$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.mft File: 71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.mft (raw, json) Hash identifier: peY0SJo7UMHjXxHR5wjsJemylq1GvXuuIoGwhxYI7mc= Subject key identifier: 29:2D:D6:C2:73:8D:01:9D:BE:D3:90:C9:20:4F:BB:BD:8F:29:A8:DB Authority key identifier: 71:EA:AE:94:B4:B9:7C:5E:D5:3A:52:F7:20:BB:E5:EA:78:EF:DE:5B Certificate issuer: /CN=71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B Certificate serial: 285184241B9EAABC35E9FD153A519A6318CC54A1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.mft Manifest number: EB Signing time: Sun 25 Oct 2026 18:19:34 +0000 Manifest this update: Sun 25 Oct 2026 18:14:34 +0000 Manifest next update: Mon 26 Oct 2026 20:34:34 +0000 Files and hashes: 1: 3130332e3134342e3130322e302f32342d3234203d3e20313339343231.roa (hash: nH3r82YwlmcelOXc3c6hCqTAafYwlMIm171yaloUlQU=) 2: 3130332e3134342e3130322e302f32332d3234203d3e20313339343231.roa (hash: aW/uUXbkxJYBViD7wNIMNmfKm91NHMXKaNMrrbbLaYo=) 3: 71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.crl (hash: eq85DDYpb0mr9mMOR+WFmxnAaevSRJTydpbx1+zC/yo=) 4: 3130332e3134342e3130332e302f32342d3234203d3e20313339343231.roa (hash: NVvHOXca2LITMgeQ8pj0e3M7sUAPWn5Q20ai1Hw8JHw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.crl rsync://rpki-rsync.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:51:84:24:1b:9e:aa:bc:35:e9:fd:15:3a:51:9a:63:18:cc:54:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B Validity Not Before: Oct 25 18:14:34 2026 GMT Not After : Oct 26 20:34:34 2026 GMT Subject: CN=292DD6C2738D019DBED390C9204FBBBD8F29A8DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:41:b1:e0:3c:41:39:81:99:8d:b6:f0:c1:eb: 8f:66:66:c8:0e:f7:3e:9f:ac:33:c5:ce:33:6d:e9: 6f:96:50:9e:92:7e:2a:15:1a:92:5c:14:70:04:ec: 9b:ca:c3:51:a9:02:aa:8c:8c:ab:d8:80:66:a5:34: fd:7f:3f:da:53:55:46:f0:7d:67:74:bc:92:2a:7d: a3:08:cc:b7:68:f1:e5:af:b5:b3:26:8d:b3:71:a5: f2:f3:ca:d1:d3:e0:71:6c:bc:38:8e:2c:54:6d:b3: ed:14:97:0b:8c:db:ab:37:6d:fd:52:04:ec:c1:95: 73:0c:78:c9:03:b2:1d:b9:0e:71:04:11:17:08:f2: d3:b2:5f:51:db:9f:42:7d:7d:52:07:6f:e5:79:6a: 41:61:4d:7e:ed:d0:e1:8e:59:be:76:12:1f:28:4b: cb:ec:5e:be:43:9f:95:06:15:71:7d:95:08:2e:bd: e5:4a:af:25:b4:44:08:d0:ea:e4:bb:17:63:9e:0a: e2:04:ef:72:34:3a:9b:c7:b2:f7:dc:d6:54:d0:c5: bd:4f:b4:64:6e:63:c8:25:cd:6c:d4:c6:fd:94:78: 4d:27:22:43:b0:01:fa:52:81:5f:cc:7f:1a:78:b6: 74:8a:54:4c:8a:73:52:81:01:1e:08:24:5c:70:85: c3:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:2D:D6:C2:73:8D:01:9D:BE:D3:90:C9:20:4F:BB:BD:8F:29:A8:DB X509v3 Authority Key Identifier: keyid:71:EA:AE:94:B4:B9:7C:5E:D5:3A:52:F7:20:BB:E5:EA:78:EF:DE:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:44:27:11:89:42:c4:bc:27:88:25:98:af:e4:a6:3f:74:2a: 55:31:30:27:f1:b1:c3:85:7f:a1:67:4c:a6:2b:f7:78:15:17: 51:55:49:7b:8a:56:9e:b1:76:06:a2:45:14:3b:7e:19:02:44: 59:6b:eb:9f:ef:0d:04:b5:bb:63:c3:68:60:1d:87:3e:e2:58: bd:51:8f:bd:b9:b1:6c:bd:cb:30:34:ad:14:06:49:f2:57:03: 19:f1:1b:23:98:ab:72:10:7f:7b:ed:2c:65:dc:f0:8c:f1:35: d7:3d:1e:c4:98:1c:41:f3:db:c7:ae:d2:14:f0:b4:d8:98:e5: e8:00:16:62:d9:39:fd:a7:33:c3:63:d4:53:4d:13:84:34:5f: 20:7c:01:6e:e1:9f:d8:4f:65:6f:10:49:92:c8:bd:4f:c2:07: cc:95:0d:74:e9:ab:f9:e4:8a:05:00:e1:6f:46:11:0d:88:70: 00:17:36:fc:c0:db:77:b0:27:85:68:c1:ab:f1:cc:33:ab:fe: 52:01:12:6e:de:71:55:66:e1:f3:9c:e3:e1:dd:a5:d0:47:5d: 8e:9f:a4:64:16:b2:34:af:20:4c:a4:e4:31:8b:43:d0:ac:1a: 58:4a:f6:22:ea:16:2c:46:99:e8:7a:d8:53:74:bc:5c:8a:87: 7f:53:d7:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKFGEJBueqrw16f0VOlGaYxjMVKEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFFQUFFOTRCNEI5N0M1RUQ1M0E1MkY3MjBCQkU1RUE3 OEVGREU1QjAeFw0yNjEwMjUxODE0MzRaFw0yNjEwMjYyMDM0MzRaMDMxMTAvBgNV BAMTKDI5MkRENkMyNzM4RDAxOURCRUQzOTBDOTIwNEZCQkJEOEYyOUE4REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWQbHgPEE5gZmNtvDB649mZsgO 9z6frDPFzjNt6W+WUJ6SfioVGpJcFHAE7JvKw1GpAqqMjKvYgGalNP1/P9pTVUbw fWd0vJIqfaMIzLdo8eWvtbMmjbNxpfLzytHT4HFsvDiOLFRts+0UlwuM26s3bf1S BOzBlXMMeMkDsh25DnEEERcI8tOyX1Hbn0J9fVIHb+V5akFhTX7t0OGOWb52Eh8o S8vsXr5Dn5UGFXF9lQguveVKryW0RAjQ6uS7F2OeCuIE73I0OpvHsvfc1lTQxb1P tGRuY8glzWzUxv2UeE0nIkOwAfpSgV/Mfxp4tnSKVEyKc1KBAR4IJFxwhcPbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKS3WwnONAZ2+05DJIE+7vY8pqNswHwYDVR0j BBgwFoAUcequlLS5fF7VOlL3ILvl6njv3lswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmE1MzQxZTgtMjJkOC00NDljLWE3NTMtZTQ3YmJmYzQ4NTM4LzAvNzFFQUFFOTRC NEI5N0M1RUQ1M0E1MkY3MjBCQkU1RUE3OEVGREU1Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MUVBQUU5NEI0Qjk3QzVFRDUzQTUyRjcyMEJCRTVFQTc4RUZE RTVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmE1MzQxZTgtMjJkOC00NDljLWE3 NTMtZTQ3YmJmYzQ4NTM4LzAvNzFFQUFFOTRCNEI5N0M1RUQ1M0E1MkY3MjBCQkU1 RUE3OEVGREU1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGREJxGJQsS8J4glmK/kpj90KlUxMCfxscOF f6FnTKYr93gVF1FVSXuKVp6xdgaiRRQ7fhkCRFlr65/vDQS1u2PDaGAdhz7iWL1R j725sWy9yzA0rRQGSfJXAxnxGyOYq3IQf3vtLGXc8IzxNdc9HsSYHEHz28eu0hTw tNiY5egAFmLZOf2nM8Nj1FNNE4Q0XyB8AW7hn9hPZW8QSZLIvU/CB8yVDXTpq/nk igUA4W9GEQ2IcAAXNvzA23ewJ4VowavxzDOr/lIBEm7ecVVm4fOc4+HdpdBHXY6f pGQWsjSvIEyk5DGLQ9CsGlhK9iLqFixGmeh62FN0vFyKh39T180= -----END CERTIFICATE-----Generated at Mon Oct 26 01:42:01 2026 by rpki-client