7c:45:41:bf:c7:43:18:ac:3d:ea:a2: d2:b4:9d:2b:37:cc:28:5e:f5:da:93:1b:f2:ab:97:d9:90:11: 1b:16:70:d9:78:0c:8d:ce:58:0f:54:00:ee:93:38:66:f3:1f: a2:43:4a:f0:18:94:cc:01:86:67:ce:a7:ba:38:6f:e2:57:84: 89:0c:ed:92:13:9e:19:b2:4f:1a:41:1b:f4:28:dd:4e:c5:36: 2f:80:10:2c:98:bf:f8:d3:9a:c6:51:d4:e7:3c:69:0d:b6:f8: 5a:3f:28:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOQhQV8a/4y3TN9yntGvhUkeDVsswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFCNjA3NEM4MTFENEI2MEQ3OUE2NERBMEI5REQzOEU5 QUU3OEI2OTAeFw0yNjExMDQwMjAwMzVaFw0yNjExMDUwNDEzMzVaMDMxMTAvBgNV BAMTKEFBODA4RTBDRDA5MjY5RUZBQkM1NTRFN0RGM0I4RUUyQjNERTEzQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeymi06iJntf7G4/AyJSwOyu2S JX6CbP5O/OrubHo36OgO4CCXHPFNuACMEZkiFEiIJVv9XG+kl/1d7UaxypIZS/gj HM8iYvjFsAga2cgRKic/y82FmNBS2WGs4VyV8iiScVoDI7R0ayXynEqoILLn6tqF A9tfca0HZBC6234PtV7/5zltJmoTWgAflqgeeHYADcoZof9VL5zxgM8m4rmggUe/ Xl4PmUSgoxZcFZ2PBzTnRirJZ/vKdSWLvafiEtj0K73CBylXyBOwZNYrTrCXH5Pk KSSrCPAoXY/SNOa686pSM3YZtxcxcYu9PgMCjcdkABJyLWBC1YzhjdPJVxE7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqoCODNCSae+rxVTn3zuO4rPeE8QwHwYDVR0j BBgwFoAUcbYHTIEdS2DXmmTaC53Tjprni2kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWE0NzIzMWYtMDJkZC00OWU4LWFhMjUtMmQ1NGMwYTk5OWNhLzAvNzFCNjA3NEM4 MTFENEI2MEQ3OUE2NERBMEI5REQzOEU5QUU3OEI2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MUI2MDc0QzgxMUQ0QjYwRDc5QTY0REEwQjlERDM4RTlBRTc4 QjY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWE0NzIzMWYtMDJkZC00OWU4LWFh MjUtMmQ1NGMwYTk5OWNhLzAvNzFCNjA3NEM4MTFENEI2MEQ3OUE2NERBMEI5REQz OEU5QUU3OEI2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB9zwlBsIkAtz8uY3mZ5uvLhyyhu/Bjla+Fj M8O4qjteG62656KMc+p6oahXDpeAIxTj5wz/CmvBhKg8OPPJgkbzR/sHbORmw/Sq f1KyL5bRO4mBy+90jHTuPwbnS/FnfQbip4pNg8HWq6u15c8GBBSOeB2FImcyniou lbznK4Lr2A+kHYd747tgaJYzDgm+TGOYaDX7yk58RUG/x0MYrD3qotK0nSs3zChe 9dqTG/Krl9mQERsWcNl4DI3OWA9UAO6TOGbzH6JDSvAYlMwBhmfOp7o4b+JXhIkM 7ZITnhmyTxpBG/Qo3U7FNi+AECyYv/jTmsZR1Oc8aQ22+Fo/KBM= -----END CERTIFICATE-----Generated at Wed Nov 4 11:26:31 2026 by rpki-client