$ rpki-client -vvf rpki-rsync.idnic.net/repo/a72bb871-018d-4d21-9913-fc946c38794f/0/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.mft File: 73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.mft (raw, json) Hash identifier: HsPQ6T2Q8ANUzabR8H4BrUMZkzGMiVSYqKoJACHw4Mk= Subject key identifier: C2:BF:11:F8:9E:F5:F0:6E:A7:60:C2:9C:C2:68:39:E2:7F:19:D4:A6 Authority key identifier: 73:AE:BE:E3:24:9F:D8:B6:A7:DB:F6:0C:78:A9:8A:E3:8A:21:81:FD Certificate issuer: /CN=73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD Certificate serial: 3C9DE03DF19C903770C5C2654DEF6302C97A28 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a72bb871-018d-4d21-9913-fc946c38794f/0/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.mft Manifest number: 0D Signing time: Tue 12 May 2026 10:11:21 +0000 Manifest this update: Tue 12 May 2026 10:06:21 +0000 Manifest next update: Wed 13 May 2026 12:34:21 +0000 Files and hashes: 1: 73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.crl (hash: fVU4tzTWugpEwHotEJ2RNr6xCefUKrBaKNcfgBVIIbI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a72bb871-018d-4d21-9913-fc946c38794f/0/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.crl rsync://rpki-rsync.idnic.net/repo/a72bb871-018d-4d21-9913-fc946c38794f/0/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 12:34:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:9d:e0:3d:f1:9c:90:37:70:c5:c2:65:4d:ef:63:02:c9:7a:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD Validity Not Before: May 12 10:06:21 2026 GMT Not After : May 13 12:34:21 2026 GMT Subject: CN=C2BF11F89EF5F06EA760C29CC26839E27F19D4A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:61:3c:f3:c4:f0:9e:0c:f0:9e:9f:9b:78:48: 84:ef:86:54:00:9f:59:f4:94:bc:c2:26:ae:45:0f: f5:ba:9a:e8:b7:3e:b4:53:5b:ab:92:30:d3:42:28: 04:2f:9b:a4:ff:e1:56:6a:aa:41:b4:0c:cc:74:f7: 75:86:ab:b5:7e:09:97:6a:0d:06:5a:6f:7d:80:72: 41:5b:a1:ce:4e:78:35:70:f4:4e:d9:8e:29:13:8d: 4b:a9:41:71:2c:d1:7c:e9:59:b2:f0:44:e2:2d:63: d9:e9:56:4d:4e:04:3e:c0:2d:0b:f6:43:c0:9c:92: a6:44:3c:f6:a3:65:38:f6:da:50:1b:e3:8e:02:91: b8:f3:21:d6:c4:68:ce:90:c4:5e:8b:08:e4:ca:5b: e6:5b:8d:46:ec:e7:b3:c8:ae:a8:2d:4f:dd:d9:41: 06:8a:8b:32:e8:ad:80:92:c6:b1:54:1b:27:bb:cb: 46:58:2b:b1:e3:07:40:81:88:73:3b:7c:40:c9:7c: 0e:53:e9:33:51:50:e4:69:12:24:61:4c:40:84:4a: c1:e8:13:bd:14:49:93:d7:03:7e:44:4b:bf:67:95: fc:f5:4e:93:f4:c8:ba:29:cb:28:f1:27:a0:52:ba: 18:b5:36:05:de:42:7f:7c:f5:56:14:62:49:81:89: ac:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:BF:11:F8:9E:F5:F0:6E:A7:60:C2:9C:C2:68:39:E2:7F:19:D4:A6 X509v3 Authority Key Identifier: keyid:73:AE:BE:E3:24:9F:D8:B6:A7:DB:F6:0C:78:A9:8A:E3:8A:21:81:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a72bb871-018d-4d21-9913-fc946c38794f/0/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a72bb871-018d-4d21-9913-fc946c38794f/0/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:c2:8c:6c:fc:e6:ed:25:f0:90:e0:06:a8:60:46:81:cc:e1: 80:4e:58:b6:de:31:b9:d8:16:79:ef:43:09:b5:42:b7:4f:33: 9f:ee:b3:d7:6e:42:b9:e4:8e:c1:00:97:58:2c:24:a8:ba:ad: 11:83:48:ff:bf:a2:9a:93:8f:ee:c2:a7:cb:0c:5d:90:b9:36: 06:db:74:b0:05:36:4e:57:1e:ad:2b:f5:aa:dc:1b:7b:a8:30: 93:e6:54:8b:2d:5b:e2:b4:92:24:d5:78:7c:11:ba:cd:1b:b5: 4f:57:7e:3d:b5:f7:61:92:7f:1d:22:61:80:06:d2:42:d5:83: ad:51:1a:a1:a3:88:08:15:be:b7:ba:e5:82:25:c1:59:ac:8e: b2:fa:34:1e:12:51:ca:58:ab:2f:1d:83:9f:44:1f:3d:11:27: ed:c0:78:50:f9:ba:91:e5:43:66:d1:ba:a0:1d:32:94:b8:24: 32:e4:9e:17:10:5f:c9:38:0c:25:6c:6c:89:c3:81:63:4c:9a: 20:d8:b0:8f:d8:c6:05:87:cd:a5:f4:1a:09:ad:cc:fb:ce:c8: 5e:42:80:f1:29:39:c4:e7:bd:12:47:19:90:2f:f1:2c:76:4c: 0e:fb:f3:d5:26:fd:ef:e2:d4:14:73:66:da:68:9c:c8:b3:f7: 8a:fb:92:88 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITPJ3gPfGckDdwxcJlTe9jAsl6KDANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg3M0FFQkVFMzI0OUZEOEI2QTdEQkY2MEM3OEE5OEFFMzhB MjE4MUZEMB4XDTI2MDUxMjEwMDYyMVoXDTI2MDUxMzEyMzQyMVowMzExMC8GA1UE AxMoQzJCRjExRjg5RUY1RjA2RUE3NjBDMjlDQzI2ODM5RTI3RjE5RDRBNjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJNhPPPE8J4M8J6fm3hIhO+GVACf WfSUvMImrkUP9bqa6Lc+tFNbq5Iw00IoBC+bpP/hVmqqQbQMzHT3dYartX4Jl2oN BlpvfYByQVuhzk54NXD0TtmOKRONS6lBcSzRfOlZsvBE4i1j2elWTU4EPsAtC/ZD wJySpkQ89qNlOPbaUBvjjgKRuPMh1sRozpDEXosI5Mpb5luNRuzns8iuqC1P3dlB BoqLMuitgJLGsVQbJ7vLRlgrseMHQIGIczt8QMl8DlPpM1FQ5GkSJGFMQIRKwegT vRRJk9cDfkRLv2eV/PVOk/TIuinLKPEnoFK6GLU2Bd5Cf3z1VhRiSYGJrLUCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBTCvxH4nvXwbqdgwpzCaDnifxnUpjAfBgNVHSME GDAWgBRzrr7jJJ/Ytqfb9gx4qYrjiiGB/TAOBgNVHQ8BAf8EBAMCB4AwgYYGA1Ud HwR/MH0we6B5oHeGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9h NzJiYjg3MS0wMThkLTRkMjEtOTkxMy1mYzk0NmMzODc5NGYvMC83M0FFQkVFMzI0 OUZEOEI2QTdEQkY2MEM3OEE5OEFFMzhBMjE4MUZELmNybDByBggrBgEFBQcBAQRm MGQwYgYIKwYBBQUHMAKGVnJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVw by9JRE5JQy8xLzczQUVCRUUzMjQ5RkQ4QjZBN0RCRjYwQzc4QTk4QUUzOEEyMTgx RkQuY2VyMIGUBggrBgEFBQcBCwSBhzCBhDCBgQYIKwYBBQUHMAuGdXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9hNzJiYjg3MS0wMThkLTRkMjEtOTkx My1mYzk0NmMzODc5NGYvMC83M0FFQkVFMzI0OUZEOEI2QTdEQkY2MEM3OEE5OEFF MzhBMjE4MUZELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAQcKMbPzm7SXwkOAGqGBGgczhgE5Ytt4xudgW ee9DCbVCt08zn+6z125CueSOwQCXWCwkqLqtEYNI/7+impOP7sKnywxdkLk2Btt0 sAU2TlcerSv1qtwbe6gwk+ZUiy1b4rSSJNV4fBG6zRu1T1d+PbX3YZJ/HSJhgAbS QtWDrVEaoaOICBW+t7rlgiXBWayOsvo0HhJRylirLx2Dn0QfPREn7cB4UPm6keVD ZtG6oB0ylLgkMuSeFxBfyTgMJWxsicOBY0yaINiwj9jGBYfNpfQaCa3M+87IXkKA 8Sk5xOe9EkcZkC/xLHZMDvvz1Sb97+LUFHNm2micyLP3ivuSiA== -----END CERTIFICATE-----Generated at Wed May 13 03:58:48 2026 by rpki-client