$ rpki-client -vvf rpki-rsync.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/73CE17FBAA0657FCD9B985A1514D40B93027A6CD.mft File: 73CE17FBAA0657FCD9B985A1514D40B93027A6CD.mft (raw, json) Hash identifier: YD2SzTLkGfuH6sMFjz2ySh/hi/nh9/S43GWbX6/Y7t4= Subject key identifier: 90:E2:F2:34:33:55:E0:05:E6:75:F1:01:15:5B:6F:03:4D:44:2B:A5 Authority key identifier: 73:CE:17:FB:AA:06:57:FC:D9:B9:85:A1:51:4D:40:B9:30:27:A6:CD Certificate issuer: /CN=73CE17FBAA0657FCD9B985A1514D40B93027A6CD Certificate serial: 601C1F6E65FF71B6639D288FE305909BADB6D8B0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/73CE17FBAA0657FCD9B985A1514D40B93027A6CD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/73CE17FBAA0657FCD9B985A1514D40B93027A6CD.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 11:45:53 +0000 Manifest this update: Mon 20 Jul 2026 11:40:53 +0000 Manifest next update: Tue 21 Jul 2026 15:05:53 +0000 Files and hashes: 1: 3138302e3133312e3132392e302f32342d3234203d3e20313532303238.roa (hash: qr6xizp3xlx6Xnc3nJpz1BpNSxX/MfpwLyE6uXtLLNM=) 2: 73CE17FBAA0657FCD9B985A1514D40B93027A6CD.crl (hash: 9v4auRMAe9Ic1lcPEAqxmqgcHG3YFgT6k1W+PePayI8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/73CE17FBAA0657FCD9B985A1514D40B93027A6CD.crl rsync://rpki-rsync.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/73CE17FBAA0657FCD9B985A1514D40B93027A6CD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/73CE17FBAA0657FCD9B985A1514D40B93027A6CD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 15:05:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:1c:1f:6e:65:ff:71:b6:63:9d:28:8f:e3:05:90:9b:ad:b6:d8:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73CE17FBAA0657FCD9B985A1514D40B93027A6CD Validity Not Before: Jul 20 11:40:53 2026 GMT Not After : Jul 21 15:05:53 2026 GMT Subject: CN=90E2F2343355E005E675F101155B6F034D442BA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:dc:57:50:a9:be:24:3c:86:5e:f0:1f:d0:34: a6:b2:2c:b2:69:cc:52:a2:aa:21:f8:8c:c3:dd:b4: be:32:24:93:9a:27:11:c2:74:71:ae:af:c6:4c:dd: 88:b6:1f:42:52:27:0d:3e:f1:c4:90:fc:b0:94:e4: ff:27:f7:21:8b:29:0c:08:b5:da:f6:38:ca:54:02: 23:55:22:19:c7:9d:fc:6c:c5:fe:c5:ca:e4:ac:53: ca:8e:54:1e:ca:21:ec:b9:6e:97:ea:df:67:a1:68: 0c:86:69:b1:e5:45:c6:4f:04:0c:16:9d:35:08:a6: 87:83:d3:72:0d:09:01:90:47:00:e2:c0:da:7c:9e: 57:df:6a:17:f5:ae:27:94:9b:21:e7:e5:e1:8a:51: c5:95:d9:be:87:12:d6:75:ad:0b:d9:9a:98:5b:7a: ae:8f:3c:67:fa:22:6e:9c:80:47:5d:2d:6a:ce:53: 38:ce:eb:9d:8b:6f:d4:16:0f:dc:bf:e2:71:19:ed: 94:74:56:41:6e:1e:24:00:ad:e1:7a:80:93:f4:d4: 37:41:16:20:33:69:60:77:fd:0f:80:71:37:06:a1: ca:9e:8c:68:8b:18:d5:72:63:47:bc:32:65:24:e1: bb:be:01:f8:56:d4:ce:ab:80:cf:82:b1:5b:d3:15: b4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:E2:F2:34:33:55:E0:05:E6:75:F1:01:15:5B:6F:03:4D:44:2B:A5 X509v3 Authority Key Identifier: keyid:73:CE:17:FB:AA:06:57:FC:D9:B9:85:A1:51:4D:40:B9:30:27:A6:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/73CE17FBAA0657FCD9B985A1514D40B93027A6CD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/73CE17FBAA0657FCD9B985A1514D40B93027A6CD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/73CE17FBAA0657FCD9B985A1514D40B93027A6CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:67:65:f6:98:8b:e8:4c:85:04:fe:30:b8:38:b7:d6:95:73: 1a:8f:cb:a1:36:99:6e:28:ac:42:b9:67:d7:62:39:a9:80:36: 8e:83:06:30:b4:36:2c:c3:31:ad:7f:8c:40:e4:be:79:6d:90: 18:7e:2c:04:a9:70:e3:9a:2f:3f:6f:4e:f7:0e:b2:63:43:ec: 76:07:86:55:36:97:ba:6a:21:3d:a7:62:c4:38:aa:a7:f5:6d: 57:11:0a:ef:ee:d1:aa:11:36:33:f1:0f:2e:58:07:60:5e:ad: f9:1d:3c:e9:10:7e:44:d9:7d:ff:58:5e:cc:89:c6:15:c2:ad: 6d:45:2e:28:2f:55:03:34:9d:c0:7a:30:8f:95:16:01:72:54: 51:6c:06:05:8e:ae:de:96:a8:8f:02:26:be:c6:fe:0e:c2:03: 99:a3:25:6b:f7:10:43:78:3c:42:1a:86:87:1d:22:48:e3:e5: b6:18:b0:04:5c:e3:0a:e5:91:19:e1:1c:47:93:48:e1:5d:f5: 28:60:1a:a7:0b:36:bf:5a:99:7a:87:6e:94:d7:72:b5:2f:76: 7f:81:e0:6e:3d:24:a9:83:ac:af:30:11:89:bd:9d:d3:00:b0: cc:fa:2d:95:a2:9f:a3:7b:fb:cc:77:3d:8a:70:d2:bd:37:b1: f5:87:41:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYBwfbmX/cbZjnSiP4wWQm6222LAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNDRTE3RkJBQTA2NTdGQ0Q5Qjk4NUExNTE0RDQwQjkz MDI3QTZDRDAeFw0yNjA3MjAxMTQwNTNaFw0yNjA3MjExNTA1NTNaMDMxMTAvBgNV BAMTKDkwRTJGMjM0MzM1NUUwMDVFNjc1RjEwMTE1NUI2RjAzNEQ0NDJCQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC43FdQqb4kPIZe8B/QNKayLLJp zFKiqiH4jMPdtL4yJJOaJxHCdHGur8ZM3Yi2H0JSJw0+8cSQ/LCU5P8n9yGLKQwI tdr2OMpUAiNVIhnHnfxsxf7FyuSsU8qOVB7KIey5bpfq32ehaAyGabHlRcZPBAwW nTUIpoeD03INCQGQRwDiwNp8nlffahf1rieUmyHn5eGKUcWV2b6HEtZ1rQvZmphb eq6PPGf6Im6cgEddLWrOUzjO652Lb9QWD9y/4nEZ7ZR0VkFuHiQAreF6gJP01DdB FiAzaWB3/Q+AcTcGocqejGiLGNVyY0e8MmUk4bu+AfhW1M6rgM+CsVvTFbQ/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkOLyNDNV4AXmdfEBFVtvA01EK6UwHwYDVR0j BBgwFoAUc84X+6oGV/zZuYWhUU1AuTAnps0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2M5OTQxYTQtMjhkMi00N2QxLTkxZTctYWNhYjU5MDg0NDYyLzAvNzNDRTE3RkJB QTA2NTdGQ0Q5Qjk4NUExNTE0RDQwQjkzMDI3QTZDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83M0NFMTdGQkFBMDY1N0ZDRDlCOTg1QTE1MTRENDBCOTMwMjdB NkNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2M5OTQxYTQtMjhkMi00N2QxLTkx ZTctYWNhYjU5MDg0NDYyLzAvNzNDRTE3RkJBQTA2NTdGQ0Q5Qjk4NUExNTE0RDQw QjkzMDI3QTZDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEBnZfaYi+hMhQT+MLg4t9aVcxqPy6E2mW4o rEK5Z9diOamANo6DBjC0NizDMa1/jEDkvnltkBh+LASpcOOaLz9vTvcOsmND7HYH hlU2l7pqIT2nYsQ4qqf1bVcRCu/u0aoRNjPxDy5YB2BerfkdPOkQfkTZff9YXsyJ xhXCrW1FLigvVQM0ncB6MI+VFgFyVFFsBgWOrt6WqI8CJr7G/g7CA5mjJWv3EEN4 PEIahocdIkjj5bYYsARc4wrlkRnhHEeTSOFd9ShgGqcLNr9amXqHbpTXcrUvdn+B 4G49JKmDrK8wEYm9ndMAsMz6LZWin6N7+8x3PYpw0r03sfWHQWg= -----END CERTIFICATE-----Generated at Tue Jul 21 06:52:59 2026 by rpki-client