
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/71BEA54A40125136212043443871943E11E47CE8.mft
File: 71BEA54A40125136212043443871943E11E47CE8.mft (raw, json)
Hash identifier: uulAE1pXT2b2Fdhlf+u4QSeKMVYJzAvgC5eqqc6KUIk=
Subject key identifier: EB:B3:5B:EF:CA:67:DB:5A:4E:A9:74:C3:E8:72:CD:E2:FA:28:16:36
Authority key identifier: 71:BE:A5:4A:40:12:51:36:21:20:43:44:38:71:94:3E:11:E4:7C:E8
Certificate issuer: /CN=71BEA54A40125136212043443871943E11E47CE8
Certificate serial: 37A1C57CF7924D8177D0FF2FF9B05878B8ACE8C7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71BEA54A40125136212043443871943E11E47CE8.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/71BEA54A40125136212043443871943E11E47CE8.mft
Manifest number: B6
Signing time: Wed 16 Sep 2026 19:28:12 +0000
Manifest this update: Wed 16 Sep 2026 19:23:12 +0000
Manifest next update: Thu 17 Sep 2026 21:37:12 +0000
Files and hashes: 1: 71BEA54A40125136212043443871943E11E47CE8.crl (hash: SRv/WBK/9NdI2BozBbTnq8vo78NKwjjN2ZHJzrjPxhE=)
2: 3130332e3233342e31382e302f32342d3234203d3e20313531353036.roa (hash: VJzo4/caWYAHukBH2w0BGX1Ka+vdrCFh1viFJ7tFkV8=)
3: 3130332e3233342e31382e302f32332d3233203d3e20313531353036.roa (hash: PHU5h1LHUlDbfO+kxPjDf9ATbrrXtorAw7bNDenM+FM=)
4: 3130332e3233342e31392e302f32342d3234203d3e20313531353036.roa (hash: SJitFwYKCLnaXZQ4OdV1EreS23s72a/7Op1qTgfnrGo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/71BEA54A40125136212043443871943E11E47CE8.crl
rsync://rpki-rsync.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/71BEA54A40125136212043443871943E11E47CE8.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71BEA54A40125136212043443871943E11E47CE8.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 21:37:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:a1:c5:7c:f7:92:4d:81:77:d0:ff:2f:f9:b0:58:78:b8:ac:e8:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71BEA54A40125136212043443871943E11E47CE8
Validity
Not Before: Sep 16 19:23:12 2026 GMT
Not After : Sep 17 21:37:12 2026 GMT
Subject: CN=EBB35BEFCA67DB5A4EA974C3E872CDE2FA281636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:26:4a:e9:45:91:d9:4e:d1:f5:44:55:a2:7c:
ee:70:4f:21:e5:20:44:47:ac:b4:ef:ed:3f:f2:23:
51:49:dd:c8:96:9a:71:82:aa:f9:46:e7:98:75:30:
33:bf:33:25:0c:3b:bd:92:69:ea:d1:a7:84:ec:19:
f0:bc:10:3a:2e:19:cf:2a:e2:c1:9d:57:ef:04:37:
14:ad:41:f9:ac:83:49:6a:7c:40:06:55:6c:76:9b:
95:35:96:be:88:7c:0f:c0:14:7d:7d:41:ae:08:d6:
40:65:62:82:48:72:72:d9:f0:cf:5d:bf:d3:70:a8:
b7:fe:19:11:5a:95:cb:52:8a:f5:c0:1b:8d:bf:e1:
c0:d9:b0:9b:be:91:df:12:6d:e1:56:f2:a4:f6:0c:
56:56:9f:c1:d2:17:e7:b2:3b:2d:04:d7:75:d5:3a:
39:83:cf:4d:f3:c2:69:7a:ed:11:9d:11:2b:f2:8d:
e7:a8:78:fb:42:f6:74:02:70:60:c2:2b:37:74:69:
9f:91:dd:cd:49:dd:0c:44:c7:73:6e:7c:3b:10:33:
7d:e0:5a:45:6c:2d:0d:36:ce:94:cf:24:87:90:c7:
f6:37:8e:bd:ad:17:56:f0:cd:6d:dc:33:03:69:b0:
dc:60:41:29:cd:c9:e2:75:1e:68:ec:c5:c1:a5:1b:
e0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B3:5B:EF:CA:67:DB:5A:4E:A9:74:C3:E8:72:CD:E2:FA:28:16:36
X509v3 Authority Key Identifier:
keyid:71:BE:A5:4A:40:12:51:36:21:20:43:44:38:71:94:3E:11:E4:7C:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/71BEA54A40125136212043443871943E11E47CE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71BEA54A40125136212043443871943E11E47CE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/71BEA54A40125136212043443871943E11E47CE8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:43:55:01:0d:cc:f8:51:7c:87:3d:09:ce:2b:f8:89:ff:82:
3f:d5:6f:2a:a3:42:87:37:91:65:e3:fa:67:3f:48:3c:92:e3:
08:16:de:15:f6:1b:21:01:1a:04:0f:1d:20:ba:94:8c:69:6a:
d6:aa:e2:19:e4:cb:da:39:81:08:a3:f8:b7:2d:85:35:11:e5:
ea:82:e3:76:30:ae:a5:da:ef:1a:32:8b:03:be:3d:bf:14:49:
e5:07:e0:27:42:c7:75:bd:41:32:38:a5:ae:58:71:e7:72:4d:
ff:e3:96:09:8d:92:d8:f3:40:93:2b:be:f0:cb:c6:33:2f:29:
ed:3b:e9:f6:cc:07:e3:b1:bb:85:96:fe:8a:c1:62:2c:27:d4:
d4:96:51:b2:b6:3f:9a:93:8a:81:0e:81:07:a0:7d:92:29:2f:
a0:be:57:cd:53:2d:77:70:2a:ad:fd:11:57:43:0b:01:5f:4c:
42:07:4b:5b:9c:92:36:65:5f:ab:d4:15:c3:77:02:9c:9f:b4:
a1:df:61:8e:4c:db:aa:f1:d2:f1:79:93:c8:39:1b:15:f5:c2:
df:14:6c:a5:55:e5:9f:a0:45:09:b1:a9:5f:a2:ab:ca:26:33:
87:b6:7e:45:4f:43:b7:e5:9a:e9:56:9b:75:ce:60:d6:3f:c7:
a1:00:84:27
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUN6HFfPeSTYF30P8v+bBYeLis6McwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzFCRUE1NEE0MDEyNTEzNjIxMjA0MzQ0Mzg3MTk0M0Ux
MUU0N0NFODAeFw0yNjA5MTYxOTIzMTJaFw0yNjA5MTcyMTM3MTJaMDMxMTAvBgNV
BAMTKEVCQjM1QkVGQ0E2N0RCNUE0RUE5NzRDM0U4NzJDREUyRkEyODE2MzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGJkrpRZHZTtH1RFWifO5wTyHl
IERHrLTv7T/yI1FJ3ciWmnGCqvlG55h1MDO/MyUMO72SaerRp4TsGfC8EDouGc8q
4sGdV+8ENxStQfmsg0lqfEAGVWx2m5U1lr6IfA/AFH19Qa4I1kBlYoJIcnLZ8M9d
v9NwqLf+GRFalctSivXAG42/4cDZsJu+kd8SbeFW8qT2DFZWn8HSF+eyOy0E13XV
OjmDz03zwml67RGdESvyjeeoePtC9nQCcGDCKzd0aZ+R3c1J3QxEx3NufDsQM33g
WkVsLQ02zpTPJIeQx/Y3jr2tF1bwzW3cMwNpsNxgQSnNyeJ1HmjsxcGlG+CNAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU67Nb78pn21pOqXTD6HLN4vooFjYwHwYDVR0j
BBgwFoAUcb6lSkASUTYhIENEOHGUPhHkfOgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Mzg4MzI5Y2EtZThmNy00ZDNkLWFjZTQtODA3ZjhhYTU4YWUwLzAvNzFCRUE1NEE0
MDEyNTEzNjIxMjA0MzQ0Mzg3MTk0M0UxMUU0N0NFOC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83MUJFQTU0QTQwMTI1MTM2MjEyMDQzNDQzODcxOTQzRTExRTQ3
Q0U4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzg4MzI5Y2EtZThmNy00ZDNkLWFj
ZTQtODA3ZjhhYTU4YWUwLzAvNzFCRUE1NEE0MDEyNTEzNjIxMjA0MzQ0Mzg3MTk0
M0UxMUU0N0NFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJNDVQENzPhRfIc9Cc4r+In/gj/VbyqjQoc3
kWXj+mc/SDyS4wgW3hX2GyEBGgQPHSC6lIxpataq4hnky9o5gQij+LcthTUR5eqC
43YwrqXa7xoyiwO+Pb8USeUH4CdCx3W9QTI4pa5YcedyTf/jlgmNktjzQJMrvvDL
xjMvKe076fbMB+Oxu4WW/orBYiwn1NSWUbK2P5qTioEOgQegfZIpL6C+V81TLXdw
Kq39EVdDCwFfTEIHS1uckjZlX6vUFcN3ApyftKHfYY5M26rx0vF5k8g5GxX1wt8U
bKVV5Z+gRQmxqV+iq8omM4e2fkVPQ7flmulWm3XOYNY/x6EAhCc=
-----END CERTIFICATE-----
Generated at Thu Sep 17 10:09:09 2026 by rpki-client