$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.mft File: A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.mft (raw, json) Hash identifier: ewxPZB90nnw/tHWvL67cuRVABJ26iNTW10W3Dv69KOQ= Subject key identifier: 08:F7:CA:C1:BD:63:BD:CD:1C:1D:8D:A6:DF:45:EF:2D:4E:B6:18:08 Authority key identifier: A7:3D:69:ED:EC:18:03:1B:F9:17:5A:7C:A7:4E:D6:3A:1C:63:02:DB Certificate issuer: /CN=A73D69EDEC18031BF9175A7CA74ED63A1C6302DB Certificate serial: 78F8DE5722146EB0FF5F8D985AA7C6FA059F38DD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.mft Manifest number: BE Signing time: Mon 21 Sep 2026 12:16:30 +0000 Manifest this update: Mon 21 Sep 2026 12:11:30 +0000 Manifest next update: Tue 22 Sep 2026 16:07:30 +0000 Files and hashes: 1: 3130332e3136322e3232322e302f32332d3233203d3e20313431363635.roa (hash: J7QP2a/G6U6CecSpH3luJmb2dfsPBa3lWp+XbtAjzpA=) 2: 3130332e3136322e3232322e302f32342d3234203d3e203438343635.roa (hash: gUMtJPlmcfCKnK+8j2GeQFyhHBPFelpdjIC7KLgp3HM=) 3: A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.crl (hash: c1PCiABNK84TGDv2Q1iVva+6kkrCo3iped8brreH33U=) 4: 3130332e3136322e3232322e302f32342d3234203d3e20313431363635.roa (hash: arp0yrywbkd7qbxITxZkrDIJBVD5KXTuWljeFd5i2Ew=) 5: 3130332e3136322e3232332e302f32342d3234203d3e20313431363635.roa (hash: C/DT7XHL3SGEbqpViWF85bXoznD5c80gdYcaatqLy54=) 6: 3130332e3136322e3232332e302f32342d3234203d3e203438343635.roa (hash: DwAPimZJbs1WQtoDvmv2aTJgkFvbbEdXOIPeLqLhsYM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.crl rsync://rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:f8:de:57:22:14:6e:b0:ff:5f:8d:98:5a:a7:c6:fa:05:9f:38:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A73D69EDEC18031BF9175A7CA74ED63A1C6302DB Validity Not Before: Sep 21 12:11:30 2026 GMT Not After : Sep 22 16:07:30 2026 GMT Subject: CN=08F7CAC1BD63BDCD1C1D8DA6DF45EF2D4EB61808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:02:41:a4:a6:92:c0:a4:b7:bb:00:05:77:fb: 8e:e3:65:76:70:43:a7:2c:0a:1f:01:65:48:8e:c3: cc:6a:35:ae:1e:eb:27:db:fb:d0:2d:9d:fb:51:f9: 20:8c:ef:0a:98:e4:3e:0a:61:f5:19:1f:78:44:79: a0:42:3c:ec:c3:04:05:07:1a:cb:8c:05:0e:37:d0: 20:85:16:09:c6:64:c2:50:db:2f:12:d5:25:5d:6f: eb:cf:48:1b:d7:5c:ed:89:4b:27:6d:47:79:c6:97: ee:68:d4:22:3f:c8:2f:a1:71:41:61:23:cc:0a:a3: 0b:7b:f4:28:ba:7a:a2:99:ef:e8:eb:d2:02:e5:c2: ef:c9:d8:25:cd:0d:f6:22:89:fc:37:92:b2:3b:ec: ea:38:cc:f2:9e:c6:86:d5:9c:c7:a2:9e:2e:aa:33: 48:95:7c:eb:84:96:06:d8:79:81:9b:46:7e:75:71: 33:8a:e6:fd:9f:88:8d:74:92:b1:f9:eb:ca:28:b8: d7:42:69:8e:96:65:71:ba:ce:d2:f8:ab:66:4d:64: d3:c1:79:3e:a5:0d:07:d0:44:6b:13:07:21:02:b6: 01:51:b1:5d:52:df:05:32:a6:d5:c2:a9:7e:e2:a7: b4:68:50:6d:fe:14:cf:7b:c2:3f:96:c3:c9:12:c5: 9c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:F7:CA:C1:BD:63:BD:CD:1C:1D:8D:A6:DF:45:EF:2D:4E:B6:18:08 X509v3 Authority Key Identifier: keyid:A7:3D:69:ED:EC:18:03:1B:F9:17:5A:7C:A7:4E:D6:3A:1C:63:02:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:f6:d9:ba:ca:ac:c5:46:8c:91:a5:db:b9:79:04:46:d1:69: e1:13:87:f4:55:98:cf:3f:80:b7:37:93:19:db:d5:1a:a7:e0: 49:98:4b:b3:3e:cc:f9:60:5d:bc:cb:fb:d3:a8:4d:54:4d:dc: 03:e6:a5:77:b7:ee:03:7b:d5:9f:cf:9c:58:39:8b:1a:be:e9: ed:08:16:4b:2c:bf:e2:1a:3e:dd:93:89:a9:d3:00:c5:d9:5c: 35:cf:ca:41:17:2b:dd:61:c0:9a:36:1e:f2:00:a8:2c:98:90: b4:ae:46:3a:36:8f:1c:c5:5d:dd:08:23:a1:f5:99:ab:f3:9e: b6:4c:bf:d7:0a:e2:76:2f:04:00:fd:6f:21:07:8b:39:d0:4f: 42:8c:12:f7:c7:20:de:89:20:47:b6:50:ac:80:bf:4a:b4:69: 7e:a5:9b:03:82:b9:c8:21:83:24:73:b2:fc:65:28:2d:32:c2: 20:a8:a7:ed:07:57:d3:15:2d:c4:b1:29:b6:e5:90:50:3b:30: c3:d6:06:54:8a:86:72:94:95:e2:eb:79:91:42:e2:b0:e9:38: 56:8f:84:6e:50:fb:74:ad:95:ac:a6:d9:b1:35:2b:52:c7:0a: a1:20:46:7b:7c:76:60:1a:8b:10:f5:92:28:a1:fc:35:fa:c7: 70:0a:e7:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUePjeVyIUbrD/X42YWqfG+gWfON0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTczRDY5RURFQzE4MDMxQkY5MTc1QTdDQTc0RUQ2M0Ex QzYzMDJEQjAeFw0yNjA5MjExMjExMzBaFw0yNjA5MjIxNjA3MzBaMDMxMTAvBgNV BAMTKDA4RjdDQUMxQkQ2M0JEQ0QxQzFEOERBNkRGNDVFRjJENEVCNjE4MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvAkGkppLApLe7AAV3+47jZXZw Q6csCh8BZUiOw8xqNa4e6yfb+9AtnftR+SCM7wqY5D4KYfUZH3hEeaBCPOzDBAUH GsuMBQ430CCFFgnGZMJQ2y8S1SVdb+vPSBvXXO2JSydtR3nGl+5o1CI/yC+hcUFh I8wKowt79Ci6eqKZ7+jr0gLlwu/J2CXNDfYiifw3krI77Oo4zPKexobVnMeini6q M0iVfOuElgbYeYGbRn51cTOK5v2fiI10krH568oouNdCaY6WZXG6ztL4q2ZNZNPB eT6lDQfQRGsTByECtgFRsV1S3wUyptXCqX7ip7RoUG3+FM97wj+Ww8kSxZyNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCPfKwb1jvc0cHY2m30XvLU62GAgwHwYDVR0j BBgwFoAUpz1p7ewYAxv5F1p8p07WOhxjAtswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzY0ZjBmZmEtZTAzMS00ZWUxLWJmMGYtNjRiYWNmY2YyOTQyLzAvQTczRDY5RURF QzE4MDMxQkY5MTc1QTdDQTc0RUQ2M0ExQzYzMDJEQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNzNENjlFREVDMTgwMzFCRjkxNzVBN0NBNzRFRDYzQTFDNjMw MkRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzY0ZjBmZmEtZTAzMS00ZWUxLWJm MGYtNjRiYWNmY2YyOTQyLzAvQTczRDY5RURFQzE4MDMxQkY5MTc1QTdDQTc0RUQ2 M0ExQzYzMDJEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJv22brKrMVGjJGl27l5BEbRaeETh/RVmM8/ gLc3kxnb1Rqn4EmYS7M+zPlgXbzL+9OoTVRN3APmpXe37gN71Z/PnFg5ixq+6e0I Fkssv+IaPt2TianTAMXZXDXPykEXK91hwJo2HvIAqCyYkLSuRjo2jxzFXd0II6H1 mavznrZMv9cK4nYvBAD9byEHiznQT0KMEvfHIN6JIEe2UKyAv0q0aX6lmwOCucgh gyRzsvxlKC0ywiCop+0HV9MVLcSxKbblkFA7MMPWBlSKhnKUleLreZFC4rDpOFaP hG5Q+3Stlaym2bE1K1LHCqEgRnt8dmAaixD1kiih/DX6x3AK57c= -----END CERTIFICATE-----Generated at Mon Sep 21 21:53:13 2026 by rpki-client