$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/73AC68F9F57E709948037DADDAC8DC88616BF980.mft File: 73AC68F9F57E709948037DADDAC8DC88616BF980.mft (raw, json) Hash identifier: yrF5Ob+qE9cCUaOXU4uvTRTaRQ+Y5Xt+5Q/agO38YeE= Subject key identifier: 1E:DE:74:E3:CB:A7:6E:0C:BD:2D:B9:C7:30:26:21:03:C1:74:A4:65 Authority key identifier: 73:AC:68:F9:F5:7E:70:99:48:03:7D:AD:DA:C8:DC:88:61:6B:F9:80 Certificate issuer: /CN=73AC68F9F57E709948037DADDAC8DC88616BF980 Certificate serial: 239BE481FAC230D95EA0287143BEF7CBB05B0C61 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/73AC68F9F57E709948037DADDAC8DC88616BF980.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/73AC68F9F57E709948037DADDAC8DC88616BF980.mft Manifest number: BE Signing time: Mon 21 Sep 2026 04:01:26 +0000 Manifest this update: Mon 21 Sep 2026 03:56:26 +0000 Manifest next update: Tue 22 Sep 2026 07:51:26 +0000 Files and hashes: 1: 3136302e3139312e3130362e302f32332d3234203d3e20313533313433.roa (hash: vd1S4Z6+zmIZSCdC4Qdy1PZIz8w97xUXmpTWkwwvVQE=) 2: 73AC68F9F57E709948037DADDAC8DC88616BF980.crl (hash: crBmb2PGR1ruYaveAlocrex2KizPRpj12cPLzk/7Zds=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/73AC68F9F57E709948037DADDAC8DC88616BF980.crl rsync://rpki-rsync.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/73AC68F9F57E709948037DADDAC8DC88616BF980.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/73AC68F9F57E709948037DADDAC8DC88616BF980.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:9b:e4:81:fa:c2:30:d9:5e:a0:28:71:43:be:f7:cb:b0:5b:0c:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73AC68F9F57E709948037DADDAC8DC88616BF980 Validity Not Before: Sep 21 03:56:26 2026 GMT Not After : Sep 22 07:51:26 2026 GMT Subject: CN=1EDE74E3CBA76E0CBD2DB9C730262103C174A465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:92:88:33:7e:5a:a2:72:05:d9:86:09:9e:ff: bd:82:e7:b1:70:43:16:15:c7:ad:20:e4:06:de:3a: 54:77:e2:1a:3c:bf:13:f6:6d:a1:92:06:25:e4:19: 04:62:3f:70:5c:1b:25:e2:45:13:0d:97:3f:2b:c3: ca:2b:dc:d2:ff:0e:79:64:e3:40:ba:97:98:05:6e: d9:90:bb:0b:a9:f0:70:fb:43:09:0b:ae:fb:ab:b2: e9:f1:08:9e:08:5f:f9:62:18:59:fa:1d:7b:e9:0e: 5c:46:20:d8:80:6e:a3:ab:9f:6b:b4:e7:02:25:1b: 5a:92:7a:14:dc:90:34:17:50:38:be:05:4f:ce:01: 8c:1b:dd:75:ff:90:61:41:9c:68:c3:17:88:e2:8b: 13:51:d8:ad:c5:ff:95:c6:e3:60:bc:48:21:2d:03: e2:5d:be:4c:03:c5:88:59:3a:84:09:bd:0d:f7:9a: 6c:97:3f:39:00:d0:f2:29:51:be:13:15:b1:53:9c: 7c:e6:97:0e:4f:19:82:84:39:c6:18:3d:6a:b8:e3: 57:88:8e:41:3c:6c:6b:36:08:ec:61:aa:5a:14:a4: 52:de:1c:79:89:f0:95:94:1f:8d:75:c2:d9:07:cd: 98:a0:9a:7f:5e:e7:13:36:8b:92:1d:d4:04:92:5e: 6a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:DE:74:E3:CB:A7:6E:0C:BD:2D:B9:C7:30:26:21:03:C1:74:A4:65 X509v3 Authority Key Identifier: keyid:73:AC:68:F9:F5:7E:70:99:48:03:7D:AD:DA:C8:DC:88:61:6B:F9:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/73AC68F9F57E709948037DADDAC8DC88616BF980.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/73AC68F9F57E709948037DADDAC8DC88616BF980.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/73AC68F9F57E709948037DADDAC8DC88616BF980.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:e2:c1:c5:d5:c5:0d:54:d1:63:70:5c:8d:7b:2a:8b:78:31: 79:c7:b5:dd:b4:ef:98:cf:6e:61:19:be:b8:24:65:2d:bf:0a: fd:3f:78:2b:45:08:58:cd:cc:e4:c8:5f:32:d2:e8:50:82:13: 80:f8:46:d2:fe:05:b0:f7:70:2a:a5:29:c8:9c:a2:7b:45:ba: 2d:6a:da:0c:ab:dd:60:bc:a7:54:63:ea:95:00:20:98:96:2e: 8b:00:68:db:a0:1b:7a:bb:f4:5a:e2:5b:f8:3b:42:6f:8a:c6: c4:93:fc:a2:ec:8a:fb:be:08:b1:f2:ae:fc:e5:72:e4:0c:16: f4:67:c0:f4:99:52:80:d4:fe:b1:99:58:da:8a:4a:c1:a9:54: db:54:ee:ed:b5:ef:0a:67:59:13:e1:55:72:a6:65:eb:a5:8d: cf:e2:62:04:03:90:fe:3c:71:40:f8:61:25:f4:1e:e2:50:85: c7:82:20:92:de:b5:45:10:f7:06:36:36:b5:41:c8:b1:b4:5e: e4:ee:6d:58:e0:bd:95:c3:9d:2f:da:6e:34:b6:e7:8a:3c:5c: cd:e0:d5:fc:0d:5f:56:52:90:85:88:e9:f1:f0:89:df:49:e9: fa:ec:52:1f:df:d3:ca:22:a4:b3:8a:03:24:6c:44:05:68:73: 11:42:c2:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI5vkgfrCMNleoChxQ773y7BbDGEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNBQzY4RjlGNTdFNzA5OTQ4MDM3REFEREFDOERDODg2 MTZCRjk4MDAeFw0yNjA5MjEwMzU2MjZaFw0yNjA5MjIwNzUxMjZaMDMxMTAvBgNV BAMTKDFFREU3NEUzQ0JBNzZFMENCRDJEQjlDNzMwMjYyMTAzQzE3NEE0NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1kogzflqicgXZhgme/72C57Fw QxYVx60g5AbeOlR34ho8vxP2baGSBiXkGQRiP3BcGyXiRRMNlz8rw8or3NL/Dnlk 40C6l5gFbtmQuwup8HD7QwkLrvursunxCJ4IX/liGFn6HXvpDlxGINiAbqOrn2u0 5wIlG1qSehTckDQXUDi+BU/OAYwb3XX/kGFBnGjDF4jiixNR2K3F/5XG42C8SCEt A+JdvkwDxYhZOoQJvQ33mmyXPzkA0PIpUb4TFbFTnHzmlw5PGYKEOcYYPWq441eI jkE8bGs2COxhqloUpFLeHHmJ8JWUH411wtkHzZigmn9e5xM2i5Id1ASSXmqDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHt5048unbgy9LbnHMCYhA8F0pGUwHwYDVR0j BBgwFoAUc6xo+fV+cJlIA32t2sjciGFr+YAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWU4NTVlOGEtM2ZmOC00N2ZmLWFhZWMtNDhkOGIzODBhOTA0LzAvNzNBQzY4RjlG NTdFNzA5OTQ4MDM3REFEREFDOERDODg2MTZCRjk4MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83M0FDNjhGOUY1N0U3MDk5NDgwMzdEQUREQUM4REM4ODYxNkJG OTgwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWU4NTVlOGEtM2ZmOC00N2ZmLWFh ZWMtNDhkOGIzODBhOTA0LzAvNzNBQzY4RjlGNTdFNzA5OTQ4MDM3REFEREFDOERD ODg2MTZCRjk4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH/iwcXVxQ1U0WNwXI17Kot4MXnHtd2075jP bmEZvrgkZS2/Cv0/eCtFCFjNzOTIXzLS6FCCE4D4RtL+BbD3cCqlKcicontFui1q 2gyr3WC8p1Rj6pUAIJiWLosAaNugG3q79FriW/g7Qm+KxsST/KLsivu+CLHyrvzl cuQMFvRnwPSZUoDU/rGZWNqKSsGpVNtU7u217wpnWRPhVXKmZeuljc/iYgQDkP48 cUD4YSX0HuJQhceCIJLetUUQ9wY2NrVByLG0XuTubVjgvZXDnS/abjS254o8XM3g 1fwNX1ZSkIWI6fHwid9J6frsUh/f08oipLOKAyRsRAVocxFCwpc= -----END CERTIFICATE-----Generated at Mon Sep 21 14:25:00 2026 by rpki-client