$ rpki-client -vvf rpki-rsync.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/73DBC921D8D2EE0A4ACCEA19DC9357F5DE4BE3E4.mft File: 73DBC921D8D2EE0A4ACCEA19DC9357F5DE4BE3E4.mft (raw, json) Hash identifier: klO4Oe/SUHKu7Jf4EvQG929pssb5ny01WgzmW8NK8UE= Subject key identifier: 37:D6:D1:3D:C0:99:D2:C3:18:13:06:A8:2A:66:1A:B2:43:F0:CF:0B Authority key identifier: 73:DB:C9:21:D8:D2:EE:0A:4A:CC:EA:19:DC:93:57:F5:DE:4B:E3:E4 Certificate issuer: /CN=73DBC921D8D2EE0A4ACCEA19DC9357F5DE4BE3E4 Certificate serial: 38ECE007F5F93FBA3C3EB4CC373CD171E1CD3A3A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/73DBC921D8D2EE0A4ACCEA19DC9357F5DE4BE3E4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/73DBC921D8D2EE0A4ACCEA19DC9357F5DE4BE3E4.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 22:36:34 +0000 Manifest this update: Tue 16 Jun 2026 22:31:34 +0000 Manifest next update: Wed 17 Jun 2026 23:51:34 +0000 Files and hashes: 1: 73DBC921D8D2EE0A4ACCEA19DC9357F5DE4BE3E4.crl (hash: D+AgRns7J4IZljZAVZzdMyP88VQTCpyPgqnz0Fec9bA=) 2: 34352e3132332e3134332e302f32342d3234203d3e20343532303233.roa (hash: CSJEjkJY7azsSk9cH25LlICAA+0A0Fu3z6HyWvVTi50=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/73DBC921D8D2EE0A4ACCEA19DC9357F5DE4BE3E4.crl rsync://rpki-rsync.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/73DBC921D8D2EE0A4ACCEA19DC9357F5DE4BE3E4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/73DBC921D8D2EE0A4ACCEA19DC9357F5DE4BE3E4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 23:51:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:ec:e0:07:f5:f9:3f:ba:3c:3e:b4:cc:37:3c:d1:71:e1:cd:3a:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73DBC921D8D2EE0A4ACCEA19DC9357F5DE4BE3E4 Validity Not Before: Jun 16 22:31:34 2026 GMT Not After : Jun 17 23:51:34 2026 GMT Subject: CN=37D6D13DC099D2C3181306A82A661AB243F0CF0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:05:ac:bd:25:db:22:1e:f4:c8:c4:50:41:13: ca:dc:f1:db:c7:aa:9f:3b:79:30:3a:f7:d2:cf:b6: ed:2a:7a:a6:67:f3:e1:b7:79:00:f3:bc:fb:ce:9c: 7c:59:1e:7d:61:a4:26:35:bf:9c:e6:71:9a:61:fe: f4:9a:4c:ec:ed:0c:23:19:ac:ab:c7:65:93:bd:3f: 51:b1:98:52:eb:50:08:d4:8b:14:1e:60:71:c5:3a: 58:eb:1b:2e:97:3a:c1:15:13:d9:c0:6f:e3:05:74: 3d:65:84:c7:a4:41:43:8e:16:03:29:84:b9:a7:5b: e7:e1:59:18:9f:33:2d:37:00:6b:be:40:1b:6d:65: d6:b9:71:50:b6:80:d2:49:f2:22:07:8a:21:fd:6b: 7e:c9:8e:d5:47:1f:fb:78:02:f9:97:ca:b9:fb:8f: ed:9a:dd:b0:ca:54:be:4f:bb:04:6d:54:6e:e0:fa: c2:e0:f7:66:0b:67:4a:8e:f6:99:de:32:fa:fe:c7: a6:28:60:3e:2b:0a:71:3c:28:b2:e8:33:de:40:3f: ed:4b:de:97:7c:19:e0:b6:9e:b1:4f:6e:d3:9f:52: 38:92:9c:0c:f4:b1:6b:7f:d6:f6:94:21:31:2b:1a: 18:07:c1:ce:8c:2d:94:67:a8:0a:25:23:c5:f0:6b: 73:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:D6:D1:3D:C0:99:D2:C3:18:13:06:A8:2A:66:1A:B2:43:F0:CF:0B X509v3 Authority Key Identifier: keyid:73:DB:C9:21:D8:D2:EE:0A:4A:CC:EA:19:DC:93:57:F5:DE:4B:E3:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/73DBC921D8D2EE0A4ACCEA19DC9357F5DE4BE3E4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/73DBC921D8D2EE0A4ACCEA19DC9357F5DE4BE3E4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/73DBC921D8D2EE0A4ACCEA19DC9357F5DE4BE3E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dc:00:c1:d5:a6:bb:50:c5:c6:b0:ea:d5:e0:e4:76:73:00:bb: e4:36:85:44:b8:0d:bf:ae:e3:cc:92:30:23:5b:c4:f8:40:72: 82:47:b5:41:11:88:f0:e2:5c:84:05:a9:bb:90:e1:38:a0:69: 0e:9c:d7:c6:8e:ea:e4:40:01:4a:da:bb:a9:24:66:20:0d:2b: b3:5b:be:17:1d:2b:4e:2c:81:5e:35:8e:06:d4:c8:7c:4b:aa: 51:67:8a:97:ee:a3:28:14:af:97:08:33:35:75:44:5c:0b:74: 48:dc:71:a0:33:7a:11:37:84:4d:b2:6c:50:72:61:f8:62:09: 4a:18:63:60:b0:96:9f:4f:9b:24:18:e6:16:09:e2:76:f0:05: 79:01:32:a0:a1:6a:71:b6:c8:f0:3c:5b:82:9e:88:9d:15:47: 6f:40:45:bf:68:04:9a:fb:6b:97:69:eb:87:ac:bc:8f:1b:92: 3a:48:78:cb:ca:00:7a:3b:4a:c8:69:78:f7:2a:bf:48:5f:17: 57:65:05:66:85:2b:2a:1f:04:b9:da:7d:b1:d5:f4:95:e5:bc: aa:ad:a3:6a:73:26:11:6a:35:21:00:ea:8e:16:69:b1:f7:0f: bc:bc:52:2c:e9:dd:1f:78:63:57:8a:30:0a:41:b2:d3:1c:b1: d4:ab:97:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOOzgB/X5P7o8PrTMNzzRceHNOjowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNEQkM5MjFEOEQyRUUwQTRBQ0NFQTE5REM5MzU3RjVE RTRCRTNFNDAeFw0yNjA2MTYyMjMxMzRaFw0yNjA2MTcyMzUxMzRaMDMxMTAvBgNV BAMTKDM3RDZEMTNEQzA5OUQyQzMxODEzMDZBODJBNjYxQUIyNDNGMENGMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpBay9JdsiHvTIxFBBE8rc8dvH qp87eTA699LPtu0qeqZn8+G3eQDzvPvOnHxZHn1hpCY1v5zmcZph/vSaTOztDCMZ rKvHZZO9P1GxmFLrUAjUixQeYHHFOljrGy6XOsEVE9nAb+MFdD1lhMekQUOOFgMp hLmnW+fhWRifMy03AGu+QBttZda5cVC2gNJJ8iIHiiH9a37JjtVHH/t4AvmXyrn7 j+2a3bDKVL5PuwRtVG7g+sLg92YLZ0qO9pneMvr+x6YoYD4rCnE8KLLoM95AP+1L 3pd8GeC2nrFPbtOfUjiSnAz0sWt/1vaUITErGhgHwc6MLZRnqAolI8Xwa3N5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN9bRPcCZ0sMYEwaoKmYaskPwzwswHwYDVR0j BBgwFoAUc9vJIdjS7gpKzOoZ3JNX9d5L4+QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTE4MjgwNjctZTdjMS00OTY0LTg0MjgtNTk5MDMzZDc0Mjk2LzAvNzNEQkM5MjFE OEQyRUUwQTRBQ0NFQTE5REM5MzU3RjVERTRCRTNFNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83M0RCQzkyMUQ4RDJFRTBBNEFDQ0VBMTlEQzkzNTdGNURFNEJF M0U0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTE4MjgwNjctZTdjMS00OTY0LTg0 MjgtNTk5MDMzZDc0Mjk2LzAvNzNEQkM5MjFEOEQyRUUwQTRBQ0NFQTE5REM5MzU3 RjVERTRCRTNFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANwAwdWmu1DFxrDq1eDkdnMAu+Q2hUS4Db+u 48ySMCNbxPhAcoJHtUERiPDiXIQFqbuQ4TigaQ6c18aO6uRAAUrau6kkZiANK7Nb vhcdK04sgV41jgbUyHxLqlFnipfuoygUr5cIMzV1RFwLdEjccaAzehE3hE2ybFBy YfhiCUoYY2Cwlp9PmyQY5hYJ4nbwBXkBMqChanG2yPA8W4KeiJ0VR29ARb9oBJr7 a5dp64esvI8bkjpIeMvKAHo7SshpePcqv0hfF1dlBWaFKyofBLnafbHV9JXlvKqt o2pzJhFqNSEA6o4WabH3D7y8Uizp3R94Y1eKMApBstMcsdSrl3o= -----END CERTIFICATE-----Generated at Wed Jun 17 10:02:19 2026 by rpki-client