$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.mft File: 4D73AF7813A396ABD7BDE23A979935F7C2E168E7.mft (raw, json) Hash identifier: wIfD37siBgTPxmpfm4yFQWTVCgqNITQ1dMkEHYL90Lc= Subject key identifier: 1C:09:78:6F:D7:C3:97:39:6C:88:96:D4:2B:CC:32:9E:E4:8E:13:85 Authority key identifier: 4D:73:AF:78:13:A3:96:AB:D7:BD:E2:3A:97:99:35:F7:C2:E1:68:E7 Certificate issuer: /CN=4D73AF7813A396ABD7BDE23A979935F7C2E168E7 Certificate serial: 4E085BC4514A6F7D5281A93E77FB43B49DFCE91C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 06:46:57 +0000 Manifest this update: Thu 17 Sep 2026 06:41:57 +0000 Manifest next update: Fri 18 Sep 2026 10:41:57 +0000 Files and hashes: 1: 4D73AF7813A396ABD7BDE23A979935F7C2E168E7.crl (hash: Bu6cCyep8cTOZ+sIlrnS60pGvbBVNo06Rmz8Pg94y2g=) 2: 323430333a333163303a3a2f33322d3332203d3e20313337333736.roa (hash: 889d8hZgsoEONtwHkfZfmAhOTIvpzaLSt/rrvU4dZ6Y=) 3: 3130332e3131382e3132342e302f32322d3234203d3e20313337333736.roa (hash: ZJlUpKOWZJT4nAWuCuBDhZRS/ZCGAJEy+RmXu9xZXqc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.crl rsync://rpki-rsync.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:08:5b:c4:51:4a:6f:7d:52:81:a9:3e:77:fb:43:b4:9d:fc:e9:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D73AF7813A396ABD7BDE23A979935F7C2E168E7 Validity Not Before: Sep 17 06:41:57 2026 GMT Not After : Sep 18 10:41:57 2026 GMT Subject: CN=1C09786FD7C397396C8896D42BCC329EE48E1385 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:81:a3:c1:1f:9c:f6:ad:6f:92:ec:b7:b3:8f: f9:0c:08:81:17:a0:13:7d:49:5e:de:45:91:b7:bc: f1:ee:2c:6d:e2:5e:0d:f7:97:81:8b:66:26:ee:75: bc:f5:68:62:60:86:07:73:d3:32:0e:4f:33:f8:f4: 2d:60:99:7e:6c:08:0e:55:1c:cd:38:68:8d:92:33: 0b:55:ab:3c:4b:cb:ad:e6:0b:e7:25:7e:5c:9d:bc: 22:35:11:0a:72:cc:58:42:24:74:46:fd:a3:08:73: 5f:8e:dc:8d:a0:ae:25:35:25:81:b7:6a:7e:c8:31: e2:a8:bf:1e:89:ab:b2:ad:2f:21:ee:cd:d2:fe:97: 66:f6:2a:70:bd:db:e7:a9:fd:51:89:9b:74:56:4c: 53:46:28:c1:aa:63:82:43:37:02:c5:ab:5d:0f:12: 62:a0:c3:94:7b:dd:9b:0a:3a:ae:2e:0d:6b:c5:99: 2d:ed:d1:26:97:93:b2:5a:21:62:8e:58:06:ee:04: fb:12:99:2b:72:51:73:50:97:6e:7a:dc:50:fd:44: e2:3d:06:fe:7b:3f:1a:72:6e:ec:84:40:33:29:50: 03:b9:9a:6b:7a:92:76:a4:d4:6b:7b:60:e8:8d:dd: 6c:f9:d7:c3:c8:59:d5:d3:2c:78:4b:3a:a8:a3:3b: 0e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:09:78:6F:D7:C3:97:39:6C:88:96:D4:2B:CC:32:9E:E4:8E:13:85 X509v3 Authority Key Identifier: keyid:4D:73:AF:78:13:A3:96:AB:D7:BD:E2:3A:97:99:35:F7:C2:E1:68:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/4D73AF7813A396ABD7BDE23A979935F7C2E168E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:ae:33:a9:90:d9:69:7f:29:9c:52:0a:48:0f:e7:ec:01:7c: 3c:92:50:34:07:06:41:2f:36:ec:b6:21:62:95:ba:dc:3e:8d: d3:3e:15:b1:50:cc:6c:e9:ab:05:08:83:1a:06:5a:b0:d3:55: a2:8c:22:bf:32:8e:3e:0c:6d:69:d7:d1:39:0a:44:34:ba:1c: 7e:b8:b3:ba:61:d5:99:6e:f4:b0:17:98:8f:be:fb:80:da:0e: 82:42:64:48:df:28:69:de:ea:13:ad:c8:78:71:19:0f:8d:01: 55:0c:08:a0:ff:8d:43:83:25:f9:80:ad:9b:f9:ac:40:eb:2b: e7:99:51:2f:c1:d2:34:bf:2c:fb:3f:3c:54:7c:a4:68:f7:78: c8:73:8b:3e:29:06:4a:0a:21:48:27:6e:3d:cc:78:68:3b:9e: fa:a5:02:34:d8:54:19:9d:7b:0e:0c:a5:ea:14:2b:8b:a8:fc: be:13:8e:49:27:72:04:c3:70:a9:72:49:41:7e:dd:f2:27:e5: 98:53:2d:ab:9b:39:7d:f2:f8:f0:9b:a8:c2:b3:3e:2d:34:01: 85:ad:8b:95:f7:dd:02:ea:4c:b7:3a:98:5f:b3:b6:34:55:0c: dc:24:95:81:96:9d:fa:b7:65:44:4e:b6:ef:e0:eb:89:e3:d2: 8e:90:1a:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTghbxFFKb31Sgak+d/tDtJ386RwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ3M0FGNzgxM0EzOTZBQkQ3QkRFMjNBOTc5OTM1RjdD MkUxNjhFNzAeFw0yNjA5MTcwNjQxNTdaFw0yNjA5MTgxMDQxNTdaMDMxMTAvBgNV BAMTKDFDMDk3ODZGRDdDMzk3Mzk2Qzg4OTZENDJCQ0MzMjlFRTQ4RTEzODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCggaPBH5z2rW+S7Lezj/kMCIEX oBN9SV7eRZG3vPHuLG3iXg33l4GLZibudbz1aGJghgdz0zIOTzP49C1gmX5sCA5V HM04aI2SMwtVqzxLy63mC+clflydvCI1EQpyzFhCJHRG/aMIc1+O3I2griU1JYG3 an7IMeKovx6Jq7KtLyHuzdL+l2b2KnC92+ep/VGJm3RWTFNGKMGqY4JDNwLFq10P EmKgw5R73ZsKOq4uDWvFmS3t0SaXk7JaIWKOWAbuBPsSmStyUXNQl2563FD9ROI9 Bv57PxpybuyEQDMpUAO5mmt6knak1Gt7YOiN3Wz518PIWdXTLHhLOqijOw6zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHAl4b9fDlzlsiJbUK8wynuSOE4UwHwYDVR0j BBgwFoAUTXOveBOjlqvXveI6l5k198LhaOcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQyYTViNTEtYmMwMC00ZDZiLTg3NjEtYzdkMGQzZjZkZTEyLzAvNEQ3M0FGNzgx M0EzOTZBQkQ3QkRFMjNBOTc5OTM1RjdDMkUxNjhFNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RDczQUY3ODEzQTM5NkFCRDdCREUyM0E5Nzk5MzVGN0MyRTE2 OEU3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQyYTViNTEtYmMwMC00ZDZiLTg3 NjEtYzdkMGQzZjZkZTEyLzAvNEQ3M0FGNzgxM0EzOTZBQkQ3QkRFMjNBOTc5OTM1 RjdDMkUxNjhFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGKuM6mQ2Wl/KZxSCkgP5+wBfDySUDQHBkEv Nuy2IWKVutw+jdM+FbFQzGzpqwUIgxoGWrDTVaKMIr8yjj4MbWnX0TkKRDS6HH64 s7ph1Zlu9LAXmI+++4DaDoJCZEjfKGne6hOtyHhxGQ+NAVUMCKD/jUODJfmArZv5 rEDrK+eZUS/B0jS/LPs/PFR8pGj3eMhziz4pBkoKIUgnbj3MeGg7nvqlAjTYVBmd ew4MpeoUK4uo/L4TjkkncgTDcKlySUF+3fIn5ZhTLaubOX3y+PCbqMKzPi00AYWt i5X33QLqTLc6mF+ztjRVDNwklYGWnfq3ZUROtu/g64nj0o6QGpg= -----END CERTIFICATE-----Generated at Thu Sep 17 13:50:11 2026 by rpki-client