$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/1/6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.mft File: 6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.mft (raw, json) Hash identifier: tKX/etUgrcpQdVfxwVKDfNsa9pblbn9nyDQrkxW/3PE= Subject key identifier: 19:D7:93:68:AC:E3:77:CB:34:14:07:B5:CB:F6:E9:4D:45:85:FE:BE Authority key identifier: 6D:73:D7:EA:6C:01:64:8C:7B:FD:08:A6:E2:B3:46:85:A3:32:AF:AD Certificate issuer: /CN=6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD Certificate serial: 2D395468F4EBB463832DC8694265BD3BD182AA77 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/1/6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.mft Manifest number: 0100 Signing time: Tue 10 Nov 2026 04:31:34 +0000 Manifest this update: Tue 10 Nov 2026 04:26:34 +0000 Manifest next update: Wed 11 Nov 2026 06:21:34 +0000 Files and hashes: 1: 6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.crl (hash: 7JqwMqA7Znu7/3ivQpNsjEpvNGWjv3/qAIAxTIWIcf8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/1/6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.crl rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/1/6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 06:21:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:39:54:68:f4:eb:b4:63:83:2d:c8:69:42:65:bd:3b:d1:82:aa:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD Validity Not Before: Nov 10 04:26:34 2026 GMT Not After : Nov 11 06:21:34 2026 GMT Subject: CN=19D79368ACE377CB341407B5CBF6E94D4585FEBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e5:ad:3e:87:d3:bc:57:97:e1:28:4e:e2:85: 83:b5:6d:80:fa:9e:c1:81:d0:2f:76:c0:71:47:f1: 4e:ce:a4:a7:e5:a4:0f:e2:a4:b2:ab:4b:91:91:a1: 07:50:09:f4:dd:fd:5b:2c:96:d2:63:35:36:2a:52: 28:d5:4e:85:9e:c3:e9:6b:84:21:65:20:b8:19:84: 93:d5:09:4d:86:3c:65:19:6b:eb:e4:7d:77:8d:be: 69:27:58:12:02:d4:22:c6:2d:62:fc:cb:56:f4:72: 16:a6:fa:9e:81:c6:c4:2d:dd:aa:82:be:b7:b1:70: e9:96:63:1a:d2:c2:67:33:c2:c4:55:2c:92:32:bd: f1:3c:57:96:34:a3:3a:13:84:1e:d4:f6:d4:76:ac: a4:a2:55:c8:93:00:7b:4f:2b:6c:da:cb:67:41:41: 2e:14:a0:91:2a:5f:de:f0:3e:2a:e2:f2:17:85:e6: ab:b9:f4:df:b9:40:76:ef:8f:ce:e3:10:2e:ad:28: fd:04:4b:5b:9d:b7:1c:71:7f:36:0d:d5:e7:99:fa: b9:8c:45:77:a5:3c:d1:3b:c0:fe:ff:4c:34:15:7d: 6a:be:7f:8b:2f:e6:ef:69:4a:b7:2c:5f:d7:b0:0b: 01:a7:14:3e:1b:b6:61:32:ff:28:ef:ef:78:f4:33: 1c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:D7:93:68:AC:E3:77:CB:34:14:07:B5:CB:F6:E9:4D:45:85:FE:BE X509v3 Authority Key Identifier: keyid:6D:73:D7:EA:6C:01:64:8C:7B:FD:08:A6:E2:B3:46:85:A3:32:AF:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/1/6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/1/6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:a7:45:36:e0:01:17:6c:f0:98:65:65:12:08:04:ad:3e:a8: f9:8e:94:7b:7d:8a:81:ee:56:89:90:2d:19:17:fb:05:f7:14: b4:4e:dc:46:92:bb:0c:a4:57:42:d3:ac:ea:b4:04:79:cc:bf: f0:03:ce:7c:dd:8d:12:fc:cd:ef:12:9e:ed:3a:39:e9:a0:f6: a6:3f:64:ea:5d:9e:d8:42:17:ed:b9:c7:b7:a9:71:e4:0c:de: 13:12:a0:26:72:10:13:c0:80:00:52:a4:81:c2:37:d0:d8:5f: 13:4f:24:97:fe:7a:98:f0:6f:31:7c:28:a5:dc:b4:91:96:fe: b8:01:6e:74:06:97:5d:65:65:d6:f0:a1:79:64:dd:5a:f7:d4: 5b:cd:18:d4:be:78:77:c1:83:3b:53:9c:dd:ad:9a:50:9e:b3: b5:3b:a6:9e:65:56:bc:ee:28:d4:0e:ac:a3:e9:54:58:d1:d3: 03:d1:1c:a9:a5:fd:95:88:2a:1a:8e:88:f5:72:f8:19:ff:80: 4f:24:19:0c:a9:5b:7b:68:66:47:5f:f6:0c:89:90:23:08:48: 9e:c1:8d:31:f4:ff:69:50:77:01:1c:ba:2d:ef:d3:c9:8f:6c: 3c:8e:b7:51:27:bd:73:b8:57:11:9a:06:58:82:7f:09:da:85: 4c:75:a8:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULTlUaPTrtGODLchpQmW9O9GCqncwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQ3M0Q3RUE2QzAxNjQ4QzdCRkQwOEE2RTJCMzQ2ODVB MzMyQUZBRDAeFw0yNjExMTAwNDI2MzRaFw0yNjExMTEwNjIxMzRaMDMxMTAvBgNV BAMTKDE5RDc5MzY4QUNFMzc3Q0IzNDE0MDdCNUNCRjZFOTRENDU4NUZFQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS5a0+h9O8V5fhKE7ihYO1bYD6 nsGB0C92wHFH8U7OpKflpA/ipLKrS5GRoQdQCfTd/VssltJjNTYqUijVToWew+lr hCFlILgZhJPVCU2GPGUZa+vkfXeNvmknWBIC1CLGLWL8y1b0cham+p6BxsQt3aqC vrexcOmWYxrSwmczwsRVLJIyvfE8V5Y0ozoThB7U9tR2rKSiVciTAHtPK2zay2dB QS4UoJEqX97wPiri8heF5qu59N+5QHbvj87jEC6tKP0ES1udtxxxfzYN1eeZ+rmM RXelPNE7wP7/TDQVfWq+f4sv5u9pSrcsX9ewCwGnFD4btmEy/yjv73j0MxyfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGdeTaKzjd8s0FAe1y/bpTUWF/r4wHwYDVR0j BBgwFoAUbXPX6mwBZIx7/Qim4rNGhaMyr60wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmJlMjk5MDItZTBmNC00MjlhLTlhMjYtNDM5YjliZmVlNDg5LzEvNkQ3M0Q3RUE2 QzAxNjQ4QzdCRkQwOEE2RTJCMzQ2ODVBMzMyQUZBRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82RDczRDdFQTZDMDE2NDhDN0JGRDA4QTZFMkIzNDY4NUEzMzJB RkFELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmJlMjk5MDItZTBmNC00MjlhLTlh MjYtNDM5YjliZmVlNDg5LzEvNkQ3M0Q3RUE2QzAxNjQ4QzdCRkQwOEE2RTJCMzQ2 ODVBMzMyQUZBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIWnRTbgARds8JhlZRIIBK0+qPmOlHt9ioHu VomQLRkX+wX3FLRO3EaSuwykV0LTrOq0BHnMv/ADznzdjRL8ze8Snu06Oemg9qY/ ZOpdnthCF+25x7epceQM3hMSoCZyEBPAgABSpIHCN9DYXxNPJJf+epjwbzF8KKXc tJGW/rgBbnQGl11lZdbwoXlk3Vr31FvNGNS+eHfBgztTnN2tmlCes7U7pp5lVrzu KNQOrKPpVFjR0wPRHKml/ZWIKhqOiPVy+Bn/gE8kGQypW3toZkdf9gyJkCMISJ7B jTH0/2lQdwEcui3v08mPbDyOt1EnvXO4VxGaBliCfwnahUx1qCA= -----END CERTIFICATE-----Generated at Tue Nov 10 20:40:38 2026 by rpki-client