$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/73CE17FBAA0657FCD9B985A1514D40B93027A6CD.mft File: 73CE17FBAA0657FCD9B985A1514D40B93027A6CD.mft (raw, json) Hash identifier: sfkAQzhLfGMmCpy1S+BtlRVuJe63YaXirn8wT50D5u8= Subject key identifier: 46:49:E4:07:04:79:56:88:EC:39:53:73:07:C7:43:21:CA:D3:D7:9F Authority key identifier: 73:CE:17:FB:AA:06:57:FC:D9:B9:85:A1:51:4D:40:B9:30:27:A6:CD Certificate issuer: /CN=73CE17FBAA0657FCD9B985A1514D40B93027A6CD Certificate serial: 3484CFFA66A19BB229F8BF413D238ADA649F89BE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/73CE17FBAA0657FCD9B985A1514D40B93027A6CD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/73CE17FBAA0657FCD9B985A1514D40B93027A6CD.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 02:52:01 +0000 Manifest this update: Thu 17 Sep 2026 02:47:01 +0000 Manifest next update: Fri 18 Sep 2026 05:55:01 +0000 Files and hashes: 1: 3138302e3133312e3132392e302f32342d3234203d3e20313532303238.roa (hash: qr6xizp3xlx6Xnc3nJpz1BpNSxX/MfpwLyE6uXtLLNM=) 2: 73CE17FBAA0657FCD9B985A1514D40B93027A6CD.crl (hash: qbkOevp6GvbqJop7164ZiHI+XHuivpkwBlgb75rhSag=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/73CE17FBAA0657FCD9B985A1514D40B93027A6CD.crl rsync://rpki-rsync.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/73CE17FBAA0657FCD9B985A1514D40B93027A6CD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/73CE17FBAA0657FCD9B985A1514D40B93027A6CD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:55:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:84:cf:fa:66:a1:9b:b2:29:f8:bf:41:3d:23:8a:da:64:9f:89:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73CE17FBAA0657FCD9B985A1514D40B93027A6CD Validity Not Before: Sep 17 02:47:01 2026 GMT Not After : Sep 18 05:55:01 2026 GMT Subject: CN=4649E40704795688EC39537307C74321CAD3D79F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:71:1c:77:61:ab:7c:d1:a6:ad:ac:4d:30:e2: e4:ac:9c:85:43:8b:c3:63:4c:c5:6b:62:b6:01:19: 5f:75:47:5c:01:6f:ab:4d:67:ad:21:c6:59:2e:45: 23:08:52:9f:15:6a:99:27:f7:c1:6a:79:38:d5:ee: 94:87:56:07:47:ae:8d:12:71:fe:90:57:b0:f7:f5: 81:5e:35:d5:c8:c3:4f:d1:05:3c:2e:bc:5d:8b:0b: 90:ef:34:ff:27:e7:14:de:29:00:bb:91:7b:80:83: dd:78:e2:47:72:4d:ce:39:7d:4f:ec:c6:8b:ef:14: 31:7a:5b:0c:9b:91:bb:18:c0:9c:a0:8b:87:26:55: 9a:5e:ca:6b:79:53:86:41:12:af:2c:a2:9b:11:ec: f5:93:aa:e5:fb:21:cd:52:84:0c:75:23:c2:a5:34: 33:f5:24:80:49:b4:9d:61:8c:cb:af:16:82:65:d0: 71:b8:db:70:e2:eb:94:71:aa:3b:99:ce:15:4f:40: 8a:0f:9b:d6:72:95:c1:21:90:0e:a8:fd:6b:a6:25: 29:44:3c:33:1e:e5:82:42:29:5d:b0:65:ad:6b:64: 9f:00:0a:e3:89:3c:26:8c:de:e5:aa:f5:fd:e5:0a: 2a:6d:b0:af:86:98:bf:e0:f9:97:71:fe:aa:46:39: a3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:49:E4:07:04:79:56:88:EC:39:53:73:07:C7:43:21:CA:D3:D7:9F X509v3 Authority Key Identifier: keyid:73:CE:17:FB:AA:06:57:FC:D9:B9:85:A1:51:4D:40:B9:30:27:A6:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/73CE17FBAA0657FCD9B985A1514D40B93027A6CD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/73CE17FBAA0657FCD9B985A1514D40B93027A6CD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/73CE17FBAA0657FCD9B985A1514D40B93027A6CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:d1:b8:28:cf:be:82:86:89:64:69:b0:65:3b:bc:98:9f:5c: 2b:b4:9c:c9:fe:cf:e8:c1:85:d0:f2:3f:f9:8b:e9:0c:7e:3e: 4c:81:81:1a:0f:6b:8e:d6:8c:d7:6f:fa:70:5c:06:7d:57:67: b2:d3:34:9c:2a:a2:74:89:b1:2f:59:87:80:ef:d3:52:27:97: 16:a2:58:48:9f:63:91:3b:3a:6c:e8:60:1b:97:bd:41:1c:3a: 27:39:11:df:f8:d8:b1:ea:97:3b:38:dd:f8:64:e5:ec:43:f0: 09:4b:ab:d9:54:29:41:5c:b2:c8:d2:34:09:86:a5:4d:be:f2: a4:36:ee:46:b5:61:fa:f1:d6:25:ba:93:f1:d7:3a:27:5a:a2: 32:27:1a:bc:91:c4:0a:bc:a3:a8:c0:b4:59:47:41:72:83:b2: 76:ba:ac:3b:3d:a8:7e:30:bc:ae:bf:99:0d:63:c0:85:c4:0d: 70:5c:1e:12:cf:56:dc:e1:64:c8:a5:13:59:fe:d4:cf:62:fe: e9:d3:2c:c6:ec:6f:49:53:97:cc:1d:d8:5e:60:70:49:c2:58: d8:35:f8:a9:13:27:a3:80:d4:c7:5f:f5:3d:9a:11:a1:df:7a: c3:7e:ba:e2:ce:82:99:fe:e9:5f:1b:c3:01:0e:15:52:1d:9b: 67:18:40:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNITP+mahm7Ip+L9BPSOK2mSfib4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNDRTE3RkJBQTA2NTdGQ0Q5Qjk4NUExNTE0RDQwQjkz MDI3QTZDRDAeFw0yNjA5MTcwMjQ3MDFaFw0yNjA5MTgwNTU1MDFaMDMxMTAvBgNV BAMTKDQ2NDlFNDA3MDQ3OTU2ODhFQzM5NTM3MzA3Qzc0MzIxQ0FEM0Q3OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0cRx3Yat80aatrE0w4uSsnIVD i8NjTMVrYrYBGV91R1wBb6tNZ60hxlkuRSMIUp8Vapkn98FqeTjV7pSHVgdHro0S cf6QV7D39YFeNdXIw0/RBTwuvF2LC5DvNP8n5xTeKQC7kXuAg9144kdyTc45fU/s xovvFDF6WwybkbsYwJygi4cmVZpeymt5U4ZBEq8sopsR7PWTquX7Ic1ShAx1I8Kl NDP1JIBJtJ1hjMuvFoJl0HG423Di65RxqjuZzhVPQIoPm9ZylcEhkA6o/WumJSlE PDMe5YJCKV2wZa1rZJ8ACuOJPCaM3uWq9f3lCiptsK+GmL/g+Zdx/qpGOaPtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURknkBwR5VojsOVNzB8dDIcrT158wHwYDVR0j BBgwFoAUc84X+6oGV/zZuYWhUU1AuTAnps0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2M5OTQxYTQtMjhkMi00N2QxLTkxZTctYWNhYjU5MDg0NDYyLzAvNzNDRTE3RkJB QTA2NTdGQ0Q5Qjk4NUExNTE0RDQwQjkzMDI3QTZDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83M0NFMTdGQkFBMDY1N0ZDRDlCOTg1QTE1MTRENDBCOTMwMjdB NkNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2M5OTQxYTQtMjhkMi00N2QxLTkx ZTctYWNhYjU5MDg0NDYyLzAvNzNDRTE3RkJBQTA2NTdGQ0Q5Qjk4NUExNTE0RDQw QjkzMDI3QTZDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABHRuCjPvoKGiWRpsGU7vJifXCu0nMn+z+jB hdDyP/mL6Qx+PkyBgRoPa47WjNdv+nBcBn1XZ7LTNJwqonSJsS9Zh4Dv01Inlxai WEifY5E7OmzoYBuXvUEcOic5Ed/42LHqlzs43fhk5exD8AlLq9lUKUFcssjSNAmG pU2+8qQ27ka1Yfrx1iW6k/HXOidaojInGryRxAq8o6jAtFlHQXKDsna6rDs9qH4w vK6/mQ1jwIXEDXBcHhLPVtzhZMilE1n+1M9i/unTLMbsb0lTl8wd2F5gcEnCWNg1 +KkTJ6OA1Mdf9T2aEaHfesN+uuLOgpn+6V8bwwEOFVIdm2cYQNI= -----END CERTIFICATE-----Generated at Thu Sep 17 11:31:22 2026 by rpki-client