$ rpki-client -vvvf rpki-rsync.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/73DBC921D8D2EE0A4ACCEA19DC9357F5DE4BE3E4.mft File: 73DBC921D8D2EE0A4ACCEA19DC9357F5DE4BE3E4.mft (raw, json) Hash identifier: lWHA1pC7mIz+J6fm0c4wFhoYtxltBrCrx0vYiFXJgOg= Subject key identifier: A0:35:26:11:AF:DC:9E:8F:A4:C0:D1:98:26:FC:B0:49:83:59:4C:47 Authority key identifier: 73:DB:C9:21:D8:D2:EE:0A:4A:CC:EA:19:DC:93:57:F5:DE:4B:E3:E4 Certificate issuer: /CN=73DBC921D8D2EE0A4ACCEA19DC9357F5DE4BE3E4 Certificate serial: 5B2188A187A6A517D1E0DBB56480B77BC0B4DFD9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/73DBC921D8D2EE0A4ACCEA19DC9357F5DE4BE3E4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/73DBC921D8D2EE0A4ACCEA19DC9357F5DE4BE3E4.mft Manifest number: BF Signing time: Mon 21 Sep 2026 18:34:28 +0000 Manifest this update: Mon 21 Sep 2026 18:29:28 +0000 Manifest next update: Tue 22 Sep 2026 21:42:28 +0000 Files and hashes: 1: 73DBC921D8D2EE0A4ACCEA19DC9357F5DE4BE3E4.crl (hash: JwIX7M9/syxnlsgtSCMz0xzrsBI+FdUllI3ej/l5khw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/73DBC921D8D2EE0A4ACCEA19DC9357F5DE4BE3E4.crl rsync://rpki-rsync.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/73DBC921D8D2EE0A4ACCEA19DC9357F5DE4BE3E4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/73DBC921D8D2EE0A4ACCEA19DC9357F5DE4BE3E4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 21:42:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:21:88:a1:87:a6:a5:17:d1:e0:db:b5:64:80:b7:7b:c0:b4:df:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73DBC921D8D2EE0A4ACCEA19DC9357F5DE4BE3E4 Validity Not Before: Sep 21 18:29:28 2026 GMT Not After : Sep 22 21:42:28 2026 GMT Subject: CN=A0352611AFDC9E8FA4C0D19826FCB04983594C47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0b:07:bd:09:df:d5:31:37:4b:24:3a:a1:3a: ad:5f:a7:3e:75:cf:86:fa:75:37:40:1f:17:ae:e3: df:24:57:c8:08:bb:40:07:ca:7a:9e:1f:ba:fd:16: 0c:ab:51:87:82:d0:b2:51:d5:c0:a8:7d:1d:51:9a: 80:6a:a0:1f:d0:57:84:90:eb:f4:bc:b7:41:7d:9c: 0f:78:25:6c:02:d9:b0:23:0e:1c:e7:aa:a9:15:71: 79:53:c4:f2:fa:4b:3d:a6:13:09:3f:b5:a8:ec:93: 56:fa:2f:df:4f:96:69:b4:00:01:78:05:a0:7a:09: 5c:ea:3d:47:3b:79:85:04:e8:ee:e4:c2:f6:40:bf: a5:db:5e:dc:7b:1f:fa:15:c8:4c:73:23:00:2d:52: 41:89:27:1c:d6:c6:6c:37:99:38:8f:73:0d:d1:2b: 12:19:88:cb:ee:21:25:4e:69:7b:c9:21:1b:ee:66: b5:b0:5a:30:94:b4:b0:0f:a9:95:91:28:12:94:ca: d0:8d:96:d3:be:ed:3d:ea:da:f3:e2:ba:2f:b1:b2: 5e:a6:cd:46:cf:26:03:ac:39:1c:6c:49:2b:c3:a9: 88:36:61:74:9f:40:5a:89:9f:dc:db:b5:e8:5d:f0: c2:a3:8f:ae:67:8a:02:fc:5a:76:1e:67:59:21:80: f9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:35:26:11:AF:DC:9E:8F:A4:C0:D1:98:26:FC:B0:49:83:59:4C:47 X509v3 Authority Key Identifier: keyid:73:DB:C9:21:D8:D2:EE:0A:4A:CC:EA:19:DC:93:57:F5:DE:4B:E3:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/73DBC921D8D2EE0A4ACCEA19DC9357F5DE4BE3E4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/73DBC921D8D2EE0A4ACCEA19DC9357F5DE4BE3E4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/73DBC921D8D2EE0A4ACCEA19DC9357F5DE4BE3E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:8d:15:f3:9a:e5:16:52:f9:34:02:f5:3d:b3:17:5f:01:f7: 7f:f5:8b:e1:9d:a3:73:9f:4d:91:3c:c3:97:73:4e:6d:f9:4f: 30:24:11:54:c9:e5:3a:b6:39:56:f0:03:84:96:bd:8e:48:0c: a4:b4:67:7b:2c:81:a6:9c:53:33:bb:d1:33:bc:37:99:b9:98: 76:76:6c:08:d4:6a:91:7e:58:e0:dd:01:27:16:5d:a2:7a:70: c0:6b:12:93:61:a7:a1:72:55:41:e2:50:1c:bc:7e:de:c6:a9: 0c:66:19:29:b4:9d:47:0d:f6:71:e8:7d:5b:02:8e:21:d9:7d: 72:7a:ee:f3:e9:a4:16:6c:7f:04:f9:34:4a:4c:f1:21:e9:e1: 9d:97:0c:2c:14:11:68:c6:49:43:f6:0c:d8:4c:42:11:aa:ec: f3:13:b3:8a:1e:19:31:0f:07:c1:fe:61:10:81:4f:4e:c5:29: c4:87:18:98:1a:bb:fe:f2:1d:6a:d8:dc:6a:79:39:9d:a1:1b: c4:17:25:40:67:03:9f:91:1a:dd:f1:17:ae:0d:ad:3d:85:73: 01:65:5b:e4:89:c1:3b:e3:55:46:72:45:c2:20:98:a5:92:09: 74:ef:05:a4:46:70:06:27:f4:55:8c:74:19:a4:2a:60:e1:96: 2c:89:14:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWyGIoYempRfR4Nu1ZIC3e8C039kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNEQkM5MjFEOEQyRUUwQTRBQ0NFQTE5REM5MzU3RjVE RTRCRTNFNDAeFw0yNjA5MjExODI5MjhaFw0yNjA5MjIyMTQyMjhaMDMxMTAvBgNV BAMTKEEwMzUyNjExQUZEQzlFOEZBNEMwRDE5ODI2RkNCMDQ5ODM1OTRDNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Cwe9Cd/VMTdLJDqhOq1fpz51 z4b6dTdAHxeu498kV8gIu0AHynqeH7r9FgyrUYeC0LJR1cCofR1RmoBqoB/QV4SQ 6/S8t0F9nA94JWwC2bAjDhznqqkVcXlTxPL6Sz2mEwk/tajsk1b6L99Plmm0AAF4 BaB6CVzqPUc7eYUE6O7kwvZAv6XbXtx7H/oVyExzIwAtUkGJJxzWxmw3mTiPcw3R KxIZiMvuISVOaXvJIRvuZrWwWjCUtLAPqZWRKBKUytCNltO+7T3q2vPiui+xsl6m zUbPJgOsORxsSSvDqYg2YXSfQFqJn9zbtehd8MKjj65nigL8WnYeZ1khgPkhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoDUmEa/cno+kwNGYJvywSYNZTEcwHwYDVR0j BBgwFoAUc9vJIdjS7gpKzOoZ3JNX9d5L4+QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTE4MjgwNjctZTdjMS00OTY0LTg0MjgtNTk5MDMzZDc0Mjk2LzAvNzNEQkM5MjFE OEQyRUUwQTRBQ0NFQTE5REM5MzU3RjVERTRCRTNFNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83M0RCQzkyMUQ4RDJFRTBBNEFDQ0VBMTlEQzkzNTdGNURFNEJF M0U0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTE4MjgwNjctZTdjMS00OTY0LTg0 MjgtNTk5MDMzZDc0Mjk2LzAvNzNEQkM5MjFEOEQyRUUwQTRBQ0NFQTE5REM5MzU3 RjVERTRCRTNFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACKNFfOa5RZS+TQC9T2zF18B93/1i+Gdo3Of TZE8w5dzTm35TzAkEVTJ5Tq2OVbwA4SWvY5IDKS0Z3ssgaacUzO70TO8N5m5mHZ2 bAjUapF+WODdAScWXaJ6cMBrEpNhp6FyVUHiUBy8ft7GqQxmGSm0nUcN9nHofVsC jiHZfXJ67vPppBZsfwT5NEpM8SHp4Z2XDCwUEWjGSUP2DNhMQhGq7PMTs4oeGTEP B8H+YRCBT07FKcSHGJgau/7yHWrY3Gp5OZ2hG8QXJUBnA5+RGt3xF64NrT2FcwFl W+SJwTvjVUZyRcIgmKWSCXTvBaRGcAYn9FWMdBmkKmDhliyJFCQ= -----END CERTIFICATE-----Generated at Tue Sep 22 02:43:49 2026 by rpki-client