$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a72bb871-018d-4d21-9913-fc946c38794f/0/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.mft File: 73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.mft (raw, json) Hash identifier: afogoAg925lkWdhB7l3/coNwkDdlRLztCHxexbCnoR4= Subject key identifier: ED:41:AD:D5:9B:73:35:BC:3B:B5:0F:CF:C0:40:96:09:33:A8:6D:12 Authority key identifier: 73:AE:BE:E3:24:9F:D8:B6:A7:DB:F6:0C:78:A9:8A:E3:8A:21:81:FD Certificate issuer: /CN=73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD Certificate serial: 3C47F24A760D76D3079ABD1B139630CB489CDE85 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a72bb871-018d-4d21-9913-fc946c38794f/0/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.mft Manifest number: BC Signing time: Mon 21 Sep 2026 09:02:41 +0000 Manifest this update: Mon 21 Sep 2026 08:57:41 +0000 Manifest next update: Tue 22 Sep 2026 11:59:41 +0000 Files and hashes: 1: 73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.crl (hash: xA8H/I7jNBYflLeigzMUykEXuaSWgyIwZ5IUPS6yE6A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a72bb871-018d-4d21-9913-fc946c38794f/0/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.crl rsync://rpki-rsync.idnic.net/repo/a72bb871-018d-4d21-9913-fc946c38794f/0/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:47:f2:4a:76:0d:76:d3:07:9a:bd:1b:13:96:30:cb:48:9c:de:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD Validity Not Before: Sep 21 08:57:41 2026 GMT Not After : Sep 22 11:59:41 2026 GMT Subject: CN=ED41ADD59B7335BC3BB50FCFC040960933A86D12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:63:28:3f:7e:c8:3e:f4:4a:99:d3:94:26:a7: 52:44:83:35:92:6b:ec:1d:09:df:80:fe:95:31:7d: c5:59:8a:a2:c9:97:ec:95:5b:c4:29:1b:d5:0e:22: 39:db:8b:91:e3:f8:33:d8:0d:8f:1a:ea:00:70:b5: 4a:de:34:a7:c5:d3:07:68:b2:8d:a7:f1:a8:d5:97: 81:5d:fa:93:2b:fb:b4:db:12:8f:68:84:04:8b:20: 51:f4:81:c6:9e:bd:5d:46:e0:b5:59:f9:2b:a6:c5: 17:af:d7:47:56:3c:cd:78:b7:3f:fd:81:e3:07:47: 64:8b:43:e3:26:b0:71:fb:32:45:8d:91:1c:10:62: 5f:64:8a:7c:13:48:f1:54:c7:23:2d:23:47:28:0f: c9:41:3c:76:d0:f9:bc:70:df:5d:fe:e8:e7:c0:68: b6:12:17:a2:6a:4a:ff:8b:ae:54:a4:26:57:c0:2c: f1:34:02:26:2b:67:cc:7c:be:5e:ab:7b:0a:e3:6c: 43:50:fb:68:5c:ce:a0:11:94:05:ab:5e:eb:7e:2b: a4:2f:44:76:67:04:98:20:d5:ad:bc:fd:39:58:e9: 38:bd:c8:de:9d:97:25:0c:8c:af:74:15:5f:62:b5: 5c:39:13:69:87:a8:e2:ea:91:9c:50:43:e3:a3:5c: ee:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:41:AD:D5:9B:73:35:BC:3B:B5:0F:CF:C0:40:96:09:33:A8:6D:12 X509v3 Authority Key Identifier: keyid:73:AE:BE:E3:24:9F:D8:B6:A7:DB:F6:0C:78:A9:8A:E3:8A:21:81:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a72bb871-018d-4d21-9913-fc946c38794f/0/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a72bb871-018d-4d21-9913-fc946c38794f/0/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:1a:fe:b2:35:2b:4c:4c:63:ad:7b:12:c5:8b:ed:9b:78:3c: 53:54:07:f1:2a:f8:5c:d3:9f:07:83:dc:08:f4:3b:d2:42:29: ca:cf:2e:74:b1:f1:00:38:b1:10:29:25:1b:5a:31:d4:57:d2: 3b:a4:a6:7b:cc:99:ab:37:a2:b5:9b:bd:04:21:60:07:a1:c2: e8:54:8e:ec:ea:ee:9b:22:9e:6b:7d:fe:78:ce:a7:36:62:6c: 11:62:ac:23:f1:83:2e:19:65:20:0f:62:e2:33:4c:d6:f4:9a: 5e:c7:25:3a:d1:a4:b0:bd:ee:c5:b4:91:5c:69:7e:4d:19:f2: 0e:b1:89:78:fe:51:47:e1:2b:e6:a3:29:19:6b:29:a4:5d:4d: 38:e3:85:00:9b:08:59:3b:7f:26:41:64:fa:38:f1:75:6f:c4: 3e:17:4f:a4:99:e0:41:c2:99:b1:3b:9f:41:f7:b1:2b:ce:da: 5b:e6:40:07:6f:f6:e1:f7:18:08:03:bb:11:9c:ee:1c:75:d9: 6d:b9:5e:bf:5d:c0:4c:97:51:bd:72:d0:b5:62:85:77:3a:2f: c5:a7:16:8f:4a:2a:bd:75:54:6b:1b:c7:34:58:36:56:e2:f2: 9c:57:41:a1:7d:0a:ef:20:00:62:cc:18:48:a2:88:03:29:d9: 93:53:73:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPEfySnYNdtMHmr0bE5Ywy0ic3oUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNBRUJFRTMyNDlGRDhCNkE3REJGNjBDNzhBOThBRTM4 QTIxODFGRDAeFw0yNjA5MjEwODU3NDFaFw0yNjA5MjIxMTU5NDFaMDMxMTAvBgNV BAMTKEVENDFBREQ1OUI3MzM1QkMzQkI1MEZDRkMwNDA5NjA5MzNBODZEMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Yyg/fsg+9EqZ05Qmp1JEgzWS a+wdCd+A/pUxfcVZiqLJl+yVW8QpG9UOIjnbi5Hj+DPYDY8a6gBwtUreNKfF0wdo so2n8ajVl4Fd+pMr+7TbEo9ohASLIFH0gcaevV1G4LVZ+SumxRev10dWPM14tz/9 geMHR2SLQ+MmsHH7MkWNkRwQYl9kinwTSPFUxyMtI0coD8lBPHbQ+bxw313+6OfA aLYSF6JqSv+LrlSkJlfALPE0AiYrZ8x8vl6rewrjbENQ+2hczqARlAWrXut+K6Qv RHZnBJgg1a28/TlY6Ti9yN6dlyUMjK90FV9itVw5E2mHqOLqkZxQQ+OjXO7jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7UGt1ZtzNbw7tQ/PwECWCTOobRIwHwYDVR0j BBgwFoAUc66+4ySf2Lan2/YMeKmK44ohgf0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTcyYmI4NzEtMDE4ZC00ZDIxLTk5MTMtZmM5NDZjMzg3OTRmLzAvNzNBRUJFRTMy NDlGRDhCNkE3REJGNjBDNzhBOThBRTM4QTIxODFGRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83M0FFQkVFMzI0OUZEOEI2QTdEQkY2MEM3OEE5OEFFMzhBMjE4 MUZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTcyYmI4NzEtMDE4ZC00ZDIxLTk5 MTMtZmM5NDZjMzg3OTRmLzAvNzNBRUJFRTMyNDlGRDhCNkE3REJGNjBDNzhBOThB RTM4QTIxODFGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIYa/rI1K0xMY617EsWL7Zt4PFNUB/Eq+FzT nweD3Aj0O9JCKcrPLnSx8QA4sRApJRtaMdRX0jukpnvMmas3orWbvQQhYAehwuhU juzq7psinmt9/njOpzZibBFirCPxgy4ZZSAPYuIzTNb0ml7HJTrRpLC97sW0kVxp fk0Z8g6xiXj+UUfhK+ajKRlrKaRdTTjjhQCbCFk7fyZBZPo48XVvxD4XT6SZ4EHC mbE7n0H3sSvO2lvmQAdv9uH3GAgDuxGc7hx12W25Xr9dwEyXUb1y0LVihXc6L8Wn Fo9KKr11VGsbxzRYNlbi8pxXQaF9Cu8gAGLMGEiiiAMp2ZNTcxM= -----END CERTIFICATE-----Generated at Mon Sep 21 14:49:39 2026 by rpki-client