$ rpki-client -vvvf rpki-rsync.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/C73043EA966F0F810C22E736459E7122F2FD0AE0.mft File: C73043EA966F0F810C22E736459E7122F2FD0AE0.mft (raw, json) Hash identifier: FkRnxfJptoL9iCNnUOexnWZsMNGfolUxbhkQAgS2TlU= Subject key identifier: C9:9F:21:B5:44:DA:CB:7B:54:53:6D:AB:4E:35:F5:8D:CC:62:89:1A Authority key identifier: C7:30:43:EA:96:6F:0F:81:0C:22:E7:36:45:9E:71:22:F2:FD:0A:E0 Certificate issuer: /CN=C73043EA966F0F810C22E736459E7122F2FD0AE0 Certificate serial: 1AB8EA8F26BD78C364F542DF3A4D2F8BA3AADF57 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C73043EA966F0F810C22E736459E7122F2FD0AE0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/C73043EA966F0F810C22E736459E7122F2FD0AE0.mft Manifest number: BE Signing time: Sun 20 Sep 2026 06:50:32 +0000 Manifest this update: Sun 20 Sep 2026 06:45:32 +0000 Manifest next update: Mon 21 Sep 2026 10:04:32 +0000 Files and hashes: 1: 3230332e3131342e3232342e302f32332d3234203d3e203435363937.roa (hash: MV2xIGxIBgdx5AyOkaAkD+fjhmUbspGn/aDtyM22cf4=) 2: C73043EA966F0F810C22E736459E7122F2FD0AE0.crl (hash: SpT5hJkGfTwmA4lFzV2+BJieKaBgOTZlEHhsXKLEr8c=) 3: 323030313a6466303a39613a3a2f34382d3438203d3e203435363937.roa (hash: Amg7n/J1kB55PVPfhSf4dolGpwcgp004+ynKN8Iqa0A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/C73043EA966F0F810C22E736459E7122F2FD0AE0.crl rsync://rpki-rsync.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/C73043EA966F0F810C22E736459E7122F2FD0AE0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C73043EA966F0F810C22E736459E7122F2FD0AE0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 10:04:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:b8:ea:8f:26:bd:78:c3:64:f5:42:df:3a:4d:2f:8b:a3:aa:df:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C73043EA966F0F810C22E736459E7122F2FD0AE0 Validity Not Before: Sep 20 06:45:32 2026 GMT Not After : Sep 21 10:04:32 2026 GMT Subject: CN=C99F21B544DACB7B54536DAB4E35F58DCC62891A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:89:84:cd:5a:1f:c7:49:69:7f:ed:b3:14:dc: 64:26:52:90:6c:e5:62:3a:96:04:ed:19:28:58:70: f6:86:31:19:36:f8:75:a1:43:94:48:42:59:cd:ee: 5f:09:25:49:d9:a3:fd:d5:12:da:cf:2a:4a:43:81: 5b:dd:c0:fe:aa:c5:d6:fe:c5:3f:fd:74:45:9b:bf: 2b:d5:2e:f5:c5:a8:d0:07:59:0c:3a:2f:f7:fc:3f: 47:03:9a:53:75:e2:84:71:2d:bf:82:31:dd:18:03: 6c:6e:53:3a:c5:09:6d:94:03:c0:ef:9b:ca:c8:26: c6:ee:2f:53:4f:c4:bd:ce:e2:1a:b5:93:a8:fa:3a: d4:b5:50:e5:a7:98:29:03:df:22:94:2c:53:ba:d7: 77:50:c6:cd:04:2d:94:7d:11:09:38:41:24:7e:36: ce:58:21:f6:69:53:b0:bc:87:21:f5:ad:ea:2c:d0: fe:b5:11:7d:8d:21:2b:06:a1:4b:93:d2:c6:9c:b1: c7:c9:62:c5:7f:96:b2:46:07:e9:fa:7a:4d:d3:36: 40:85:c5:42:10:3a:59:b7:2e:ab:5c:7c:65:bf:0a: 0a:0d:68:b0:3f:31:0e:32:7d:fa:58:e0:67:8a:bd: ea:3a:0e:70:11:f2:ea:c5:66:c6:22:f7:d7:08:f7: e5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:9F:21:B5:44:DA:CB:7B:54:53:6D:AB:4E:35:F5:8D:CC:62:89:1A X509v3 Authority Key Identifier: keyid:C7:30:43:EA:96:6F:0F:81:0C:22:E7:36:45:9E:71:22:F2:FD:0A:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/C73043EA966F0F810C22E736459E7122F2FD0AE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C73043EA966F0F810C22E736459E7122F2FD0AE0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/C73043EA966F0F810C22E736459E7122F2FD0AE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:c0:ea:dc:d9:54:bb:1a:4c:75:7d:36:8f:4d:0d:54:84:a4: 20:6f:ec:a5:a9:52:dd:b2:64:36:16:9e:63:53:e2:c5:43:ed: 1d:8e:ed:1b:ee:fa:4f:25:00:39:43:04:12:2a:cf:34:49:35: c4:59:3e:05:b5:ce:b7:3b:ef:19:a3:ec:ef:25:1e:04:38:84: 08:53:13:fa:53:4e:16:00:bb:34:36:27:f8:4a:6b:7e:fb:e1: 04:7e:53:b3:ba:63:c0:d6:b0:bd:ef:74:e5:84:a8:4d:5d:e0: 02:e8:36:24:01:5b:a7:be:c1:d1:9d:29:18:4b:e7:3f:53:d9: 70:d0:9f:f0:01:f2:0a:17:11:80:c7:90:80:d6:86:27:2c:07: b6:f4:72:57:de:54:17:c0:93:44:4e:dc:0e:bd:f7:9b:3d:92: c1:4e:d6:73:8b:dd:eb:58:d9:e4:b7:40:64:75:38:3f:00:01: dc:8e:ec:00:c6:49:21:75:88:e6:97:87:11:a2:78:93:ad:e9: 85:e9:e0:ab:5c:3b:94:46:12:48:1f:4e:7c:da:40:3f:99:11: c9:40:85:d6:be:60:73:6c:c9:7a:e6:35:8a:a7:0c:6c:0e:12: 94:68:8b:18:a2:29:86:2a:d1:17:b4:be:62:46:f9:69:27:7a: a9:f5:5b:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGrjqjya9eMNk9ULfOk0vi6Oq31cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzczMDQzRUE5NjZGMEY4MTBDMjJFNzM2NDU5RTcxMjJG MkZEMEFFMDAeFw0yNjA5MjAwNjQ1MzJaFw0yNjA5MjExMDA0MzJaMDMxMTAvBgNV BAMTKEM5OUYyMUI1NDREQUNCN0I1NDUzNkRBQjRFMzVGNThEQ0M2Mjg5MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgiYTNWh/HSWl/7bMU3GQmUpBs 5WI6lgTtGShYcPaGMRk2+HWhQ5RIQlnN7l8JJUnZo/3VEtrPKkpDgVvdwP6qxdb+ xT/9dEWbvyvVLvXFqNAHWQw6L/f8P0cDmlN14oRxLb+CMd0YA2xuUzrFCW2UA8Dv m8rIJsbuL1NPxL3O4hq1k6j6OtS1UOWnmCkD3yKULFO613dQxs0ELZR9EQk4QSR+ Ns5YIfZpU7C8hyH1reos0P61EX2NISsGoUuT0sacscfJYsV/lrJGB+n6ek3TNkCF xUIQOlm3LqtcfGW/CgoNaLA/MQ4yffpY4GeKveo6DnAR8urFZsYi99cI9+V9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyZ8htUTay3tUU22rTjX1jcxiiRowHwYDVR0j BBgwFoAUxzBD6pZvD4EMIuc2RZ5xIvL9CuAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDM1MDA3NjctOTIyNy00M2VjLWE1MjUtMmU5N2Q1YTAzZjA5LzAvQzczMDQzRUE5 NjZGMEY4MTBDMjJFNzM2NDU5RTcxMjJGMkZEMEFFMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNzMwNDNFQTk2NkYwRjgxMEMyMkU3MzY0NTlFNzEyMkYyRkQw QUUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDM1MDA3NjctOTIyNy00M2VjLWE1 MjUtMmU5N2Q1YTAzZjA5LzAvQzczMDQzRUE5NjZGMEY4MTBDMjJFNzM2NDU5RTcx MjJGMkZEMEFFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB3A6tzZVLsaTHV9No9NDVSEpCBv7KWpUt2y ZDYWnmNT4sVD7R2O7Rvu+k8lADlDBBIqzzRJNcRZPgW1zrc77xmj7O8lHgQ4hAhT E/pTThYAuzQ2J/hKa3774QR+U7O6Y8DWsL3vdOWEqE1d4ALoNiQBW6e+wdGdKRhL 5z9T2XDQn/AB8goXEYDHkIDWhicsB7b0clfeVBfAk0RO3A6995s9ksFO1nOL3etY 2eS3QGR1OD8AAdyO7ADGSSF1iOaXhxGieJOt6YXp4KtcO5RGEkgfTnzaQD+ZEclA hda+YHNsyXrmNYqnDGwOEpRoixiiKYYq0Re0vmJG+Wkneqn1W40= -----END CERTIFICATE-----Generated at Sun Sep 20 20:13:01 2026 by rpki-client