$ rpki-client -vvf rpki-rsync.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/73CE17FBAA0657FCD9B985A1514D40B93027A6CD.mft File: 73CE17FBAA0657FCD9B985A1514D40B93027A6CD.mft (raw, json) Hash identifier: mszWEmcuLOdIIj4Cxr2R0xjW6q04f1EOfGmrJyXCQNM= Subject key identifier: 70:5D:79:5A:0B:D9:93:87:95:B8:80:2A:EE:A4:FC:EC:41:1B:64:C0 Authority key identifier: 73:CE:17:FB:AA:06:57:FC:D9:B9:85:A1:51:4D:40:B9:30:27:A6:CD Certificate issuer: /CN=73CE17FBAA0657FCD9B985A1514D40B93027A6CD Certificate serial: 4108738D6FBDA7031520E68F8005CC29BEE9F937 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/73CE17FBAA0657FCD9B985A1514D40B93027A6CD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/73CE17FBAA0657FCD9B985A1514D40B93027A6CD.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 06:01:45 +0000 Manifest this update: Fri 24 Jul 2026 05:56:45 +0000 Manifest next update: Sat 25 Jul 2026 08:04:45 +0000 Files and hashes: 1: 3138302e3133312e3132392e302f32342d3234203d3e20313532303238.roa (hash: qr6xizp3xlx6Xnc3nJpz1BpNSxX/MfpwLyE6uXtLLNM=) 2: 73CE17FBAA0657FCD9B985A1514D40B93027A6CD.crl (hash: BLumgxTkKjNRtdzgcmvDX+elqMUa21vSm0yOvTv8S4I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/73CE17FBAA0657FCD9B985A1514D40B93027A6CD.crl rsync://rpki-rsync.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/73CE17FBAA0657FCD9B985A1514D40B93027A6CD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/73CE17FBAA0657FCD9B985A1514D40B93027A6CD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:08:73:8d:6f:bd:a7:03:15:20:e6:8f:80:05:cc:29:be:e9:f9:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73CE17FBAA0657FCD9B985A1514D40B93027A6CD Validity Not Before: Jul 24 05:56:45 2026 GMT Not After : Jul 25 08:04:45 2026 GMT Subject: CN=705D795A0BD9938795B8802AEEA4FCEC411B64C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fd:74:a1:01:21:ac:36:6a:8f:3c:3d:81:2d: 23:e6:b7:ff:0b:32:ca:c8:f3:4f:91:fd:b0:08:a2: b0:52:d1:5a:3c:c0:d8:25:46:68:a2:19:8a:35:b6: 5e:bd:df:ef:88:2a:2d:f4:09:a6:31:5f:3b:6d:f5: 2f:2e:3b:6a:37:b0:3a:76:0a:8a:fe:28:7b:27:7d: 1a:48:13:0c:d2:7f:ad:92:d4:50:e7:a4:23:53:65: 36:cc:8f:25:c0:ef:0f:9c:f9:95:97:ad:bb:b9:07: 81:81:6e:1d:43:15:bb:1b:ce:41:74:a2:fc:1e:11: 19:55:46:3c:77:47:d3:87:12:d9:76:8c:8a:e1:4f: 20:f6:18:96:99:d1:ba:ce:b4:f0:71:78:69:d2:5f: 71:ad:43:83:5b:8a:f9:33:fc:20:13:f4:b6:64:b9: 07:1a:a8:9a:78:19:89:a0:79:0a:59:4e:7c:2c:f4: 2b:91:15:f9:73:ab:28:82:c7:44:e8:24:9c:f9:65: 11:2d:c3:b9:c7:c0:4c:18:f2:1f:dc:45:85:a8:bb: b5:43:57:5c:2e:1b:89:17:9d:10:14:bd:7a:d1:f0: bc:75:df:54:5f:72:88:ef:7a:c5:83:38:1a:f5:e6: 73:4b:24:82:02:5f:68:a8:52:0c:65:e9:10:9d:d3: 75:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:5D:79:5A:0B:D9:93:87:95:B8:80:2A:EE:A4:FC:EC:41:1B:64:C0 X509v3 Authority Key Identifier: keyid:73:CE:17:FB:AA:06:57:FC:D9:B9:85:A1:51:4D:40:B9:30:27:A6:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/73CE17FBAA0657FCD9B985A1514D40B93027A6CD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/73CE17FBAA0657FCD9B985A1514D40B93027A6CD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/73CE17FBAA0657FCD9B985A1514D40B93027A6CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:f8:dd:90:bd:38:1b:93:ce:f0:47:6a:f4:98:5d:03:b8:a5: 65:bd:93:c4:f6:94:1e:e4:76:c8:a8:2d:81:da:43:ac:52:e9: f8:4c:6a:b4:2d:89:bc:4f:42:bc:73:9c:27:18:eb:91:cd:db: 5e:e9:68:ad:73:a8:34:29:6a:6a:d8:46:6a:3b:5b:81:33:3b: 7f:d6:ee:a3:d6:ae:18:9f:2b:47:53:fa:65:b8:ae:3d:8a:7a: 6d:09:8a:50:cf:c9:d8:2a:3c:0b:d6:88:58:dc:9f:20:51:c2: d4:f3:d4:13:1f:01:e2:7b:37:05:e6:1a:23:77:d5:47:b8:c3: e1:7d:15:8c:c1:d7:90:a2:f5:6f:ef:b2:cf:47:10:b9:78:cc: e8:76:7a:d3:72:be:56:33:ae:71:68:6f:82:cb:1d:ee:f4:d7: a5:ca:ec:71:a6:ac:f4:28:fb:5e:1f:56:e6:99:94:91:d5:d1: 57:b5:25:8b:3d:9e:ee:77:bb:ab:3c:76:77:ec:2e:40:cd:74: d7:f5:7f:d1:d4:0b:59:8d:20:e3:85:9b:ad:1f:61:e6:a3:14: fa:1a:5f:92:c3:47:be:ab:9f:77:47:a8:da:de:5e:88:0e:f9: a1:78:53:00:70:6e:e7:e3:6d:0d:1e:ef:67:c0:35:e4:cf:ab: 58:91:7c:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQQhzjW+9pwMVIOaPgAXMKb7p+TcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNDRTE3RkJBQTA2NTdGQ0Q5Qjk4NUExNTE0RDQwQjkz MDI3QTZDRDAeFw0yNjA3MjQwNTU2NDVaFw0yNjA3MjUwODA0NDVaMDMxMTAvBgNV BAMTKDcwNUQ3OTVBMEJEOTkzODc5NUI4ODAyQUVFQTRGQ0VDNDExQjY0QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu/XShASGsNmqPPD2BLSPmt/8L MsrI80+R/bAIorBS0Vo8wNglRmiiGYo1tl693++IKi30CaYxXztt9S8uO2o3sDp2 Cor+KHsnfRpIEwzSf62S1FDnpCNTZTbMjyXA7w+c+ZWXrbu5B4GBbh1DFbsbzkF0 ovweERlVRjx3R9OHEtl2jIrhTyD2GJaZ0brOtPBxeGnSX3GtQ4Nbivkz/CAT9LZk uQcaqJp4GYmgeQpZTnws9CuRFflzqyiCx0ToJJz5ZREtw7nHwEwY8h/cRYWou7VD V1wuG4kXnRAUvXrR8Lx131RfcojvesWDOBr15nNLJIICX2ioUgxl6RCd03XtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcF15WgvZk4eVuIAq7qT87EEbZMAwHwYDVR0j BBgwFoAUc84X+6oGV/zZuYWhUU1AuTAnps0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2M5OTQxYTQtMjhkMi00N2QxLTkxZTctYWNhYjU5MDg0NDYyLzAvNzNDRTE3RkJB QTA2NTdGQ0Q5Qjk4NUExNTE0RDQwQjkzMDI3QTZDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83M0NFMTdGQkFBMDY1N0ZDRDlCOTg1QTE1MTRENDBCOTMwMjdB NkNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2M5OTQxYTQtMjhkMi00N2QxLTkx ZTctYWNhYjU5MDg0NDYyLzAvNzNDRTE3RkJBQTA2NTdGQ0Q5Qjk4NUExNTE0RDQw QjkzMDI3QTZDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGD43ZC9OBuTzvBHavSYXQO4pWW9k8T2lB7k dsioLYHaQ6xS6fhMarQtibxPQrxznCcY65HN217paK1zqDQpamrYRmo7W4EzO3/W 7qPWrhifK0dT+mW4rj2Kem0JilDPydgqPAvWiFjcnyBRwtTz1BMfAeJ7NwXmGiN3 1Ue4w+F9FYzB15Ci9W/vss9HELl4zOh2etNyvlYzrnFob4LLHe7016XK7HGmrPQo +14fVuaZlJHV0Ve1JYs9nu53u6s8dnfsLkDNdNf1f9HUC1mNIOOFm60fYeajFPoa X5LDR76rn3dHqNreXogO+aF4UwBwbufjbQ0e72fANeTPq1iRfOI= -----END CERTIFICATE-----Generated at Fri Jul 24 12:40:20 2026 by rpki-client