$ rpki-client -vvvf rpki-rsync.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/C73043EA966F0F810C22E736459E7122F2FD0AE0.mft File: C73043EA966F0F810C22E736459E7122F2FD0AE0.mft (raw, json) Hash identifier: VNrXFS2j2ffSg6ndHxG69IW2ACBK/1ObKiR0J3T5AFg= Subject key identifier: 7F:9C:61:A0:17:D7:FA:31:03:0C:9F:B0:37:EB:ED:99:08:11:0E:AE Authority key identifier: C7:30:43:EA:96:6F:0F:81:0C:22:E7:36:45:9E:71:22:F2:FD:0A:E0 Certificate issuer: /CN=C73043EA966F0F810C22E736459E7122F2FD0AE0 Certificate serial: 5D7ED63BE8FAEBD580ABA1D94AF0595139845F2C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C73043EA966F0F810C22E736459E7122F2FD0AE0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/C73043EA966F0F810C22E736459E7122F2FD0AE0.mft Manifest number: AA Signing time: Sat 05 Sep 2026 02:49:01 +0000 Manifest this update: Sat 05 Sep 2026 02:44:01 +0000 Manifest next update: Sun 06 Sep 2026 04:49:01 +0000 Files and hashes: 1: C73043EA966F0F810C22E736459E7122F2FD0AE0.crl (hash: 4kaYicNaLhTkWo31/MKjdPfypiRUR+JqBhBPnqetiO8=) 2: 3230332e3131342e3232342e302f32332d3234203d3e203435363937.roa (hash: MV2xIGxIBgdx5AyOkaAkD+fjhmUbspGn/aDtyM22cf4=) 3: 323030313a6466303a39613a3a2f34382d3438203d3e203435363937.roa (hash: Amg7n/J1kB55PVPfhSf4dolGpwcgp004+ynKN8Iqa0A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/C73043EA966F0F810C22E736459E7122F2FD0AE0.crl rsync://rpki-rsync.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/C73043EA966F0F810C22E736459E7122F2FD0AE0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C73043EA966F0F810C22E736459E7122F2FD0AE0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Sep 2026 23:50:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:7e:d6:3b:e8:fa:eb:d5:80:ab:a1:d9:4a:f0:59:51:39:84:5f:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C73043EA966F0F810C22E736459E7122F2FD0AE0 Validity Not Before: Sep 5 02:44:01 2026 GMT Not After : Sep 6 04:49:01 2026 GMT Subject: CN=7F9C61A017D7FA31030C9FB037EBED9908110EAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c3:45:ac:bd:44:60:64:36:f8:80:43:72:d5: b1:6b:39:42:41:1b:69:b8:8e:59:eb:6a:13:1c:b7: 4b:0d:b9:fd:de:7d:bb:7d:a4:b5:59:10:92:63:6f: 5d:e6:06:f4:71:70:8d:64:27:07:51:ed:9e:2a:2a: 4c:b2:8e:9e:77:74:26:fb:96:9e:7e:76:1a:dd:50: d1:b1:a7:e9:b9:8e:cf:8e:64:bc:0a:ea:21:17:00: fe:9f:8c:e0:d4:39:92:7f:b7:ad:06:ad:b9:cf:09: 52:78:8d:40:c8:f5:10:33:c8:21:a7:e7:66:56:84: cc:7a:8f:3f:22:74:e7:98:d4:1b:00:ce:ec:86:7b: 49:e1:57:63:5d:33:13:85:64:9a:7b:7d:aa:6a:15: 3b:a3:f6:7d:4b:b1:d9:94:9d:bf:94:11:94:68:6b: e8:af:6e:f6:14:86:12:18:15:dc:ca:69:da:e9:29: 7d:28:c6:56:55:28:f6:c2:c7:36:d4:50:c5:41:b1: 91:c1:40:8e:79:00:15:b8:15:3e:83:ba:4a:d0:46: 09:91:3a:cd:ad:70:37:ba:6e:db:95:23:aa:70:c8: e3:86:74:f2:6e:4c:c0:29:b7:e6:00:29:e3:e2:dd: ed:c3:11:c5:7e:92:ba:36:d3:8b:2a:5f:48:2b:f4: ab:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:9C:61:A0:17:D7:FA:31:03:0C:9F:B0:37:EB:ED:99:08:11:0E:AE X509v3 Authority Key Identifier: keyid:C7:30:43:EA:96:6F:0F:81:0C:22:E7:36:45:9E:71:22:F2:FD:0A:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/C73043EA966F0F810C22E736459E7122F2FD0AE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C73043EA966F0F810C22E736459E7122F2FD0AE0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/C73043EA966F0F810C22E736459E7122F2FD0AE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:9d:ed:6c:8f:7b:e2:fb:03:76:6d:f1:f1:1d:f1:9c:44:1b: 22:d5:89:7b:e1:9d:af:00:f6:6b:dc:1d:dc:64:e7:9c:e3:0a: be:76:82:ae:29:35:39:3c:7d:79:44:19:0a:37:92:37:88:32: a1:eb:41:b9:59:a6:82:22:cb:15:b2:7c:86:19:f2:2b:42:eb: 41:a5:5c:95:09:95:66:c1:cb:d7:ac:bd:e5:27:50:de:9a:de: e0:69:a4:42:1a:09:b7:5a:b9:59:f8:4e:b9:53:c4:49:b3:f2: 5c:23:b2:e8:32:68:d5:8e:22:69:84:bc:f8:22:b0:d4:fb:cc: c8:0d:51:5b:30:4e:11:68:3b:1c:d0:6e:83:9f:05:3c:84:b8: b9:59:15:2a:49:e6:0c:e5:59:be:4c:f8:a7:22:de:66:72:1d: 97:d3:43:81:eb:fe:e8:27:a2:c5:ae:bb:9e:7e:53:37:df:76: e3:e9:52:26:9c:0e:2f:4e:d8:fb:c7:c2:f7:00:aa:3b:7c:b9: cb:7f:f2:54:24:28:d1:82:5f:f0:c4:d4:81:42:a0:b0:af:34: ed:0e:dc:72:36:84:d0:af:0c:fd:0b:8c:6d:e4:5d:4d:b4:91: 18:53:ad:70:c1:e1:01:05:65:0b:21:b7:43:62:fe:86:e1:6a: 03:25:53:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXX7WO+j669WAq6HZSvBZUTmEXywwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzczMDQzRUE5NjZGMEY4MTBDMjJFNzM2NDU5RTcxMjJG MkZEMEFFMDAeFw0yNjA5MDUwMjQ0MDFaFw0yNjA5MDYwNDQ5MDFaMDMxMTAvBgNV BAMTKDdGOUM2MUEwMTdEN0ZBMzEwMzBDOUZCMDM3RUJFRDk5MDgxMTBFQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiw0WsvURgZDb4gENy1bFrOUJB G2m4jlnrahMct0sNuf3efbt9pLVZEJJjb13mBvRxcI1kJwdR7Z4qKkyyjp53dCb7 lp5+dhrdUNGxp+m5js+OZLwK6iEXAP6fjODUOZJ/t60GrbnPCVJ4jUDI9RAzyCGn 52ZWhMx6jz8idOeY1BsAzuyGe0nhV2NdMxOFZJp7fapqFTuj9n1LsdmUnb+UEZRo a+ivbvYUhhIYFdzKadrpKX0oxlZVKPbCxzbUUMVBsZHBQI55ABW4FT6DukrQRgmR Os2tcDe6btuVI6pwyOOGdPJuTMApt+YAKePi3e3DEcV+kro204sqX0gr9KtdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf5xhoBfX+jEDDJ+wN+vtmQgRDq4wHwYDVR0j BBgwFoAUxzBD6pZvD4EMIuc2RZ5xIvL9CuAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDM1MDA3NjctOTIyNy00M2VjLWE1MjUtMmU5N2Q1YTAzZjA5LzAvQzczMDQzRUE5 NjZGMEY4MTBDMjJFNzM2NDU5RTcxMjJGMkZEMEFFMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNzMwNDNFQTk2NkYwRjgxMEMyMkU3MzY0NTlFNzEyMkYyRkQw QUUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDM1MDA3NjctOTIyNy00M2VjLWE1 MjUtMmU5N2Q1YTAzZjA5LzAvQzczMDQzRUE5NjZGMEY4MTBDMjJFNzM2NDU5RTcx MjJGMkZEMEFFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJGd7WyPe+L7A3Zt8fEd8ZxEGyLViXvhna8A 9mvcHdxk55zjCr52gq4pNTk8fXlEGQo3kjeIMqHrQblZpoIiyxWyfIYZ8itC60Gl XJUJlWbBy9esveUnUN6a3uBppEIaCbdauVn4TrlTxEmz8lwjsugyaNWOImmEvPgi sNT7zMgNUVswThFoOxzQboOfBTyEuLlZFSpJ5gzlWb5M+Kci3mZyHZfTQ4Hr/ugn osWuu55+UzffduPpUiacDi9O2PvHwvcAqjt8uct/8lQkKNGCX/DE1IFCoLCvNO0O 3HI2hNCvDP0LjG3kXU20kRhTrXDB4QEFZQsht0Ni/obhagMlUys= -----END CERTIFICATE-----Generated at Sat Sep 5 05:29:45 2026 by rpki-client