$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.mft File: 71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.mft (raw, json) Hash identifier: 1Kn2YQkYTX0SwZcNRQrIxsOgwk2W0WwN3Fv6TPXLj9g= Subject key identifier: D6:8B:3D:AF:57:4C:41:78:A9:05:91:E7:5A:DA:86:5E:57:73:1F:67 Authority key identifier: 71:B6:07:4C:81:1D:4B:60:D7:9A:64:DA:0B:9D:D3:8E:9A:E7:8B:69 Certificate issuer: /CN=71B6074C811D4B60D79A64DA0B9DD38E9AE78B69 Certificate serial: 5234FCE00687F52840294434C274C081EF34429B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 03:32:54 +0000 Manifest this update: Thu 17 Sep 2026 03:27:54 +0000 Manifest next update: Fri 18 Sep 2026 04:13:54 +0000 Files and hashes: 1: 71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.crl (hash: ScUm5Dwe+BwlFJOtCHkrgc7KNvBZABiD+SnVFongUiQ=) 2: 3130332e3131322e3234342e302f32332d3234203d3e20313336313037.roa (hash: nN+scnQd2Bf1TJPwjOUkyJEyMV9Spsgs/notSfMcxTE=) 3: 3130332e3233332e3130322e302f32332d3234203d3e20313336313037.roa (hash: lwD0HUqunMfmcrBMFPjo8Wy84U1nW2Gl16rAlt9je9I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.crl rsync://rpki-rsync.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 04:13:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:34:fc:e0:06:87:f5:28:40:29:44:34:c2:74:c0:81:ef:34:42:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71B6074C811D4B60D79A64DA0B9DD38E9AE78B69 Validity Not Before: Sep 17 03:27:54 2026 GMT Not After : Sep 18 04:13:54 2026 GMT Subject: CN=D68B3DAF574C4178A90591E75ADA865E57731F67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ad:a8:d8:6d:6e:9b:9d:49:da:1f:78:02:24: 2d:95:66:68:37:97:03:6b:b8:03:92:9c:ad:ca:04: a8:ec:e8:ce:6a:ca:7e:50:01:86:ce:1a:a4:83:5d: a1:5f:a5:a9:60:91:ff:0b:59:52:c4:1f:fb:de:e0: 03:21:57:ac:a0:cc:a4:34:28:be:98:11:7d:e2:38: 66:b1:b0:03:57:e1:f6:80:1f:15:ec:11:17:ab:52: 06:d3:62:46:83:07:05:d3:64:79:c2:f2:03:e1:36: 87:2f:c5:17:66:d4:9c:91:d0:5f:2f:f3:4d:e9:29: cc:45:43:f1:3f:68:66:95:89:e7:a8:6a:df:86:ed: 5c:74:11:2c:2d:5c:27:7c:d4:42:fa:6a:5f:22:28: fb:e1:9c:88:f7:60:80:6b:52:28:a2:4b:6d:78:96: 23:90:be:c9:25:de:28:c7:a3:05:d0:d9:f1:d1:04: 15:63:9e:d5:f2:19:57:38:a7:d9:e2:43:ca:48:ea: 33:af:d7:79:3f:db:2d:3a:aa:a6:5b:9c:df:f3:ab: 48:89:16:2a:62:e7:68:53:e3:b6:ab:e8:7a:4f:0f: 74:fa:ac:1d:21:f7:87:12:cc:41:3d:9a:fc:16:0e: 84:27:0b:08:bd:f1:a1:b0:ba:32:e0:37:eb:56:98: 6d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:8B:3D:AF:57:4C:41:78:A9:05:91:E7:5A:DA:86:5E:57:73:1F:67 X509v3 Authority Key Identifier: keyid:71:B6:07:4C:81:1D:4B:60:D7:9A:64:DA:0B:9D:D3:8E:9A:E7:8B:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:47:67:5b:0b:81:2c:92:e1:0d:c5:a4:e0:25:ab:50:be:1c: 60:4a:9a:11:fd:5e:5b:a3:8f:ad:b9:9f:63:9b:2a:16:c1:03: d1:93:b3:e5:66:54:fe:28:33:c4:ac:29:fe:ef:fb:74:9f:87: e9:ae:c2:16:ce:1b:bf:88:aa:ca:65:2a:3e:78:65:9d:0d:d3: 69:a7:b9:90:84:07:7f:e7:be:74:88:d3:90:ee:aa:55:1f:0c: 2e:f9:67:43:c2:92:c0:95:ae:c7:2e:07:1b:70:a5:dd:9f:cb: 69:66:7a:ba:58:a2:40:0b:36:39:b2:6b:4f:ad:73:1f:59:e1: 2b:a6:cb:49:e6:bb:12:3a:97:c3:25:af:fa:9a:d5:df:8e:6f: de:e8:96:2a:aa:ed:5d:e1:d6:b5:2e:03:25:b6:04:25:ec:4e: b9:6e:dd:d0:83:93:16:0a:e2:97:3c:a2:95:21:68:83:ff:d0: 41:0d:50:ed:d1:98:ba:74:c8:ab:8c:87:eb:d6:c4:70:64:30: 07:44:2a:70:25:73:c4:01:bb:4e:c7:fd:6c:ec:0e:8b:ca:ca: ba:a5:42:a1:0c:5e:a8:9e:dd:ba:eb:5d:f8:bb:f4:8c:3f:f2: bf:1a:b4:75:6d:2b:ab:d5:0c:93:53:e7:b6:b1:99:05:a9:00: 55:e8:a4:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUjT84AaH9ShAKUQ0wnTAge80QpswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFCNjA3NEM4MTFENEI2MEQ3OUE2NERBMEI5REQzOEU5 QUU3OEI2OTAeFw0yNjA5MTcwMzI3NTRaFw0yNjA5MTgwNDEzNTRaMDMxMTAvBgNV BAMTKEQ2OEIzREFGNTc0QzQxNzhBOTA1OTFFNzVBREE4NjVFNTc3MzFGNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmrajYbW6bnUnaH3gCJC2VZmg3 lwNruAOSnK3KBKjs6M5qyn5QAYbOGqSDXaFfpalgkf8LWVLEH/ve4AMhV6ygzKQ0 KL6YEX3iOGaxsANX4faAHxXsERerUgbTYkaDBwXTZHnC8gPhNocvxRdm1JyR0F8v 803pKcxFQ/E/aGaVieeoat+G7Vx0ESwtXCd81EL6al8iKPvhnIj3YIBrUiiiS214 liOQvskl3ijHowXQ2fHRBBVjntXyGVc4p9niQ8pI6jOv13k/2y06qqZbnN/zq0iJ Fipi52hT47ar6HpPD3T6rB0h94cSzEE9mvwWDoQnCwi98aGwujLgN+tWmG2HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1os9r1dMQXipBZHnWtqGXldzH2cwHwYDVR0j BBgwFoAUcbYHTIEdS2DXmmTaC53Tjprni2kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWE0NzIzMWYtMDJkZC00OWU4LWFhMjUtMmQ1NGMwYTk5OWNhLzAvNzFCNjA3NEM4 MTFENEI2MEQ3OUE2NERBMEI5REQzOEU5QUU3OEI2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MUI2MDc0QzgxMUQ0QjYwRDc5QTY0REEwQjlERDM4RTlBRTc4 QjY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWE0NzIzMWYtMDJkZC00OWU4LWFh MjUtMmQ1NGMwYTk5OWNhLzAvNzFCNjA3NEM4MTFENEI2MEQ3OUE2NERBMEI5REQz OEU5QUU3OEI2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG5HZ1sLgSyS4Q3FpOAlq1C+HGBKmhH9Xluj j625n2ObKhbBA9GTs+VmVP4oM8SsKf7v+3Sfh+muwhbOG7+IqsplKj54ZZ0N02mn uZCEB3/nvnSI05DuqlUfDC75Z0PCksCVrscuBxtwpd2fy2lmerpYokALNjmya0+t cx9Z4Sumy0nmuxI6l8Mlr/qa1d+Ob97oliqq7V3h1rUuAyW2BCXsTrlu3dCDkxYK 4pc8opUhaIP/0EENUO3RmLp0yKuMh+vWxHBkMAdEKnAlc8QBu07H/WzsDovKyrql QqEMXqie3brrXfi79Iw/8r8atHVtK6vVDJNT57axmQWpAFXopHU= -----END CERTIFICATE-----Generated at Thu Sep 17 12:20:43 2026 by rpki-client