$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.mft File: 4D73AF7813A396ABD7BDE23A979935F7C2E168E7.mft (raw, json) Hash identifier: shs5L3aUMrWV0TTwsbLIvaTbTsyFvVguhBzNsO/xML0= Subject key identifier: E2:A7:53:77:A9:C6:C2:BC:F6:32:8E:62:5D:E9:56:B8:42:8F:E3:69 Authority key identifier: 4D:73:AF:78:13:A3:96:AB:D7:BD:E2:3A:97:99:35:F7:C2:E1:68:E7 Certificate issuer: /CN=4D73AF7813A396ABD7BDE23A979935F7C2E168E7 Certificate serial: 7D4E401E4D165AC09F9C0F14DA5D5E7BBAC9632A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 17:57:59 +0000 Manifest this update: Thu 24 Sep 2026 17:52:59 +0000 Manifest next update: Fri 25 Sep 2026 17:59:59 +0000 Files and hashes: 1: 3130332e3131382e3132342e302f32322d3234203d3e20313337333736.roa (hash: ZJlUpKOWZJT4nAWuCuBDhZRS/ZCGAJEy+RmXu9xZXqc=) 2: 4D73AF7813A396ABD7BDE23A979935F7C2E168E7.crl (hash: iTjc/R1+LmJCreY9/gIHQXB2y6Cb5rD/phAacn9WE0I=) 3: 323430333a333163303a3a2f33322d3332203d3e20313337333736.roa (hash: 889d8hZgsoEONtwHkfZfmAhOTIvpzaLSt/rrvU4dZ6Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.crl rsync://rpki-rsync.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:4e:40:1e:4d:16:5a:c0:9f:9c:0f:14:da:5d:5e:7b:ba:c9:63:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D73AF7813A396ABD7BDE23A979935F7C2E168E7 Validity Not Before: Sep 24 17:52:59 2026 GMT Not After : Sep 25 17:59:59 2026 GMT Subject: CN=E2A75377A9C6C2BCF6328E625DE956B8428FE369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:be:e9:52:2c:b3:f6:fe:ca:79:ae:57:5f:b5: 2a:99:25:50:f1:7c:81:8e:6a:a8:fb:07:6e:95:ee: 28:b0:d7:43:26:bb:3d:61:b5:d5:7a:3e:6a:cf:b8: 17:74:61:a3:ce:e1:6d:7a:d5:ac:01:1e:65:9c:b5: ab:9c:e1:7d:ef:83:c4:15:dd:a0:17:d6:4b:79:56: 1c:98:2d:57:ac:3d:ad:d3:cd:ee:a7:8b:6a:eb:a4: 3c:d8:e9:18:48:62:c7:5f:b2:c0:fa:34:14:55:bb: 57:c2:13:db:9e:d5:82:18:81:f7:44:6f:94:54:3a: 61:22:8d:02:9a:9f:d7:1c:8e:d5:55:54:84:90:9c: 46:ff:8d:ef:f1:91:f4:88:ba:ae:c5:da:cd:3f:a5: fd:39:f6:12:d7:ce:c2:34:d4:36:c0:81:f4:37:f5: 7f:c2:fc:e8:32:35:d4:b7:4f:06:86:30:93:d6:ce: ae:7a:42:7c:8c:e9:03:dd:ae:53:12:42:7e:22:d1: d2:b2:02:00:f3:e4:8c:5b:ed:64:73:24:ef:19:95: 42:0c:99:c7:a6:b1:ba:0e:05:da:5b:ea:ee:ea:f0: d3:fe:94:66:f6:99:7c:36:0c:6d:48:13:53:ba:c5: c3:10:7c:5a:19:65:92:a2:1b:2a:39:a4:f2:d5:cd: 5f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:A7:53:77:A9:C6:C2:BC:F6:32:8E:62:5D:E9:56:B8:42:8F:E3:69 X509v3 Authority Key Identifier: keyid:4D:73:AF:78:13:A3:96:AB:D7:BD:E2:3A:97:99:35:F7:C2:E1:68:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:5d:4b:1f:c2:f2:e9:66:0a:89:fc:25:f4:a9:3a:70:1f:1c: 2c:59:a9:c9:93:7c:cb:d7:cc:ca:9a:42:86:93:ae:23:01:1f: e4:74:36:42:ee:c7:34:fb:4e:a9:b7:40:39:14:c5:98:12:0d: 35:ea:e5:8d:f8:6f:57:73:95:90:b5:76:75:be:29:a5:8e:b2: c5:f4:ec:b4:e3:37:3f:94:cb:d4:12:82:99:79:61:97:11:62: f5:ea:9e:f7:f8:61:f4:15:f5:02:95:b6:0e:7b:94:ef:4c:6d: 4e:94:89:9c:fc:ea:50:3f:0d:4f:bb:48:26:e9:e0:49:d8:ae: 1b:17:d3:87:a8:85:7f:5d:ea:c4:8f:a6:98:3a:30:a6:21:e1: 60:c1:7c:ca:11:cb:64:56:c2:b5:ac:cc:e4:0d:f3:be:ff:54: c8:d2:d9:bf:6b:02:61:c7:0f:73:ec:95:89:1a:21:ab:67:6e: 1c:07:ab:43:29:92:da:0c:c2:2d:50:43:bd:03:8a:a0:f0:8a: 46:94:4f:07:46:34:d3:f8:db:04:fa:09:f0:b3:34:c1:da:4c: fd:c1:1a:4a:69:a9:70:1d:ba:fa:7a:1d:e9:02:86:04:a1:92: 77:0a:76:73:ff:96:b0:f2:09:5b:8d:ee:2f:d9:d9:78:27:75: 4a:cf:8a:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfU5AHk0WWsCfnA8U2l1ee7rJYyowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ3M0FGNzgxM0EzOTZBQkQ3QkRFMjNBOTc5OTM1RjdD MkUxNjhFNzAeFw0yNjA5MjQxNzUyNTlaFw0yNjA5MjUxNzU5NTlaMDMxMTAvBgNV BAMTKEUyQTc1Mzc3QTlDNkMyQkNGNjMyOEU2MjVERTk1NkI4NDI4RkUzNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJvulSLLP2/sp5rldftSqZJVDx fIGOaqj7B26V7iiw10Mmuz1htdV6PmrPuBd0YaPO4W161awBHmWctauc4X3vg8QV 3aAX1kt5VhyYLVesPa3Tze6ni2rrpDzY6RhIYsdfssD6NBRVu1fCE9ue1YIYgfdE b5RUOmEijQKan9ccjtVVVISQnEb/je/xkfSIuq7F2s0/pf059hLXzsI01DbAgfQ3 9X/C/OgyNdS3TwaGMJPWzq56QnyM6QPdrlMSQn4i0dKyAgDz5Ixb7WRzJO8ZlUIM mcemsboOBdpb6u7q8NP+lGb2mXw2DG1IE1O6xcMQfFoZZZKiGyo5pPLVzV+/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4qdTd6nGwrz2Mo5iXelWuEKP42kwHwYDVR0j BBgwFoAUTXOveBOjlqvXveI6l5k198LhaOcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQyYTViNTEtYmMwMC00ZDZiLTg3NjEtYzdkMGQzZjZkZTEyLzAvNEQ3M0FGNzgx M0EzOTZBQkQ3QkRFMjNBOTc5OTM1RjdDMkUxNjhFNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDczQUY3ODEzQTM5NkFCRDdCREUyM0E5Nzk5MzVGN0MyRTE2 OEU3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQyYTViNTEtYmMwMC00ZDZiLTg3 NjEtYzdkMGQzZjZkZTEyLzAvNEQ3M0FGNzgxM0EzOTZBQkQ3QkRFMjNBOTc5OTM1 RjdDMkUxNjhFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGhdSx/C8ulmCon8JfSpOnAfHCxZqcmTfMvX zMqaQoaTriMBH+R0NkLuxzT7Tqm3QDkUxZgSDTXq5Y34b1dzlZC1dnW+KaWOssX0 7LTjNz+Uy9QSgpl5YZcRYvXqnvf4YfQV9QKVtg57lO9MbU6UiZz86lA/DU+7SCbp 4EnYrhsX04eohX9d6sSPppg6MKYh4WDBfMoRy2RWwrWszOQN877/VMjS2b9rAmHH D3PslYkaIatnbhwHq0MpktoMwi1QQ70DiqDwikaUTwdGNNP42wT6CfCzNMHaTP3B GkppqXAduvp6HekChgShkncKdnP/lrDyCVuN7i/Z2XgndUrPipY= -----END CERTIFICATE-----Generated at Thu Sep 24 23:32:30 2026 by rpki-client