$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/1/6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.mft File: 6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.mft (raw, json) Hash identifier: Jxe4WwLkIj+0tawisM8zXAQHWhwZiUmgkOVghPtT8G0= Subject key identifier: 2E:C3:65:4E:67:0B:84:28:7D:55:5B:7A:80:96:19:4E:36:C6:72:09 Authority key identifier: 6D:73:D7:EA:6C:01:64:8C:7B:FD:08:A6:E2:B3:46:85:A3:32:AF:AD Certificate issuer: /CN=6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD Certificate serial: 4CEB728143081FBA5141CC621A13E03DF2640794 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/1/6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.mft Manifest number: BE Signing time: Mon 21 Sep 2026 03:46:09 +0000 Manifest this update: Mon 21 Sep 2026 03:41:09 +0000 Manifest next update: Tue 22 Sep 2026 06:27:09 +0000 Files and hashes: 1: 6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.crl (hash: +CzMPN6+aj5r5feQWyS0/YswCBTi+kh0xUADtFKo2V8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/1/6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.crl rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/1/6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:eb:72:81:43:08:1f:ba:51:41:cc:62:1a:13:e0:3d:f2:64:07:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD Validity Not Before: Sep 21 03:41:09 2026 GMT Not After : Sep 22 06:27:09 2026 GMT Subject: CN=2EC3654E670B84287D555B7A8096194E36C67209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:91:7a:6d:11:ac:83:cf:e0:d2:92:86:f0:06: 39:e5:0a:b6:8d:cf:eb:90:ed:70:18:7e:34:8b:65: 8c:d3:45:7b:4b:2d:d8:8f:d9:31:17:08:be:4d:da: 66:3a:f0:a8:5b:ef:b6:e6:a4:6a:ab:cd:53:e4:f9: b1:76:32:5b:45:e3:25:06:33:20:b4:0d:12:ae:bd: 51:a2:b6:ce:cf:57:c0:fa:be:e8:73:39:60:1b:38: fd:8a:2e:60:38:d5:48:41:f8:0f:0e:cc:6a:22:22: 77:3d:f8:63:a7:87:0a:9a:57:c9:a0:3b:97:6c:b4: 56:ab:f2:19:13:51:83:17:cc:10:a1:21:22:f8:27: 89:7e:8e:90:29:0d:a5:01:43:a9:5a:a2:f4:cd:e0: 55:5d:28:f4:21:30:4a:50:66:4d:60:d0:54:8d:9c: 92:75:fc:39:35:d3:70:1a:44:83:54:22:50:cf:ee: af:0e:7d:69:0d:80:ca:84:4c:47:b0:20:12:53:c2: b5:63:5f:5b:f5:ce:53:91:69:05:c5:33:45:cf:dc: e4:ca:ee:4e:51:8d:c8:43:5a:f9:28:0e:d5:01:8e: 1c:f3:3c:ad:b6:ab:32:a7:98:2b:12:3b:d7:e1:1e: 76:e3:7b:95:5d:fa:59:d8:5f:d7:7c:15:bb:22:bb: 4f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:C3:65:4E:67:0B:84:28:7D:55:5B:7A:80:96:19:4E:36:C6:72:09 X509v3 Authority Key Identifier: keyid:6D:73:D7:EA:6C:01:64:8C:7B:FD:08:A6:E2:B3:46:85:A3:32:AF:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/1/6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/1/6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:42:d6:59:2d:13:76:ca:54:1c:40:90:a9:db:94:81:d8:15: 83:c8:2f:56:66:a0:79:7f:e5:e6:1c:4b:57:fd:a5:68:fe:ab: eb:fd:00:12:0b:2b:c8:93:67:33:1e:38:c1:c2:f9:7e:da:d7: d3:4f:1c:ee:60:75:14:00:16:6d:83:18:1f:89:03:93:12:6a: 31:4e:25:30:c7:b4:20:3a:78:13:d9:5a:d1:06:eb:35:32:a0: 16:b2:1b:70:0f:9f:09:c6:d1:eb:56:d8:89:5e:50:ca:09:19: 31:9f:c6:25:11:41:80:f0:04:2d:72:da:e6:cf:cb:92:a8:f2: e3:4b:eb:20:06:de:00:f5:d1:d4:60:ff:dc:bd:6b:94:54:51: 9d:4c:34:9c:81:ae:6a:72:67:e3:81:b8:b4:d7:83:00:e7:4e: 40:32:33:8f:09:8f:df:ba:48:d8:7d:9e:1e:20:e9:b2:10:34: 1a:99:0a:a5:40:8e:6f:be:0d:4f:62:42:b8:f5:a0:60:0b:7a: 21:eb:83:f6:5e:20:83:45:20:3c:99:ef:0e:cd:e4:45:4b:2a: 7b:ef:59:e0:67:97:33:1e:b1:78:a9:36:06:63:f9:c0:4e:d5: 09:b3:ff:96:e6:7f:ba:32:0b:79:51:4d:dd:39:bf:1d:8e:65: 04:fb:b9:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTOtygUMIH7pRQcxiGhPgPfJkB5QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQ3M0Q3RUE2QzAxNjQ4QzdCRkQwOEE2RTJCMzQ2ODVB MzMyQUZBRDAeFw0yNjA5MjEwMzQxMDlaFw0yNjA5MjIwNjI3MDlaMDMxMTAvBgNV BAMTKDJFQzM2NTRFNjcwQjg0Mjg3RDU1NUI3QTgwOTYxOTRFMzZDNjcyMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCkXptEayDz+DSkobwBjnlCraN z+uQ7XAYfjSLZYzTRXtLLdiP2TEXCL5N2mY68Khb77bmpGqrzVPk+bF2MltF4yUG MyC0DRKuvVGits7PV8D6vuhzOWAbOP2KLmA41UhB+A8OzGoiInc9+GOnhwqaV8mg O5dstFar8hkTUYMXzBChISL4J4l+jpApDaUBQ6laovTN4FVdKPQhMEpQZk1g0FSN nJJ1/Dk103AaRINUIlDP7q8OfWkNgMqETEewIBJTwrVjX1v1zlORaQXFM0XP3OTK 7k5RjchDWvkoDtUBjhzzPK22qzKnmCsSO9fhHnbje5Vd+lnYX9d8Fbsiu0+hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULsNlTmcLhCh9VVt6gJYZTjbGcgkwHwYDVR0j BBgwFoAUbXPX6mwBZIx7/Qim4rNGhaMyr60wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmJlMjk5MDItZTBmNC00MjlhLTlhMjYtNDM5YjliZmVlNDg5LzEvNkQ3M0Q3RUE2 QzAxNjQ4QzdCRkQwOEE2RTJCMzQ2ODVBMzMyQUZBRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82RDczRDdFQTZDMDE2NDhDN0JGRDA4QTZFMkIzNDY4NUEzMzJB RkFELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmJlMjk5MDItZTBmNC00MjlhLTlh MjYtNDM5YjliZmVlNDg5LzEvNkQ3M0Q3RUE2QzAxNjQ4QzdCRkQwOEE2RTJCMzQ2 ODVBMzMyQUZBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE9C1lktE3bKVBxAkKnblIHYFYPIL1ZmoHl/ 5eYcS1f9pWj+q+v9ABILK8iTZzMeOMHC+X7a19NPHO5gdRQAFm2DGB+JA5MSajFO JTDHtCA6eBPZWtEG6zUyoBayG3APnwnG0etW2IleUMoJGTGfxiURQYDwBC1y2ubP y5Ko8uNL6yAG3gD10dRg/9y9a5RUUZ1MNJyBrmpyZ+OBuLTXgwDnTkAyM48Jj9+6 SNh9nh4g6bIQNBqZCqVAjm++DU9iQrj1oGALeiHrg/ZeIINFIDyZ7w7N5EVLKnvv WeBnlzMesXipNgZj+cBO1Qmz/5bmf7oyC3lRTd05vx2OZQT7ubo= -----END CERTIFICATE-----Generated at Mon Sep 21 17:35:24 2026 by rpki-client