$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.mft File: 4D73AF7813A396ABD7BDE23A979935F7C2E168E7.mft (raw, json) Hash identifier: GfxUuTxc8bD9xigyYM4hCPHses6+I8UbVvwdAp4JsMM= Subject key identifier: 6E:65:29:88:55:D3:E3:1A:C3:82:DF:02:42:C2:94:F6:6D:53:B9:47 Authority key identifier: 4D:73:AF:78:13:A3:96:AB:D7:BD:E2:3A:97:99:35:F7:C2:E1:68:E7 Certificate issuer: /CN=4D73AF7813A396ABD7BDE23A979935F7C2E168E7 Certificate serial: 0E17623223520F0B65420CCE5C7362BA82A51127 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 04:33:21 +0000 Manifest this update: Wed 17 Jun 2026 04:28:21 +0000 Manifest next update: Thu 18 Jun 2026 04:57:21 +0000 Files and hashes: 1: 323430333a333163303a3a2f33322d3332203d3e20313337333736.roa (hash: 889d8hZgsoEONtwHkfZfmAhOTIvpzaLSt/rrvU4dZ6Y=) 2: 3130332e3131382e3132342e302f32322d3234203d3e20313337333736.roa (hash: ZJlUpKOWZJT4nAWuCuBDhZRS/ZCGAJEy+RmXu9xZXqc=) 3: 4D73AF7813A396ABD7BDE23A979935F7C2E168E7.crl (hash: 7NwoaF6GDrHW25KDHvKJ+SBet9kKwHydZpyt67ED+JQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.crl rsync://rpki-rsync.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:17:62:32:23:52:0f:0b:65:42:0c:ce:5c:73:62:ba:82:a5:11:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D73AF7813A396ABD7BDE23A979935F7C2E168E7 Validity Not Before: Jun 17 04:28:21 2026 GMT Not After : Jun 18 04:57:21 2026 GMT Subject: CN=6E65298855D3E31AC382DF0242C294F66D53B947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a7:53:11:55:71:04:fc:9c:ae:2a:ef:5d:a5: bf:1c:d9:21:42:86:aa:e8:ef:d6:dd:67:c0:5c:19: 7d:40:e5:1d:a4:73:d1:6b:03:4e:19:e8:eb:f4:bd: 88:02:98:63:1e:b4:92:a6:b2:d7:cf:d5:a6:76:c0: a5:b9:18:a0:de:3e:11:f7:49:6c:7e:79:b8:9e:29: 7c:02:fd:3d:e1:8a:d2:cf:f4:14:4d:7b:67:bf:ef: 94:bd:84:23:4c:40:a4:84:bb:2b:d3:34:30:65:95: 99:10:d0:16:44:cd:69:78:ad:ef:98:34:d3:94:81: c7:9a:3b:df:87:4f:ee:35:ce:a1:d2:3a:dd:d6:bf: f8:e7:58:c2:cd:cf:44:73:ca:f0:df:85:ca:89:b4: 52:c4:fd:f6:ff:94:de:b6:1f:d3:f5:30:6b:a4:63: 05:b0:67:df:54:6d:7f:ac:d0:1d:f1:8c:65:fd:a1: bc:3a:ba:aa:ac:65:53:52:62:e7:40:64:40:c6:95: 75:90:92:77:fb:7d:2d:52:36:95:69:23:af:25:b0: 47:70:06:6d:c4:43:d3:84:97:a3:ea:a4:7f:6c:29: a2:b2:28:fc:df:b8:fb:14:4d:56:9d:43:f3:b2:d5: 9f:25:d8:50:b4:80:64:96:37:12:52:e1:f0:7a:2f: 0c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:65:29:88:55:D3:E3:1A:C3:82:DF:02:42:C2:94:F6:6D:53:B9:47 X509v3 Authority Key Identifier: keyid:4D:73:AF:78:13:A3:96:AB:D7:BD:E2:3A:97:99:35:F7:C2:E1:68:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:3d:ea:21:35:ac:39:2a:f5:5b:1d:13:c3:44:89:33:f1:18: 8e:35:87:95:51:0e:11:7a:c1:90:75:4a:e7:01:85:68:8b:80: be:6e:3e:e6:fa:74:f8:63:c1:5f:5c:92:f9:7a:09:00:72:b2: e2:98:f5:43:75:17:f8:15:53:f0:4f:4a:ea:4a:e3:62:c6:95: 95:38:b7:61:74:65:7a:46:99:91:cc:fb:89:79:32:46:2b:69: f7:9c:28:2f:aa:db:43:05:e7:7c:f6:c7:45:aa:32:6a:94:f7: 1b:0d:e7:7b:c2:f6:1e:94:92:28:19:b0:71:91:8c:9f:21:a5: 96:3a:d3:be:c7:ab:74:7d:01:04:6a:1a:d2:bb:5e:d9:7c:39: 17:c1:84:00:b7:ff:72:e5:1a:47:99:59:a6:0a:49:ce:8d:49: 0c:27:e2:db:99:4f:75:82:3b:d2:2e:b3:5e:14:88:ba:28:ec: 49:31:af:b2:f5:0b:a1:8e:de:17:40:02:70:ac:8c:14:af:48: b2:a5:26:36:15:21:56:68:64:ec:a8:c9:0a:6e:b7:b4:c2:1d: ff:21:33:9c:03:d3:f7:70:48:22:fc:ba:b9:ba:ef:30:82:6e: 20:d8:a0:f3:b0:e8:81:34:9f:fb:e3:f3:31:bb:f9:d6:41:02: 38:97:16:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDhdiMiNSDwtlQgzOXHNiuoKlEScwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ3M0FGNzgxM0EzOTZBQkQ3QkRFMjNBOTc5OTM1RjdD MkUxNjhFNzAeFw0yNjA2MTcwNDI4MjFaFw0yNjA2MTgwNDU3MjFaMDMxMTAvBgNV BAMTKDZFNjUyOTg4NTVEM0UzMUFDMzgyREYwMjQyQzI5NEY2NkQ1M0I5NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcp1MRVXEE/JyuKu9dpb8c2SFC hqro79bdZ8BcGX1A5R2kc9FrA04Z6Ov0vYgCmGMetJKmstfP1aZ2wKW5GKDePhH3 SWx+ebieKXwC/T3hitLP9BRNe2e/75S9hCNMQKSEuyvTNDBllZkQ0BZEzWl4re+Y NNOUgceaO9+HT+41zqHSOt3Wv/jnWMLNz0RzyvDfhcqJtFLE/fb/lN62H9P1MGuk YwWwZ99UbX+s0B3xjGX9obw6uqqsZVNSYudAZEDGlXWQknf7fS1SNpVpI68lsEdw Bm3EQ9OEl6PqpH9sKaKyKPzfuPsUTVadQ/Oy1Z8l2FC0gGSWNxJS4fB6Lwy9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbmUpiFXT4xrDgt8CQsKU9m1TuUcwHwYDVR0j BBgwFoAUTXOveBOjlqvXveI6l5k198LhaOcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQyYTViNTEtYmMwMC00ZDZiLTg3NjEtYzdkMGQzZjZkZTEyLzAvNEQ3M0FGNzgx M0EzOTZBQkQ3QkRFMjNBOTc5OTM1RjdDMkUxNjhFNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDczQUY3ODEzQTM5NkFCRDdCREUyM0E5Nzk5MzVGN0MyRTE2 OEU3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQyYTViNTEtYmMwMC00ZDZiLTg3 NjEtYzdkMGQzZjZkZTEyLzAvNEQ3M0FGNzgxM0EzOTZBQkQ3QkRFMjNBOTc5OTM1 RjdDMkUxNjhFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD096iE1rDkq9VsdE8NEiTPxGI41h5VRDhF6 wZB1SucBhWiLgL5uPub6dPhjwV9ckvl6CQBysuKY9UN1F/gVU/BPSupK42LGlZU4 t2F0ZXpGmZHM+4l5MkYrafecKC+q20MF53z2x0WqMmqU9xsN53vC9h6UkigZsHGR jJ8hpZY6077Hq3R9AQRqGtK7Xtl8ORfBhAC3/3LlGkeZWaYKSc6NSQwn4tuZT3WC O9Ius14UiLoo7Ekxr7L1C6GO3hdAAnCsjBSvSLKlJjYVIVZoZOyoyQput7TCHf8h M5wD0/dwSCL8urm67zCCbiDYoPOw6IE0n/vj8zG7+dZBAjiXFjY= -----END CERTIFICATE-----Generated at Wed Jun 17 11:30:13 2026 by rpki-client