$ rpki-client -vvvf rpki-rsync.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.mft File: 71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.mft (raw, json) Hash identifier: MFHbg6t4fveff1zDQUFPhEoqQ0/kAfJ0Zcmv9tS9/Ok= Subject key identifier: DA:4C:38:72:0D:A8:B9:CE:2E:99:46:B6:06:96:B2:06:30:94:5C:2D Authority key identifier: 71:A4:5C:05:D7:D5:DF:9D:16:E9:C3:B0:60:75:35:DB:2B:90:6B:32 Certificate issuer: /CN=71A45C05D7D5DF9D16E9C3B0607535DB2B906B32 Certificate serial: 13E452799215DFA4CD7BF9AD64B79B84B6DD1695 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 10:06:06 +0000 Manifest this update: Thu 17 Sep 2026 10:01:06 +0000 Manifest next update: Fri 18 Sep 2026 11:25:06 +0000 Files and hashes: 1: 3130332e35362e39322e302f32342d3234203d3e203538343737.roa (hash: d1IJ4T81r3K/uk2231YZmItFa5G4LBBNAf/1wVmUa9c=) 2: 71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.crl (hash: Q95RP6aB2QuYCiLSO3LCe/ImJ/c60hGjyu+Ju4bDM5U=) 3: 3130332e35362e39332e302f32342d3234203d3e203538343737.roa (hash: vqVbxn6Wjao5k2JYe2+RI+TcQAfRr5R7zs7bd5wdsLk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.crl rsync://rpki-rsync.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:e4:52:79:92:15:df:a4:cd:7b:f9:ad:64:b7:9b:84:b6:dd:16:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71A45C05D7D5DF9D16E9C3B0607535DB2B906B32 Validity Not Before: Sep 17 10:01:06 2026 GMT Not After : Sep 18 11:25:06 2026 GMT Subject: CN=DA4C38720DA8B9CE2E9946B60696B20630945C2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6d:1b:98:7d:2c:17:49:a5:bb:9f:3b:b5:00: 42:b3:ef:b9:a3:90:01:5e:b2:8e:7d:f9:19:d8:20: 3c:94:d1:d6:12:7c:f3:e2:ac:db:dd:6c:0a:68:ab: 30:10:a5:87:dd:42:b8:ca:ef:8d:19:57:31:29:1a: 88:32:85:35:a8:a7:98:8f:e1:b2:aa:69:f7:6f:a1: 8d:e6:1f:ee:91:b2:e3:01:9f:a7:8c:52:0d:b2:f0: 12:a5:3e:38:a5:a3:83:ec:b6:a7:df:7b:5b:e9:0c: 51:06:a1:51:ea:44:29:68:d4:f3:ff:b2:d6:37:c7: b8:02:11:b9:5a:42:b2:2a:1e:36:53:6c:8b:fa:3a: eb:78:65:ee:6a:74:2b:12:f0:df:f8:81:c7:08:f0: 31:b8:53:67:db:a9:15:ca:74:cc:69:f4:83:0a:1f: 42:bd:be:e5:93:f9:17:0c:96:e0:06:85:99:e0:e7: 5f:58:28:4c:3a:20:2e:58:07:93:db:c4:7d:b6:dd: 3d:0b:2d:75:b2:fa:b8:43:a2:ff:8e:da:4f:65:3d: f6:c2:70:bd:59:59:7d:0e:0a:c8:0a:5c:3b:05:94: e8:5c:e0:72:73:c5:50:67:e8:42:25:6e:52:a4:5f: 5c:0b:69:f6:5a:7a:18:3f:1c:d3:e9:72:be:9d:a8: 7f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:4C:38:72:0D:A8:B9:CE:2E:99:46:B6:06:96:B2:06:30:94:5C:2D X509v3 Authority Key Identifier: keyid:71:A4:5C:05:D7:D5:DF:9D:16:E9:C3:B0:60:75:35:DB:2B:90:6B:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:f3:4b:85:eb:7d:9d:6c:de:1e:8a:02:a3:74:0f:d3:97:f5: d4:00:31:99:14:57:10:a3:56:e3:a2:63:87:a9:aa:b3:50:af: 0a:66:b8:39:f3:7c:c3:6d:a5:47:a7:8d:e0:f9:25:ce:b4:4a: d4:a3:f9:b9:f4:65:0b:fb:12:88:09:b0:4a:79:42:b2:a1:23: 7a:d7:10:9f:50:14:6d:88:91:17:e2:cc:5d:ce:36:e6:c4:1f: 8c:da:9a:ab:45:b4:12:2b:2e:c3:9b:74:e6:55:ed:b5:fb:a1: 95:9e:26:9b:b6:32:74:7c:66:f4:c9:3b:4a:45:fc:17:78:22: e4:46:4d:6b:ed:83:f9:13:63:fa:6f:10:4f:25:68:60:a4:be: bc:7c:3a:18:86:62:8c:2b:c7:5d:23:4a:f9:d5:d4:ed:cc:5f: a7:b0:b6:c0:ca:0f:73:8c:03:12:29:91:41:92:36:07:46:db: 3e:b0:b2:0c:e2:8a:38:e6:45:75:a1:43:48:c6:45:30:2c:6f: e1:2a:c1:1f:33:ea:69:13:75:11:45:a7:98:b2:c3:90:90:0b: 23:34:b8:95:4b:1a:d6:ea:fd:f8:89:7b:4d:1f:d4:18:75:cf: 1a:c1:c0:45:61:6c:c5:ed:87:ca:b9:28:33:2c:2a:7f:aa:b6: 99:a4:19:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE+RSeZIV36TNe/mtZLebhLbdFpUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFBNDVDMDVEN0Q1REY5RDE2RTlDM0IwNjA3NTM1REIy QjkwNkIzMjAeFw0yNjA5MTcxMDAxMDZaFw0yNjA5MTgxMTI1MDZaMDMxMTAvBgNV BAMTKERBNEMzODcyMERBOEI5Q0UyRTk5NDZCNjA2OTZCMjA2MzA5NDVDMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCobRuYfSwXSaW7nzu1AEKz77mj kAFeso59+RnYIDyU0dYSfPPirNvdbApoqzAQpYfdQrjK740ZVzEpGogyhTWop5iP 4bKqafdvoY3mH+6RsuMBn6eMUg2y8BKlPjilo4Pstqffe1vpDFEGoVHqRClo1PP/ stY3x7gCEblaQrIqHjZTbIv6Out4Ze5qdCsS8N/4gccI8DG4U2fbqRXKdMxp9IMK H0K9vuWT+RcMluAGhZng519YKEw6IC5YB5PbxH223T0LLXWy+rhDov+O2k9lPfbC cL1ZWX0OCsgKXDsFlOhc4HJzxVBn6EIlblKkX1wLafZaehg/HNPpcr6dqH+VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2kw4cg2ouc4umUa2BpayBjCUXC0wHwYDVR0j BBgwFoAUcaRcBdfV350W6cOwYHU12yuQazIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzI2Y2QyNmYtZmJkYS00Y2Q4LWEwMWMtYjAxNTU1MTMwMTVmLzAvNzFBNDVDMDVE N0Q1REY5RDE2RTlDM0IwNjA3NTM1REIyQjkwNkIzMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MUE0NUMwNUQ3RDVERjlEMTZFOUMzQjA2MDc1MzVEQjJCOTA2 QjMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzI2Y2QyNmYtZmJkYS00Y2Q4LWEw MWMtYjAxNTU1MTMwMTVmLzAvNzFBNDVDMDVEN0Q1REY5RDE2RTlDM0IwNjA3NTM1 REIyQjkwNkIzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGfzS4XrfZ1s3h6KAqN0D9OX9dQAMZkUVxCj VuOiY4epqrNQrwpmuDnzfMNtpUenjeD5Jc60StSj+bn0ZQv7EogJsEp5QrKhI3rX EJ9QFG2IkRfizF3ONubEH4zamqtFtBIrLsObdOZV7bX7oZWeJpu2MnR8ZvTJO0pF /Bd4IuRGTWvtg/kTY/pvEE8laGCkvrx8OhiGYowrx10jSvnV1O3MX6ewtsDKD3OM AxIpkUGSNgdG2z6wsgziijjmRXWhQ0jGRTAsb+EqwR8z6mkTdRFFp5iyw5CQCyM0 uJVLGtbq/fiJe00f1Bh1zxrBwEVhbMXth8q5KDMsKn+qtpmkGQg= -----END CERTIFICATE-----Generated at Thu Sep 17 12:20:14 2026 by rpki-client