$ rpki-client -vvf rpki-rsync.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.mft File: 71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.mft (raw, json) Hash identifier: 8HLO0sbAi9T2zKwqiJEQ2gYobFYMJ02NkJ3U9ivtTyM= Subject key identifier: D3:80:66:3E:69:6D:A1:F9:99:0E:E3:AD:EC:35:0F:0B:8D:0F:6C:15 Authority key identifier: 71:EA:AE:94:B4:B9:7C:5E:D5:3A:52:F7:20:BB:E5:EA:78:EF:DE:5B Certificate issuer: /CN=71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B Certificate serial: 42BB414F37A9EEBF1FBF8506550CEC8A4268BDDA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.mft Manifest number: 5D Signing time: Sat 11 Jul 2026 04:42:30 +0000 Manifest this update: Sat 11 Jul 2026 04:37:30 +0000 Manifest next update: Sun 12 Jul 2026 07:48:30 +0000 Files and hashes: 1: 3130332e3134342e3130322e302f32342d3234203d3e20313339343231.roa (hash: nH3r82YwlmcelOXc3c6hCqTAafYwlMIm171yaloUlQU=) 2: 3130332e3134342e3130322e302f32332d3234203d3e20313339343231.roa (hash: aW/uUXbkxJYBViD7wNIMNmfKm91NHMXKaNMrrbbLaYo=) 3: 3130332e3134342e3130332e302f32342d3234203d3e20313339343231.roa (hash: NVvHOXca2LITMgeQ8pj0e3M7sUAPWn5Q20ai1Hw8JHw=) 4: 71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.crl (hash: x7bMbbQRbehhiFePkhwsI8Qb0XJ5w6pTkW4t1BjuZZQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.crl rsync://rpki-rsync.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Jul 2026 06:42:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:bb:41:4f:37:a9:ee:bf:1f:bf:85:06:55:0c:ec:8a:42:68:bd:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B Validity Not Before: Jul 11 04:37:30 2026 GMT Not After : Jul 12 07:48:30 2026 GMT Subject: CN=D380663E696DA1F9990EE3ADEC350F0B8D0F6C15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:81:d3:77:29:ee:6e:ba:bd:f4:d6:f3:5c:91: 09:25:f1:c8:c7:33:09:cf:a5:22:35:70:c8:f8:63: 7b:66:49:a2:55:75:8a:c0:7d:93:42:1d:8c:d7:59: 7f:fb:a8:ce:55:98:30:00:ef:15:3a:7a:d3:34:fa: 17:42:9e:25:ac:1e:bb:dd:e7:6f:76:20:b8:1b:80: c3:59:ae:bd:3b:56:99:db:34:6a:65:68:64:81:87: 0b:66:ab:90:15:a3:93:57:ae:43:2c:44:97:2e:2e: fa:4d:16:b3:da:c8:43:59:41:ec:09:48:3a:d8:0f: fe:ef:a9:f3:df:e5:97:ce:4c:35:b1:95:da:f1:07: 22:b6:f7:ef:e8:18:67:ac:fa:c1:54:ee:b7:ca:2c: 1a:44:79:34:ad:f1:a5:90:78:bb:b6:77:f4:67:47: c4:c8:f3:87:09:3e:49:ca:8e:75:4c:3e:6f:94:ef: aa:06:25:8f:d7:27:1a:8a:8a:b3:90:90:30:fb:e2: 00:47:4d:c4:7a:49:24:ff:af:85:f3:64:7c:a4:ef: 00:6d:ed:e3:e5:3f:e3:3b:2c:64:80:eb:3f:74:53: 85:d3:89:d9:e9:b8:34:1e:0c:02:36:a1:78:1b:68: cf:69:66:b2:dc:9b:78:76:0a:e9:96:ac:c8:86:c8: 7b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:80:66:3E:69:6D:A1:F9:99:0E:E3:AD:EC:35:0F:0B:8D:0F:6C:15 X509v3 Authority Key Identifier: keyid:71:EA:AE:94:B4:B9:7C:5E:D5:3A:52:F7:20:BB:E5:EA:78:EF:DE:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/71EAAE94B4B97C5ED53A52F720BBE5EA78EFDE5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:f1:7f:41:09:01:3f:ee:48:fc:42:bf:75:54:b4:ca:b6:5d: e6:f0:e3:6d:c9:ad:7a:e9:b9:3d:e2:be:47:6f:e5:c5:ff:fc: 29:ef:8e:f8:07:95:86:d2:0e:e5:1f:60:ba:38:80:96:3f:74: 09:bb:4f:f1:62:2d:36:bc:e1:32:41:22:83:49:f8:d5:d3:80: 2b:37:b4:1c:8a:69:ba:82:a7:06:36:63:90:a7:d1:27:86:ff: b3:4a:72:bb:5b:e1:6f:2f:ab:13:3c:f0:8c:80:71:56:64:67: f9:30:18:d0:59:73:2f:78:a8:d6:a2:89:4f:55:9e:47:e1:f2: 21:2f:b7:46:f4:9e:e8:8b:fe:d7:be:fb:7a:f5:ed:cf:20:54: 66:4f:bd:05:c7:98:74:ae:55:2b:d6:8a:f2:c1:7f:27:20:3b: e9:38:1f:ac:55:5a:c7:b1:59:77:e6:a2:22:52:7e:7e:43:18: 72:0a:8e:40:39:79:f1:94:0d:4f:29:4b:0b:f6:47:e3:f7:65: ee:3f:e1:c5:db:30:87:39:26:7f:6b:e2:89:95:c7:47:e2:ef: 88:fb:e8:dc:6e:71:dc:fe:fa:1f:43:33:21:4e:c1:a6:0b:48: 2b:1b:3a:43:85:72:98:2f:21:01:18:65:56:a7:fd:97:95:b5: a5:8e:9c:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQrtBTzep7r8fv4UGVQzsikJovdowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFFQUFFOTRCNEI5N0M1RUQ1M0E1MkY3MjBCQkU1RUE3 OEVGREU1QjAeFw0yNjA3MTEwNDM3MzBaFw0yNjA3MTIwNzQ4MzBaMDMxMTAvBgNV BAMTKEQzODA2NjNFNjk2REExRjk5OTBFRTNBREVDMzUwRjBCOEQwRjZDMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNgdN3Ke5uur301vNckQkl8cjH MwnPpSI1cMj4Y3tmSaJVdYrAfZNCHYzXWX/7qM5VmDAA7xU6etM0+hdCniWsHrvd 5292ILgbgMNZrr07VpnbNGplaGSBhwtmq5AVo5NXrkMsRJcuLvpNFrPayENZQewJ SDrYD/7vqfPf5ZfOTDWxldrxByK29+/oGGes+sFU7rfKLBpEeTSt8aWQeLu2d/Rn R8TI84cJPknKjnVMPm+U76oGJY/XJxqKirOQkDD74gBHTcR6SST/r4XzZHyk7wBt 7ePlP+M7LGSA6z90U4XTidnpuDQeDAI2oXgbaM9pZrLcm3h2CumWrMiGyHvBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU04BmPmltofmZDuOt7DUPC40PbBUwHwYDVR0j BBgwFoAUcequlLS5fF7VOlL3ILvl6njv3lswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmE1MzQxZTgtMjJkOC00NDljLWE3NTMtZTQ3YmJmYzQ4NTM4LzAvNzFFQUFFOTRC NEI5N0M1RUQ1M0E1MkY3MjBCQkU1RUE3OEVGREU1Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MUVBQUU5NEI0Qjk3QzVFRDUzQTUyRjcyMEJCRTVFQTc4RUZE RTVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmE1MzQxZTgtMjJkOC00NDljLWE3 NTMtZTQ3YmJmYzQ4NTM4LzAvNzFFQUFFOTRCNEI5N0M1RUQ1M0E1MkY3MjBCQkU1 RUE3OEVGREU1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAHxf0EJAT/uSPxCv3VUtMq2Xebw423JrXrp uT3ivkdv5cX//CnvjvgHlYbSDuUfYLo4gJY/dAm7T/FiLTa84TJBIoNJ+NXTgCs3 tByKabqCpwY2Y5Cn0SeG/7NKcrtb4W8vqxM88IyAcVZkZ/kwGNBZcy94qNaiiU9V nkfh8iEvt0b0nuiL/te++3r17c8gVGZPvQXHmHSuVSvWivLBfycgO+k4H6xVWsex WXfmoiJSfn5DGHIKjkA5efGUDU8pSwv2R+P3Ze4/4cXbMIc5Jn9r4omVx0fi74j7 6Nxucdz++h9DMyFOwaYLSCsbOkOFcpgvIQEYZVan/ZeVtaWOnM8= -----END CERTIFICATE-----Generated at Sat Jul 11 16:26:06 2026 by rpki-client