$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a72bb871-018d-4d21-9913-fc946c38794f/0/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.mft File: 73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.mft (raw, json) Hash identifier: OnTYgTCRWR++KFZS4HjjKxxYUh2pr/e2QuTYBlmCMnA= Subject key identifier: 81:D2:FB:88:90:DC:9D:45:58:89:47:4C:44:0B:8F:E0:D8:D5:F3:9B Authority key identifier: 73:AE:BE:E3:24:9F:D8:B6:A7:DB:F6:0C:78:A9:8A:E3:8A:21:81:FD Certificate issuer: /CN=73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD Certificate serial: 5F33F638D47E0C18BD9C7BEE43D0E63FF2CFF9AB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a72bb871-018d-4d21-9913-fc946c38794f/0/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.mft Manifest number: B8 Signing time: Fri 18 Sep 2026 08:33:56 +0000 Manifest this update: Fri 18 Sep 2026 08:28:56 +0000 Manifest next update: Sat 19 Sep 2026 09:54:56 +0000 Files and hashes: 1: 73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.crl (hash: 8WoVsK0jsW1kSTW3MgxZEbsjZNQFoHp0sBphZa91p3s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a72bb871-018d-4d21-9913-fc946c38794f/0/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.crl rsync://rpki-rsync.idnic.net/repo/a72bb871-018d-4d21-9913-fc946c38794f/0/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Sep 2026 07:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:33:f6:38:d4:7e:0c:18:bd:9c:7b:ee:43:d0:e6:3f:f2:cf:f9:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD Validity Not Before: Sep 18 08:28:56 2026 GMT Not After : Sep 19 09:54:56 2026 GMT Subject: CN=81D2FB8890DC9D455889474C440B8FE0D8D5F39B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ed:b0:57:6e:35:01:d9:85:a4:e9:71:f8:f3: 94:63:0a:50:ac:34:5a:4b:53:a4:22:e8:73:c0:2a: 11:ed:b8:2f:52:b7:99:ef:7f:37:56:9d:d9:ca:fe: 0f:b3:1b:69:59:5b:a1:4f:06:29:62:d2:14:17:ae: 18:ee:36:27:77:89:72:4c:02:17:69:52:54:09:f5: 37:51:7a:49:b3:33:7d:ae:85:b8:b4:bb:50:99:47: 83:ce:6d:5d:2e:5a:b8:52:7b:84:87:73:ba:ed:f6: 5b:a6:cb:7a:d1:2a:8e:4f:e4:09:84:9c:52:f3:f2: 51:c4:f2:c6:8f:07:db:66:ba:85:09:2e:45:c5:21: 74:e9:fe:b2:ee:a8:c0:0c:f5:48:da:98:25:01:f2: f8:33:e4:df:f9:7c:bd:30:83:44:2e:e6:23:f1:a4: 9b:ea:f4:65:24:eb:48:fe:f6:62:c3:b3:31:bd:96: a8:a4:7f:3a:16:ab:46:20:e3:39:6c:1d:6a:cd:f1: 28:24:3e:cd:f8:57:05:06:61:1d:76:9a:47:aa:25: 76:e6:ff:72:b7:09:ab:d6:05:af:e4:4d:0d:ff:56: c1:d8:67:a2:18:67:08:49:63:06:bd:9a:0d:21:8c: ad:09:42:b7:f0:c3:be:67:ea:29:6d:76:ad:de:07: 1d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:D2:FB:88:90:DC:9D:45:58:89:47:4C:44:0B:8F:E0:D8:D5:F3:9B X509v3 Authority Key Identifier: keyid:73:AE:BE:E3:24:9F:D8:B6:A7:DB:F6:0C:78:A9:8A:E3:8A:21:81:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a72bb871-018d-4d21-9913-fc946c38794f/0/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a72bb871-018d-4d21-9913-fc946c38794f/0/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:c4:88:23:b4:48:9d:4b:12:19:88:64:79:e5:a8:c8:e7:b6: b4:98:a5:b7:b5:3a:62:01:fa:d5:d5:81:6b:6d:1b:a7:e3:df: 81:88:bf:e3:c2:14:cf:0c:9b:ca:6e:0b:c4:99:bc:b2:0b:25: d3:ae:ed:26:33:b5:21:fc:51:8f:a9:17:be:53:a5:89:45:1c: b1:2b:85:e6:7a:13:25:95:52:a5:2e:bb:de:34:2c:73:77:d1: 0d:a7:0d:dc:fd:b2:18:57:5e:67:17:44:b9:f8:3f:c8:b6:19: f7:b2:9b:cc:ba:90:ac:d2:18:28:7d:fb:2c:10:88:14:fa:44: 05:2b:2a:f4:15:40:d0:a7:20:9c:97:7d:cb:a1:42:01:3f:91: e8:60:14:6d:b6:e0:fd:36:20:81:74:a9:b0:d5:d3:ee:09:5b: a6:0f:e9:8d:eb:39:d4:41:70:53:2a:2f:f3:f6:cf:08:0f:e0: e5:ef:77:21:87:e2:ed:14:70:f7:9f:98:17:0d:7d:8d:c2:06: 30:9d:7d:e6:c5:34:c1:e0:16:2d:11:70:fc:c9:52:a6:cb:05: 76:59:35:69:63:f1:7e:ec:b0:8b:ca:d7:e6:8a:a9:9b:67:cf: a9:47:4c:89:8e:e2:ec:c4:63:d7:30:c0:ba:ad:fe:03:79:86: 40:3b:b4:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXzP2ONR+DBi9nHvuQ9DmP/LP+aswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNBRUJFRTMyNDlGRDhCNkE3REJGNjBDNzhBOThBRTM4 QTIxODFGRDAeFw0yNjA5MTgwODI4NTZaFw0yNjA5MTkwOTU0NTZaMDMxMTAvBgNV BAMTKDgxRDJGQjg4OTBEQzlENDU1ODg5NDc0QzQ0MEI4RkUwRDhENUYzOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc7bBXbjUB2YWk6XH485RjClCs NFpLU6Qi6HPAKhHtuC9St5nvfzdWndnK/g+zG2lZW6FPBili0hQXrhjuNid3iXJM AhdpUlQJ9TdRekmzM32uhbi0u1CZR4PObV0uWrhSe4SHc7rt9lumy3rRKo5P5AmE nFLz8lHE8saPB9tmuoUJLkXFIXTp/rLuqMAM9UjamCUB8vgz5N/5fL0wg0Qu5iPx pJvq9GUk60j+9mLDszG9lqikfzoWq0Yg4zlsHWrN8SgkPs34VwUGYR12mkeqJXbm /3K3CavWBa/kTQ3/VsHYZ6IYZwhJYwa9mg0hjK0JQrfww75n6iltdq3eBx2fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgdL7iJDcnUVYiUdMRAuP4NjV85swHwYDVR0j BBgwFoAUc66+4ySf2Lan2/YMeKmK44ohgf0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTcyYmI4NzEtMDE4ZC00ZDIxLTk5MTMtZmM5NDZjMzg3OTRmLzAvNzNBRUJFRTMy NDlGRDhCNkE3REJGNjBDNzhBOThBRTM4QTIxODFGRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83M0FFQkVFMzI0OUZEOEI2QTdEQkY2MEM3OEE5OEFFMzhBMjE4 MUZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTcyYmI4NzEtMDE4ZC00ZDIxLTk5 MTMtZmM5NDZjMzg3OTRmLzAvNzNBRUJFRTMyNDlGRDhCNkE3REJGNjBDNzhBOThB RTM4QTIxODFGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF7EiCO0SJ1LEhmIZHnlqMjntrSYpbe1OmIB +tXVgWttG6fj34GIv+PCFM8Mm8puC8SZvLILJdOu7SYztSH8UY+pF75TpYlFHLEr heZ6EyWVUqUuu940LHN30Q2nDdz9shhXXmcXRLn4P8i2Gfeym8y6kKzSGCh9+ywQ iBT6RAUrKvQVQNCnIJyXfcuhQgE/kehgFG224P02IIF0qbDV0+4JW6YP6Y3rOdRB cFMqL/P2zwgP4OXvdyGH4u0UcPefmBcNfY3CBjCdfebFNMHgFi0RcPzJUqbLBXZZ NWlj8X7ssIvK1+aKqZtnz6lHTImO4uzEY9cwwLqt/gN5hkA7tLE= -----END CERTIFICATE-----Generated at Fri Sep 18 14:04:38 2026 by rpki-client