$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a72bb871-018d-4d21-9913-fc946c38794f/0/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.mft File: 73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.mft (raw, json) Hash identifier: ddHCIpH2BXpwEAJ+g6Z8onHiCPYT2pGv6RIrwtyEobY= Subject key identifier: 49:A9:A1:2E:1A:9D:A3:9B:2E:05:41:D0:BF:2D:D8:3E:80:62:12:72 Authority key identifier: 73:AE:BE:E3:24:9F:D8:B6:A7:DB:F6:0C:78:A9:8A:E3:8A:21:81:FD Certificate issuer: /CN=73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD Certificate serial: 2DD6B831F3A1D1C51D246CDEC164D5ADA5EE29F2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a72bb871-018d-4d21-9913-fc946c38794f/0/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.mft Manifest number: C1 Signing time: Fri 25 Sep 2026 00:30:45 +0000 Manifest this update: Fri 25 Sep 2026 00:25:45 +0000 Manifest next update: Sat 26 Sep 2026 02:42:45 +0000 Files and hashes: 1: 73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.crl (hash: r4oc6ubc8LnmIM1DC+3VqYcieOwYcexflpxU/Z0CxMM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a72bb871-018d-4d21-9913-fc946c38794f/0/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.crl rsync://rpki-rsync.idnic.net/repo/a72bb871-018d-4d21-9913-fc946c38794f/0/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 02:42:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:d6:b8:31:f3:a1:d1:c5:1d:24:6c:de:c1:64:d5:ad:a5:ee:29:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD Validity Not Before: Sep 25 00:25:45 2026 GMT Not After : Sep 26 02:42:45 2026 GMT Subject: CN=49A9A12E1A9DA39B2E0541D0BF2DD83E80621272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ed:fc:fe:f7:c4:17:b9:9c:80:f9:22:53:5b: a3:a9:da:44:9a:08:e5:67:39:a4:5a:d0:b0:d9:57: f9:fd:04:cf:f8:5d:94:e5:12:d5:9a:f6:8f:f2:b8: d4:d5:d0:14:6b:c9:29:3e:4f:75:44:5b:cb:55:00: 04:39:15:f4:23:dd:42:51:00:3d:97:fa:c9:21:90: 1e:9e:9d:87:1a:19:95:e2:0f:58:9b:02:22:49:b6: 76:50:b4:2d:95:42:13:96:5a:57:9d:9b:d2:7c:a2: e1:a6:69:e7:72:ee:6e:36:17:a6:77:eb:09:b4:1b: 2f:c4:67:a7:be:2a:49:4d:38:ca:98:57:85:53:45: d9:7c:0c:a5:cf:56:f1:4a:a7:78:73:90:b6:36:11: 49:76:3f:16:81:33:42:a7:08:1c:99:c7:8a:99:2c: 5a:66:b5:a2:58:77:8d:8d:dd:9f:7c:a5:df:3a:4f: e6:25:81:87:40:7d:a4:16:5a:78:71:f7:b3:02:2d: 53:b0:41:6f:61:98:3f:07:d0:84:e0:91:ac:b9:bd: a8:91:07:9b:1c:6c:8f:c4:ab:2a:5f:08:ed:20:7a: 12:4c:bc:28:94:a9:eb:35:b9:87:b8:6a:b9:63:90: ba:8f:0e:1b:4b:df:48:d5:b5:79:aa:ee:55:91:1b: c1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:A9:A1:2E:1A:9D:A3:9B:2E:05:41:D0:BF:2D:D8:3E:80:62:12:72 X509v3 Authority Key Identifier: keyid:73:AE:BE:E3:24:9F:D8:B6:A7:DB:F6:0C:78:A9:8A:E3:8A:21:81:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a72bb871-018d-4d21-9913-fc946c38794f/0/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a72bb871-018d-4d21-9913-fc946c38794f/0/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:6d:90:b4:cc:1b:c1:65:19:f0:ee:69:cd:90:83:61:eb:2f: 84:da:c3:2a:64:e0:db:0a:58:bf:2e:23:f9:2c:a7:f7:b3:ba: b4:5f:e9:16:8c:6c:30:1b:bf:b2:79:0b:09:53:7c:f5:44:28: 8a:61:99:ce:d0:3f:67:00:57:80:5b:2b:a1:23:09:5b:89:d4: a5:2e:4f:2a:c9:f1:df:81:8c:8c:10:ca:be:e9:20:cd:4b:9a: 55:a9:0c:2b:22:64:d4:15:93:e1:8a:af:dd:1e:59:aa:a6:e7: e8:d7:9c:67:60:35:72:7e:01:fa:be:82:f3:72:fd:02:a9:f3: 70:4f:8a:46:1b:c4:b4:36:39:34:32:49:d0:ae:ec:de:ec:e5: d1:bb:72:88:6c:65:1e:95:fe:c0:f9:87:fb:76:1d:61:12:e7: 11:8a:00:fb:96:99:c2:0f:0f:ab:cd:40:cf:c0:6a:0b:f4:71: fc:9e:58:39:41:9c:6d:90:ff:a8:30:51:cd:18:4b:fa:4e:71: 1f:03:c4:0c:19:c0:fc:a6:5e:02:7b:be:89:ba:c3:d9:72:f9: b6:2c:8b:3a:44:af:a8:7d:28:58:29:a9:fe:66:2f:b6:b2:05: c9:ab:63:2f:b7:93:3b:de:c1:5f:0f:46:f1:d4:13:60:7a:f4: 4f:03:09:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULda4MfOh0cUdJGzewWTVraXuKfIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNBRUJFRTMyNDlGRDhCNkE3REJGNjBDNzhBOThBRTM4 QTIxODFGRDAeFw0yNjA5MjUwMDI1NDVaFw0yNjA5MjYwMjQyNDVaMDMxMTAvBgNV BAMTKDQ5QTlBMTJFMUE5REEzOUIyRTA1NDFEMEJGMkREODNFODA2MjEyNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+7fz+98QXuZyA+SJTW6Op2kSa COVnOaRa0LDZV/n9BM/4XZTlEtWa9o/yuNTV0BRrySk+T3VEW8tVAAQ5FfQj3UJR AD2X+skhkB6enYcaGZXiD1ibAiJJtnZQtC2VQhOWWledm9J8ouGmaedy7m42F6Z3 6wm0Gy/EZ6e+KklNOMqYV4VTRdl8DKXPVvFKp3hzkLY2EUl2PxaBM0KnCByZx4qZ LFpmtaJYd42N3Z98pd86T+YlgYdAfaQWWnhx97MCLVOwQW9hmD8H0ITgkay5vaiR B5scbI/EqypfCO0gehJMvCiUqes1uYe4arljkLqPDhtL30jVtXmq7lWRG8EJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSamhLhqdo5suBUHQvy3YPoBiEnIwHwYDVR0j BBgwFoAUc66+4ySf2Lan2/YMeKmK44ohgf0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTcyYmI4NzEtMDE4ZC00ZDIxLTk5MTMtZmM5NDZjMzg3OTRmLzAvNzNBRUJFRTMy NDlGRDhCNkE3REJGNjBDNzhBOThBRTM4QTIxODFGRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83M0FFQkVFMzI0OUZEOEI2QTdEQkY2MEM3OEE5OEFFMzhBMjE4 MUZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTcyYmI4NzEtMDE4ZC00ZDIxLTk5 MTMtZmM5NDZjMzg3OTRmLzAvNzNBRUJFRTMyNDlGRDhCNkE3REJGNjBDNzhBOThB RTM4QTIxODFGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGttkLTMG8FlGfDuac2Qg2HrL4Tawypk4NsK WL8uI/ksp/ezurRf6RaMbDAbv7J5CwlTfPVEKIphmc7QP2cAV4BbK6EjCVuJ1KUu TyrJ8d+BjIwQyr7pIM1LmlWpDCsiZNQVk+GKr90eWaqm5+jXnGdgNXJ+Afq+gvNy /QKp83BPikYbxLQ2OTQySdCu7N7s5dG7cohsZR6V/sD5h/t2HWES5xGKAPuWmcIP D6vNQM/Aagv0cfyeWDlBnG2Q/6gwUc0YS/pOcR8DxAwZwPymXgJ7vom6w9ly+bYs izpEr6h9KFgpqf5mL7ayBcmrYy+3kzvewV8PRvHUE2B69E8DCVY= -----END CERTIFICATE-----Generated at Fri Sep 25 07:36:16 2026 by rpki-client