$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.mft File: 4D73AF7813A396ABD7BDE23A979935F7C2E168E7.mft (raw, json) Hash identifier: yKvQpsaDrZYkQNpIW5emFRjKng32u8jZbbgwLXPmZag= Subject key identifier: 8A:53:D3:DA:12:E2:D3:97:31:55:1E:9F:75:2D:B6:58:56:BE:09:BD Authority key identifier: 4D:73:AF:78:13:A3:96:AB:D7:BD:E2:3A:97:99:35:F7:C2:E1:68:E7 Certificate issuer: /CN=4D73AF7813A396ABD7BDE23A979935F7C2E168E7 Certificate serial: 60FCF2E6570F4B2E8FE08BA6379B5D3B44312CDB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 17:10:42 +0000 Manifest this update: Tue 02 Jun 2026 17:05:42 +0000 Manifest next update: Wed 03 Jun 2026 20:51:42 +0000 Files and hashes: 1: 4D73AF7813A396ABD7BDE23A979935F7C2E168E7.crl (hash: 7bPMgWIiusc0QfRAYU3nAgOf2dsk9wAbGGGkv0CQStY=) 2: 323430333a333163303a3a2f33322d3332203d3e20313337333736.roa (hash: 889d8hZgsoEONtwHkfZfmAhOTIvpzaLSt/rrvU4dZ6Y=) 3: 3130332e3131382e3132342e302f32322d3234203d3e20313337333736.roa (hash: ZJlUpKOWZJT4nAWuCuBDhZRS/ZCGAJEy+RmXu9xZXqc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.crl rsync://rpki-rsync.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:fc:f2:e6:57:0f:4b:2e:8f:e0:8b:a6:37:9b:5d:3b:44:31:2c:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D73AF7813A396ABD7BDE23A979935F7C2E168E7 Validity Not Before: Jun 2 17:05:42 2026 GMT Not After : Jun 3 20:51:42 2026 GMT Subject: CN=8A53D3DA12E2D39731551E9F752DB65856BE09BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:52:bf:97:8c:14:7e:d6:5e:df:74:f9:95:25: 71:8b:3b:19:2f:03:30:7e:d4:3b:96:16:a2:37:93: 41:e1:43:30:71:f5:48:fa:53:a3:dc:54:0f:bc:77: 43:99:36:18:bb:b5:a1:70:c2:4e:ee:b7:da:9e:a1: 8e:50:ea:85:2e:a7:d3:49:87:12:c4:fe:12:0d:6f: 4f:80:ff:10:11:c6:95:2c:0b:79:2d:93:e0:23:b1: 95:3d:5b:61:a1:4d:f6:f1:65:b2:e0:b1:81:8a:74: a7:cb:23:b1:ad:66:ec:95:bf:41:f9:36:8a:c2:33: 3d:2e:10:c9:eb:6f:ea:af:6a:ec:71:12:88:e7:49: ca:a4:8f:74:a1:38:35:6d:c6:e4:81:3c:87:15:8f: ed:06:3b:8e:77:9b:27:35:11:5c:8f:8f:ee:25:4d: 39:5b:38:5d:84:79:6a:b5:4c:0f:26:bc:58:46:15: e0:07:10:0c:3c:63:ba:96:fa:47:c5:0f:99:0f:de: 11:19:5c:53:cd:bf:17:15:74:a1:5c:2e:e8:1e:ee: 89:89:42:9a:25:08:8a:51:29:5b:54:25:6b:b7:85: 76:bc:22:b9:ac:87:8c:c6:4f:27:2f:38:23:ee:05: 0e:bc:01:61:ab:df:16:bd:cc:f8:1c:72:34:9c:4e: bd:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:53:D3:DA:12:E2:D3:97:31:55:1E:9F:75:2D:B6:58:56:BE:09:BD X509v3 Authority Key Identifier: keyid:4D:73:AF:78:13:A3:96:AB:D7:BD:E2:3A:97:99:35:F7:C2:E1:68:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:94:22:95:e3:c7:ef:64:a2:92:d5:44:fa:57:8c:92:ad:20: ca:41:61:3d:c1:85:4e:37:bb:39:17:a9:51:c8:37:a3:8d:30: 5e:a9:c9:db:af:4d:99:d4:50:c7:89:47:96:8e:a6:6c:b2:5c: 7e:2f:d7:d2:fc:41:c5:ae:53:10:ab:2c:ed:ec:35:8a:45:8b: ec:19:7d:10:73:a3:f8:f0:3f:31:76:f9:90:ed:1a:4b:09:df: 0b:2e:96:01:ea:36:dd:4c:0c:0d:0e:5f:56:27:ed:6e:91:bb: e3:5e:19:36:ac:20:13:6d:e5:d0:92:f3:fe:95:0a:3a:48:ce: 1e:5b:c1:66:94:ad:7d:a6:20:24:67:b6:a2:66:94:1b:71:6c: cd:f5:d3:fe:88:29:2b:05:8c:99:05:02:cd:55:91:6d:9e:18: 6b:47:8b:89:7e:11:1c:fd:a3:d9:de:7d:58:e4:a0:77:1a:8c: 8f:db:0f:25:0e:6f:a7:8a:e3:3c:0f:ec:53:ee:0e:45:8c:98: 9d:78:9d:42:37:23:d0:b8:05:6c:48:9b:02:50:96:79:00:4c: ad:ca:3d:2d:ba:e4:0f:04:43:d2:1e:7a:df:ff:d4:3c:6a:2e: 9f:b2:cf:22:db:b2:12:df:c2:09:2f:96:9c:d6:37:af:f3:d5: ae:fa:d4:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYPzy5lcPSy6P4IumN5tdO0QxLNswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ3M0FGNzgxM0EzOTZBQkQ3QkRFMjNBOTc5OTM1RjdD MkUxNjhFNzAeFw0yNjA2MDIxNzA1NDJaFw0yNjA2MDMyMDUxNDJaMDMxMTAvBgNV BAMTKDhBNTNEM0RBMTJFMkQzOTczMTU1MUU5Rjc1MkRCNjU4NTZCRTA5QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Ur+XjBR+1l7fdPmVJXGLOxkv AzB+1DuWFqI3k0HhQzBx9Uj6U6PcVA+8d0OZNhi7taFwwk7ut9qeoY5Q6oUup9NJ hxLE/hINb0+A/xARxpUsC3ktk+AjsZU9W2GhTfbxZbLgsYGKdKfLI7GtZuyVv0H5 NorCMz0uEMnrb+qvauxxEojnScqkj3ShODVtxuSBPIcVj+0GO453myc1EVyPj+4l TTlbOF2EeWq1TA8mvFhGFeAHEAw8Y7qW+kfFD5kP3hEZXFPNvxcVdKFcLuge7omJ QpolCIpRKVtUJWu3hXa8Irmsh4zGTycvOCPuBQ68AWGr3xa9zPgccjScTr0zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUilPT2hLi05cxVR6fdS22WFa+Cb0wHwYDVR0j BBgwFoAUTXOveBOjlqvXveI6l5k198LhaOcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQyYTViNTEtYmMwMC00ZDZiLTg3NjEtYzdkMGQzZjZkZTEyLzAvNEQ3M0FGNzgx M0EzOTZBQkQ3QkRFMjNBOTc5OTM1RjdDMkUxNjhFNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDczQUY3ODEzQTM5NkFCRDdCREUyM0E5Nzk5MzVGN0MyRTE2 OEU3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQyYTViNTEtYmMwMC00ZDZiLTg3 NjEtYzdkMGQzZjZkZTEyLzAvNEQ3M0FGNzgxM0EzOTZBQkQ3QkRFMjNBOTc5OTM1 RjdDMkUxNjhFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIyUIpXjx+9kopLVRPpXjJKtIMpBYT3BhU43 uzkXqVHIN6ONMF6pyduvTZnUUMeJR5aOpmyyXH4v19L8QcWuUxCrLO3sNYpFi+wZ fRBzo/jwPzF2+ZDtGksJ3wsulgHqNt1MDA0OX1Yn7W6Ru+NeGTasIBNt5dCS8/6V CjpIzh5bwWaUrX2mICRntqJmlBtxbM310/6IKSsFjJkFAs1VkW2eGGtHi4l+ERz9 o9nefVjkoHcajI/bDyUOb6eK4zwP7FPuDkWMmJ14nUI3I9C4BWxImwJQlnkATK3K PS265A8EQ9Ieet//1DxqLp+yzyLbshLfwgkvlpzWN6/z1a761J8= -----END CERTIFICATE-----Generated at Wed Jun 3 04:15:53 2026 by rpki-client