$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.mft File: 4D73AF7813A396ABD7BDE23A979935F7C2E168E7.mft (raw, json) Hash identifier: vMDoGylScaFcK8e0fFn+QIQJZWXRTd1FmI2M46Xsn5Y= Subject key identifier: 15:C9:4F:A3:6A:19:91:13:F4:8D:23:85:3B:88:42:88:89:24:35:3A Authority key identifier: 4D:73:AF:78:13:A3:96:AB:D7:BD:E2:3A:97:99:35:F7:C2:E1:68:E7 Certificate issuer: /CN=4D73AF7813A396ABD7BDE23A979935F7C2E168E7 Certificate serial: 65995379CB0107E26227643BF95B3819F5FE5372 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.mft Manifest number: BE Signing time: Mon 21 Sep 2026 19:35:44 +0000 Manifest this update: Mon 21 Sep 2026 19:30:44 +0000 Manifest next update: Tue 22 Sep 2026 20:36:44 +0000 Files and hashes: 1: 323430333a333163303a3a2f33322d3332203d3e20313337333736.roa (hash: 889d8hZgsoEONtwHkfZfmAhOTIvpzaLSt/rrvU4dZ6Y=) 2: 3130332e3131382e3132342e302f32322d3234203d3e20313337333736.roa (hash: ZJlUpKOWZJT4nAWuCuBDhZRS/ZCGAJEy+RmXu9xZXqc=) 3: 4D73AF7813A396ABD7BDE23A979935F7C2E168E7.crl (hash: 1/Ck0WTR9B7HlMrhMD2evCXfN5kqvVh24XUl0fOSCY0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.crl rsync://rpki-rsync.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 20:36:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:99:53:79:cb:01:07:e2:62:27:64:3b:f9:5b:38:19:f5:fe:53:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D73AF7813A396ABD7BDE23A979935F7C2E168E7 Validity Not Before: Sep 21 19:30:44 2026 GMT Not After : Sep 22 20:36:44 2026 GMT Subject: CN=15C94FA36A199113F48D23853B8842888924353A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:84:06:fc:bb:c5:89:7e:b0:1c:99:44:48:9b: a3:df:01:76:04:0b:34:04:1d:83:0f:fa:02:f4:17: 51:f4:01:be:52:70:4c:af:69:2f:8c:ea:64:c6:e5: 57:a5:8e:ca:dd:d3:22:15:6d:87:a2:09:bd:c4:6e: 00:0f:4a:e3:65:51:d7:d1:c7:d0:e8:dc:d2:cf:91: 67:b8:a7:e6:a3:da:c9:d6:5f:91:51:32:ae:96:51: c4:98:de:42:70:3b:11:a9:8c:02:9f:27:cb:d3:fb: 61:6d:93:90:03:35:8b:c2:b9:c1:97:6b:19:50:fb: cc:9a:40:2e:4a:48:e7:2a:1a:ba:14:e4:f1:30:3f: fd:a9:54:e8:09:1a:44:40:f1:9f:64:13:06:e4:b1: 9f:56:28:7a:63:da:1f:1b:eb:e5:58:78:20:24:48: 5f:8e:cf:3c:ec:5c:b8:59:48:93:81:74:dd:e0:56: 03:5d:f4:f9:a0:b6:98:d6:70:db:d2:73:ed:cc:33: 95:b4:e2:cf:02:a0:f0:7d:5b:8f:ac:e2:cc:c5:a5: 7c:47:a6:58:73:b4:18:d3:fe:3c:19:69:1d:f6:8c: 1b:67:59:e6:49:32:9f:eb:25:88:45:a2:75:c7:80: a6:eb:5c:15:b0:10:da:ea:29:fb:bf:11:61:ff:e7: 72:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:C9:4F:A3:6A:19:91:13:F4:8D:23:85:3B:88:42:88:89:24:35:3A X509v3 Authority Key Identifier: keyid:4D:73:AF:78:13:A3:96:AB:D7:BD:E2:3A:97:99:35:F7:C2:E1:68:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:34:e3:83:b7:2e:0b:6c:cb:61:c4:b7:fa:99:6b:93:c3:c4: f6:c9:72:bf:85:35:88:9f:ba:e2:cd:3c:72:85:3c:22:2a:a5: 32:2e:7d:ec:1f:7c:ba:2f:ad:c3:a7:a8:77:ec:e4:ae:f4:9d: 36:a0:78:ba:18:64:7c:47:17:4d:ed:4c:83:8d:eb:be:3c:4e: 8d:4d:7a:e0:ab:cf:d7:5e:a6:76:76:dc:ad:6a:0f:5e:6a:fb: 6b:c5:e4:86:23:0b:79:39:e3:07:7a:7a:c0:62:ea:82:b0:24: 2f:62:c8:33:01:66:3f:d4:9e:f8:56:e7:95:9e:cf:c1:5a:5f: 02:3e:94:c9:03:6a:53:b9:5b:cb:74:a8:2b:0c:e7:ea:98:c0: 03:82:68:f1:01:88:53:5e:45:74:e6:6f:b1:d7:e1:7f:c9:c4: 16:5d:ff:cc:40:eb:99:3c:b6:02:11:d1:13:77:06:69:24:26: 72:08:10:23:b3:f5:82:d2:48:dd:d3:68:99:eb:83:8f:06:b6: 5e:bd:0d:90:85:66:1c:bb:26:35:61:d8:28:a2:7a:bc:68:c7: c6:d9:ea:92:5f:a5:5a:1e:87:1b:23:61:cd:06:83:55:87:d8: ed:f4:f5:82:cf:02:ba:89:a5:b0:59:66:bd:db:b2:42:13:7f: 30:47:2c:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZZlTecsBB+JiJ2Q7+Vs4GfX+U3IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ3M0FGNzgxM0EzOTZBQkQ3QkRFMjNBOTc5OTM1RjdD MkUxNjhFNzAeFw0yNjA5MjExOTMwNDRaFw0yNjA5MjIyMDM2NDRaMDMxMTAvBgNV BAMTKDE1Qzk0RkEzNkExOTkxMTNGNDhEMjM4NTNCODg0Mjg4ODkyNDM1M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYhAb8u8WJfrAcmURIm6PfAXYE CzQEHYMP+gL0F1H0Ab5ScEyvaS+M6mTG5Veljsrd0yIVbYeiCb3EbgAPSuNlUdfR x9Do3NLPkWe4p+aj2snWX5FRMq6WUcSY3kJwOxGpjAKfJ8vT+2Ftk5ADNYvCucGX axlQ+8yaQC5KSOcqGroU5PEwP/2pVOgJGkRA8Z9kEwbksZ9WKHpj2h8b6+VYeCAk SF+OzzzsXLhZSJOBdN3gVgNd9PmgtpjWcNvSc+3MM5W04s8CoPB9W4+s4szFpXxH plhztBjT/jwZaR32jBtnWeZJMp/rJYhFonXHgKbrXBWwENrqKfu/EWH/53LBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFclPo2oZkRP0jSOFO4hCiIkkNTowHwYDVR0j BBgwFoAUTXOveBOjlqvXveI6l5k198LhaOcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQyYTViNTEtYmMwMC00ZDZiLTg3NjEtYzdkMGQzZjZkZTEyLzAvNEQ3M0FGNzgx M0EzOTZBQkQ3QkRFMjNBOTc5OTM1RjdDMkUxNjhFNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDczQUY3ODEzQTM5NkFCRDdCREUyM0E5Nzk5MzVGN0MyRTE2 OEU3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQyYTViNTEtYmMwMC00ZDZiLTg3 NjEtYzdkMGQzZjZkZTEyLzAvNEQ3M0FGNzgxM0EzOTZBQkQ3QkRFMjNBOTc5OTM1 RjdDMkUxNjhFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHw044O3Lgtsy2HEt/qZa5PDxPbJcr+FNYif uuLNPHKFPCIqpTIufewffLovrcOnqHfs5K70nTageLoYZHxHF03tTION6748To1N euCrz9depnZ23K1qD15q+2vF5IYjC3k54wd6esBi6oKwJC9iyDMBZj/UnvhW55We z8FaXwI+lMkDalO5W8t0qCsM5+qYwAOCaPEBiFNeRXTmb7HX4X/JxBZd/8xA65k8 tgIR0RN3BmkkJnIIECOz9YLSSN3TaJnrg48Gtl69DZCFZhy7JjVh2Ciierxox8bZ 6pJfpVoehxsjYc0Gg1WH2O309YLPArqJpbBZZr3bskITfzBHLJI= -----END CERTIFICATE-----Generated at Tue Sep 22 03:55:19 2026 by rpki-client