$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.mft File: A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.mft (raw, json) Hash identifier: JX8LpDlsqvoj81G7xLMfglf966c4NaWLSs/c7Z6pbIM= Subject key identifier: 6F:DC:45:94:54:6A:84:17:C7:BD:4A:22:AC:51:96:A3:08:E3:D4:1D Authority key identifier: A7:3D:69:ED:EC:18:03:1B:F9:17:5A:7C:A7:4E:D6:3A:1C:63:02:DB Certificate issuer: /CN=A73D69EDEC18031BF9175A7CA74ED63A1C6302DB Certificate serial: 491D8501DA667A88D60DCAF78A71BBE950CA452B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 14:33:53 +0000 Manifest this update: Thu 24 Sep 2026 14:28:53 +0000 Manifest next update: Fri 25 Sep 2026 16:25:53 +0000 Files and hashes: 1: 3130332e3136322e3232322e302f32342d3234203d3e20313431363635.roa (hash: arp0yrywbkd7qbxITxZkrDIJBVD5KXTuWljeFd5i2Ew=) 2: 3130332e3136322e3232332e302f32342d3234203d3e20313431363635.roa (hash: C/DT7XHL3SGEbqpViWF85bXoznD5c80gdYcaatqLy54=) 3: A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.crl (hash: 7BvkfLRSxNFM+ZvfLwgmacgL0F1NTq7jFRv1PqIez9c=) 4: 3130332e3136322e3232322e302f32342d3234203d3e203438343635.roa (hash: gUMtJPlmcfCKnK+8j2GeQFyhHBPFelpdjIC7KLgp3HM=) 5: 3130332e3136322e3232322e302f32332d3233203d3e20313431363635.roa (hash: J7QP2a/G6U6CecSpH3luJmb2dfsPBa3lWp+XbtAjzpA=) 6: 3130332e3136322e3232332e302f32342d3234203d3e203438343635.roa (hash: DwAPimZJbs1WQtoDvmv2aTJgkFvbbEdXOIPeLqLhsYM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.crl rsync://rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:1d:85:01:da:66:7a:88:d6:0d:ca:f7:8a:71:bb:e9:50:ca:45:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A73D69EDEC18031BF9175A7CA74ED63A1C6302DB Validity Not Before: Sep 24 14:28:53 2026 GMT Not After : Sep 25 16:25:53 2026 GMT Subject: CN=6FDC4594546A8417C7BD4A22AC5196A308E3D41D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5c:f1:ac:33:d0:19:ba:31:03:4b:cc:d0:07: 73:79:c7:e6:f1:5a:db:1e:83:4a:ab:46:b6:3f:27: 65:51:4f:5e:19:4e:35:5c:17:ad:71:f4:3c:0b:ee: 9d:99:41:f7:8e:ac:4b:70:a2:4e:21:d2:a9:7b:8f: 38:3d:71:78:ee:ad:6e:7a:d7:4a:03:c5:56:e0:11: e2:4c:93:bb:08:27:5b:df:33:a0:46:4e:85:07:99: 4e:ba:41:de:e0:ef:c1:5c:52:18:fb:9c:e2:e0:29: 56:7c:3b:94:f0:bc:45:17:ef:21:99:fc:19:55:5b: b1:5d:66:71:77:00:32:e2:56:5e:2c:26:d3:9f:b1: 97:e0:76:66:b1:fa:f9:a8:7e:9c:70:01:46:72:6a: f1:47:4d:b8:1c:5b:ca:d8:60:ec:ab:88:1f:76:c4: c3:15:78:28:d3:0f:ec:7b:4b:f0:dc:f3:68:b3:f1: ff:1d:90:d6:98:4e:c1:9a:74:15:3e:21:59:5d:ec: 7e:3b:d0:3e:1d:76:fe:71:16:bd:45:9a:42:c4:e3: da:f0:c6:4d:bf:b7:e7:76:4a:1d:90:be:c7:9e:23: a9:a2:25:fa:a5:83:8c:44:13:0b:e2:bb:6a:33:d7: 8c:91:25:f0:af:74:80:30:2b:44:f2:02:03:eb:84: e5:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:DC:45:94:54:6A:84:17:C7:BD:4A:22:AC:51:96:A3:08:E3:D4:1D X509v3 Authority Key Identifier: keyid:A7:3D:69:ED:EC:18:03:1B:F9:17:5A:7C:A7:4E:D6:3A:1C:63:02:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:75:3d:0c:6b:81:55:cd:56:75:69:4d:81:01:c5:13:45:30: b3:1a:00:7e:f6:f9:e2:69:33:24:46:15:83:cd:c9:3e:91:37: ac:c4:81:f5:cf:b9:a1:f1:8f:eb:00:fe:79:ba:06:bf:08:e0: 4d:55:6b:47:27:70:e2:01:20:72:c5:b9:a9:27:08:e3:25:e1: d8:11:65:26:0f:e1:1f:11:e9:b8:b1:62:5e:df:2e:a9:62:36: 43:10:9d:26:9c:60:62:ba:ec:73:29:12:20:bb:a2:bc:f0:6f: 4f:7e:6d:a4:9e:61:57:15:15:7d:6b:09:6e:9d:da:ca:8d:da: d7:3a:6f:b3:e8:56:fd:23:5c:13:b0:9b:24:49:58:c9:ff:1a: 80:02:11:e7:bc:83:2b:3a:c6:78:13:80:b1:54:0b:f5:60:2c: 1c:4a:b8:50:cb:90:55:55:34:1f:df:e0:5d:e5:03:8a:d3:cd: 0e:5e:c5:1f:c1:49:2a:f4:47:46:a4:3f:46:59:55:e9:40:b8: de:af:a0:b6:60:97:34:2d:02:80:2e:00:50:a3:38:da:6b:1a: c3:bf:42:2f:26:2c:9a:fa:a5:ca:cb:dd:3d:5b:7e:90:67:c5: e1:44:ab:e9:9b:58:c1:a8:68:0a:41:13:35:d1:0f:de:ff:a3: 95:02:00:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSR2FAdpmeojWDcr3inG76VDKRSswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTczRDY5RURFQzE4MDMxQkY5MTc1QTdDQTc0RUQ2M0Ex QzYzMDJEQjAeFw0yNjA5MjQxNDI4NTNaFw0yNjA5MjUxNjI1NTNaMDMxMTAvBgNV BAMTKDZGREM0NTk0NTQ2QTg0MTdDN0JENEEyMkFDNTE5NkEzMDhFM0Q0MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0XPGsM9AZujEDS8zQB3N5x+bx Wtseg0qrRrY/J2VRT14ZTjVcF61x9DwL7p2ZQfeOrEtwok4h0ql7jzg9cXjurW56 10oDxVbgEeJMk7sIJ1vfM6BGToUHmU66Qd7g78FcUhj7nOLgKVZ8O5TwvEUX7yGZ /BlVW7FdZnF3ADLiVl4sJtOfsZfgdmax+vmofpxwAUZyavFHTbgcW8rYYOyriB92 xMMVeCjTD+x7S/Dc82iz8f8dkNaYTsGadBU+IVld7H470D4ddv5xFr1FmkLE49rw xk2/t+d2Sh2QvseeI6miJfqlg4xEEwviu2oz14yRJfCvdIAwK0TyAgPrhOUPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb9xFlFRqhBfHvUoirFGWowjj1B0wHwYDVR0j BBgwFoAUpz1p7ewYAxv5F1p8p07WOhxjAtswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzY0ZjBmZmEtZTAzMS00ZWUxLWJmMGYtNjRiYWNmY2YyOTQyLzAvQTczRDY5RURF QzE4MDMxQkY5MTc1QTdDQTc0RUQ2M0ExQzYzMDJEQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNzNENjlFREVDMTgwMzFCRjkxNzVBN0NBNzRFRDYzQTFDNjMw MkRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzY0ZjBmZmEtZTAzMS00ZWUxLWJm MGYtNjRiYWNmY2YyOTQyLzAvQTczRDY5RURFQzE4MDMxQkY5MTc1QTdDQTc0RUQ2 M0ExQzYzMDJEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFJ1PQxrgVXNVnVpTYEBxRNFMLMaAH72+eJp MyRGFYPNyT6RN6zEgfXPuaHxj+sA/nm6Br8I4E1Va0cncOIBIHLFuaknCOMl4dgR ZSYP4R8R6bixYl7fLqliNkMQnSacYGK67HMpEiC7orzwb09+baSeYVcVFX1rCW6d 2sqN2tc6b7PoVv0jXBOwmyRJWMn/GoACEee8gys6xngTgLFUC/VgLBxKuFDLkFVV NB/f4F3lA4rTzQ5exR/BSSr0R0akP0ZZVelAuN6voLZglzQtAoAuAFCjONprGsO/ Qi8mLJr6pcrL3T1bfpBnxeFEq+mbWMGoaApBEzXRD97/o5UCAHs= -----END CERTIFICATE-----Generated at Thu Sep 24 23:28:28 2026 by rpki-client