$ rpki-client -vvf rpki-rsync.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.mft File: A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.mft (raw, json) Hash identifier: IlxtaIgfE5Ltq2mNKQWltUVpGvjI+QilhRjdCWlz2hw= Subject key identifier: 08:9F:C7:56:24:85:5B:7C:FC:18:40:9F:BD:3D:5C:22:8D:3D:49:04 Authority key identifier: A7:1E:2C:60:07:7F:6A:8C:A8:D3:EF:78:AF:C7:1B:07:29:45:8F:4C Certificate issuer: /CN=A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C Certificate serial: 7038ACE50FDAE3B59D18CBCDA292176C4C490893 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.mft Manifest number: 42 Signing time: Fri 19 Jun 2026 22:12:46 +0000 Manifest this update: Fri 19 Jun 2026 22:07:46 +0000 Manifest next update: Sun 21 Jun 2026 01:15:46 +0000 Files and hashes: 1: A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.crl (hash: iOdwG3BBJhF+SahmVNIUFBraNtSGr8B2N+YqGYNp3gg=) 2: 3130332e39342e3234382e302f32332d3234203d3e203633383738.roa (hash: 9oG14yFX0JqA/A4Gb5KSL8SJiMaQk5xxtaHwWhta8TI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.crl rsync://rpki-rsync.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 01:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:38:ac:e5:0f:da:e3:b5:9d:18:cb:cd:a2:92:17:6c:4c:49:08:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C Validity Not Before: Jun 19 22:07:46 2026 GMT Not After : Jun 21 01:15:46 2026 GMT Subject: CN=089FC75624855B7CFC18409FBD3D5C228D3D4904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a4:51:57:cd:2b:19:3f:1e:47:f9:e7:4d:89: f4:9a:a4:1e:4e:3c:8d:1a:95:d9:98:73:e8:8b:ab: d8:19:2e:dc:81:fd:89:85:e8:12:bf:46:ba:ef:01: 92:d3:4e:08:23:f6:ed:ff:fc:3b:c7:98:5f:a7:62: 11:b0:df:65:41:1a:eb:e6:f4:12:fd:44:73:f2:9d: 10:b2:f4:7c:46:2a:64:f7:6a:55:5a:b3:25:98:4d: f8:83:f9:8b:33:d9:8a:3e:9e:1a:c5:d6:ec:ba:ef: 59:a7:0f:52:41:cd:34:ea:2e:b4:7d:ea:91:c0:e5: c2:db:c9:97:ee:b8:2a:35:5c:d1:6e:f4:2e:c2:5c: fe:8b:87:10:64:e1:92:06:65:db:38:32:d5:20:91: 71:f8:10:91:a5:0f:4b:68:2c:a2:b9:27:63:3e:04: bc:a4:3c:70:5e:94:0d:2a:02:86:da:f9:17:c3:6a: 42:6b:54:5c:30:26:fe:b4:2e:d2:53:f2:0a:90:c4: 7d:e3:0c:3d:03:da:2d:63:7e:ca:aa:2e:89:d8:95: a7:aa:71:7b:36:d8:7f:19:f4:bb:71:7c:f0:de:e6: ba:4b:e1:03:21:04:bf:66:cd:23:00:34:61:2e:1e: 55:98:3e:ee:14:a5:41:8a:08:a0:23:95:42:82:f7: aa:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:9F:C7:56:24:85:5B:7C:FC:18:40:9F:BD:3D:5C:22:8D:3D:49:04 X509v3 Authority Key Identifier: keyid:A7:1E:2C:60:07:7F:6A:8C:A8:D3:EF:78:AF:C7:1B:07:29:45:8F:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/A71E2C60077F6A8CA8D3EF78AFC71B0729458F4C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:91:72:d0:c6:35:ba:5a:5b:e2:28:c0:57:84:9c:97:77:55: 8a:df:ff:5b:87:bf:41:da:68:32:41:98:4f:a9:38:0a:16:83: 48:cc:89:33:22:4e:f4:18:ec:79:fa:7b:31:05:4a:92:ba:18: 9f:cd:d5:88:bd:f0:cb:6d:d5:73:1f:f2:2e:dd:b0:41:8f:c8: 2d:db:5b:1a:28:c6:6d:55:60:f9:14:92:6c:47:61:11:fc:06: e4:0e:ed:b2:3b:e8:a4:13:1f:48:80:7b:7f:4f:dc:cf:e1:64: 8f:39:dc:d6:40:f5:45:03:b4:78:a2:c5:a3:d4:2f:42:0a:bc: 89:66:47:04:cf:9c:1d:29:23:f3:c3:da:87:05:06:eb:7f:92: e3:50:5d:0d:03:a2:db:44:27:9c:67:08:bd:7f:f3:f8:86:d8: 06:6f:28:28:4c:b0:da:dc:e3:dc:bf:2c:5c:d6:a2:ed:a9:34: 31:a4:0e:a7:0e:53:ae:fe:1f:75:1f:16:e3:0c:31:8d:87:dd: 44:52:56:1c:e1:79:cf:22:b2:de:c9:0f:84:51:54:7c:91:c4: 9a:f4:87:eb:ab:3f:7c:cb:d8:2f:8b:54:5e:69:7b:0e:71:e9: f1:7e:0a:57:40:91:bb:8e:cb:49:88:51:1d:ef:17:3f:a2:82: 79:29:09:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcDis5Q/a47WdGMvNopIXbExJCJMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcxRTJDNjAwNzdGNkE4Q0E4RDNFRjc4QUZDNzFCMDcy OTQ1OEY0QzAeFw0yNjA2MTkyMjA3NDZaFw0yNjA2MjEwMTE1NDZaMDMxMTAvBgNV BAMTKDA4OUZDNzU2MjQ4NTVCN0NGQzE4NDA5RkJEM0Q1QzIyOEQzRDQ5MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgpFFXzSsZPx5H+edNifSapB5O PI0aldmYc+iLq9gZLtyB/YmF6BK/RrrvAZLTTggj9u3//DvHmF+nYhGw32VBGuvm 9BL9RHPynRCy9HxGKmT3alVasyWYTfiD+Ysz2Yo+nhrF1uy671mnD1JBzTTqLrR9 6pHA5cLbyZfuuCo1XNFu9C7CXP6LhxBk4ZIGZds4MtUgkXH4EJGlD0toLKK5J2M+ BLykPHBelA0qAoba+RfDakJrVFwwJv60LtJT8gqQxH3jDD0D2i1jfsqqLonYlaeq cXs22H8Z9LtxfPDe5rpL4QMhBL9mzSMANGEuHlWYPu4UpUGKCKAjlUKC96oHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCJ/HViSFW3z8GECfvT1cIo09SQQwHwYDVR0j BBgwFoAUpx4sYAd/aoyo0+94r8cbBylFj0wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjhkNmNhOWItNTg0Zi00MGYxLWJkNjEtMTg1OGU3ZWJhM2VhLzAvQTcxRTJDNjAw NzdGNkE4Q0E4RDNFRjc4QUZDNzFCMDcyOTQ1OEY0Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNzFFMkM2MDA3N0Y2QThDQThEM0VGNzhBRkM3MUIwNzI5NDU4 RjRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjhkNmNhOWItNTg0Zi00MGYxLWJk NjEtMTg1OGU3ZWJhM2VhLzAvQTcxRTJDNjAwNzdGNkE4Q0E4RDNFRjc4QUZDNzFC MDcyOTQ1OEY0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIeRctDGNbpaW+IowFeEnJd3VYrf/1uHv0Ha aDJBmE+pOAoWg0jMiTMiTvQY7Hn6ezEFSpK6GJ/N1Yi98Mtt1XMf8i7dsEGPyC3b Wxooxm1VYPkUkmxHYRH8BuQO7bI76KQTH0iAe39P3M/hZI853NZA9UUDtHiixaPU L0IKvIlmRwTPnB0pI/PD2ocFBut/kuNQXQ0DottEJ5xnCL1/8/iG2AZvKChMsNrc 49y/LFzWou2pNDGkDqcOU67+H3UfFuMMMY2H3URSVhzhec8ist7JD4RRVHyRxJr0 h+urP3zL2C+LVF5pew5x6fF+CldAkbuOy0mIUR3vFz+ignkpCaw= -----END CERTIFICATE-----Generated at Sat Jun 20 09:18:06 2026 by rpki-client