$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/1/6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.mft File: 6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.mft (raw, json) Hash identifier: zfVaYDM48omcMIApAtFplyR3LOW5JjplRguysrnNyuk= Subject key identifier: 20:DA:21:6F:37:51:82:EA:94:40:50:DA:27:1C:1C:41:F2:7C:6D:A3 Authority key identifier: 6D:73:D7:EA:6C:01:64:8C:7B:FD:08:A6:E2:B3:46:85:A3:32:AF:AD Certificate issuer: /CN=6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD Certificate serial: 4529E7CA2AE31D8FEE67A1BE3FC514910C916A1F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/1/6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 12:00:55 +0000 Manifest this update: Wed 23 Sep 2026 11:55:55 +0000 Manifest next update: Thu 24 Sep 2026 13:28:55 +0000 Files and hashes: 1: 6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.crl (hash: IPMurDqQd5SqqZfSZt56BM7iD8aUTSByH5JbJ9uRBIE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/1/6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.crl rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/1/6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 13:28:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:29:e7:ca:2a:e3:1d:8f:ee:67:a1:be:3f:c5:14:91:0c:91:6a:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD Validity Not Before: Sep 23 11:55:55 2026 GMT Not After : Sep 24 13:28:55 2026 GMT Subject: CN=20DA216F375182EA944050DA271C1C41F27C6DA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:01:1c:68:0a:14:a7:df:3c:4b:d9:7e:0f:0a: 57:c1:ef:41:37:76:78:b6:60:4b:6a:aa:87:ad:c4: 38:ff:46:46:db:c9:47:df:1b:0b:dd:ce:d4:d7:aa: 2b:61:2c:62:e1:21:7b:af:7b:61:3d:2a:97:79:38: 13:10:49:14:18:24:7c:11:15:15:06:24:78:17:73: b8:36:50:a2:a3:be:fb:e4:24:eb:75:81:5a:1d:c7: 18:d0:5b:71:28:2b:cf:f2:b6:d4:f7:02:94:07:cb: a5:ed:f6:72:79:20:32:c2:b7:d2:1c:b9:1d:c3:c6: f1:88:8f:8f:e1:fa:b6:a7:a7:6b:e3:39:4a:f3:21: 6c:f9:b8:a4:b7:aa:e0:85:7a:fb:a2:45:da:7e:d5: 3c:bb:c8:85:b2:1c:a3:11:7b:57:8d:0d:b8:5d:01: d3:0b:78:ca:e0:e1:e3:66:8f:3b:8e:24:f9:a2:68: 9a:ff:d6:58:5c:d6:6d:a4:66:ca:e4:b8:35:fe:d0: e9:fe:09:0d:90:79:35:7d:62:81:dc:e6:ec:1f:ec: a4:a9:2e:56:3e:bb:fd:7c:10:2f:cd:12:b7:0a:89: 2a:e1:f4:51:5c:91:e0:d0:15:55:50:8f:6c:dd:2c: 9e:5d:5a:98:67:3d:c8:35:9c:96:5c:d7:07:c2:80: d2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:DA:21:6F:37:51:82:EA:94:40:50:DA:27:1C:1C:41:F2:7C:6D:A3 X509v3 Authority Key Identifier: keyid:6D:73:D7:EA:6C:01:64:8C:7B:FD:08:A6:E2:B3:46:85:A3:32:AF:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/1/6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/1/6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:46:f4:ab:65:ec:b2:e9:f0:b5:e3:1a:cc:7d:12:46:0e:8d: 1d:4e:40:4a:3c:d4:9f:26:a8:18:d9:35:e5:e9:f9:90:7c:f6: 04:4b:84:66:ff:b5:7d:57:d1:59:fc:65:71:9c:7f:49:a6:a5: fe:b9:cb:a8:e1:4e:ff:d9:c6:d8:1f:e8:ad:ed:93:b6:b4:e1: 01:1f:e1:ab:b4:12:df:51:10:c9:94:f4:9b:c7:14:c6:1e:64: 7c:d0:f9:be:e9:00:77:2f:00:cf:2a:6b:5e:1e:46:e8:74:9d: 78:bd:51:be:e0:4e:41:24:ed:af:62:16:37:ab:a3:d7:0a:f9: 61:3c:6e:55:75:3c:fa:db:98:6f:59:c4:9a:56:22:7e:2e:0a: a8:1a:b1:51:97:51:8b:85:a9:b9:ad:68:2f:0c:20:95:a4:93: 4d:29:b8:8b:78:de:8a:0e:f9:5c:ca:45:36:46:cd:d8:ad:22: 25:91:1d:77:a5:b2:c0:24:d4:cf:c3:d0:03:41:29:2c:15:9d: 76:90:f6:9c:12:4f:77:69:89:6a:1a:20:56:c8:bb:cc:13:7e: 80:58:65:d1:b3:e9:3e:1a:ba:65:7c:43:dd:ab:ea:eb:73:ac: 49:4f:90:bb:d0:08:50:5b:1e:d3:1b:b9:6d:f1:3f:8b:56:e8: db:2c:6a:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURSnnyirjHY/uZ6G+P8UUkQyRah8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQ3M0Q3RUE2QzAxNjQ4QzdCRkQwOEE2RTJCMzQ2ODVB MzMyQUZBRDAeFw0yNjA5MjMxMTU1NTVaFw0yNjA5MjQxMzI4NTVaMDMxMTAvBgNV BAMTKDIwREEyMTZGMzc1MTgyRUE5NDQwNTBEQTI3MUMxQzQxRjI3QzZEQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpARxoChSn3zxL2X4PClfB70E3 dni2YEtqqoetxDj/RkbbyUffGwvdztTXqithLGLhIXuve2E9Kpd5OBMQSRQYJHwR FRUGJHgXc7g2UKKjvvvkJOt1gVodxxjQW3EoK8/yttT3ApQHy6Xt9nJ5IDLCt9Ic uR3DxvGIj4/h+ranp2vjOUrzIWz5uKS3quCFevuiRdp+1Ty7yIWyHKMRe1eNDbhd AdMLeMrg4eNmjzuOJPmiaJr/1lhc1m2kZsrkuDX+0On+CQ2QeTV9YoHc5uwf7KSp LlY+u/18EC/NErcKiSrh9FFckeDQFVVQj2zdLJ5dWphnPcg1nJZc1wfCgNKDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUINohbzdRguqUQFDaJxwcQfJ8baMwHwYDVR0j BBgwFoAUbXPX6mwBZIx7/Qim4rNGhaMyr60wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmJlMjk5MDItZTBmNC00MjlhLTlhMjYtNDM5YjliZmVlNDg5LzEvNkQ3M0Q3RUE2 QzAxNjQ4QzdCRkQwOEE2RTJCMzQ2ODVBMzMyQUZBRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82RDczRDdFQTZDMDE2NDhDN0JGRDA4QTZFMkIzNDY4NUEzMzJB RkFELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmJlMjk5MDItZTBmNC00MjlhLTlh MjYtNDM5YjliZmVlNDg5LzEvNkQ3M0Q3RUE2QzAxNjQ4QzdCRkQwOEE2RTJCMzQ2 ODVBMzMyQUZBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABtG9Ktl7LLp8LXjGsx9EkYOjR1OQEo81J8m qBjZNeXp+ZB89gRLhGb/tX1X0Vn8ZXGcf0mmpf65y6jhTv/Zxtgf6K3tk7a04QEf 4au0Et9REMmU9JvHFMYeZHzQ+b7pAHcvAM8qa14eRuh0nXi9Ub7gTkEk7a9iFjer o9cK+WE8blV1PPrbmG9ZxJpWIn4uCqgasVGXUYuFqbmtaC8MIJWkk00puIt43ooO +VzKRTZGzditIiWRHXelssAk1M/D0ANBKSwVnXaQ9pwST3dpiWoaIFbIu8wTfoBY ZdGz6T4aumV8Q92r6utzrElPkLvQCFBbHtMbuW3xP4tW6NssasI= -----END CERTIFICATE-----Generated at Wed Sep 23 23:10:22 2026 by rpki-client