$ rpki-client -vvf rpki-rsync.idnic.net/repo/a72bb871-018d-4d21-9913-fc946c38794f/0/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.mft File: 73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.mft (raw, json) Hash identifier: 7TLqspVar/DSK3T+eEed36OLHxtShFqX2MaHMUfgs/0= Subject key identifier: B9:8E:46:11:5A:E7:89:62:51:96:C4:7D:35:E3:AB:23:AD:6B:4F:7C Authority key identifier: 73:AE:BE:E3:24:9F:D8:B6:A7:DB:F6:0C:78:A9:8A:E3:8A:21:81:FD Certificate issuer: /CN=73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD Certificate serial: 7E8174F997F2DBCCC9AE7B1A309F64C7DDE15ECC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a72bb871-018d-4d21-9913-fc946c38794f/0/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.mft Manifest number: 6E Signing time: Fri 24 Jul 2026 07:38:50 +0000 Manifest this update: Fri 24 Jul 2026 07:33:50 +0000 Manifest next update: Sat 25 Jul 2026 08:30:50 +0000 Files and hashes: 1: 73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.crl (hash: 11HRGiRIvP2a5t6v0S2nVvBxkbp1N7o4bQVmVRSytQY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a72bb871-018d-4d21-9913-fc946c38794f/0/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.crl rsync://rpki-rsync.idnic.net/repo/a72bb871-018d-4d21-9913-fc946c38794f/0/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:81:74:f9:97:f2:db:cc:c9:ae:7b:1a:30:9f:64:c7:dd:e1:5e:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD Validity Not Before: Jul 24 07:33:50 2026 GMT Not After : Jul 25 08:30:50 2026 GMT Subject: CN=B98E46115AE789625196C47D35E3AB23AD6B4F7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bb:d2:e7:76:fc:b5:e7:b6:88:63:60:9b:76: 50:51:b8:13:e4:09:e5:4f:50:b2:28:db:36:dd:3a: 79:16:99:de:f8:73:38:d3:17:fc:9f:3a:d8:d7:e9: f6:8f:93:8d:ab:91:b1:d2:ee:04:46:7d:18:b1:d8: 5f:a7:4a:42:00:bb:81:9c:50:dd:bd:d5:2f:64:8a: ba:ba:81:74:71:e0:ec:d4:b7:f4:2e:a9:ab:7c:ea: 16:9a:d0:1d:af:89:f2:ed:d2:5c:87:89:77:cc:f2: ea:4f:02:9b:96:f3:94:b2:4a:e2:40:4b:28:f7:cf: 89:e7:8a:4e:6f:8d:d0:0e:ab:c8:4f:90:a6:10:8d: fa:7b:74:d9:a2:68:d7:16:4f:bd:f1:ad:c3:d8:e3: 93:fe:dd:38:2d:2d:43:6c:ca:c8:ce:d2:51:96:21: 10:49:a3:4d:7d:72:f6:d3:f5:37:67:21:dc:03:35: 99:44:0c:51:55:7d:7d:3b:24:4d:31:6b:0f:fe:1c: e5:2d:e0:f5:42:ef:b7:37:95:78:3b:29:b9:a7:30: bb:02:e1:83:26:2f:bd:f1:d0:70:15:4f:16:cf:58: 7c:42:15:b8:6f:3a:3f:da:80:e8:24:8f:83:53:6e: af:3a:27:ab:b0:fa:4b:1e:1d:25:e1:c3:4a:58:7d: 18:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:8E:46:11:5A:E7:89:62:51:96:C4:7D:35:E3:AB:23:AD:6B:4F:7C X509v3 Authority Key Identifier: keyid:73:AE:BE:E3:24:9F:D8:B6:A7:DB:F6:0C:78:A9:8A:E3:8A:21:81:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a72bb871-018d-4d21-9913-fc946c38794f/0/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a72bb871-018d-4d21-9913-fc946c38794f/0/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:a3:0c:93:2c:9d:d9:16:7b:f3:63:f3:d8:8a:df:ba:52:ff: 58:7d:37:7a:5e:82:36:4d:9b:70:42:3b:6d:92:39:fd:00:32: f1:eb:22:12:f1:fb:00:09:90:e1:a6:38:b2:49:82:2f:2a:68: 50:2a:61:02:54:77:f2:a5:e1:d5:e1:d0:b7:44:8d:17:af:bd: 24:dc:1d:1b:0d:8e:32:28:d4:26:99:9f:10:17:31:d1:89:83: 5d:da:1b:67:e0:77:e4:9d:c0:71:55:5d:41:9c:e2:99:9c:4f: 1c:29:2a:9f:d8:f2:8f:e4:04:4e:07:f5:b2:8d:c5:94:c2:43: 20:8c:ce:a6:25:74:8f:7b:b6:2e:af:3f:e4:a4:ef:cd:f7:6d: d6:ec:5e:b8:03:6c:c4:4d:68:2f:68:d9:7e:a3:8e:72:d0:79: 40:25:62:10:76:6d:f1:eb:fa:bf:4c:ee:e2:e9:dd:4d:31:d3: 4f:1f:dd:ab:f4:85:c5:b0:fd:91:f7:eb:81:b6:2a:e6:86:20: ea:09:4c:84:aa:34:1e:6f:35:6d:11:fc:74:ab:11:fe:4a:fb: 27:8f:6f:ae:0b:f6:2f:5d:44:f3:c6:8b:59:90:70:26:10:25: 10:bb:41:de:05:60:0e:12:12:0c:be:72:dd:04:10:69:fc:30: 1b:39:7b:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfoF0+Zfy28zJrnsaMJ9kx93hXswwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNBRUJFRTMyNDlGRDhCNkE3REJGNjBDNzhBOThBRTM4 QTIxODFGRDAeFw0yNjA3MjQwNzMzNTBaFw0yNjA3MjUwODMwNTBaMDMxMTAvBgNV BAMTKEI5OEU0NjExNUFFNzg5NjI1MTk2QzQ3RDM1RTNBQjIzQUQ2QjRGN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5u9Lndvy157aIY2CbdlBRuBPk CeVPULIo2zbdOnkWmd74czjTF/yfOtjX6faPk42rkbHS7gRGfRix2F+nSkIAu4Gc UN291S9kirq6gXRx4OzUt/Quqat86haa0B2vifLt0lyHiXfM8upPApuW85SySuJA Syj3z4nnik5vjdAOq8hPkKYQjfp7dNmiaNcWT73xrcPY45P+3TgtLUNsysjO0lGW IRBJo019cvbT9TdnIdwDNZlEDFFVfX07JE0xaw/+HOUt4PVC77c3lXg7KbmnMLsC 4YMmL73x0HAVTxbPWHxCFbhvOj/agOgkj4NTbq86J6uw+kseHSXhw0pYfRjfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuY5GEVrniWJRlsR9NeOrI61rT3wwHwYDVR0j BBgwFoAUc66+4ySf2Lan2/YMeKmK44ohgf0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTcyYmI4NzEtMDE4ZC00ZDIxLTk5MTMtZmM5NDZjMzg3OTRmLzAvNzNBRUJFRTMy NDlGRDhCNkE3REJGNjBDNzhBOThBRTM4QTIxODFGRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83M0FFQkVFMzI0OUZEOEI2QTdEQkY2MEM3OEE5OEFFMzhBMjE4 MUZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTcyYmI4NzEtMDE4ZC00ZDIxLTk5 MTMtZmM5NDZjMzg3OTRmLzAvNzNBRUJFRTMyNDlGRDhCNkE3REJGNjBDNzhBOThB RTM4QTIxODFGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEajDJMsndkWe/Nj89iK37pS/1h9N3pegjZN m3BCO22SOf0AMvHrIhLx+wAJkOGmOLJJgi8qaFAqYQJUd/Kl4dXh0LdEjRevvSTc HRsNjjIo1CaZnxAXMdGJg13aG2fgd+SdwHFVXUGc4pmcTxwpKp/Y8o/kBE4H9bKN xZTCQyCMzqYldI97ti6vP+Sk7833bdbsXrgDbMRNaC9o2X6jjnLQeUAlYhB2bfHr +r9M7uLp3U0x008f3av0hcWw/ZH364G2KuaGIOoJTISqNB5vNW0R/HSrEf5K+yeP b64L9i9dRPPGi1mQcCYQJRC7Qd4FYA4SEgy+ct0EEGn8MBs5exU= -----END CERTIFICATE-----Generated at Fri Jul 24 13:23:05 2026 by rpki-client