$ rpki-client -vvf repo-rpki.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/1/71541EF74561083EF5B89C20FF0ECD5E565A4C9E.mft File: 71541EF74561083EF5B89C20FF0ECD5E565A4C9E.mft (raw, json) Hash identifier: T5PFI529AMW2J6VmnCfPCteWT63pMCd9/VnQE/sH7Bs= Subject key identifier: 96:F1:90:91:77:C5:79:A2:EC:7A:B7:3B:BA:38:20:F6:FB:6C:33:BE Authority key identifier: 71:54:1E:F7:45:61:08:3E:F5:B8:9C:20:FF:0E:CD:5E:56:5A:4C:9E Certificate issuer: /CN=71541EF74561083EF5B89C20FF0ECD5E565A4C9E Certificate serial: 3CF0FDC1A7576D37C9346AF8664A15C92A0EF91A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/71541EF74561083EF5B89C20FF0ECD5E565A4C9E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/1/71541EF74561083EF5B89C20FF0ECD5E565A4C9E.mft Manifest number: 07 Signing time: Mon 20 Apr 2026 13:42:20 +0000 Manifest this update: Mon 20 Apr 2026 13:37:20 +0000 Manifest next update: Thu 23 Apr 2026 15:47:20 +0000 Files and hashes: 1: 71541EF74561083EF5B89C20FF0ECD5E565A4C9E.crl (hash: 9uBMqf7mxvDpEGZf5F7icl/HA4gNokjGgRokKik8g8E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/1/71541EF74561083EF5B89C20FF0ECD5E565A4C9E.crl rsync://repo-rpki.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/1/71541EF74561083EF5B89C20FF0ECD5E565A4C9E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/71541EF74561083EF5B89C20FF0ECD5E565A4C9E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 15:47:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:f0:fd:c1:a7:57:6d:37:c9:34:6a:f8:66:4a:15:c9:2a:0e:f9:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71541EF74561083EF5B89C20FF0ECD5E565A4C9E Validity Not Before: Apr 20 13:37:20 2026 GMT Not After : Apr 23 15:47:20 2026 GMT Subject: CN=96F1909177C579A2EC7AB73BBA3820F6FB6C33BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d0:45:88:ea:9e:cc:89:90:61:77:e3:7c:9b: 93:81:0c:85:e1:ff:51:0d:cc:8d:9b:fa:d3:85:9e: 70:42:b9:b8:eb:03:79:97:62:eb:18:7b:59:64:5e: d6:80:5e:e0:43:41:ad:96:42:83:95:e6:05:ea:ea: 2d:69:30:b3:96:88:50:f5:e5:69:df:ad:37:94:ea: 1a:52:57:31:b6:d1:5d:97:b2:44:67:b7:e8:fc:d8: d2:ee:f8:29:ee:fd:62:f7:fe:82:7c:94:55:b6:1e: 55:4a:b3:00:50:b7:b4:a5:21:2e:6e:7b:b6:69:ec: 8a:62:13:13:9c:23:1d:98:3f:b4:f8:45:d4:1d:fd: d5:9e:72:e3:b1:2a:05:01:a1:c8:16:ba:b9:75:34: c4:8f:af:01:b1:9d:f8:1c:62:f8:f0:c9:8d:5f:56: 3a:51:6d:88:30:4e:f1:c8:ff:36:8f:f5:af:02:e3: d6:b0:13:6b:dd:67:d3:04:91:e3:e2:0c:ad:cd:1f: eb:27:2c:cd:7a:23:22:82:03:64:58:16:65:16:f1: f4:b2:7e:9d:4c:85:b1:88:f4:97:c9:e3:1c:26:6f: 60:12:1d:cb:6e:4e:2a:70:c2:1e:6a:1a:41:08:85: 24:fb:17:3a:0e:54:a5:d3:b3:5a:12:fa:bb:e6:50: 7f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:F1:90:91:77:C5:79:A2:EC:7A:B7:3B:BA:38:20:F6:FB:6C:33:BE X509v3 Authority Key Identifier: keyid:71:54:1E:F7:45:61:08:3E:F5:B8:9C:20:FF:0E:CD:5E:56:5A:4C:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/1/71541EF74561083EF5B89C20FF0ECD5E565A4C9E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/71541EF74561083EF5B89C20FF0ECD5E565A4C9E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/1/71541EF74561083EF5B89C20FF0ECD5E565A4C9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:a2:1e:d7:40:63:c8:7b:97:c3:0b:f6:83:4f:2f:71:fb:42: 4d:76:d1:de:ec:86:d6:f4:94:df:41:58:b8:10:64:50:f7:25: 1d:5f:b2:4c:7e:f4:4b:c8:a7:2e:7d:dc:86:69:f2:1e:b1:62: 15:9e:fe:e2:22:89:10:2d:c8:eb:cf:f3:aa:f9:97:31:26:e3: 27:6f:32:24:e1:fc:a0:63:3f:bb:f1:42:fe:5c:dc:f3:b5:2d: 4a:b9:9c:e8:c6:86:2a:82:6c:93:75:e8:67:cb:4e:a8:32:c0: 11:84:1b:fb:76:84:fc:75:77:6f:20:99:f4:a4:bc:d4:94:12: bd:56:1d:d8:a2:28:2f:59:a8:be:96:87:64:10:ec:2a:06:87: 33:e1:eb:ee:7b:af:58:5a:39:13:72:0a:66:3e:e4:6e:aa:fb: fc:b1:2e:d9:ad:a8:8c:fe:26:bc:fd:7f:dc:7b:5f:a6:c6:79: af:ef:98:3b:40:63:6e:5b:f1:77:3b:93:ef:09:21:70:d2:55: 0c:26:85:bb:43:60:85:27:ff:fe:9b:a0:77:32:e4:25:c3:37: de:fb:e4:54:6c:4b:ef:80:94:79:6b:a5:f7:dd:11:3e:84:4b: 0c:f2:b8:18:fa:cc:f0:10:c4:2b:f4:5e:cd:9e:07:80:fc:23: be:ca:47:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPPD9wadXbTfJNGr4ZkoVySoO+RowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE1NDFFRjc0NTYxMDgzRUY1Qjg5QzIwRkYwRUNENUU1 NjVBNEM5RTAeFw0yNjA0MjAxMzM3MjBaFw0yNjA0MjMxNTQ3MjBaMDMxMTAvBgNV BAMTKDk2RjE5MDkxNzdDNTc5QTJFQzdBQjczQkJBMzgyMEY2RkI2QzMzQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc0EWI6p7MiZBhd+N8m5OBDIXh /1ENzI2b+tOFnnBCubjrA3mXYusYe1lkXtaAXuBDQa2WQoOV5gXq6i1pMLOWiFD1 5WnfrTeU6hpSVzG20V2XskRnt+j82NLu+Cnu/WL3/oJ8lFW2HlVKswBQt7SlIS5u e7Zp7IpiExOcIx2YP7T4RdQd/dWecuOxKgUBocgWurl1NMSPrwGxnfgcYvjwyY1f VjpRbYgwTvHI/zaP9a8C49awE2vdZ9MEkePiDK3NH+snLM16IyKCA2RYFmUW8fSy fp1MhbGI9JfJ4xwmb2ASHctuTipwwh5qGkEIhST7FzoOVKXTs1oS+rvmUH/JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlvGQkXfFeaLserc7ujgg9vtsM74wHwYDVR0j BBgwFoAUcVQe90VhCD71uJwg/w7NXlZaTJ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MDY4NTMwNy04NGVhLTRmZTMtYmI3Yy1mYjI4OTUzNzg3NDIvMS83MTU0MUVGNzQ1 NjEwODNFRjVCODlDMjBGRjBFQ0Q1RTU2NUE0QzlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzAvNzE1NDFFRjc0NTYxMDgzRUY1Qjg5QzIwRkYwRUNENUU1NjVB NEM5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzA2ODUzMDctODRlYS00ZmUzLWJi N2MtZmIyODk1Mzc4NzQyLzEvNzE1NDFFRjc0NTYxMDgzRUY1Qjg5QzIwRkYwRUNE NUU1NjVBNEM5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKOiHtdAY8h7l8ML9oNPL3H7Qk120d7shtb0 lN9BWLgQZFD3JR1fskx+9EvIpy593IZp8h6xYhWe/uIiiRAtyOvP86r5lzEm4ydv MiTh/KBjP7vxQv5c3PO1LUq5nOjGhiqCbJN16GfLTqgywBGEG/t2hPx1d28gmfSk vNSUEr1WHdiiKC9ZqL6Wh2QQ7CoGhzPh6+57r1haORNyCmY+5G6q+/yxLtmtqIz+ Jrz9f9x7X6bGea/vmDtAY25b8Xc7k+8JIXDSVQwmhbtDYIUn//6boHcy5CXDN977 5FRsS++AlHlrpffdET6ESwzyuBj6zPAQxCv0Xs2eB4D8I77KRyI= -----END CERTIFICATE-----Generated at Wed Apr 22 02:54:47 2026 by rpki-client