$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/73CE17FBAA0657FCD9B985A1514D40B93027A6CD.mft File: 73CE17FBAA0657FCD9B985A1514D40B93027A6CD.mft (raw, json) Hash identifier: 6GC5IRxwWkagCoqytYtE7iiAMgF4JAI2KdDNZRnXH50= Subject key identifier: B7:F4:26:6C:96:0E:4D:E8:0C:E1:F7:0C:DA:9C:45:75:A2:87:90:64 Authority key identifier: 73:CE:17:FB:AA:06:57:FC:D9:B9:85:A1:51:4D:40:B9:30:27:A6:CD Certificate issuer: /CN=73CE17FBAA0657FCD9B985A1514D40B93027A6CD Certificate serial: 1E9116D738F7B47965EC739FE4B6DC46BFF1CF05 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/73CE17FBAA0657FCD9B985A1514D40B93027A6CD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/73CE17FBAA0657FCD9B985A1514D40B93027A6CD.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 14:23:42 +0000 Manifest this update: Thu 24 Sep 2026 14:18:42 +0000 Manifest next update: Fri 25 Sep 2026 17:22:42 +0000 Files and hashes: 1: 3138302e3133312e3132392e302f32342d3234203d3e20313532303238.roa (hash: qr6xizp3xlx6Xnc3nJpz1BpNSxX/MfpwLyE6uXtLLNM=) 2: 73CE17FBAA0657FCD9B985A1514D40B93027A6CD.crl (hash: v9QO748cpB3XFKUp6z/Hy/z0wckKhDZCRiirP1TuBU0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/73CE17FBAA0657FCD9B985A1514D40B93027A6CD.crl rsync://rpki-rsync.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/73CE17FBAA0657FCD9B985A1514D40B93027A6CD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/73CE17FBAA0657FCD9B985A1514D40B93027A6CD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:91:16:d7:38:f7:b4:79:65:ec:73:9f:e4:b6:dc:46:bf:f1:cf:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73CE17FBAA0657FCD9B985A1514D40B93027A6CD Validity Not Before: Sep 24 14:18:42 2026 GMT Not After : Sep 25 17:22:42 2026 GMT Subject: CN=B7F4266C960E4DE80CE1F70CDA9C4575A2879064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:54:e8:b6:0f:94:77:70:69:4b:e9:d7:5c:0b: c1:be:13:56:c6:b4:58:40:17:c0:82:9f:b6:56:9a: a8:d2:4f:82:9b:2b:2c:52:9d:30:f0:3e:52:3d:36: 23:fd:03:b2:1b:16:7b:f9:c1:a3:99:5e:0f:58:29: 8f:86:1e:ba:69:9d:bd:97:19:23:3e:5e:ff:6b:f2: 99:e7:a1:29:21:51:85:39:5d:4f:9f:d1:23:5c:46: 87:2e:a9:07:60:40:cf:36:1f:e5:96:d9:8c:59:dc: 54:e7:49:32:bc:3a:0a:03:2c:db:1c:59:a4:c8:91: 58:75:83:2a:c0:6b:ef:5f:9c:e9:7d:84:c1:e2:86: cf:29:0a:16:d6:77:77:03:50:f7:8f:6f:0c:87:d1: 2a:53:9b:f9:65:4d:2a:c1:5c:fd:56:b1:dd:b5:85: 1d:96:a6:50:a3:d2:63:a9:09:f2:de:76:40:e2:ba: 05:1e:51:47:08:19:5c:0d:0b:01:e6:ac:d9:d1:c8: d8:4e:3b:59:6f:e7:bb:11:cf:31:c6:2a:7c:d5:81: 8c:e2:39:62:a5:02:e5:5d:1f:dc:fe:6a:d9:df:ed: 21:22:e8:52:f7:e2:14:bc:4b:24:f2:ee:ea:da:15: 6c:a7:9a:5f:fa:7e:e4:f1:b1:92:e1:8a:d6:bd:52: 3b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:F4:26:6C:96:0E:4D:E8:0C:E1:F7:0C:DA:9C:45:75:A2:87:90:64 X509v3 Authority Key Identifier: keyid:73:CE:17:FB:AA:06:57:FC:D9:B9:85:A1:51:4D:40:B9:30:27:A6:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/73CE17FBAA0657FCD9B985A1514D40B93027A6CD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/73CE17FBAA0657FCD9B985A1514D40B93027A6CD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/73CE17FBAA0657FCD9B985A1514D40B93027A6CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:48:25:3d:5d:ac:73:de:0c:d9:6a:19:25:e9:bd:d7:dc:c0: 18:ae:96:4f:7e:d4:b4:c1:31:dd:3c:b1:5d:01:67:94:0b:c3: d2:2f:6c:5e:d9:df:ea:df:8f:99:bf:96:76:25:11:06:8b:7b: f3:ec:b0:a6:30:fe:ee:30:ef:19:10:5a:12:1e:65:66:b7:9f: 1c:f3:5b:b8:9c:24:6a:8d:83:81:e8:55:7c:6d:7e:0a:8f:91: 6c:d8:47:c7:9f:ec:3c:0f:ff:3c:67:52:4a:1b:44:65:b8:7e: 82:47:8d:10:ac:57:c1:52:75:52:98:c8:ab:64:a8:da:0e:2d: 36:d7:07:8d:72:75:80:b2:96:e7:f4:1d:9c:dc:2f:ed:f8:e1: d3:15:a9:f1:33:59:e5:c7:4c:ea:1c:26:8b:d5:9b:08:19:3f: b3:11:6f:9f:96:ba:cd:d0:cd:a7:93:62:46:5a:3d:ba:8c:dd: f6:5e:75:04:26:61:fc:6b:f1:06:dd:72:69:bd:10:34:f9:ce: 8e:fc:b0:70:bb:e4:a6:80:e0:e5:9f:f4:b3:29:5b:e0:3b:e5: 10:48:2f:ac:a1:e5:fd:5b:76:ae:73:67:b0:ec:fc:e1:f6:be: d0:74:0c:9e:81:b9:f1:ea:4f:40:e9:b0:a6:cd:52:26:77:89: f9:30:dc:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHpEW1zj3tHll7HOf5LbcRr/xzwUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNDRTE3RkJBQTA2NTdGQ0Q5Qjk4NUExNTE0RDQwQjkz MDI3QTZDRDAeFw0yNjA5MjQxNDE4NDJaFw0yNjA5MjUxNzIyNDJaMDMxMTAvBgNV BAMTKEI3RjQyNjZDOTYwRTRERTgwQ0UxRjcwQ0RBOUM0NTc1QTI4NzkwNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiVOi2D5R3cGlL6ddcC8G+E1bG tFhAF8CCn7ZWmqjST4KbKyxSnTDwPlI9NiP9A7IbFnv5waOZXg9YKY+GHrppnb2X GSM+Xv9r8pnnoSkhUYU5XU+f0SNcRocuqQdgQM82H+WW2YxZ3FTnSTK8OgoDLNsc WaTIkVh1gyrAa+9fnOl9hMHihs8pChbWd3cDUPePbwyH0SpTm/llTSrBXP1Wsd21 hR2WplCj0mOpCfLedkDiugUeUUcIGVwNCwHmrNnRyNhOO1lv57sRzzHGKnzVgYzi OWKlAuVdH9z+atnf7SEi6FL34hS8SyTy7uraFWynml/6fuTxsZLhita9UjvhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt/QmbJYOTegM4fcM2pxFdaKHkGQwHwYDVR0j BBgwFoAUc84X+6oGV/zZuYWhUU1AuTAnps0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2M5OTQxYTQtMjhkMi00N2QxLTkxZTctYWNhYjU5MDg0NDYyLzAvNzNDRTE3RkJB QTA2NTdGQ0Q5Qjk4NUExNTE0RDQwQjkzMDI3QTZDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83M0NFMTdGQkFBMDY1N0ZDRDlCOTg1QTE1MTRENDBCOTMwMjdB NkNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2M5OTQxYTQtMjhkMi00N2QxLTkx ZTctYWNhYjU5MDg0NDYyLzAvNzNDRTE3RkJBQTA2NTdGQ0Q5Qjk4NUExNTE0RDQw QjkzMDI3QTZDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACdIJT1drHPeDNlqGSXpvdfcwBiulk9+1LTB Md08sV0BZ5QLw9IvbF7Z3+rfj5m/lnYlEQaLe/PssKYw/u4w7xkQWhIeZWa3nxzz W7icJGqNg4HoVXxtfgqPkWzYR8ef7DwP/zxnUkobRGW4foJHjRCsV8FSdVKYyKtk qNoOLTbXB41ydYCyluf0HZzcL+344dMVqfEzWeXHTOocJovVmwgZP7MRb5+Wus3Q zaeTYkZaPbqM3fZedQQmYfxr8Qbdcmm9EDT5zo78sHC75KaA4OWf9LMpW+A75RBI L6yh5f1bdq5zZ7Ds/OH2vtB0DJ6BufHqT0DpsKbNUiZ3ifkw3Gs= -----END CERTIFICATE-----Generated at Thu Sep 24 21:23:07 2026 by rpki-client