$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.mft File: A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.mft (raw, json) Hash identifier: aXlOqmy/4lGHlzdffKVJ52EHxWj/pYtzlH7cwN2Jcu4= Subject key identifier: B8:12:17:2D:F9:5B:71:AA:39:3B:15:DF:ED:EF:1A:9F:28:46:26:D1 Authority key identifier: A7:3D:69:ED:EC:18:03:1B:F9:17:5A:7C:A7:4E:D6:3A:1C:63:02:DB Certificate issuer: /CN=A73D69EDEC18031BF9175A7CA74ED63A1C6302DB Certificate serial: 470B9E27599A343767835AFD110041A1A375E038 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.mft Manifest number: D3 Signing time: Wed 07 Oct 2026 11:17:33 +0000 Manifest this update: Wed 07 Oct 2026 11:12:33 +0000 Manifest next update: Thu 08 Oct 2026 13:30:33 +0000 Files and hashes: 1: 3130332e3136322e3232332e302f32342d3234203d3e20313431363635.roa (hash: C/DT7XHL3SGEbqpViWF85bXoznD5c80gdYcaatqLy54=) 2: 3130332e3136322e3232322e302f32342d3234203d3e203438343635.roa (hash: gUMtJPlmcfCKnK+8j2GeQFyhHBPFelpdjIC7KLgp3HM=) 3: 3130332e3136322e3232332e302f32342d3234203d3e203438343635.roa (hash: DwAPimZJbs1WQtoDvmv2aTJgkFvbbEdXOIPeLqLhsYM=) 4: 3130332e3136322e3232322e302f32342d3234203d3e20313431363635.roa (hash: arp0yrywbkd7qbxITxZkrDIJBVD5KXTuWljeFd5i2Ew=) 5: 3130332e3136322e3232322e302f32332d3233203d3e20313431363635.roa (hash: J7QP2a/G6U6CecSpH3luJmb2dfsPBa3lWp+XbtAjzpA=) 6: A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.crl (hash: iERY+VyzADmh9uUQLfH4DaI3qtY81jXsH6TDwqZiEdc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.crl rsync://rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Oct 2026 13:30:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:0b:9e:27:59:9a:34:37:67:83:5a:fd:11:00:41:a1:a3:75:e0:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A73D69EDEC18031BF9175A7CA74ED63A1C6302DB Validity Not Before: Oct 7 11:12:33 2026 GMT Not After : Oct 8 13:30:33 2026 GMT Subject: CN=B812172DF95B71AA393B15DFEDEF1A9F284626D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a6:4b:b9:be:79:f1:c8:8e:8d:17:e3:fe:35: f9:47:3d:24:fd:d3:c6:26:d8:20:12:48:d2:c7:96: 4b:a5:21:e5:22:9c:0c:9a:08:14:a5:95:b6:cd:99: 61:c0:ac:fa:8b:fa:c1:74:1d:63:89:53:d4:24:42: 3b:9f:20:ca:0c:d6:c0:8d:ae:76:f6:f2:44:6e:b2: cc:de:fe:3b:90:bf:a4:bc:7a:b1:db:1b:0a:d4:ac: b8:f8:dc:4e:42:08:5a:07:23:5c:cd:f3:e3:e4:85: 82:a3:9d:2c:05:43:e8:ac:cd:f4:09:65:f4:5a:58: 2e:3d:01:35:5e:46:0c:7b:80:4d:49:08:a8:86:ac: 59:66:e8:cc:40:f5:c1:d8:f6:61:e2:81:ae:6f:e9: 82:27:7f:c9:0f:55:29:6a:8c:a0:a0:61:2b:e6:f3: c3:bd:1b:6b:55:9a:de:a8:a8:ce:6b:10:7c:13:dc: 0b:e6:fa:1b:5b:f7:90:0e:2c:07:6f:bd:ad:ad:eb: 6e:bd:45:47:ed:61:96:03:c2:35:3f:a7:cb:97:e4: c1:aa:ef:3f:03:59:fb:11:9f:9b:b1:ef:7b:17:74: 31:5b:eb:0c:e4:d9:91:8a:82:ad:6a:cc:e0:b0:20: 3d:cb:ea:41:ce:4b:34:03:7f:0e:ae:46:bf:12:e0: 90:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:12:17:2D:F9:5B:71:AA:39:3B:15:DF:ED:EF:1A:9F:28:46:26:D1 X509v3 Authority Key Identifier: keyid:A7:3D:69:ED:EC:18:03:1B:F9:17:5A:7C:A7:4E:D6:3A:1C:63:02:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/A73D69EDEC18031BF9175A7CA74ED63A1C6302DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:b9:5a:c8:8d:9e:dd:e2:5e:24:db:0f:6a:94:2e:c4:de:d1: 94:4d:22:4e:30:86:df:52:43:57:73:70:1f:25:51:c3:1c:c7: 08:8c:e7:fa:6c:99:a5:97:95:e3:c9:43:a4:9d:ad:9d:1d:ba: 00:7a:76:e2:0e:a0:41:88:0b:73:e2:0f:28:8e:4d:98:a3:92: 72:3c:dd:26:f4:12:ad:4e:ac:dd:95:49:8e:68:54:9d:fe:04: 0b:16:77:44:71:4f:94:4e:27:d1:d0:80:fe:7a:ff:6e:98:e0: 28:9c:fe:98:4c:e1:d6:30:b5:79:83:49:2b:fa:6c:96:e9:3a: 57:2b:85:1a:27:b5:50:42:a1:0f:04:35:09:95:7c:42:02:be: 0a:dc:f8:b7:29:78:bd:0a:11:cc:d0:95:1f:25:4c:bf:53:f2: fc:25:be:ef:6f:59:9f:e4:57:c7:e0:e8:73:87:1a:2f:ef:25: 2c:a3:b8:62:d7:57:b7:1b:b2:19:be:0a:ca:7f:68:dd:38:67: 7a:ae:8d:8c:cc:50:a3:9b:d2:4b:f8:6a:00:ba:00:79:5e:76: 2c:dc:6b:74:18:84:11:73:b7:aa:aa:0f:a7:a9:49:9f:01:7f: 34:4e:1b:68:44:fe:93:79:0b:a5:89:7f:d0:9a:72:be:89:55: ae:39:45:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURwueJ1maNDdng1r9EQBBoaN14DgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTczRDY5RURFQzE4MDMxQkY5MTc1QTdDQTc0RUQ2M0Ex QzYzMDJEQjAeFw0yNjEwMDcxMTEyMzNaFw0yNjEwMDgxMzMwMzNaMDMxMTAvBgNV BAMTKEI4MTIxNzJERjk1QjcxQUEzOTNCMTVERkVERUYxQTlGMjg0NjI2RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSpku5vnnxyI6NF+P+NflHPST9 08Ym2CASSNLHlkulIeUinAyaCBSllbbNmWHArPqL+sF0HWOJU9QkQjufIMoM1sCN rnb28kRussze/juQv6S8erHbGwrUrLj43E5CCFoHI1zN8+PkhYKjnSwFQ+iszfQJ ZfRaWC49ATVeRgx7gE1JCKiGrFlm6MxA9cHY9mHiga5v6YInf8kPVSlqjKCgYSvm 88O9G2tVmt6oqM5rEHwT3Avm+htb95AOLAdvva2t6269RUftYZYDwjU/p8uX5MGq 7z8DWfsRn5ux73sXdDFb6wzk2ZGKgq1qzOCwID3L6kHOSzQDfw6uRr8S4JBNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuBIXLflbcao5OxXf7e8anyhGJtEwHwYDVR0j BBgwFoAUpz1p7ewYAxv5F1p8p07WOhxjAtswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzY0ZjBmZmEtZTAzMS00ZWUxLWJmMGYtNjRiYWNmY2YyOTQyLzAvQTczRDY5RURF QzE4MDMxQkY5MTc1QTdDQTc0RUQ2M0ExQzYzMDJEQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BNzNENjlFREVDMTgwMzFCRjkxNzVBN0NBNzRFRDYzQTFDNjMw MkRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzY0ZjBmZmEtZTAzMS00ZWUxLWJm MGYtNjRiYWNmY2YyOTQyLzAvQTczRDY5RURFQzE4MDMxQkY5MTc1QTdDQTc0RUQ2 M0ExQzYzMDJEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALK5WsiNnt3iXiTbD2qULsTe0ZRNIk4wht9S Q1dzcB8lUcMcxwiM5/psmaWXlePJQ6SdrZ0dugB6duIOoEGIC3PiDyiOTZijknI8 3Sb0Eq1OrN2VSY5oVJ3+BAsWd0RxT5ROJ9HQgP56/26Y4Cic/phM4dYwtXmDSSv6 bJbpOlcrhRontVBCoQ8ENQmVfEICvgrc+LcpeL0KEczQlR8lTL9T8vwlvu9vWZ/k V8fg6HOHGi/vJSyjuGLXV7cbshm+Csp/aN04Z3qujYzMUKOb0kv4agC6AHledizc a3QYhBFzt6qqD6epSZ8BfzROG2hE/pN5C6WJf9Cacr6JVa45Rbo= -----END CERTIFICATE-----Generated at Thu Oct 8 07:25:01 2026 by rpki-client