
$ rpki-client -vvf rpki-rsync.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.mft
File: 71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.mft (raw, json)
Hash identifier: 3fch24fKN803ePDqfHzl16kcHim+5zdTKL5lyKo3jTA=
Subject key identifier: 1E:FF:21:CD:12:BA:69:DC:03:CC:3A:21:9E:5D:0C:77:A1:A2:5A:0D
Authority key identifier: 71:A4:5C:05:D7:D5:DF:9D:16:E9:C3:B0:60:75:35:DB:2B:90:6B:32
Certificate issuer: /CN=71A45C05D7D5DF9D16E9C3B0607535DB2B906B32
Certificate serial: 36B4DBF0ABFF11ECD1E9B7DC213F0AA74C99B08B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.mft
Manifest number: 7C
Signing time: Sun 02 Aug 2026 06:30:20 +0000
Manifest this update: Sun 02 Aug 2026 06:25:20 +0000
Manifest next update: Mon 03 Aug 2026 08:46:20 +0000
Files and hashes: 1: 3130332e35362e39322e302f32342d3234203d3e203538343737.roa (hash: d1IJ4T81r3K/uk2231YZmItFa5G4LBBNAf/1wVmUa9c=)
2: 3130332e35362e39332e302f32342d3234203d3e203538343737.roa (hash: vqVbxn6Wjao5k2JYe2+RI+TcQAfRr5R7zs7bd5wdsLk=)
3: 71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.crl (hash: LCvWlh7pF9CASNzJ1k65T89WxX3X2R4oAwz1z7jRmo0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.crl
rsync://rpki-rsync.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:45:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:b4:db:f0:ab:ff:11:ec:d1:e9:b7:dc:21:3f:0a:a7:4c:99:b0:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71A45C05D7D5DF9D16E9C3B0607535DB2B906B32
Validity
Not Before: Aug 2 06:25:20 2026 GMT
Not After : Aug 3 08:46:20 2026 GMT
Subject: CN=1EFF21CD12BA69DC03CC3A219E5D0C77A1A25A0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f8:04:02:bf:b6:e4:9a:f0:9b:b4:f7:28:b8:
d7:8b:b1:c8:9a:02:a9:a4:14:15:63:ea:eb:80:ad:
a0:8c:d3:81:9c:13:bd:29:3e:6c:ac:5e:58:98:2f:
4c:ac:77:9a:ab:a6:54:26:85:09:3f:b9:db:a5:a2:
03:43:36:b9:f7:62:3d:a0:21:5d:eb:0b:a1:e7:b6:
3b:c9:00:2a:0e:ca:cd:97:b1:bc:1b:c6:6a:68:33:
15:ea:0c:8b:86:97:cc:22:b1:ee:ff:05:e0:38:54:
fe:19:d8:a8:ec:ef:7b:01:ad:6d:87:a5:57:a4:b0:
6a:89:7a:b1:05:51:11:c6:2c:49:f8:13:b1:05:73:
eb:41:3c:6d:a1:f2:05:8b:3d:bb:7f:96:92:84:0e:
c2:cf:82:10:5a:d3:62:74:d8:7e:83:a9:f5:12:29:
3a:96:35:85:53:d7:f0:84:9b:cf:db:7f:86:1c:0d:
a6:02:e7:29:64:b0:ac:50:7f:23:45:5d:5d:68:86:
1e:20:19:7c:c2:e8:52:f2:5a:f2:02:e6:16:a1:00:
13:80:50:a5:c2:5a:06:5c:4a:ad:47:be:f5:3a:1a:
ef:10:23:e6:6e:d1:fe:6d:75:db:4e:a5:9d:a2:c2:
9e:e9:de:b9:9d:6b:d7:90:bd:59:b1:29:43:84:97:
d4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:FF:21:CD:12:BA:69:DC:03:CC:3A:21:9E:5D:0C:77:A1:A2:5A:0D
X509v3 Authority Key Identifier:
keyid:71:A4:5C:05:D7:D5:DF:9D:16:E9:C3:B0:60:75:35:DB:2B:90:6B:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:6b:ad:8c:d0:4f:a7:dd:95:71:c6:65:20:b6:b4:b9:fa:b6:
ae:18:8c:51:a2:c7:d5:8f:92:15:b1:8b:44:b8:d7:0e:25:32:
f1:07:db:c8:ca:28:cb:6a:b6:bf:08:35:b2:5c:e9:59:bd:32:
aa:64:f0:98:28:78:2b:fb:08:4d:ff:24:d9:83:57:52:55:fc:
6b:9b:0d:e5:ae:26:01:be:5e:e2:5e:6f:69:27:95:fc:55:29:
f6:d1:92:bd:7c:ff:02:46:e7:c0:8c:d2:2e:47:23:9b:e2:8d:
bb:07:94:6d:2a:e3:ef:ff:9c:94:36:08:aa:0e:ad:fe:a7:02:
e3:c7:c7:33:6c:13:e3:0f:94:82:02:5e:f5:f6:53:1a:0e:0a:
83:48:52:79:80:85:a6:46:ff:dd:87:60:14:f6:68:29:91:ce:
46:9d:99:d8:fa:0b:95:13:ed:0d:09:f0:31:d4:4d:cf:ca:13:
9f:2c:ed:56:2c:ff:f6:91:ac:78:ea:70:14:00:5e:05:82:52:
fa:35:74:84:e3:e1:4b:7e:5a:bd:85:12:98:c6:73:0e:03:d0:
2e:57:db:a7:52:6b:b8:6f:10:b9:93:81:ed:86:c7:e5:02:7f:
a5:61:a1:1b:48:50:57:76:ee:a8:c9:4c:5e:7a:ec:58:c4:66:
3c:9b:41:3d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUNrTb8Kv/EezR6bfcIT8Kp0yZsIswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzFBNDVDMDVEN0Q1REY5RDE2RTlDM0IwNjA3NTM1REIy
QjkwNkIzMjAeFw0yNjA4MDIwNjI1MjBaFw0yNjA4MDMwODQ2MjBaMDMxMTAvBgNV
BAMTKDFFRkYyMUNEMTJCQTY5REMwM0NDM0EyMTlFNUQwQzc3QTFBMjVBMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO+AQCv7bkmvCbtPcouNeLscia
AqmkFBVj6uuAraCM04GcE70pPmysXliYL0ysd5qrplQmhQk/udulogNDNrn3Yj2g
IV3rC6HntjvJACoOys2XsbwbxmpoMxXqDIuGl8wise7/BeA4VP4Z2Kjs73sBrW2H
pVeksGqJerEFURHGLEn4E7EFc+tBPG2h8gWLPbt/lpKEDsLPghBa02J02H6DqfUS
KTqWNYVT1/CEm8/bf4YcDaYC5ylksKxQfyNFXV1ohh4gGXzC6FLyWvIC5hahABOA
UKXCWgZcSq1HvvU6Gu8QI+Zu0f5tddtOpZ2iwp7p3rmda9eQvVmxKUOEl9TTAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUHv8hzRK6adwDzDohnl0Md6GiWg0wHwYDVR0j
BBgwFoAUcaRcBdfV350W6cOwYHU12yuQazIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NzI2Y2QyNmYtZmJkYS00Y2Q4LWEwMWMtYjAxNTU1MTMwMTVmLzAvNzFBNDVDMDVE
N0Q1REY5RDE2RTlDM0IwNjA3NTM1REIyQjkwNkIzMi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83MUE0NUMwNUQ3RDVERjlEMTZFOUMzQjA2MDc1MzVEQjJCOTA2
QjMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzI2Y2QyNmYtZmJkYS00Y2Q4LWEw
MWMtYjAxNTU1MTMwMTVmLzAvNzFBNDVDMDVEN0Q1REY5RDE2RTlDM0IwNjA3NTM1
REIyQjkwNkIzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBANNrrYzQT6fdlXHGZSC2tLn6tq4YjFGix9WP
khWxi0S41w4lMvEH28jKKMtqtr8INbJc6Vm9Mqpk8JgoeCv7CE3/JNmDV1JV/Gub
DeWuJgG+XuJeb2knlfxVKfbRkr18/wJG58CM0i5HI5vijbsHlG0q4+//nJQ2CKoO
rf6nAuPHxzNsE+MPlIICXvX2UxoOCoNIUnmAhaZG/92HYBT2aCmRzkadmdj6C5UT
7Q0J8DHUTc/KE58s7VYs//aRrHjqcBQAXgWCUvo1dITj4Ut+Wr2FEpjGcw4D0C5X
26dSa7hvELmTge2Gx+UCf6VhoRtIUFd27qjJTF567FjEZjybQT0=
-----END CERTIFICATE-----
Generated at Mon Aug 3 01:44:10 2026 by rpki-client