$ rpki-client -vvf rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.mft File: A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.mft (raw, json) Hash identifier: e+Dx72KbywbG9uFjVeiYpr1ST8CyjJBGveQIddLUOM4= Subject key identifier: 81:A8:F0:BF:27:F4:14:34:EB:B4:A7:BF:C4:9E:85:CB:17:88:9D:98 Authority key identifier: A7:3D:69:ED:EC:18:03:1B:F9:17:5A:7C:A7:4E:D6:3A:1C:63:02:DB Certificate issuer: /CN=A73D69EDEC18031BF9175A7CA74ED63A1C6302DB Certificate serial: 453994F645F183DDA405EBE9FA195999461297FD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.mft Manifest number: 93 Signing time: Thu 20 Aug 2026 07:57:32 +0000 Manifest this update: Thu 20 Aug 2026 07:52:32 +0000 Manifest next update: Fri 21 Aug 2026 10:42:32 +0000 Files and hashes: 1: 3130332e3136322e3232332e302f32342d3234203d3e203438343635.roa (hash: DwAPimZJbs1WQtoDvmv2aTJgkFvbbEdXOIPeLqLhsYM=) 2: 3130332e3136322e3232322e302f32342d3234203d3e20313431363635.roa (hash: arp0yrywbkd7qbxITxZkrDIJBVD5KXTuWljeFd5i2Ew=) 3: 3130332e3136322e3232322e302f32342d3234203d3e203438343635.roa (hash: gUMtJPlmcfCKnK+8j2GeQFyhHBPFelpdjIC7KLgp3HM=) 4: 3130332e3136322e3232322e302f32332d3233203d3e20313431363635.roa (hash: J7QP2a/G6U6CecSpH3luJmb2dfsPBa3lWp+XbtAjzpA=) 5: A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.crl (hash: +L47dTyUviIlQk9RP3FaRk/itjFOnHMIzSXOH8C97dk=) 6: 3130332e3136322e3232332e302f32342d3234203d3e20313431363635.roa (hash: C/DT7XHL3SGEbqpViWF85bXoznD5c80gdYcaatqLy54=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.crl rsync://rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Aug 2026 06:28:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:39:94:f6:45:f1:83:dd:a4:05:eb:e9:fa:19:59:99:46:12:97:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A73D69EDEC18031BF9175A7CA74ED63A1C6302DB Validity Not Before: Aug 20 07:52:32 2026 GMT Not After : Aug 21 10:42:32 2026 GMT Subject: CN=81A8F0BF27F41434EBB4A7BFC49E85CB17889D98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fc:21:9c:ec:bf:24:f0:59:c1:f9:dc:bb:3e: 27:75:54:92:fe:b7:47:3a:e6:2f:6c:aa:b3:4e:85: 70:43:10:81:61:b3:35:c1:52:6d:f9:91:89:a1:da: 6c:be:c0:db:1b:75:a0:bf:6b:23:74:f7:ce:60:84: 40:c2:40:98:1d:98:ba:86:c9:d7:ba:ee:51:42:f8: bf:cb:cf:5e:89:70:70:34:b4:30:f8:15:1e:ca:08: a4:54:ab:4a:16:d1:1d:45:aa:90:3f:9e:29:f9:99: 6b:27:2f:b0:9c:5b:6e:0d:62:77:10:39:0c:d4:16: c2:f7:73:e5:e0:c8:4f:3a:36:1b:46:a0:f1:56:86: ec:fb:40:a3:41:72:70:27:69:58:fa:e2:ce:9f:12: c8:f0:05:fa:c3:6f:21:05:f4:ca:19:08:c8:8f:f3: 89:27:c1:e2:0b:8f:98:f9:79:7d:5f:28:cc:36:28: 9a:df:2e:af:fd:0d:c9:33:62:a4:ae:5c:8a:0f:63: 58:83:7b:88:d7:b7:5f:84:f3:a8:d3:bd:39:4f:95: 23:77:4f:7a:94:9c:4c:50:58:c5:29:37:45:2a:08: b4:fb:94:24:61:34:6d:c9:40:bc:26:80:53:3d:ad: d8:45:9d:4b:84:37:cb:cd:57:1a:f0:34:9c:49:a9: 82:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:A8:F0:BF:27:F4:14:34:EB:B4:A7:BF:C4:9E:85:CB:17:88:9D:98 X509v3 Authority Key Identifier: keyid:A7:3D:69:ED:EC:18:03:1B:F9:17:5A:7C:A7:4E:D6:3A:1C:63:02:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:43:31:c4:a5:73:c4:d3:6e:0d:a9:69:b6:5b:e0:de:5b:79: 87:a9:3c:88:39:4d:9f:7c:81:a4:db:ac:ac:02:03:d3:fd:15: 81:4b:9b:b2:dc:67:52:19:33:5d:6c:a4:cf:1a:be:b7:ed:ad: 1d:b3:37:d2:f6:a5:d9:2c:7b:ef:7c:ad:3d:9c:72:51:b2:de: 28:57:ee:2d:a2:c9:2e:83:2b:11:d1:16:23:f2:d6:e9:9a:8d: 2a:a6:d7:60:c7:06:da:e5:de:c3:b2:05:89:19:be:75:00:0c: 66:ca:9d:c5:38:4c:45:6c:e9:bc:3a:d8:69:83:b6:95:b1:c8: f7:38:20:6f:97:13:4b:a4:47:43:0c:02:a3:6c:6a:56:14:8d: 99:b5:94:83:2e:5e:46:ad:2e:d1:ca:20:83:c3:a6:c5:8f:72: fc:24:5e:8c:5f:1e:e1:c6:4b:18:99:ca:36:a1:2c:4b:c0:51: 2e:e2:be:60:c3:b1:75:03:7e:cb:2b:29:a9:75:b4:fc:87:1f: 84:9b:53:7d:89:05:13:f0:d2:4c:4b:2e:10:17:58:ae:86:2e: 6d:89:45:7c:09:a6:ef:08:ea:04:42:6b:80:57:c2:83:b4:c2: 2f:eb:51:9b:14:91:6a:e6:be:79:47:fb:5b:1a:6a:13:7b:6f: 71:9a:b2:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURTmU9kXxg92kBevp+hlZmUYSl/0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTczRDY5RURFQzE4MDMxQkY5MTc1QTdDQTc0RUQ2M0Ex QzYzMDJEQjAeFw0yNjA4MjAwNzUyMzJaFw0yNjA4MjExMDQyMzJaMDMxMTAvBgNV BAMTKDgxQThGMEJGMjdGNDE0MzRFQkI0QTdCRkM0OUU4NUNCMTc4ODlEOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+/CGc7L8k8FnB+dy7Pid1VJL+ t0c65i9sqrNOhXBDEIFhszXBUm35kYmh2my+wNsbdaC/ayN0985ghEDCQJgdmLqG yde67lFC+L/Lz16JcHA0tDD4FR7KCKRUq0oW0R1FqpA/nin5mWsnL7CcW24NYncQ OQzUFsL3c+XgyE86NhtGoPFWhuz7QKNBcnAnaVj64s6fEsjwBfrDbyEF9MoZCMiP 84knweILj5j5eX1fKMw2KJrfLq/9DckzYqSuXIoPY1iDe4jXt1+E86jTvTlPlSN3 T3qUnExQWMUpN0UqCLT7lCRhNG3JQLwmgFM9rdhFnUuEN8vNVxrwNJxJqYIdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgajwvyf0FDTrtKe/xJ6FyxeInZgwHwYDVR0j BBgwFoAUpz1p7ewYAxv5F1p8p07WOhxjAtswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzY0ZjBmZmEtZTAzMS00ZWUxLWJmMGYtNjRiYWNmY2YyOTQyLzAvQTczRDY5RURF QzE4MDMxQkY5MTc1QTdDQTc0RUQ2M0ExQzYzMDJEQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNzNENjlFREVDMTgwMzFCRjkxNzVBN0NBNzRFRDYzQTFDNjMw MkRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzY0ZjBmZmEtZTAzMS00ZWUxLWJm MGYtNjRiYWNmY2YyOTQyLzAvQTczRDY5RURFQzE4MDMxQkY5MTc1QTdDQTc0RUQ2 M0ExQzYzMDJEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAINDMcSlc8TTbg2pabZb4N5beYepPIg5TZ98 gaTbrKwCA9P9FYFLm7LcZ1IZM11spM8avrftrR2zN9L2pdkse+98rT2cclGy3ihX 7i2iyS6DKxHRFiPy1umajSqm12DHBtrl3sOyBYkZvnUADGbKncU4TEVs6bw62GmD tpWxyPc4IG+XE0ukR0MMAqNsalYUjZm1lIMuXkatLtHKIIPDpsWPcvwkXoxfHuHG SxiZyjahLEvAUS7ivmDDsXUDfssrKal1tPyHH4SbU32JBRPw0kxLLhAXWK6GLm2J RXwJpu8I6gRCa4BXwoO0wi/rUZsUkWrmvnlH+1saahN7b3Gaslw= -----END CERTIFICATE-----Generated at Thu Aug 20 13:14:30 2026 by rpki-client