$ rpki-client -vvf rpki-rsync.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/73CE17FBAA0657FCD9B985A1514D40B93027A6CD.mft File: 73CE17FBAA0657FCD9B985A1514D40B93027A6CD.mft (raw, json) Hash identifier: xwTuM3cwhRDDR2jK4c/DE49yPEot6q6jDXCUz024cD8= Subject key identifier: 3D:87:F3:04:B1:EC:A8:7C:98:6E:65:F8:58:69:80:46:F7:30:7A:54 Authority key identifier: 73:CE:17:FB:AA:06:57:FC:D9:B9:85:A1:51:4D:40:B9:30:27:A6:CD Certificate issuer: /CN=73CE17FBAA0657FCD9B985A1514D40B93027A6CD Certificate serial: 2AEE3BE4F6E9D88B44B4971FCE616ADC1905C5D8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/73CE17FBAA0657FCD9B985A1514D40B93027A6CD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/73CE17FBAA0657FCD9B985A1514D40B93027A6CD.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 00:08:08 +0000 Manifest this update: Wed 17 Jun 2026 00:03:08 +0000 Manifest next update: Thu 18 Jun 2026 01:53:08 +0000 Files and hashes: 1: 73CE17FBAA0657FCD9B985A1514D40B93027A6CD.crl (hash: ZhRwt5OexfEFzjB3IvsO8V21A0XiG7H+RV2XMlwzRxM=) 2: 3138302e3133312e3132392e302f32342d3234203d3e20313532303238.roa (hash: qr6xizp3xlx6Xnc3nJpz1BpNSxX/MfpwLyE6uXtLLNM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/73CE17FBAA0657FCD9B985A1514D40B93027A6CD.crl rsync://rpki-rsync.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/73CE17FBAA0657FCD9B985A1514D40B93027A6CD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/73CE17FBAA0657FCD9B985A1514D40B93027A6CD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 01:53:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:ee:3b:e4:f6:e9:d8:8b:44:b4:97:1f:ce:61:6a:dc:19:05:c5:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73CE17FBAA0657FCD9B985A1514D40B93027A6CD Validity Not Before: Jun 17 00:03:08 2026 GMT Not After : Jun 18 01:53:08 2026 GMT Subject: CN=3D87F304B1ECA87C986E65F858698046F7307A54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:07:6c:c7:9f:cc:7a:a6:f2:00:4d:b2:10:ce: 8b:fb:84:7c:2b:b9:9d:3a:9c:9a:5e:e0:1e:8f:cb: 0d:bb:72:3b:de:45:b5:92:e0:65:3d:70:c9:10:e8: 1a:88:77:a2:1a:10:d0:bb:8b:98:a0:08:cb:1f:a3: ef:60:e3:97:0d:31:92:2e:3a:6c:7f:c2:6c:18:c4: 18:69:df:74:f4:9a:e1:4c:45:0b:19:69:5b:8b:19: d2:25:40:8d:0c:73:66:58:69:7a:a9:ae:b9:8b:6f: 3f:5a:11:1d:2f:96:06:b2:65:88:bf:1f:9d:14:42: b5:ac:d3:ef:89:78:e4:3a:56:3d:66:b1:ec:b2:78: 85:cf:8e:87:59:ff:62:08:d7:fc:61:da:e8:60:10: b9:2a:58:29:6a:af:fc:90:05:21:3e:dc:ad:e2:bf: 0a:c6:db:fc:a2:84:19:aa:30:3e:c0:fe:99:ea:1b: 78:9e:5c:a9:8b:a7:78:55:1a:5b:c8:71:2f:df:0c: 23:c4:c4:96:22:df:c1:2e:0c:67:86:86:a5:5d:4c: 0b:6e:5d:ca:df:d9:65:1b:8f:8c:f2:86:63:14:f1: b8:b4:d5:16:cf:a3:49:a1:63:24:b6:21:41:e5:56: 2b:49:c7:9e:f2:7b:e6:8e:48:18:44:a6:94:41:07: c2:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:87:F3:04:B1:EC:A8:7C:98:6E:65:F8:58:69:80:46:F7:30:7A:54 X509v3 Authority Key Identifier: keyid:73:CE:17:FB:AA:06:57:FC:D9:B9:85:A1:51:4D:40:B9:30:27:A6:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/73CE17FBAA0657FCD9B985A1514D40B93027A6CD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/73CE17FBAA0657FCD9B985A1514D40B93027A6CD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/73CE17FBAA0657FCD9B985A1514D40B93027A6CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:f4:17:c6:a9:57:d6:77:53:d7:3a:b3:ba:8b:ac:6c:c3:19: 77:02:5c:a4:c0:79:3d:30:7d:1e:7f:54:16:79:4f:5d:5a:86: 26:65:e3:b4:8a:70:75:20:4b:68:5c:ff:c1:6f:31:3b:9f:4b: 6a:da:fb:88:b9:3f:7a:5b:38:b8:cf:13:b7:c0:07:39:74:c6: 43:a2:16:3b:60:55:54:64:d1:92:a4:a9:8b:86:8e:10:24:cd: b5:de:ac:8e:32:21:ef:15:93:09:32:bc:9f:26:3b:4b:2e:a7: 37:4c:c8:05:99:f5:70:ed:29:4f:11:13:9f:4f:b9:73:87:5e: 9a:a1:46:d4:ce:1b:1e:d1:e8:ae:c6:9d:df:cc:c8:af:12:5b: f4:05:ee:c1:fc:14:ea:7d:4a:17:cf:f4:ca:0c:41:00:59:4f: c5:10:48:c1:17:1d:1d:77:e7:bc:5d:f6:bb:03:68:9c:bc:01: 95:4c:0f:61:aa:fa:96:45:76:ba:12:ad:09:9b:4f:76:6b:e4: 9d:fc:af:d2:a9:6d:c2:9e:a7:13:48:1c:d1:f4:fd:d6:9d:67: fb:65:2d:8d:3c:d0:3f:20:48:cb:42:86:d1:8a:5c:43:f8:75: 94:da:e6:95:b1:f4:af:cd:6e:04:df:04:ff:61:a3:63:c6:d7: 11:53:9c:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKu475Pbp2ItEtJcfzmFq3BkFxdgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNDRTE3RkJBQTA2NTdGQ0Q5Qjk4NUExNTE0RDQwQjkz MDI3QTZDRDAeFw0yNjA2MTcwMDAzMDhaFw0yNjA2MTgwMTUzMDhaMDMxMTAvBgNV BAMTKDNEODdGMzA0QjFFQ0E4N0M5ODZFNjVGODU4Njk4MDQ2RjczMDdBNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxB2zHn8x6pvIATbIQzov7hHwr uZ06nJpe4B6Pyw27cjveRbWS4GU9cMkQ6BqId6IaENC7i5igCMsfo+9g45cNMZIu Omx/wmwYxBhp33T0muFMRQsZaVuLGdIlQI0Mc2ZYaXqprrmLbz9aER0vlgayZYi/ H50UQrWs0++JeOQ6Vj1mseyyeIXPjodZ/2II1/xh2uhgELkqWClqr/yQBSE+3K3i vwrG2/yihBmqMD7A/pnqG3ieXKmLp3hVGlvIcS/fDCPExJYi38EuDGeGhqVdTAtu Xcrf2WUbj4zyhmMU8bi01RbPo0mhYyS2IUHlVitJx57ye+aOSBhEppRBB8IdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPYfzBLHsqHyYbmX4WGmARvcwelQwHwYDVR0j BBgwFoAUc84X+6oGV/zZuYWhUU1AuTAnps0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2M5OTQxYTQtMjhkMi00N2QxLTkxZTctYWNhYjU5MDg0NDYyLzAvNzNDRTE3RkJB QTA2NTdGQ0Q5Qjk4NUExNTE0RDQwQjkzMDI3QTZDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83M0NFMTdGQkFBMDY1N0ZDRDlCOTg1QTE1MTRENDBCOTMwMjdB NkNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2M5OTQxYTQtMjhkMi00N2QxLTkx ZTctYWNhYjU5MDg0NDYyLzAvNzNDRTE3RkJBQTA2NTdGQ0Q5Qjk4NUExNTE0RDQw QjkzMDI3QTZDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIL0F8apV9Z3U9c6s7qLrGzDGXcCXKTAeT0w fR5/VBZ5T11ahiZl47SKcHUgS2hc/8FvMTufS2ra+4i5P3pbOLjPE7fABzl0xkOi FjtgVVRk0ZKkqYuGjhAkzbXerI4yIe8VkwkyvJ8mO0supzdMyAWZ9XDtKU8RE59P uXOHXpqhRtTOGx7R6K7Gnd/MyK8SW/QF7sH8FOp9ShfP9MoMQQBZT8UQSMEXHR13 57xd9rsDaJy8AZVMD2Gq+pZFdroSrQmbT3Zr5J38r9KpbcKepxNIHNH0/dadZ/tl LY080D8gSMtChtGKXEP4dZTa5pWx9K/NbgTfBP9ho2PG1xFTnOU= -----END CERTIFICATE-----Generated at Wed Jun 17 09:43:49 2026 by rpki-client