$ rpki-client -vvf rpki-rsync.idnic.net/repo/a72bb871-018d-4d21-9913-fc946c38794f/0/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.mft File: 73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.mft (raw, json) Hash identifier: OhurxV3CLXmUMV5xJFh23yo3JVKRAuFhsnrtxQgcLT0= Subject key identifier: 24:29:E3:9C:79:1F:84:B6:3D:CD:D6:B9:1D:86:62:7D:79:2B:13:10 Authority key identifier: 73:AE:BE:E3:24:9F:D8:B6:A7:DB:F6:0C:78:A9:8A:E3:8A:21:81:FD Certificate issuer: /CN=73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD Certificate serial: 2BD9024BE6927AF3199F326BC1C0D8E51794C316 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a72bb871-018d-4d21-9913-fc946c38794f/0/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.mft Manifest number: 3C Signing time: Tue 16 Jun 2026 20:08:35 +0000 Manifest this update: Tue 16 Jun 2026 20:03:35 +0000 Manifest next update: Wed 17 Jun 2026 22:53:35 +0000 Files and hashes: 1: 73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.crl (hash: NfnlWzfSqtVGE9p8NQGHRxT+v1yWB3p5zvaadggQN5g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a72bb871-018d-4d21-9913-fc946c38794f/0/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.crl rsync://rpki-rsync.idnic.net/repo/a72bb871-018d-4d21-9913-fc946c38794f/0/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 22:53:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:d9:02:4b:e6:92:7a:f3:19:9f:32:6b:c1:c0:d8:e5:17:94:c3:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD Validity Not Before: Jun 16 20:03:35 2026 GMT Not After : Jun 17 22:53:35 2026 GMT Subject: CN=2429E39C791F84B63DCDD6B91D86627D792B1310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:64:17:8e:c9:00:8f:18:f4:15:4c:5f:e3:64: e4:04:41:67:d4:c3:33:ba:04:7a:d0:1f:db:85:02: cd:79:87:8a:9a:74:5e:51:b4:08:8d:84:b5:db:31: a3:04:6c:a6:b7:ee:ff:01:37:12:1e:a0:70:46:ba: e0:cd:f4:e7:b4:64:83:93:ef:80:d6:77:d1:13:46: 26:30:1e:eb:f7:a4:33:b9:22:c5:18:fc:e2:25:4d: 33:4b:31:aa:0b:cd:8b:6a:60:db:2f:9b:24:9a:9c: aa:d8:4e:49:b6:0e:46:94:7f:f7:75:61:5b:76:8b: c7:5e:ed:95:44:96:39:5a:b0:c7:29:89:56:8f:bb: 57:6e:44:38:f8:e5:6e:7b:b6:01:9c:5e:92:c0:12: d6:d2:47:23:07:15:8f:17:3a:d2:cf:b5:1e:56:3c: c4:7e:c1:16:3f:f4:f7:3f:ff:3a:27:8a:a6:36:51: 71:c9:95:c5:f0:f2:77:3e:6e:0d:88:06:52:d8:a4: bc:88:b1:08:9e:f6:e2:6f:3e:9c:3d:02:b2:70:0e: a7:aa:f6:d9:ec:08:12:ba:24:e2:e9:2b:d5:56:9a: 4c:fd:4c:86:7c:92:3b:82:42:73:b4:4e:62:4a:65: 0e:52:84:23:be:4c:a5:93:ec:9b:c9:28:e1:8e:f0: 42:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:29:E3:9C:79:1F:84:B6:3D:CD:D6:B9:1D:86:62:7D:79:2B:13:10 X509v3 Authority Key Identifier: keyid:73:AE:BE:E3:24:9F:D8:B6:A7:DB:F6:0C:78:A9:8A:E3:8A:21:81:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a72bb871-018d-4d21-9913-fc946c38794f/0/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a72bb871-018d-4d21-9913-fc946c38794f/0/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:06:c3:d7:04:f4:68:24:f0:5c:07:ff:ee:6a:e9:7d:00:94: 72:dc:5c:92:e2:32:a1:98:f2:32:f1:c7:66:41:c2:df:a5:c8: c5:fb:14:1e:eb:ba:44:64:45:d8:79:35:8c:ae:db:0f:7a:93: a2:3b:cb:1d:88:38:1d:6e:eb:8f:49:06:70:2c:88:fa:8e:14: 36:94:83:8f:9d:8c:f7:cb:c9:e4:ba:b5:b7:9d:dc:40:55:69: 96:35:58:d0:3f:5d:b4:75:f5:78:8e:80:f3:9a:fe:6f:bf:12: 78:e2:2c:a5:54:cf:14:7f:1a:c6:d9:47:3e:ea:bb:76:03:af: 95:93:18:5e:bf:94:00:e8:33:92:ba:fd:62:5b:51:4e:ae:a7: f7:8f:bd:1e:49:cd:91:5f:e9:03:8e:e2:79:86:1e:85:e2:b5: 92:bb:80:0b:01:12:e2:53:a2:82:9c:2a:72:13:ae:cb:58:55: 39:12:cf:c4:13:ce:af:a7:a2:23:cd:80:38:68:7c:b3:fb:bd: 76:73:57:aa:9a:6c:6e:06:5e:70:08:a7:7e:f8:2d:1c:7a:9a: 9b:a7:48:72:0c:b5:fb:79:1a:21:ae:3b:23:ea:af:0a:2d:44: 8a:d0:01:91:67:8b:c8:70:72:ec:59:61:65:03:47:35:d8:28: 17:7e:cb:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK9kCS+aSevMZnzJrwcDY5ReUwxYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNBRUJFRTMyNDlGRDhCNkE3REJGNjBDNzhBOThBRTM4 QTIxODFGRDAeFw0yNjA2MTYyMDAzMzVaFw0yNjA2MTcyMjUzMzVaMDMxMTAvBgNV BAMTKDI0MjlFMzlDNzkxRjg0QjYzRENERDZCOTFEODY2MjdENzkyQjEzMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPZBeOyQCPGPQVTF/jZOQEQWfU wzO6BHrQH9uFAs15h4qadF5RtAiNhLXbMaMEbKa37v8BNxIeoHBGuuDN9Oe0ZIOT 74DWd9ETRiYwHuv3pDO5IsUY/OIlTTNLMaoLzYtqYNsvmySanKrYTkm2DkaUf/d1 YVt2i8de7ZVEljlasMcpiVaPu1duRDj45W57tgGcXpLAEtbSRyMHFY8XOtLPtR5W PMR+wRY/9Pc//zoniqY2UXHJlcXw8nc+bg2IBlLYpLyIsQie9uJvPpw9ArJwDqeq 9tnsCBK6JOLpK9VWmkz9TIZ8kjuCQnO0TmJKZQ5ShCO+TKWT7JvJKOGO8ELFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJCnjnHkfhLY9zda5HYZifXkrExAwHwYDVR0j BBgwFoAUc66+4ySf2Lan2/YMeKmK44ohgf0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTcyYmI4NzEtMDE4ZC00ZDIxLTk5MTMtZmM5NDZjMzg3OTRmLzAvNzNBRUJFRTMy NDlGRDhCNkE3REJGNjBDNzhBOThBRTM4QTIxODFGRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83M0FFQkVFMzI0OUZEOEI2QTdEQkY2MEM3OEE5OEFFMzhBMjE4 MUZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTcyYmI4NzEtMDE4ZC00ZDIxLTk5 MTMtZmM5NDZjMzg3OTRmLzAvNzNBRUJFRTMyNDlGRDhCNkE3REJGNjBDNzhBOThB RTM4QTIxODFGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAAGw9cE9Ggk8FwH/+5q6X0AlHLcXJLiMqGY 8jLxx2ZBwt+lyMX7FB7rukRkRdh5NYyu2w96k6I7yx2IOB1u649JBnAsiPqOFDaU g4+djPfLyeS6tbed3EBVaZY1WNA/XbR19XiOgPOa/m+/EnjiLKVUzxR/GsbZRz7q u3YDr5WTGF6/lADoM5K6/WJbUU6up/ePvR5JzZFf6QOO4nmGHoXitZK7gAsBEuJT ooKcKnITrstYVTkSz8QTzq+noiPNgDhofLP7vXZzV6qabG4GXnAIp374LRx6mpun SHIMtft5GiGuOyPqrwotRIrQAZFni8hwcuxZYWUDRzXYKBd+y14= -----END CERTIFICATE-----Generated at Wed Jun 17 11:13:15 2026 by rpki-client