$ rpki-client -vvf rpki-rsync.idnic.net/repo/a72bb871-018d-4d21-9913-fc946c38794f/0/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.mft File: 73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.mft (raw, json) Hash identifier: pBvyPC0/mGHL0DUqbcGDdskZQAfIE6Ui1I2ykxgFRLM= Subject key identifier: 89:C1:D6:8C:F4:90:C1:33:35:09:F7:D3:65:F2:5C:06:D1:F6:D8:3A Authority key identifier: 73:AE:BE:E3:24:9F:D8:B6:A7:DB:F6:0C:78:A9:8A:E3:8A:21:81:FD Certificate issuer: /CN=73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD Certificate serial: 6E78BAE3115FF264A68331DB3675B9D636973FEB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a72bb871-018d-4d21-9913-fc946c38794f/0/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.mft Manifest number: 40 Signing time: Fri 19 Jun 2026 21:11:32 +0000 Manifest this update: Fri 19 Jun 2026 21:06:32 +0000 Manifest next update: Sat 20 Jun 2026 23:10:32 +0000 Files and hashes: 1: 73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.crl (hash: ajUzs3cEuIB6RZ5EvzfXhf974uxeIuZNTxuKZ2DciAE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a72bb871-018d-4d21-9913-fc946c38794f/0/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.crl rsync://rpki-rsync.idnic.net/repo/a72bb871-018d-4d21-9913-fc946c38794f/0/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 23:10:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:78:ba:e3:11:5f:f2:64:a6:83:31:db:36:75:b9:d6:36:97:3f:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD Validity Not Before: Jun 19 21:06:32 2026 GMT Not After : Jun 20 23:10:32 2026 GMT Subject: CN=89C1D68CF490C1333509F7D365F25C06D1F6D83A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:07:dc:b5:33:b9:94:85:25:ea:e8:2c:90:7d: 2f:54:4d:18:ae:05:33:23:8f:26:1e:08:7f:59:66: a5:7e:83:b9:f6:e7:74:0e:a8:06:78:98:8a:45:8d: b4:e5:86:1f:a7:ac:69:2d:d4:f6:f0:7e:d9:9f:05: e0:ef:ad:e5:5d:8a:b8:b4:e3:fb:a8:c8:dc:22:94: 0c:45:41:6e:a9:bc:81:15:b7:84:cd:10:c9:76:dd: 86:c7:84:5a:6e:93:81:e9:1a:f1:1c:ce:17:51:38: 41:37:28:bb:03:57:a7:60:ec:3c:23:15:4e:4f:57: 16:df:92:87:bf:be:c9:9a:3e:eb:ec:a8:91:b1:f3: 5c:91:5c:08:68:9d:24:c2:d6:98:dc:77:78:ff:5b: 1a:95:38:c8:c6:63:76:f8:36:5d:e2:bb:8a:4f:46: 12:0f:1b:e1:bf:82:05:56:3f:fc:5b:1d:a2:c5:38: 04:71:f7:2d:1e:87:11:e8:31:14:95:bc:00:1a:c6: 31:d5:37:cd:5b:fc:52:69:84:46:ca:12:8b:a1:c8: 87:6e:ff:2a:c8:a1:d5:92:b5:dd:9a:9f:d4:fb:c3: 1d:ce:76:0e:70:23:cf:b9:67:3e:02:0e:29:cd:d3: f2:f3:33:01:cf:b4:d6:6f:ca:ac:0e:2e:0f:68:39: 19:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:C1:D6:8C:F4:90:C1:33:35:09:F7:D3:65:F2:5C:06:D1:F6:D8:3A X509v3 Authority Key Identifier: keyid:73:AE:BE:E3:24:9F:D8:B6:A7:DB:F6:0C:78:A9:8A:E3:8A:21:81:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a72bb871-018d-4d21-9913-fc946c38794f/0/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a72bb871-018d-4d21-9913-fc946c38794f/0/73AEBEE3249FD8B6A7DBF60C78A98AE38A2181FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:58:12:a3:99:d1:a8:07:fe:40:1b:93:ab:76:ad:24:b7:36: 7f:87:62:d6:1e:69:de:be:d8:c6:e8:9d:fe:f8:3d:4d:a5:10: 72:46:ca:b7:a0:cf:dd:9e:8b:4f:e7:e7:77:9b:2c:54:bf:f0: 7c:9e:39:b0:44:db:70:71:69:9b:3a:6e:fd:ef:4f:de:c5:dc: dc:75:c5:e1:ad:e6:6f:c6:97:77:de:03:be:6f:c7:d1:cd:06: c9:15:8f:f2:b4:1f:35:d5:e3:62:eb:27:62:81:6a:4e:1f:e6: ba:cb:55:71:c4:ef:d8:ea:cf:c6:60:32:86:e2:8d:87:e1:6b: e1:12:e0:d1:5c:cf:87:92:a4:93:80:c6:b7:da:2c:e7:f2:61: fa:93:94:d8:00:3b:4a:75:a4:f7:c5:5b:d1:87:08:d5:98:31: 43:87:f8:1a:e5:5d:00:85:8b:38:0a:87:0b:a0:72:e6:cf:d0: 82:ef:56:5b:f7:78:6b:33:9f:05:b4:34:b1:a9:9f:ce:e3:99: 27:d5:58:25:be:24:30:b2:e5:bb:4d:4e:0e:fa:e1:89:31:98: 1f:bf:67:e2:cb:34:6f:18:ea:3c:b0:e6:45:ba:2e:40:72:e5: 07:5a:49:eb:82:e1:a5:2e:d2:72:56:c0:15:11:5e:43:94:8c: ce:4b:c9:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbni64xFf8mSmgzHbNnW51jaXP+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNBRUJFRTMyNDlGRDhCNkE3REJGNjBDNzhBOThBRTM4 QTIxODFGRDAeFw0yNjA2MTkyMTA2MzJaFw0yNjA2MjAyMzEwMzJaMDMxMTAvBgNV BAMTKDg5QzFENjhDRjQ5MEMxMzMzNTA5RjdEMzY1RjI1QzA2RDFGNkQ4M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgB9y1M7mUhSXq6CyQfS9UTRiu BTMjjyYeCH9ZZqV+g7n253QOqAZ4mIpFjbTlhh+nrGkt1PbwftmfBeDvreVdiri0 4/uoyNwilAxFQW6pvIEVt4TNEMl23YbHhFpuk4HpGvEczhdROEE3KLsDV6dg7Dwj FU5PVxbfkoe/vsmaPuvsqJGx81yRXAhonSTC1pjcd3j/WxqVOMjGY3b4Nl3iu4pP RhIPG+G/ggVWP/xbHaLFOARx9y0ehxHoMRSVvAAaxjHVN81b/FJphEbKEouhyIdu /yrIodWStd2an9T7wx3Odg5wI8+5Zz4CDinN0/LzMwHPtNZvyqwOLg9oORmpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUicHWjPSQwTM1CffTZfJcBtH22DowHwYDVR0j BBgwFoAUc66+4ySf2Lan2/YMeKmK44ohgf0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTcyYmI4NzEtMDE4ZC00ZDIxLTk5MTMtZmM5NDZjMzg3OTRmLzAvNzNBRUJFRTMy NDlGRDhCNkE3REJGNjBDNzhBOThBRTM4QTIxODFGRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83M0FFQkVFMzI0OUZEOEI2QTdEQkY2MEM3OEE5OEFFMzhBMjE4 MUZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTcyYmI4NzEtMDE4ZC00ZDIxLTk5 MTMtZmM5NDZjMzg3OTRmLzAvNzNBRUJFRTMyNDlGRDhCNkE3REJGNjBDNzhBOThB RTM4QTIxODFGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADtYEqOZ0agH/kAbk6t2rSS3Nn+HYtYead6+ 2Mbonf74PU2lEHJGyregz92ei0/n53ebLFS/8HyeObBE23BxaZs6bv3vT97F3Nx1 xeGt5m/Gl3feA75vx9HNBskVj/K0HzXV42LrJ2KBak4f5rrLVXHE79jqz8ZgMobi jYfha+ES4NFcz4eSpJOAxrfaLOfyYfqTlNgAO0p1pPfFW9GHCNWYMUOH+BrlXQCF izgKhwugcubP0ILvVlv3eGsznwW0NLGpn87jmSfVWCW+JDCy5btNTg764YkxmB+/ Z+LLNG8Y6jyw5kW6LkBy5QdaSeuC4aUu0nJWwBURXkOUjM5LyfM= -----END CERTIFICATE-----Generated at Sat Jun 20 09:20:24 2026 by rpki-client