$ rpki-client -vvf rpki-rsync.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/73CE17FBAA0657FCD9B985A1514D40B93027A6CD.mft File: 73CE17FBAA0657FCD9B985A1514D40B93027A6CD.mft (raw, json) Hash identifier: eG25MBI2Sx+unqCYqMPqNDGV7KqJPrgDUsL7Hmd4kSo= Subject key identifier: B6:3A:BE:78:07:48:CA:33:8E:7F:03:6B:43:26:CB:F9:48:7B:28:6B Authority key identifier: 73:CE:17:FB:AA:06:57:FC:D9:B9:85:A1:51:4D:40:B9:30:27:A6:CD Certificate issuer: /CN=73CE17FBAA0657FCD9B985A1514D40B93027A6CD Certificate serial: 6EB6E9F43DB075B24C3A7454BA23A0B92040BEF7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/73CE17FBAA0657FCD9B985A1514D40B93027A6CD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/73CE17FBAA0657FCD9B985A1514D40B93027A6CD.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 10:22:58 +0000 Manifest this update: Tue 02 Jun 2026 10:17:58 +0000 Manifest next update: Wed 03 Jun 2026 12:59:58 +0000 Files and hashes: 1: 73CE17FBAA0657FCD9B985A1514D40B93027A6CD.crl (hash: fl0q6rbwvrdmeqLNdsD4BanK7usvulGLDpuK7Ki0kg4=) 2: 3138302e3133312e3132392e302f32342d3234203d3e20313532303238.roa (hash: qr6xizp3xlx6Xnc3nJpz1BpNSxX/MfpwLyE6uXtLLNM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/73CE17FBAA0657FCD9B985A1514D40B93027A6CD.crl rsync://rpki-rsync.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/73CE17FBAA0657FCD9B985A1514D40B93027A6CD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/73CE17FBAA0657FCD9B985A1514D40B93027A6CD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 12:59:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:b6:e9:f4:3d:b0:75:b2:4c:3a:74:54:ba:23:a0:b9:20:40:be:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73CE17FBAA0657FCD9B985A1514D40B93027A6CD Validity Not Before: Jun 2 10:17:58 2026 GMT Not After : Jun 3 12:59:58 2026 GMT Subject: CN=B63ABE780748CA338E7F036B4326CBF9487B286B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d3:13:aa:60:27:13:17:b9:42:e4:e5:f8:43: 52:77:ca:c7:84:af:86:f1:4c:4d:3c:3a:20:fe:fb: 41:18:c3:38:50:29:64:4c:b7:4b:0e:af:2d:ab:4b: ca:33:bc:26:12:2b:52:78:0a:0f:31:41:64:ea:91: df:0c:1f:cd:15:db:f5:22:13:61:cd:e2:15:46:b4: a1:55:07:ce:ca:0a:7c:ce:b4:51:8e:d1:66:fd:e7: 22:ab:f6:30:c2:6b:68:fa:8e:18:fb:29:09:ef:82: 5b:9d:41:a5:0d:a8:41:3e:95:2e:0c:19:3f:8a:52: 2e:a2:d1:da:91:05:73:92:dd:3e:63:12:47:ef:8a: fc:a4:bc:a3:4a:c5:2e:7b:ab:ec:bd:a7:44:83:9d: d9:58:cc:0d:23:c2:cc:16:bf:f1:1a:3f:8f:e0:55: e7:2b:18:7c:9b:6d:50:98:9f:b2:36:28:88:12:21: 7b:1e:27:34:ed:de:0e:59:fa:8f:05:49:c6:db:4f: 0a:6f:69:78:22:06:6d:6d:a8:cd:32:3a:f8:eb:76: bf:89:43:be:55:97:43:31:2e:47:12:ce:7f:93:ab: e8:94:74:a4:ec:85:fe:d2:55:7b:c2:33:6f:c1:11: 55:4f:2d:2c:fd:0f:ef:ef:59:28:02:21:44:8a:b0: 88:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:3A:BE:78:07:48:CA:33:8E:7F:03:6B:43:26:CB:F9:48:7B:28:6B X509v3 Authority Key Identifier: keyid:73:CE:17:FB:AA:06:57:FC:D9:B9:85:A1:51:4D:40:B9:30:27:A6:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/73CE17FBAA0657FCD9B985A1514D40B93027A6CD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/73CE17FBAA0657FCD9B985A1514D40B93027A6CD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/73CE17FBAA0657FCD9B985A1514D40B93027A6CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:48:7a:cc:e5:5e:cf:94:90:98:23:f4:64:ea:11:b8:55:7f: 6a:8f:26:00:1a:08:1b:bf:63:fe:b1:bf:f9:40:47:9a:69:86: 69:ea:d7:a1:f3:60:0d:ed:36:c2:ba:8a:37:3c:24:bc:9a:7a: b7:c3:d8:51:51:82:f0:51:c1:0c:fd:35:c3:9a:f6:1c:51:4e: bd:ba:4e:f0:30:7e:6a:17:85:b4:4c:76:ba:96:f2:ed:3b:f0: 6b:92:ed:e6:d7:1e:05:7f:64:43:7b:b1:7d:1c:03:c3:52:c8: 78:ce:d8:b0:d3:89:74:93:12:06:93:05:d4:95:0f:83:8e:0a: 87:63:1e:3b:cb:ad:43:18:6b:77:2e:dc:e5:2b:0e:dd:b5:49: 1e:b6:df:44:0d:78:52:ee:c4:cb:bf:80:06:fb:cb:e2:6c:c0: 9f:40:8d:ea:03:bb:3a:dd:9e:1d:46:cd:75:1c:e0:d6:f2:4d: c2:92:f9:c4:70:d7:ad:af:35:ca:04:74:3b:09:21:40:41:f0: 0a:7d:64:b1:f1:41:8e:2a:40:1c:e6:15:93:46:e8:3d:48:86: ac:72:23:81:62:b0:d8:fd:c2:a1:14:2d:c2:7f:be:89:70:1d: 28:49:2f:11:6e:a7:f3:0a:0b:5c:9d:5d:8b:14:0b:91:bc:cb: af:6c:61:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbrbp9D2wdbJMOnRUuiOguSBAvvcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNDRTE3RkJBQTA2NTdGQ0Q5Qjk4NUExNTE0RDQwQjkz MDI3QTZDRDAeFw0yNjA2MDIxMDE3NThaFw0yNjA2MDMxMjU5NThaMDMxMTAvBgNV BAMTKEI2M0FCRTc4MDc0OENBMzM4RTdGMDM2QjQzMjZDQkY5NDg3QjI4NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF0xOqYCcTF7lC5OX4Q1J3yseE r4bxTE08OiD++0EYwzhQKWRMt0sOry2rS8ozvCYSK1J4Cg8xQWTqkd8MH80V2/Ui E2HN4hVGtKFVB87KCnzOtFGO0Wb95yKr9jDCa2j6jhj7KQnvgludQaUNqEE+lS4M GT+KUi6i0dqRBXOS3T5jEkfvivykvKNKxS57q+y9p0SDndlYzA0jwswWv/EaP4/g VecrGHybbVCYn7I2KIgSIXseJzTt3g5Z+o8FScbbTwpvaXgiBm1tqM0yOvjrdr+J Q75Vl0MxLkcSzn+Tq+iUdKTshf7SVXvCM2/BEVVPLSz9D+/vWSgCIUSKsIgpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtjq+eAdIyjOOfwNrQybL+Uh7KGswHwYDVR0j BBgwFoAUc84X+6oGV/zZuYWhUU1AuTAnps0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2M5OTQxYTQtMjhkMi00N2QxLTkxZTctYWNhYjU5MDg0NDYyLzAvNzNDRTE3RkJB QTA2NTdGQ0Q5Qjk4NUExNTE0RDQwQjkzMDI3QTZDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83M0NFMTdGQkFBMDY1N0ZDRDlCOTg1QTE1MTRENDBCOTMwMjdB NkNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2M5OTQxYTQtMjhkMi00N2QxLTkx ZTctYWNhYjU5MDg0NDYyLzAvNzNDRTE3RkJBQTA2NTdGQ0Q5Qjk4NUExNTE0RDQw QjkzMDI3QTZDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFRIeszlXs+UkJgj9GTqEbhVf2qPJgAaCBu/ Y/6xv/lAR5pphmnq16HzYA3tNsK6ijc8JLyaerfD2FFRgvBRwQz9NcOa9hxRTr26 TvAwfmoXhbRMdrqW8u078GuS7ebXHgV/ZEN7sX0cA8NSyHjO2LDTiXSTEgaTBdSV D4OOCodjHjvLrUMYa3cu3OUrDt21SR6230QNeFLuxMu/gAb7y+JswJ9AjeoDuzrd nh1GzXUc4NbyTcKS+cRw162vNcoEdDsJIUBB8Ap9ZLHxQY4qQBzmFZNG6D1Ihqxy I4FisNj9wqEULcJ/volwHShJLxFup/MKC1ydXYsUC5G8y69sYW8= -----END CERTIFICATE-----Generated at Wed Jun 3 04:19:04 2026 by rpki-client