$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.mft File: 71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.mft (raw, json) Hash identifier: BNDCdxzR+pGieJlFgPlInzoy1Ya3QZUQpu9MoUO5e8A= Subject key identifier: 60:D1:D6:24:6F:96:1C:F3:A7:54:53:E9:83:C4:B6:55:4F:7B:58:4E Authority key identifier: 71:E3:BB:71:0F:59:21:46:B8:2A:3C:1C:FC:F3:6A:2B:D1:C5:A7:95 Certificate issuer: /CN=71E3BB710F592146B82A3C1CFCF36A2BD1C5A795 Certificate serial: 4769CEADFDA3264B04091A4FE92809B3ED200426 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.mft Manifest number: BA Signing time: Wed 16 Sep 2026 16:29:25 +0000 Manifest this update: Wed 16 Sep 2026 16:24:25 +0000 Manifest next update: Thu 17 Sep 2026 18:02:25 +0000 Files and hashes: 1: 3130332e37362e33312e302f32342d3234203d3e20313530343732.roa (hash: rUHpYIR2vJnsoxcjoNwsrIMb/p49L2kYzJuwadosSIk=) 2: 71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.crl (hash: 4hv8e5hs5RAX7JoRjgrLcFCFj0v93GQ1yC/YD5hoyic=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.crl rsync://rpki-rsync.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 18:02:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:69:ce:ad:fd:a3:26:4b:04:09:1a:4f:e9:28:09:b3:ed:20:04:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71E3BB710F592146B82A3C1CFCF36A2BD1C5A795 Validity Not Before: Sep 16 16:24:25 2026 GMT Not After : Sep 17 18:02:25 2026 GMT Subject: CN=60D1D6246F961CF3A75453E983C4B6554F7B584E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:58:80:be:ad:8a:13:60:99:fc:b6:c3:7f:4d: 13:f5:26:e6:9e:0c:fd:9b:99:8d:60:0e:ee:88:96: b1:cf:48:4b:a0:e4:e5:6a:b2:bc:f0:dd:51:97:ca: ad:05:4b:b1:4b:1d:87:42:a0:6e:ee:4c:52:76:1c: d0:30:7e:59:b7:ee:33:c0:60:ec:69:ae:3e:60:c4: 84:53:f0:20:52:e0:17:f0:74:c7:87:6b:df:19:07: 59:63:3c:58:1e:44:1e:89:f8:92:8c:9a:f1:54:3a: 80:86:0c:dc:17:ed:86:81:bb:97:1b:00:ef:83:f8: cc:b0:4d:9d:7e:ea:4c:69:8a:ed:2e:d4:d4:3b:1f: e6:a4:75:e0:e2:b7:29:63:af:a0:fd:f6:9b:54:ea: 78:9f:c5:df:4d:34:70:e0:3b:90:f4:94:78:cb:53: 2d:88:71:94:d9:ea:43:d1:0e:8f:e2:6d:86:68:0f: 49:a8:7c:8d:32:2d:29:85:f3:0b:5c:ef:1a:47:e8: 51:0a:16:df:f1:c2:c1:29:22:03:f5:78:6c:97:a9: 34:a6:af:46:aa:a7:3a:db:a4:ee:07:41:d2:7d:af: f6:d2:4f:da:95:71:9b:f1:ee:db:6b:1f:96:fe:5c: 95:82:9f:b7:01:9f:56:ba:7b:e8:86:df:c6:49:f5: ce:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:D1:D6:24:6F:96:1C:F3:A7:54:53:E9:83:C4:B6:55:4F:7B:58:4E X509v3 Authority Key Identifier: keyid:71:E3:BB:71:0F:59:21:46:B8:2A:3C:1C:FC:F3:6A:2B:D1:C5:A7:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:54:56:e4:60:7c:8c:f4:41:1f:0a:e5:97:7c:14:bd:c5:ec: 5a:d5:60:e3:a6:69:f5:ab:25:09:95:d7:a0:52:44:b4:f0:3a: 83:a8:c6:83:4d:04:cd:56:d8:2e:3c:d6:4e:ce:aa:42:f2:75: 1c:2b:70:f6:e7:03:b5:74:b7:cc:c5:d7:8b:e4:bb:1a:5b:59: e0:79:9e:d5:46:3d:af:17:50:a6:15:98:ed:a6:d2:d7:79:b1: 03:bd:24:61:38:ea:9f:a5:b2:55:82:d4:f2:97:cf:47:bb:58: 22:93:82:c1:52:94:50:d0:76:f3:22:d5:75:92:ac:00:36:fd: 5f:4f:78:b1:af:66:06:3c:ba:f0:b4:ed:aa:55:7b:56:f6:c1: 2d:1a:7a:41:d2:09:64:03:48:18:0c:92:ee:dd:b8:af:da:2c: 09:28:d6:6b:bc:85:8f:83:59:38:40:3d:0e:c7:2f:28:d1:72: d5:ef:bb:59:9e:85:88:e0:ed:0d:ad:f6:bc:e7:e5:c0:52:2c: 02:8a:52:7c:3b:d4:fc:d6:44:bf:0a:32:71:5b:01:8d:5b:95: 23:c2:51:73:37:55:16:78:47:e9:9f:d1:9d:e3:e2:d7:c1:3c: 4f:0d:b8:fb:e0:22:86:e4:e5:d1:8e:5f:74:b7:0d:14:43:21: 6a:59:d6:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR2nOrf2jJksECRpP6SgJs+0gBCYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFFM0JCNzEwRjU5MjE0NkI4MkEzQzFDRkNGMzZBMkJE MUM1QTc5NTAeFw0yNjA5MTYxNjI0MjVaFw0yNjA5MTcxODAyMjVaMDMxMTAvBgNV BAMTKDYwRDFENjI0NkY5NjFDRjNBNzU0NTNFOTgzQzRCNjU1NEY3QjU4NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdWIC+rYoTYJn8tsN/TRP1Juae DP2bmY1gDu6IlrHPSEug5OVqsrzw3VGXyq0FS7FLHYdCoG7uTFJ2HNAwflm37jPA YOxprj5gxIRT8CBS4BfwdMeHa98ZB1ljPFgeRB6J+JKMmvFUOoCGDNwX7YaBu5cb AO+D+MywTZ1+6kxpiu0u1NQ7H+akdeDityljr6D99ptU6nifxd9NNHDgO5D0lHjL Uy2IcZTZ6kPRDo/ibYZoD0mofI0yLSmF8wtc7xpH6FEKFt/xwsEpIgP1eGyXqTSm r0aqpzrbpO4HQdJ9r/bST9qVcZvx7ttrH5b+XJWCn7cBn1a6e+iG38ZJ9c6LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYNHWJG+WHPOnVFPpg8S2VU97WE4wHwYDVR0j BBgwFoAUceO7cQ9ZIUa4Kjwc/PNqK9HFp5UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGQ2MWM3NTAtODgwZi00OThiLWE2OTgtMWY0NzgwZmE2OWZmLzAvNzFFM0JCNzEw RjU5MjE0NkI4MkEzQzFDRkNGMzZBMkJEMUM1QTc5NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MUUzQkI3MTBGNTkyMTQ2QjgyQTNDMUNGQ0YzNkEyQkQxQzVB Nzk1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGQ2MWM3NTAtODgwZi00OThiLWE2 OTgtMWY0NzgwZmE2OWZmLzAvNzFFM0JCNzEwRjU5MjE0NkI4MkEzQzFDRkNGMzZB MkJEMUM1QTc5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIZUVuRgfIz0QR8K5Zd8FL3F7FrVYOOmafWr JQmV16BSRLTwOoOoxoNNBM1W2C481k7OqkLydRwrcPbnA7V0t8zF14vkuxpbWeB5 ntVGPa8XUKYVmO2m0td5sQO9JGE46p+lslWC1PKXz0e7WCKTgsFSlFDQdvMi1XWS rAA2/V9PeLGvZgY8uvC07apVe1b2wS0aekHSCWQDSBgMku7duK/aLAko1mu8hY+D WThAPQ7HLyjRctXvu1mehYjg7Q2t9rzn5cBSLAKKUnw71PzWRL8KMnFbAY1blSPC UXM3VRZ4R+mf0Z3j4tfBPE8NuPvgIobk5dGOX3S3DRRDIWpZ1vg= -----END CERTIFICATE-----Generated at Thu Sep 17 09:32:59 2026 by rpki-client