$ rpki-client -vvvf rpki-rsync.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/73DBC921D8D2EE0A4ACCEA19DC9357F5DE4BE3E4.mft File: 73DBC921D8D2EE0A4ACCEA19DC9357F5DE4BE3E4.mft (raw, json) Hash identifier: tFh9kkH4BdJ9kpjiAQ5juog/L9iur3FctwXYNRIjRd4= Subject key identifier: 96:1E:B9:BC:13:69:66:FC:16:E7:3D:68:C6:4A:5D:CB:2B:D9:04:1C Authority key identifier: 73:DB:C9:21:D8:D2:EE:0A:4A:CC:EA:19:DC:93:57:F5:DE:4B:E3:E4 Certificate issuer: /CN=73DBC921D8D2EE0A4ACCEA19DC9357F5DE4BE3E4 Certificate serial: 6B0ABB29731B4485C49B6FA39A4824C3646D1532 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/73DBC921D8D2EE0A4ACCEA19DC9357F5DE4BE3E4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/73DBC921D8D2EE0A4ACCEA19DC9357F5DE4BE3E4.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 16:49:57 +0000 Manifest this update: Wed 16 Sep 2026 16:44:57 +0000 Manifest next update: Thu 17 Sep 2026 17:42:57 +0000 Files and hashes: 1: 73DBC921D8D2EE0A4ACCEA19DC9357F5DE4BE3E4.crl (hash: qaCVzzEa0TkohG/2zc2Laj97RFTp7mnMDp+Fnp6Ewg4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/73DBC921D8D2EE0A4ACCEA19DC9357F5DE4BE3E4.crl rsync://rpki-rsync.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/73DBC921D8D2EE0A4ACCEA19DC9357F5DE4BE3E4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/73DBC921D8D2EE0A4ACCEA19DC9357F5DE4BE3E4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 17:42:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:0a:bb:29:73:1b:44:85:c4:9b:6f:a3:9a:48:24:c3:64:6d:15:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73DBC921D8D2EE0A4ACCEA19DC9357F5DE4BE3E4 Validity Not Before: Sep 16 16:44:57 2026 GMT Not After : Sep 17 17:42:57 2026 GMT Subject: CN=961EB9BC136966FC16E73D68C64A5DCB2BD9041C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:02:49:13:38:d8:61:9b:76:df:e1:a7:a5:0b: e8:ff:68:ba:6c:33:65:3b:72:eb:70:24:8b:f8:4e: 6f:91:85:5d:51:5f:4f:ae:ec:e6:37:7f:98:46:58: 0e:4e:0a:f3:a0:cc:5f:e3:0f:72:84:4b:99:f7:ff: 11:1f:d9:57:24:2d:14:4f:2a:f9:2c:54:d6:47:e5: 03:18:f2:91:ea:bb:5a:65:d5:a3:a7:17:ae:ff:da: 29:ea:54:62:f1:f5:22:ad:6f:e4:0b:c2:01:0e:d7: 16:c0:5f:96:c8:ef:c0:7c:8f:d6:42:df:14:1b:cb: 4f:ba:82:58:c4:23:c6:81:11:e0:63:9d:29:2b:3b: 88:7c:7e:54:19:bf:d1:b6:0f:c9:7e:72:82:75:b3: b8:89:8d:fe:8c:9e:b4:b7:a1:ee:e7:f7:f4:e5:61: 79:6d:82:62:00:c9:e0:b1:dd:1e:0d:3b:8f:a5:a9: 82:51:6b:5f:0a:2a:71:2e:c7:46:3c:fd:3d:80:b2: 2f:59:ef:40:0b:84:9f:89:18:52:01:25:72:1f:7b: 3b:43:b4:56:d5:d1:de:50:89:d9:68:85:c6:15:5c: 4d:99:5c:95:4d:d6:44:eb:fa:04:3b:c6:da:a4:e2: a0:32:e8:5f:18:fb:e6:54:dd:2d:60:5a:46:15:94: 06:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:1E:B9:BC:13:69:66:FC:16:E7:3D:68:C6:4A:5D:CB:2B:D9:04:1C X509v3 Authority Key Identifier: keyid:73:DB:C9:21:D8:D2:EE:0A:4A:CC:EA:19:DC:93:57:F5:DE:4B:E3:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/73DBC921D8D2EE0A4ACCEA19DC9357F5DE4BE3E4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/73DBC921D8D2EE0A4ACCEA19DC9357F5DE4BE3E4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/73DBC921D8D2EE0A4ACCEA19DC9357F5DE4BE3E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:97:a5:c0:89:57:01:ed:32:f0:69:e4:24:a8:0f:fd:b5:a1: 3d:61:74:37:67:2d:b9:9b:a0:2a:5f:b5:96:25:0e:8d:ee:cf: 7f:02:93:c1:24:7a:0e:a3:7a:02:2f:19:58:b6:1a:ba:4f:14: e0:e4:bb:54:2c:bf:39:5c:68:5c:8c:34:40:eb:8a:e2:6b:2b: c2:64:d5:6d:af:74:1d:78:c9:de:bd:4a:e3:d6:48:98:47:ec: 9e:a2:17:4e:3a:27:a6:6b:00:b2:3c:7d:95:b3:0d:b0:c6:3d: 70:36:46:73:ca:be:84:bf:d9:15:43:2e:c6:54:89:2b:17:c1: 1e:5c:b3:45:86:96:61:c3:aa:86:98:c8:b2:63:8f:13:9a:b7: 8e:2d:d5:5a:ef:d8:bb:05:d5:84:c6:76:9a:91:62:ee:54:6d: 53:b7:3c:59:23:04:cf:41:5f:7c:1d:13:3e:16:62:c0:7c:7a: 61:f4:2f:87:59:c8:80:95:25:91:2c:c6:35:5f:ec:df:6f:21: ab:5f:37:60:6d:07:7e:f8:1d:dd:b1:ed:10:06:a6:d6:67:a5: 27:34:cc:b7:9a:ae:13:88:6a:29:10:fc:26:90:22:06:57:22: e9:87:d1:8c:34:83:a1:be:d1:db:8d:dc:14:da:ac:e1:73:50: e2:6c:b8:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUawq7KXMbRIXEm2+jmkgkw2RtFTIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNEQkM5MjFEOEQyRUUwQTRBQ0NFQTE5REM5MzU3RjVE RTRCRTNFNDAeFw0yNjA5MTYxNjQ0NTdaFw0yNjA5MTcxNzQyNTdaMDMxMTAvBgNV BAMTKDk2MUVCOUJDMTM2OTY2RkMxNkU3M0Q2OEM2NEE1RENCMkJEOTA0MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaAkkTONhhm3bf4aelC+j/aLps M2U7cutwJIv4Tm+RhV1RX0+u7OY3f5hGWA5OCvOgzF/jD3KES5n3/xEf2VckLRRP KvksVNZH5QMY8pHqu1pl1aOnF67/2inqVGLx9SKtb+QLwgEO1xbAX5bI78B8j9ZC 3xQby0+6gljEI8aBEeBjnSkrO4h8flQZv9G2D8l+coJ1s7iJjf6MnrS3oe7n9/Tl YXltgmIAyeCx3R4NO4+lqYJRa18KKnEux0Y8/T2Asi9Z70ALhJ+JGFIBJXIfeztD tFbV0d5QidlohcYVXE2ZXJVN1kTr+gQ7xtqk4qAy6F8Y++ZU3S1gWkYVlAY1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlh65vBNpZvwW5z1oxkpdyyvZBBwwHwYDVR0j BBgwFoAUc9vJIdjS7gpKzOoZ3JNX9d5L4+QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTE4MjgwNjctZTdjMS00OTY0LTg0MjgtNTk5MDMzZDc0Mjk2LzAvNzNEQkM5MjFE OEQyRUUwQTRBQ0NFQTE5REM5MzU3RjVERTRCRTNFNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83M0RCQzkyMUQ4RDJFRTBBNEFDQ0VBMTlEQzkzNTdGNURFNEJF M0U0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTE4MjgwNjctZTdjMS00OTY0LTg0 MjgtNTk5MDMzZDc0Mjk2LzAvNzNEQkM5MjFEOEQyRUUwQTRBQ0NFQTE5REM5MzU3 RjVERTRCRTNFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADOXpcCJVwHtMvBp5CSoD/21oT1hdDdnLbmb oCpftZYlDo3uz38Ck8Ekeg6jegIvGVi2GrpPFODku1QsvzlcaFyMNEDriuJrK8Jk 1W2vdB14yd69SuPWSJhH7J6iF046J6ZrALI8fZWzDbDGPXA2RnPKvoS/2RVDLsZU iSsXwR5cs0WGlmHDqoaYyLJjjxOat44t1Vrv2LsF1YTGdpqRYu5UbVO3PFkjBM9B X3wdEz4WYsB8emH0L4dZyICVJZEsxjVf7N9vIatfN2BtB374Hd2x7RAGptZnpSc0 zLearhOIaikQ/CaQIgZXIumH0Yw0g6G+0duN3BTarOFzUOJsuGs= -----END CERTIFICATE-----Generated at Thu Sep 17 10:59:20 2026 by rpki-client