$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/1/6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.mft File: 6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.mft (raw, json) Hash identifier: O5C12S4dgCi2eydftVGTGDv6oCtKAbsQ8bhG05QmA6A= Subject key identifier: 4F:E4:7C:AC:A6:40:2B:02:F7:A1:EA:53:18:B3:61:0E:84:69:4B:68 Authority key identifier: 6D:73:D7:EA:6C:01:64:8C:7B:FD:08:A6:E2:B3:46:85:A3:32:AF:AD Certificate issuer: /CN=6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD Certificate serial: 4A198192C831C47D05C8405CFCA12C7136D094A2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/1/6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 06:46:55 +0000 Manifest this update: Thu 17 Sep 2026 06:41:55 +0000 Manifest next update: Fri 18 Sep 2026 09:50:55 +0000 Files and hashes: 1: 6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.crl (hash: TZSXcItGzI3sLKNg6QdRyeEEZInAgZeOTyjFOqYoEmg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/1/6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.crl rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/1/6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:50:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:19:81:92:c8:31:c4:7d:05:c8:40:5c:fc:a1:2c:71:36:d0:94:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD Validity Not Before: Sep 17 06:41:55 2026 GMT Not After : Sep 18 09:50:55 2026 GMT Subject: CN=4FE47CACA6402B02F7A1EA5318B3610E84694B68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:92:39:38:89:0b:6e:d8:da:a4:8d:30:7c:f0: 04:d3:77:12:9f:f8:77:66:2b:52:6e:5b:5b:63:67: be:d6:c0:e8:a3:42:cc:f9:42:f7:2a:03:94:dd:e5: 72:d5:75:6f:98:8e:72:0b:4d:24:ca:f5:3c:41:75: 4e:2c:f4:6c:e1:5d:f7:2e:a7:35:06:c6:2a:0a:b4: 27:04:a0:1b:9d:fe:a7:1f:db:df:e5:12:c9:67:13: d0:c8:9a:59:b9:ab:9a:3e:1c:60:91:cd:0e:f9:e5: b7:dc:68:0c:17:d1:e6:8f:65:3f:9c:af:10:b9:01: a9:6b:86:fc:88:0c:68:53:98:f2:56:22:94:8c:7a: 75:27:bc:80:61:21:fe:04:da:3e:da:16:40:ad:ef: e5:8a:87:b1:92:85:db:de:ac:6d:f6:80:c2:d0:87: 28:0b:2a:ea:22:31:49:25:ec:31:69:70:37:27:e6: a7:86:64:67:9f:ba:6b:96:0e:e4:5e:58:4c:1b:b7: b7:42:5b:9a:f8:4e:9b:1e:1a:6d:b2:5a:00:92:43: 5f:0e:b2:2b:2b:9d:41:ef:c4:71:8e:c2:dd:e1:76: e9:ff:4e:f1:1a:6a:4e:b8:09:f7:05:ec:8f:8a:c9: 07:a2:e6:19:5e:95:a9:0d:b8:df:e4:81:33:a3:9c: d1:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:E4:7C:AC:A6:40:2B:02:F7:A1:EA:53:18:B3:61:0E:84:69:4B:68 X509v3 Authority Key Identifier: keyid:6D:73:D7:EA:6C:01:64:8C:7B:FD:08:A6:E2:B3:46:85:A3:32:AF:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/1/6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/1/6D73D7EA6C01648C7BFD08A6E2B34685A332AFAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:03:e5:11:cb:dc:24:01:1d:88:a4:82:bc:64:cd:f9:d3:ed: 55:a3:3e:a5:ba:9a:9b:b1:74:17:b3:cf:40:59:d4:a4:b3:1f: 4a:94:9b:7b:cd:a8:b2:6d:ec:1d:7b:d2:e5:a8:e3:0a:79:d8: 84:4d:12:99:88:90:be:b9:22:f4:ad:ab:66:8a:8f:01:9e:0c: dd:35:7e:3b:1b:2f:08:e1:75:e9:37:c2:41:fd:d6:35:55:45: 81:39:3e:94:b6:bc:64:63:9a:51:d0:8d:24:1e:cc:11:dd:aa: af:51:22:de:61:e2:26:7e:50:c0:5e:d0:21:58:d7:0b:a4:9b: b0:5d:08:bd:32:fb:71:bb:b9:3a:e5:ab:19:19:fb:a4:13:74: 3e:ea:bb:98:86:06:e4:ce:2f:b6:83:3f:c4:6d:47:19:08:6e: 8f:da:70:50:e6:a8:70:00:af:d6:6f:c0:d9:a7:c5:ea:3b:4b: 4a:c4:f6:3c:92:c2:cd:2e:02:71:a6:e3:03:1e:7f:7c:0b:f0: ed:99:d9:a2:97:d3:a3:cb:4a:51:6b:ba:9a:9a:a2:aa:67:4c: 74:8f:fa:73:84:d4:cd:9e:48:17:6f:2b:a4:54:b8:d4:1d:29: 17:0a:0e:7c:79:5e:3a:b9:67:a6:3f:b0:0a:9c:a2:85:06:6d: 22:4a:f9:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUShmBksgxxH0FyEBc/KEscTbQlKIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQ3M0Q3RUE2QzAxNjQ4QzdCRkQwOEE2RTJCMzQ2ODVB MzMyQUZBRDAeFw0yNjA5MTcwNjQxNTVaFw0yNjA5MTgwOTUwNTVaMDMxMTAvBgNV BAMTKDRGRTQ3Q0FDQTY0MDJCMDJGN0ExRUE1MzE4QjM2MTBFODQ2OTRCNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwkjk4iQtu2NqkjTB88ATTdxKf +HdmK1JuW1tjZ77WwOijQsz5QvcqA5Td5XLVdW+YjnILTSTK9TxBdU4s9GzhXfcu pzUGxioKtCcEoBud/qcf29/lEslnE9DImlm5q5o+HGCRzQ755bfcaAwX0eaPZT+c rxC5AalrhvyIDGhTmPJWIpSMenUnvIBhIf4E2j7aFkCt7+WKh7GShdverG32gMLQ hygLKuoiMUkl7DFpcDcn5qeGZGefumuWDuReWEwbt7dCW5r4TpseGm2yWgCSQ18O sisrnUHvxHGOwt3hdun/TvEaak64CfcF7I+KyQei5hlelakNuN/kgTOjnNGzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT+R8rKZAKwL3oepTGLNhDoRpS2gwHwYDVR0j BBgwFoAUbXPX6mwBZIx7/Qim4rNGhaMyr60wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmJlMjk5MDItZTBmNC00MjlhLTlhMjYtNDM5YjliZmVlNDg5LzEvNkQ3M0Q3RUE2 QzAxNjQ4QzdCRkQwOEE2RTJCMzQ2ODVBMzMyQUZBRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82RDczRDdFQTZDMDE2NDhDN0JGRDA4QTZFMkIzNDY4NUEzMzJB RkFELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmJlMjk5MDItZTBmNC00MjlhLTlh MjYtNDM5YjliZmVlNDg5LzEvNkQ3M0Q3RUE2QzAxNjQ4QzdCRkQwOEE2RTJCMzQ2 ODVBMzMyQUZBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABcD5RHL3CQBHYikgrxkzfnT7VWjPqW6mpux dBezz0BZ1KSzH0qUm3vNqLJt7B170uWo4wp52IRNEpmIkL65IvStq2aKjwGeDN01 fjsbLwjhdek3wkH91jVVRYE5PpS2vGRjmlHQjSQezBHdqq9RIt5h4iZ+UMBe0CFY 1wukm7BdCL0y+3G7uTrlqxkZ+6QTdD7qu5iGBuTOL7aDP8RtRxkIbo/acFDmqHAA r9ZvwNmnxeo7S0rE9jySws0uAnGm4wMef3wL8O2Z2aKX06PLSlFrupqaoqpnTHSP +nOE1M2eSBdvK6RUuNQdKRcKDnx5Xjq5Z6Y/sAqcooUGbSJK+R4= -----END CERTIFICATE-----Generated at Thu Sep 17 10:44:47 2026 by rpki-client