$ rpki-client -vvf rpki-rsync.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.mft File: 71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.mft (raw, json) Hash identifier: Mx3JcjUbPZPRe4CzFi8Ab59chktbn3boqxFCFavhpKs= Subject key identifier: 14:4F:D9:BD:26:9A:49:02:87:26:D4:BD:3A:75:FA:E7:75:FB:8E:4B Authority key identifier: 71:B6:07:4C:81:1D:4B:60:D7:9A:64:DA:0B:9D:D3:8E:9A:E7:8B:69 Certificate issuer: /CN=71B6074C811D4B60D79A64DA0B9DD38E9AE78B69 Certificate serial: 420859D207841D228FFD23C7E9C13F6FAEAE48CB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 16:37:05 +0000 Manifest this update: Mon 20 Jul 2026 16:32:05 +0000 Manifest next update: Tue 21 Jul 2026 19:52:05 +0000 Files and hashes: 1: 3130332e3233332e3130322e302f32332d3234203d3e20313336313037.roa (hash: lwD0HUqunMfmcrBMFPjo8Wy84U1nW2Gl16rAlt9je9I=) 2: 71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.crl (hash: DoMTXVUUoySWkflGoaBqwX9MEdoA3ly9Aw2iVO02Y+0=) 3: 3130332e3131322e3234342e302f32332d3234203d3e20313336313037.roa (hash: nN+scnQd2Bf1TJPwjOUkyJEyMV9Spsgs/notSfMcxTE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.crl rsync://rpki-rsync.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 19:52:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:08:59:d2:07:84:1d:22:8f:fd:23:c7:e9:c1:3f:6f:ae:ae:48:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71B6074C811D4B60D79A64DA0B9DD38E9AE78B69 Validity Not Before: Jul 20 16:32:05 2026 GMT Not After : Jul 21 19:52:05 2026 GMT Subject: CN=144FD9BD269A49028726D4BD3A75FAE775FB8E4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c8:b4:eb:7d:4c:69:44:e7:e9:4a:7a:a9:d8: 78:40:85:33:2f:f1:6e:c4:2a:ac:38:2f:c1:b6:9c: b5:78:d7:73:b6:e3:64:e1:0c:6a:a5:bc:7a:78:f6: f9:3e:74:3f:8c:08:80:ab:ae:a9:7d:fa:aa:f1:89: 87:22:b0:29:e1:36:c3:2e:df:58:46:00:49:79:46: 30:dd:c4:e2:33:eb:0b:d7:68:0b:90:52:6a:66:87: 07:25:ae:f8:d6:1e:ef:c1:61:fe:64:26:19:eb:e8: c9:97:45:0d:f6:a3:dd:be:e7:8e:ac:a9:81:be:a4: 02:0d:5d:b0:ab:9d:5e:01:40:1d:ac:28:46:3a:b4: e8:2a:9f:b4:e0:19:69:b7:08:45:1d:c7:b9:12:98: 05:7f:1c:8c:72:0f:06:5d:ca:72:b1:c7:12:9b:ce: 09:04:b4:c6:a6:14:2c:3a:37:48:fd:94:a0:b4:bb: 6e:08:25:fa:36:e7:57:83:c3:7e:7e:0a:57:a2:09: 43:05:ea:3c:d8:ab:6c:4f:1d:3d:97:9c:6b:2e:7b: 4e:8f:d8:47:90:38:c5:45:f2:02:36:02:b4:34:9e: 21:d2:ac:c1:fa:f7:b3:fb:7b:93:a1:28:3b:84:f6: d4:9d:95:f0:c4:1a:42:3e:42:0f:6f:d1:c1:25:95: 55:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:4F:D9:BD:26:9A:49:02:87:26:D4:BD:3A:75:FA:E7:75:FB:8E:4B X509v3 Authority Key Identifier: keyid:71:B6:07:4C:81:1D:4B:60:D7:9A:64:DA:0B:9D:D3:8E:9A:E7:8B:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:30:a3:9a:be:da:97:22:6e:f8:55:c0:c9:09:59:a8:77:45: 88:16:26:4c:d8:be:4d:2e:20:ee:01:fb:cd:d2:a6:3a:77:c1: b7:ab:ae:3a:fa:0c:a7:c0:ad:f1:10:9c:e2:0c:e7:6a:84:78: 71:46:1b:45:b9:5d:4d:dd:17:4a:f5:d4:12:d4:e7:02:f7:85: d6:c9:2e:f5:e1:84:8f:41:79:9a:7e:3a:d4:43:65:b4:7f:5e: 76:aa:eb:54:d2:78:c5:79:6f:08:7c:8a:54:da:89:ea:72:31: 32:09:29:19:2a:f8:83:44:42:f9:fb:a8:48:9d:ea:aa:16:07: ee:69:5f:0c:27:64:7d:1d:b3:14:9e:68:6a:b0:56:7e:bb:b6: 1c:85:67:4f:9a:6a:86:76:03:44:ba:cc:00:e6:b5:85:33:32: 79:a2:59:78:9b:e4:87:14:38:64:e5:0f:d1:2f:e6:7b:a1:70: ff:d9:82:ed:b3:f5:96:a0:8a:1c:dc:4a:5f:32:59:5f:0c:cd: 28:20:9e:20:ef:26:04:fc:44:d3:44:20:67:b7:9f:a5:e2:47: 19:e4:c1:05:bb:27:b8:48:fb:e2:8c:6d:2b:09:3a:49:f4:01: e8:8a:b6:ee:30:95:f5:50:94:2a:6d:18:58:59:41:ec:88:8a: cc:52:8c:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQghZ0geEHSKP/SPH6cE/b66uSMswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFCNjA3NEM4MTFENEI2MEQ3OUE2NERBMEI5REQzOEU5 QUU3OEI2OTAeFw0yNjA3MjAxNjMyMDVaFw0yNjA3MjExOTUyMDVaMDMxMTAvBgNV BAMTKDE0NEZEOUJEMjY5QTQ5MDI4NzI2RDRCRDNBNzVGQUU3NzVGQjhFNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuyLTrfUxpROfpSnqp2HhAhTMv 8W7EKqw4L8G2nLV413O242ThDGqlvHp49vk+dD+MCICrrql9+qrxiYcisCnhNsMu 31hGAEl5RjDdxOIz6wvXaAuQUmpmhwclrvjWHu/BYf5kJhnr6MmXRQ32o92+546s qYG+pAINXbCrnV4BQB2sKEY6tOgqn7TgGWm3CEUdx7kSmAV/HIxyDwZdynKxxxKb zgkEtMamFCw6N0j9lKC0u24IJfo251eDw35+CleiCUMF6jzYq2xPHT2XnGsue06P 2EeQOMVF8gI2ArQ0niHSrMH697P7e5OhKDuE9tSdlfDEGkI+Qg9v0cEllVVRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFE/ZvSaaSQKHJtS9OnX653X7jkswHwYDVR0j BBgwFoAUcbYHTIEdS2DXmmTaC53Tjprni2kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWE0NzIzMWYtMDJkZC00OWU4LWFhMjUtMmQ1NGMwYTk5OWNhLzAvNzFCNjA3NEM4 MTFENEI2MEQ3OUE2NERBMEI5REQzOEU5QUU3OEI2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MUI2MDc0QzgxMUQ0QjYwRDc5QTY0REEwQjlERDM4RTlBRTc4 QjY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWE0NzIzMWYtMDJkZC00OWU4LWFh MjUtMmQ1NGMwYTk5OWNhLzAvNzFCNjA3NEM4MTFENEI2MEQ3OUE2NERBMEI5REQz OEU5QUU3OEI2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADwwo5q+2pcibvhVwMkJWah3RYgWJkzYvk0u IO4B+83Spjp3wberrjr6DKfArfEQnOIM52qEeHFGG0W5XU3dF0r11BLU5wL3hdbJ LvXhhI9BeZp+OtRDZbR/Xnaq61TSeMV5bwh8ilTaiepyMTIJKRkq+INEQvn7qEid 6qoWB+5pXwwnZH0dsxSeaGqwVn67thyFZ0+aaoZ2A0S6zADmtYUzMnmiWXib5IcU OGTlD9Ev5nuhcP/Zgu2z9ZagihzcSl8yWV8MzSggniDvJgT8RNNEIGe3n6XiRxnk wQW7J7hI++KMbSsJOkn0AeiKtu4wlfVQlCptGFhZQeyIisxSjEA= -----END CERTIFICATE-----Generated at Tue Jul 21 08:38:17 2026 by rpki-client