$ rpki-client -vvf rpki-rsync.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.mft File: 71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.mft (raw, json) Hash identifier: jpKpadkoMgjjJ4E15uEOhr8ZjnoCu0lE3StcZmx4AeU= Subject key identifier: 0B:69:86:A2:D6:EC:98:0F:87:4C:13:03:43:BD:59:F8:37:B2:87:33 Authority key identifier: 71:B6:07:4C:81:1D:4B:60:D7:9A:64:DA:0B:9D:D3:8E:9A:E7:8B:69 Certificate issuer: /CN=71B6074C811D4B60D79A64DA0B9DD38E9AE78B69 Certificate serial: 43084DED17F34E23E5E0E7D96895A4E262C02311 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 18:01:43 +0000 Manifest this update: Tue 02 Jun 2026 17:56:43 +0000 Manifest next update: Wed 03 Jun 2026 18:47:43 +0000 Files and hashes: 1: 71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.crl (hash: ZTaG25edn1BAPiTwPLAWcOXYmGc/m4gmpag12lIzvt8=) 2: 3130332e3131322e3234342e302f32332d3234203d3e20313336313037.roa (hash: nN+scnQd2Bf1TJPwjOUkyJEyMV9Spsgs/notSfMcxTE=) 3: 3130332e3233332e3130322e302f32332d3234203d3e20313336313037.roa (hash: lwD0HUqunMfmcrBMFPjo8Wy84U1nW2Gl16rAlt9je9I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.crl rsync://rpki-rsync.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:08:4d:ed:17:f3:4e:23:e5:e0:e7:d9:68:95:a4:e2:62:c0:23:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71B6074C811D4B60D79A64DA0B9DD38E9AE78B69 Validity Not Before: Jun 2 17:56:43 2026 GMT Not After : Jun 3 18:47:43 2026 GMT Subject: CN=0B6986A2D6EC980F874C130343BD59F837B28733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0c:34:0b:36:c3:46:b6:7b:3f:6f:1f:78:dd: 55:c3:85:2e:43:2f:ee:15:46:c5:3c:8d:5a:d5:a3: eb:fd:01:2d:b7:e5:82:f6:f9:f7:1e:93:be:5f:5e: a0:63:f4:79:48:fd:8b:1d:9d:1b:44:15:95:59:85: 62:ce:98:e0:5a:91:9d:95:c9:3e:de:28:bd:75:0e: 42:fc:0e:27:4b:dd:a2:54:18:e8:68:1b:12:3f:23: e3:9e:04:b3:6c:51:e8:48:56:53:04:65:68:e2:7c: 38:2b:6a:ca:b4:c4:c2:d8:dd:3e:a2:20:46:51:03: 01:fc:8d:f4:d9:7e:8e:17:49:ea:84:ba:8b:77:50: 0b:ef:11:f2:a7:74:77:7e:de:0f:7d:82:e5:35:19: 54:07:44:5d:1b:b0:c0:a0:29:da:45:12:ef:39:2f: d5:e6:53:03:f6:d7:c7:b0:5e:e7:af:ef:83:e5:23: be:47:5d:fa:73:6d:bb:5c:e2:4f:09:80:1e:f3:ff: df:15:65:5b:c3:42:95:f9:c0:64:b5:42:37:75:3c: da:73:12:18:8a:8a:38:70:ba:ee:1b:bc:f1:22:a8: de:9c:0e:f4:37:bc:d1:5b:dd:a1:fc:01:99:43:5d: 8e:6f:ae:76:c7:83:aa:09:14:3d:13:46:9f:56:70: 60:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:69:86:A2:D6:EC:98:0F:87:4C:13:03:43:BD:59:F8:37:B2:87:33 X509v3 Authority Key Identifier: keyid:71:B6:07:4C:81:1D:4B:60:D7:9A:64:DA:0B:9D:D3:8E:9A:E7:8B:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:f0:4d:a3:21:8d:9d:e0:4f:c0:e8:5c:ca:70:58:03:e4:19: 69:ed:8d:2d:6d:f7:b0:be:8f:e4:cd:ab:1b:1b:0e:3b:8c:27: dd:62:3d:87:4a:27:32:59:b8:dd:03:93:9e:74:fc:86:10:8e: a4:d4:54:73:6e:1c:db:8e:2a:ca:e0:aa:1f:f9:c9:23:d8:ec: 56:cb:d7:af:1a:62:5c:25:6f:b8:64:8d:50:ab:b8:fc:6e:e4: eb:e3:d8:a6:02:fe:b5:c6:8d:d3:c4:f2:5f:2c:52:cf:53:59: c8:72:5b:21:12:ac:12:a7:6c:31:9f:63:26:6f:e9:37:38:8b: 38:0d:82:cc:e6:2a:51:22:89:6a:d0:0b:b9:e9:87:97:ac:18: cb:c9:cb:2d:f2:14:3d:e3:23:f3:ae:c8:e9:b7:7c:8c:d6:9e: 22:8b:be:d5:dc:87:34:05:7e:1c:9a:e3:44:aa:6a:b5:b8:2b: e6:7a:70:f1:c3:9c:88:8a:b5:a3:73:a3:0c:a9:af:b6:ed:a7: 4c:4e:8d:18:63:1c:e7:40:59:54:d6:8e:41:00:7c:a0:a4:ed: 5d:02:e9:8f:85:6d:0d:de:8c:07:65:04:11:49:4f:8c:59:5f: 3f:e1:86:07:33:e1:7f:05:9c:c1:ca:02:c2:40:91:a0:cf:e9: 45:52:fa:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQwhN7RfzTiPl4OfZaJWk4mLAIxEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFCNjA3NEM4MTFENEI2MEQ3OUE2NERBMEI5REQzOEU5 QUU3OEI2OTAeFw0yNjA2MDIxNzU2NDNaFw0yNjA2MDMxODQ3NDNaMDMxMTAvBgNV BAMTKDBCNjk4NkEyRDZFQzk4MEY4NzRDMTMwMzQzQkQ1OUY4MzdCMjg3MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7DDQLNsNGtns/bx943VXDhS5D L+4VRsU8jVrVo+v9AS235YL2+fcek75fXqBj9HlI/YsdnRtEFZVZhWLOmOBakZ2V yT7eKL11DkL8DidL3aJUGOhoGxI/I+OeBLNsUehIVlMEZWjifDgrasq0xMLY3T6i IEZRAwH8jfTZfo4XSeqEuot3UAvvEfKndHd+3g99guU1GVQHRF0bsMCgKdpFEu85 L9XmUwP218ewXuev74PlI75HXfpzbbtc4k8JgB7z/98VZVvDQpX5wGS1Qjd1PNpz EhiKijhwuu4bvPEiqN6cDvQ3vNFb3aH8AZlDXY5vrnbHg6oJFD0TRp9WcGAlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC2mGotbsmA+HTBMDQ71Z+DeyhzMwHwYDVR0j BBgwFoAUcbYHTIEdS2DXmmTaC53Tjprni2kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWE0NzIzMWYtMDJkZC00OWU4LWFhMjUtMmQ1NGMwYTk5OWNhLzAvNzFCNjA3NEM4 MTFENEI2MEQ3OUE2NERBMEI5REQzOEU5QUU3OEI2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MUI2MDc0QzgxMUQ0QjYwRDc5QTY0REEwQjlERDM4RTlBRTc4 QjY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWE0NzIzMWYtMDJkZC00OWU4LWFh MjUtMmQ1NGMwYTk5OWNhLzAvNzFCNjA3NEM4MTFENEI2MEQ3OUE2NERBMEI5REQz OEU5QUU3OEI2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACXwTaMhjZ3gT8DoXMpwWAPkGWntjS1t97C+ j+TNqxsbDjuMJ91iPYdKJzJZuN0Dk550/IYQjqTUVHNuHNuOKsrgqh/5ySPY7FbL 168aYlwlb7hkjVCruPxu5Ovj2KYC/rXGjdPE8l8sUs9TWchyWyESrBKnbDGfYyZv 6Tc4izgNgszmKlEiiWrQC7nph5esGMvJyy3yFD3jI/OuyOm3fIzWniKLvtXchzQF fhya40SqarW4K+Z6cPHDnIiKtaNzowypr7btp0xOjRhjHOdAWVTWjkEAfKCk7V0C 6Y+FbQ3ejAdlBBFJT4xZXz/hhgcz4X8FnMHKAsJAkaDP6UVS+gw= -----END CERTIFICATE-----Generated at Wed Jun 3 03:53:42 2026 by rpki-client