$ rpki-client -vvf rpki-rsync.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/73CE17FBAA0657FCD9B985A1514D40B93027A6CD.mft File: 73CE17FBAA0657FCD9B985A1514D40B93027A6CD.mft (raw, json) Hash identifier: ncogNbn9C5OJ3pylUucWWegIgnIlTnUXhmVM8oAFZE4= Subject key identifier: 10:56:DE:2C:EC:20:FE:58:D3:75:8E:DF:CC:CA:CD:97:CF:51:A8:CE Authority key identifier: 73:CE:17:FB:AA:06:57:FC:D9:B9:85:A1:51:4D:40:B9:30:27:A6:CD Certificate issuer: /CN=73CE17FBAA0657FCD9B985A1514D40B93027A6CD Certificate serial: 2FC30A7A006A198B93D81A0F6E92C8591A0DA18D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/73CE17FBAA0657FCD9B985A1514D40B93027A6CD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/73CE17FBAA0657FCD9B985A1514D40B93027A6CD.mft Manifest number: 0F Signing time: Tue 12 May 2026 13:33:33 +0000 Manifest this update: Tue 12 May 2026 13:28:33 +0000 Manifest next update: Wed 13 May 2026 14:31:33 +0000 Files and hashes: 1: 73CE17FBAA0657FCD9B985A1514D40B93027A6CD.crl (hash: TUolj2fxLZ5km01Us0I2aeywAoI5cwa/gJc1EwW7VN4=) 2: 3138302e3133312e3132392e302f32342d3234203d3e20313532303238.roa (hash: qr6xizp3xlx6Xnc3nJpz1BpNSxX/MfpwLyE6uXtLLNM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/73CE17FBAA0657FCD9B985A1514D40B93027A6CD.crl rsync://rpki-rsync.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/73CE17FBAA0657FCD9B985A1514D40B93027A6CD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/73CE17FBAA0657FCD9B985A1514D40B93027A6CD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:c3:0a:7a:00:6a:19:8b:93:d8:1a:0f:6e:92:c8:59:1a:0d:a1:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73CE17FBAA0657FCD9B985A1514D40B93027A6CD Validity Not Before: May 12 13:28:33 2026 GMT Not After : May 13 14:31:33 2026 GMT Subject: CN=1056DE2CEC20FE58D3758EDFCCCACD97CF51A8CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:41:de:64:14:f0:13:f4:41:9f:49:e3:8c:22: d9:4f:f5:61:93:fb:eb:74:77:fb:60:7e:75:6f:2a: 98:22:89:d8:94:70:81:5f:bb:99:83:06:b0:65:1c: 38:bf:2a:32:1d:de:7a:74:2f:9a:8b:59:fd:a4:98: 12:4f:59:96:cb:ce:5e:94:b6:56:17:92:f8:04:a0: f3:e1:8f:bb:d5:f6:10:00:55:a9:62:64:41:69:ce: 39:a2:bc:73:a2:a2:46:f6:2d:97:b9:56:bc:86:06: 62:3d:a6:46:83:8c:79:52:18:07:81:10:0c:4f:ec: a3:91:8d:15:1f:68:02:3e:8f:dd:d3:bc:6f:56:54: 64:d5:ae:27:cc:ab:10:2f:5d:25:67:30:1b:87:00: 81:2c:37:06:6b:47:0c:c9:88:fd:3a:3c:fb:34:9a: 31:c5:33:81:ce:70:18:c3:1d:58:c5:c7:55:31:7e: cc:ee:c3:05:58:48:08:00:35:25:65:df:c4:ea:e7: 99:3e:fb:2e:6a:99:04:e6:fc:07:49:f9:fa:0f:b1: af:54:33:e9:b6:2a:ad:89:ca:12:38:e7:27:b3:ff: ba:6d:96:d4:83:0b:10:b5:3a:24:21:c3:10:47:7c: f1:e9:30:c7:a9:8b:ac:ab:d7:77:9f:73:54:57:09: ac:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:56:DE:2C:EC:20:FE:58:D3:75:8E:DF:CC:CA:CD:97:CF:51:A8:CE X509v3 Authority Key Identifier: keyid:73:CE:17:FB:AA:06:57:FC:D9:B9:85:A1:51:4D:40:B9:30:27:A6:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/73CE17FBAA0657FCD9B985A1514D40B93027A6CD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/73CE17FBAA0657FCD9B985A1514D40B93027A6CD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/73CE17FBAA0657FCD9B985A1514D40B93027A6CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:32:21:6d:ac:90:0f:27:2a:b7:7f:d9:2f:1a:88:23:b6:a4: 3c:03:5b:95:ce:57:36:30:c1:65:83:c1:f2:ef:d7:99:24:31: 05:72:8e:65:d5:1d:c9:89:36:d1:5c:7f:90:f5:fc:c3:bc:39: 7b:aa:be:f2:63:c9:84:ef:ed:b3:5e:f8:bc:bf:65:e6:dd:1f: 66:0d:d0:fe:d1:df:fd:6a:a5:50:37:29:e1:23:23:01:14:3e: 32:a2:cc:a3:e6:dc:74:e9:dd:c9:67:13:f8:69:53:70:36:76: 65:89:ca:41:de:5a:64:6f:e5:9a:9e:08:ce:14:ae:f8:70:0a: 23:11:f5:53:be:c9:3d:d7:9d:8c:be:87:ef:a5:70:3d:c0:91: cf:a7:cb:d4:90:7d:9c:a4:07:c3:0a:00:a4:f9:3e:30:0c:76: 92:57:39:0a:6d:4f:f3:9e:69:a0:14:ac:c2:79:a2:69:06:c1: 9f:f1:0a:ca:09:2b:6c:7c:5a:da:73:c3:e2:83:ca:4c:97:cb: fa:1f:4b:39:3b:d3:71:91:4e:df:14:22:93:ff:bd:54:09:83: b1:00:8f:22:96:b4:82:93:a6:73:4e:7c:55:28:aa:b0:1a:4b: 78:98:58:12:01:33:88:36:42:3b:ff:c5:0f:f1:02:9f:24:41: f5:3a:45:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL8MKegBqGYuT2BoPbpLIWRoNoY0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNDRTE3RkJBQTA2NTdGQ0Q5Qjk4NUExNTE0RDQwQjkz MDI3QTZDRDAeFw0yNjA1MTIxMzI4MzNaFw0yNjA1MTMxNDMxMzNaMDMxMTAvBgNV BAMTKDEwNTZERTJDRUMyMEZFNThEMzc1OEVERkNDQ0FDRDk3Q0Y1MUE4Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Qd5kFPAT9EGfSeOMItlP9WGT ++t0d/tgfnVvKpgiidiUcIFfu5mDBrBlHDi/KjId3np0L5qLWf2kmBJPWZbLzl6U tlYXkvgEoPPhj7vV9hAAValiZEFpzjmivHOiokb2LZe5VryGBmI9pkaDjHlSGAeB EAxP7KORjRUfaAI+j93TvG9WVGTVrifMqxAvXSVnMBuHAIEsNwZrRwzJiP06PPs0 mjHFM4HOcBjDHVjFx1UxfszuwwVYSAgANSVl38Tq55k++y5qmQTm/AdJ+foPsa9U M+m2Kq2JyhI45yez/7ptltSDCxC1OiQhwxBHfPHpMMepi6yr13efc1RXCazFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEFbeLOwg/ljTdY7fzMrNl89RqM4wHwYDVR0j BBgwFoAUc84X+6oGV/zZuYWhUU1AuTAnps0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2M5OTQxYTQtMjhkMi00N2QxLTkxZTctYWNhYjU5MDg0NDYyLzAvNzNDRTE3RkJB QTA2NTdGQ0Q5Qjk4NUExNTE0RDQwQjkzMDI3QTZDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83M0NFMTdGQkFBMDY1N0ZDRDlCOTg1QTE1MTRENDBCOTMwMjdB NkNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2M5OTQxYTQtMjhkMi00N2QxLTkx ZTctYWNhYjU5MDg0NDYyLzAvNzNDRTE3RkJBQTA2NTdGQ0Q5Qjk4NUExNTE0RDQw QjkzMDI3QTZDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA4yIW2skA8nKrd/2S8aiCO2pDwDW5XOVzYw wWWDwfLv15kkMQVyjmXVHcmJNtFcf5D1/MO8OXuqvvJjyYTv7bNe+Ly/ZebdH2YN 0P7R3/1qpVA3KeEjIwEUPjKizKPm3HTp3clnE/hpU3A2dmWJykHeWmRv5ZqeCM4U rvhwCiMR9VO+yT3XnYy+h++lcD3Akc+ny9SQfZykB8MKAKT5PjAMdpJXOQptT/Oe aaAUrMJ5omkGwZ/xCsoJK2x8Wtpzw+KDykyXy/ofSzk703GRTt8UIpP/vVQJg7EA jyKWtIKTpnNOfFUoqrAaS3iYWBIBM4g2Qjv/xQ/xAp8kQfU6RZY= -----END CERTIFICATE-----Generated at Wed May 13 02:37:58 2026 by rpki-client