$ rpki-client -vvf repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft File: A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft (raw, json) Hash identifier: vyfK+iggz5VOyp0GLsbp+wLjjqhgcDhbwKD9mSRoO5Q= Subject key identifier: 47:F7:49:44:AA:25:05:47:B5:5E:D1:0F:B1:DA:8D:30:C1:E9:F2:24 Authority key identifier: A7:1B:AA:66:62:38:47:B7:BD:9E:A7:C4:0B:CB:CA:85:5E:52:E8:EB Certificate issuer: /CN=A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB Certificate serial: 0133AFB57B4AE574060A7944AAEED4AEAB49D766 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft Manifest number: 0112 Signing time: Mon 20 Apr 2026 08:51:07 +0000 Manifest this update: Mon 20 Apr 2026 08:46:07 +0000 Manifest next update: Thu 23 Apr 2026 17:50:07 +0000 Files and hashes: 1: A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.crl (hash: HWPAVJrqXrsOhHb/oS34NyHSGEtjEoEsSX5VkJaWCXo=) 2: 3136302e32302e33362e302f32332d3234203d3e20313532373631.roa (hash: e3Ye+8KBt0e+GgLTg5uGXR8hoI4RqWYobVVv7ZziGMY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.crl rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:50:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:33:af:b5:7b:4a:e5:74:06:0a:79:44:aa:ee:d4:ae:ab:49:d7:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB Validity Not Before: Apr 20 08:46:07 2026 GMT Not After : Apr 23 17:50:07 2026 GMT Subject: CN=47F74944AA250547B55ED10FB1DA8D30C1E9F224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:dc:5c:4f:53:b8:87:7e:ce:62:9c:58:da:e6: 6c:14:ba:32:7f:0e:ca:f8:7c:3f:fd:72:43:42:77: 0f:f0:6d:81:c5:5e:b2:44:db:48:c4:f6:32:ad:0f: 9a:87:f6:57:3c:91:56:bb:85:d7:53:29:97:84:fd: 2a:07:13:4b:2a:2f:ab:ba:e4:9e:4c:01:b0:31:88: 27:fb:39:29:78:61:96:79:4e:06:2b:2b:4b:ff:38: 2a:f8:37:4b:e7:99:ac:32:ec:20:8e:f5:d8:1a:5c: 55:3a:de:1e:74:d1:69:94:4a:2c:2f:84:9a:d0:ea: a4:23:6a:29:6b:f6:33:42:3f:78:c3:a6:15:cb:7c: e1:19:18:4b:6f:52:4f:9a:42:3d:ec:6f:39:e9:61: 51:d5:a5:27:b5:32:4e:67:7b:07:20:d0:cc:48:54: bc:dd:aa:ab:35:17:1f:39:e8:98:e4:38:ea:da:2b: 9e:9c:e3:16:a9:08:c4:83:3c:84:cd:32:06:aa:95: a1:7e:87:38:a4:72:db:49:56:ed:89:19:11:a0:57: 86:65:b9:13:36:90:5c:68:5e:03:f2:b2:30:79:c0: 30:ac:ad:68:94:d3:03:a0:d3:07:9b:f4:9e:c5:29: a3:ac:2b:43:b6:a2:47:dd:70:b9:cc:5a:da:0e:f6: af:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:F7:49:44:AA:25:05:47:B5:5E:D1:0F:B1:DA:8D:30:C1:E9:F2:24 X509v3 Authority Key Identifier: keyid:A7:1B:AA:66:62:38:47:B7:BD:9E:A7:C4:0B:CB:CA:85:5E:52:E8:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:b9:60:60:bd:96:e0:3b:f0:e8:d8:5a:8c:a4:21:04:da:fb: c1:f1:3c:ee:a5:a6:bf:4d:0f:26:70:42:bd:f0:8b:3e:8f:e1: 4a:24:24:f4:0c:bf:72:59:e1:c2:16:0b:87:2b:81:e4:2c:84: 8e:7f:9d:7f:b2:25:5f:e5:2d:03:4d:58:9b:32:f2:20:ca:78: 6b:1b:4f:21:f0:90:4b:f4:cb:a0:19:e2:c0:2b:f1:70:c7:fd: 2e:64:68:da:3a:82:73:26:2c:a4:06:67:9c:59:e7:16:f2:58: eb:74:98:31:32:d9:79:dc:ae:53:10:75:3d:2a:00:b1:fb:62: d5:e2:f2:5c:21:af:82:e8:07:f1:54:cd:92:16:f1:53:c6:f0: 79:2a:3e:71:05:a9:c0:44:4c:fc:81:49:89:99:9e:c3:c9:72: d3:f7:b5:19:4f:d8:0f:4a:df:d9:3e:7d:07:84:32:b7:70:2e: da:80:fc:5c:aa:ed:4c:c5:e8:ad:f1:b2:7f:54:17:01:15:74: 90:a6:0e:f5:5c:3d:45:e9:41:5a:aa:c1:b6:6e:35:8b:96:0d: 61:24:e8:4f:55:0d:09:bb:9f:8d:a9:3c:61:d1:37:f6:02:2b: b9:c9:af:fe:b5:34:b0:2b:9d:6f:d4:ce:7e:a5:01:22:05:26: de:28:57:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUATOvtXtK5XQGCnlEqu7UrqtJ12YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcxQkFBNjY2MjM4NDdCN0JEOUVBN0M0MEJDQkNBODU1 RTUyRThFQjAeFw0yNjA0MjAwODQ2MDdaFw0yNjA0MjMxNzUwMDdaMDMxMTAvBgNV BAMTKDQ3Rjc0OTQ0QUEyNTA1NDdCNTVFRDEwRkIxREE4RDMwQzFFOUYyMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC43FxPU7iHfs5inFja5mwUujJ/ Dsr4fD/9ckNCdw/wbYHFXrJE20jE9jKtD5qH9lc8kVa7hddTKZeE/SoHE0sqL6u6 5J5MAbAxiCf7OSl4YZZ5TgYrK0v/OCr4N0vnmawy7CCO9dgaXFU63h500WmUSiwv hJrQ6qQjailr9jNCP3jDphXLfOEZGEtvUk+aQj3sbznpYVHVpSe1Mk5newcg0MxI VLzdqqs1Fx856JjkOOraK56c4xapCMSDPITNMgaqlaF+hzikcttJVu2JGRGgV4Zl uRM2kFxoXgPysjB5wDCsrWiU0wOg0web9J7FKaOsK0O2okfdcLnMWtoO9q8XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR/dJRKolBUe1XtEPsdqNMMHp8iQwHwYDVR0j BBgwFoAUpxuqZmI4R7e9nqfEC8vKhV5S6OswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODFlZjQ0MC01YTVmLTRhNGYtYjUwOS1iMTAzMjQ1YzVjZjEvMC9BNzFCQUE2NjYy Mzg0N0I3QkQ5RUE3QzQwQkNCQ0E4NTVFNTJFOEVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTcxQkFBNjY2MjM4NDdCN0JEOUVBN0M0MEJDQkNBODU1RTUy RThFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjgxZWY0NDAtNWE1Zi00YTRmLWI1 MDktYjEwMzI0NWM1Y2YxLzAvQTcxQkFBNjY2MjM4NDdCN0JEOUVBN0M0MEJDQkNB ODU1RTUyRThFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHu5YGC9luA78OjYWoykIQTa+8HxPO6lpr9N DyZwQr3wiz6P4UokJPQMv3JZ4cIWC4crgeQshI5/nX+yJV/lLQNNWJsy8iDKeGsb TyHwkEv0y6AZ4sAr8XDH/S5kaNo6gnMmLKQGZ5xZ5xbyWOt0mDEy2XncrlMQdT0q ALH7YtXi8lwhr4LoB/FUzZIW8VPG8HkqPnEFqcBETPyBSYmZnsPJctP3tRlP2A9K 39k+fQeEMrdwLtqA/Fyq7UzF6K3xsn9UFwEVdJCmDvVcPUXpQVqqwbZuNYuWDWEk 6E9VDQm7n42pPGHRN/YCK7nJr/61NLArnW/Uzn6lASIFJt4oV40= -----END CERTIFICATE-----Generated at Wed Apr 22 04:54:20 2026 by rpki-client