$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.mft File: F71AC7E6F0D6271DD977776557E16AE02A4AD77C.mft (raw, json) Hash identifier: rw6XCSyZK5P2tYQDXYHpb+wk5yiQ7DpqH7OCEIDg5cU= Subject key identifier: E5:8A:7C:D8:A0:99:0D:F4:6C:04:19:F5:92:7C:3C:D0:C4:9B:98:D3 Authority key identifier: F7:1A:C7:E6:F0:D6:27:1D:D9:77:77:65:57:E1:6A:E0:2A:4A:D7:7C Certificate issuer: /CN=F71AC7E6F0D6271DD977776557E16AE02A4AD77C Certificate serial: 1447D692C41C7F543EC21D4F2EA421C9A1EE046D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.mft Manifest number: F9 Signing time: Wed 04 Nov 2026 17:05:05 +0000 Manifest this update: Wed 04 Nov 2026 17:00:05 +0000 Manifest next update: Thu 05 Nov 2026 19:55:05 +0000 Files and hashes: 1: F71AC7E6F0D6271DD977776557E16AE02A4AD77C.crl (hash: a0OYBE0G6iDj16B2Xa8rC+QrcsNtqOidhp/zuqrDjHI=) 2: 323030313a6466333a393263303a3a2f34382d3438203d3e20313532343231.roa (hash: IbtvV4jtC6vMhj+esxB6AgoSBLjpNUY18dIXWSiEQx4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.crl rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 11:48:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:47:d6:92:c4:1c:7f:54:3e:c2:1d:4f:2e:a4:21:c9:a1:ee:04:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F71AC7E6F0D6271DD977776557E16AE02A4AD77C Validity Not Before: Nov 4 17:00:05 2026 GMT Not After : Nov 5 19:55:05 2026 GMT Subject: CN=E58A7CD8A0990DF46C0419F5927C3CD0C49B98D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:00:ed:b0:87:a9:a7:a4:f5:f7:2d:a8:27:d9: 6e:0c:e4:50:59:be:a4:3d:ea:9d:78:06:06:7e:e8: 04:88:0e:84:9a:44:51:5b:16:bf:a7:6f:2b:d5:49: 94:f8:b9:9b:b6:dc:03:2c:b7:fa:36:58:ad:3e:44: 5d:ca:bf:ab:70:14:d6:4b:c0:af:3d:9b:6b:20:46: 76:5f:f0:73:d1:4f:3a:45:e6:d1:e0:40:f6:32:ce: 16:bc:da:4d:94:df:4a:07:b5:c7:10:21:b2:45:1f: 18:3b:62:a8:60:89:5a:6f:3d:4f:02:fd:0c:4b:62: 0c:e1:d5:09:c8:17:f2:de:e3:7c:3a:a9:19:62:b1: 14:73:3a:b4:f4:ed:97:09:2b:1e:2c:d5:09:a8:18: ac:10:16:af:99:b7:83:73:4e:4c:11:32:df:a8:fc: 84:3a:71:7a:9e:f9:a3:91:5c:ec:46:88:4b:fb:a1: e5:aa:a9:3b:d0:2a:41:3d:74:c1:c6:6f:9e:98:1d: b2:f6:34:84:fb:93:6f:2e:fa:f4:0d:4a:89:1a:47: f0:62:a6:bf:4e:c8:1f:98:5e:88:56:1a:fc:91:1a: 7b:e4:a0:ed:90:6f:c6:36:b3:c9:00:b5:ff:ff:5f: 19:35:d2:47:b3:ae:9f:e3:94:ee:08:c9:42:b6:4f: 8b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:8A:7C:D8:A0:99:0D:F4:6C:04:19:F5:92:7C:3C:D0:C4:9B:98:D3 X509v3 Authority Key Identifier: keyid:F7:1A:C7:E6:F0:D6:27:1D:D9:77:77:65:57:E1:6A:E0:2A:4A:D7:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/1/F71AC7E6F0D6271DD977776557E16AE02A4AD77C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:1e:cd:f4:9f:bd:1a:0e:46:99:6b:39:00:c3:4c:87:f1:26: 47:6b:9c:60:3d:7b:1b:29:22:d5:ae:a3:0e:b4:5a:06:6e:6c: 75:2f:8d:8c:72:2e:7d:5d:02:31:40:9f:e6:cd:ce:90:57:7e: b3:fd:55:c2:5f:53:72:b8:59:3b:ca:18:84:f1:c4:56:a5:f6: fd:28:61:26:d4:20:e3:99:b0:17:48:df:66:8d:cd:d5:f5:33: e4:a1:8c:d0:a0:50:78:75:83:7c:eb:a3:b4:3d:f6:e4:56:3b: 4c:0a:82:c0:78:18:f4:df:5b:2f:ea:9c:20:ff:21:5c:9e:f0: 4e:1d:c9:b9:5d:2d:fd:40:49:82:16:56:bc:d4:15:61:d1:ef: d7:d1:7c:c7:06:36:7d:3a:b0:9c:86:da:ea:a8:63:a8:73:bb: 4b:d5:e7:2a:5f:65:38:37:67:a3:a1:db:51:66:5f:9e:cc:34: 7e:e7:da:40:a8:c6:1a:74:52:40:c0:a4:d1:58:24:83:9b:a0: 38:6b:4a:2e:e7:ed:fc:1e:46:58:d2:30:f4:5e:3e:e5:84:e1: d1:1f:c6:e4:74:0d:76:3d:84:f9:4e:8b:e9:7a:02:2d:c1:07: 33:b0:5b:0c:2b:29:24:20:07:ec:7a:aa:f4:f7:16:4f:e6:b6: ae:12:87:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFEfWksQcf1Q+wh1PLqQhyaHuBG0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjcxQUM3RTZGMEQ2MjcxREQ5Nzc3NzY1NTdFMTZBRTAy QTRBRDc3QzAeFw0yNjExMDQxNzAwMDVaFw0yNjExMDUxOTU1MDVaMDMxMTAvBgNV BAMTKEU1OEE3Q0Q4QTA5OTBERjQ2QzA0MTlGNTkyN0MzQ0QwQzQ5Qjk4RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZAO2wh6mnpPX3Lagn2W4M5FBZ vqQ96p14BgZ+6ASIDoSaRFFbFr+nbyvVSZT4uZu23AMst/o2WK0+RF3Kv6twFNZL wK89m2sgRnZf8HPRTzpF5tHgQPYyzha82k2U30oHtccQIbJFHxg7YqhgiVpvPU8C /QxLYgzh1QnIF/Le43w6qRlisRRzOrT07ZcJKx4s1QmoGKwQFq+Zt4NzTkwRMt+o /IQ6cXqe+aORXOxGiEv7oeWqqTvQKkE9dMHGb56YHbL2NIT7k28u+vQNSokaR/Bi pr9OyB+YXohWGvyRGnvkoO2Qb8Y2s8kAtf//Xxk10kezrp/jlO4IyUK2T4vFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5Yp82KCZDfRsBBn1knw80MSbmNMwHwYDVR0j BBgwFoAU9xrH5vDWJx3Zd3dlV+Fq4CpK13wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWE0Zjc5MzQtY2RjNy00MDgyLTgzZmItZGY3ZDRmODIxOWFmLzEvRjcxQUM3RTZG MEQ2MjcxREQ5Nzc3NzY1NTdFMTZBRTAyQTRBRDc3Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GNzFBQzdFNkYwRDYyNzFERDk3Nzc3NjU1N0UxNkFFMDJBNEFE NzdDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWE0Zjc5MzQtY2RjNy00MDgyLTgz ZmItZGY3ZDRmODIxOWFmLzEvRjcxQUM3RTZGMEQ2MjcxREQ5Nzc3NzY1NTdFMTZB RTAyQTRBRDc3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEAezfSfvRoORplrOQDDTIfxJkdrnGA9exsp ItWuow60WgZubHUvjYxyLn1dAjFAn+bNzpBXfrP9VcJfU3K4WTvKGITxxFal9v0o YSbUIOOZsBdI32aNzdX1M+ShjNCgUHh1g3zro7Q99uRWO0wKgsB4GPTfWy/qnCD/ IVye8E4dybldLf1ASYIWVrzUFWHR79fRfMcGNn06sJyG2uqoY6hzu0vV5ypfZTg3 Z6Oh21FmX57MNH7n2kCoxhp0UkDApNFYJIOboDhrSi7n7fweRljSMPRePuWE4dEf xuR0DXY9hPlOi+l6Ai3BBzOwWwwrKSQgB+x6qvT3Fk/mtq4Shxw= -----END CERTIFICATE-----Generated at Wed Nov 4 22:43:23 2026 by rpki-client