$ rpki-client -vvf repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft File: 73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft (raw, json) Hash identifier: o9AYjlmqFwaLUAJQSYZcznNhvoIh8lrFYI7cqRzlYRI= Subject key identifier: BF:7B:A4:2E:42:B8:C6:D5:C7:D4:7A:BB:4E:3B:83:66:78:B4:EA:9E Authority key identifier: 73:A2:C0:69:A3:B2:EB:AC:75:EC:B3:73:F3:98:B5:60:2B:55:A6:FD Certificate issuer: /CN=73A2C069A3B2EBAC75ECB373F398B5602B55A6FD Certificate serial: 2A22BFF84081245A543A1834BD221472C467AE56 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft Manifest number: 02D6 Signing time: Tue 24 Mar 2026 17:51:21 +0000 Manifest this update: Tue 24 Mar 2026 17:46:21 +0000 Manifest next update: Sat 28 Mar 2026 03:41:21 +0000 Files and hashes: 1: 73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.crl (hash: 04EFfrHEJ5XAGy6TyFJnM20rZttvC9e+DW6ppWNA2i8=) 2: 3130332e3137392e38392e302f32342d3234203d3e20313439333432.roa (hash: ZLFPPPuherxliEdNrwnbiAo9KOCnKvgNjSLpmHcBAG0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.crl rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 03:41:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:22:bf:f8:40:81:24:5a:54:3a:18:34:bd:22:14:72:c4:67:ae:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73A2C069A3B2EBAC75ECB373F398B5602B55A6FD Validity Not Before: Mar 24 17:46:21 2026 GMT Not After : Mar 28 03:41:21 2026 GMT Subject: CN=BF7BA42E42B8C6D5C7D47ABB4E3B836678B4EA9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7f:2b:dd:55:f9:b3:e9:3c:4e:5e:00:15:00: 24:d8:a4:82:ae:94:ce:dc:5f:70:17:fb:0f:56:3d: 0f:d6:86:d5:8a:49:1d:0e:28:0b:45:70:65:90:d6: f1:2a:ac:00:58:1c:49:10:0b:a1:a7:f7:88:ab:6d: 7a:3f:00:39:23:ab:87:8a:ec:04:12:20:8d:45:f1: 47:6c:74:d4:85:b8:b0:a1:07:c2:08:ae:a9:e6:de: 8d:38:d6:0c:06:f6:55:73:f8:85:d8:ef:0d:75:56: 8b:f5:38:dc:76:eb:90:29:b0:d6:5d:ca:28:5f:83: 6b:0d:77:f8:9d:d6:81:ce:26:24:36:6d:a5:0c:1b: bf:d7:71:b0:20:2e:90:55:20:06:c2:77:f8:69:31: 18:84:0f:4f:53:5e:81:a0:48:a8:a6:ab:7b:6d:42: 76:4f:0e:f4:f5:0e:60:80:c8:04:89:07:e5:dd:d2: 2a:b6:98:37:61:03:7e:1d:66:0f:98:5b:a6:6a:1f: 7a:2a:4d:06:db:c3:76:0e:4b:da:c9:3b:94:3b:a1: 58:59:47:65:f5:07:c0:2d:66:8c:2f:e1:6f:f9:9d: 30:89:c9:70:70:d6:36:c5:a1:3a:ba:56:4e:d4:1d: 17:c5:75:5c:6d:87:18:03:5f:12:4a:d9:74:1e:62: bd:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:7B:A4:2E:42:B8:C6:D5:C7:D4:7A:BB:4E:3B:83:66:78:B4:EA:9E X509v3 Authority Key Identifier: keyid:73:A2:C0:69:A3:B2:EB:AC:75:EC:B3:73:F3:98:B5:60:2B:55:A6:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:26:08:3a:32:f6:fe:bf:a2:87:85:53:11:c8:d3:ce:6d:a9: 19:4c:c1:7e:3f:80:c8:61:bd:b6:eb:0e:2d:2e:ae:12:15:0d: 3c:27:8e:df:b8:41:ad:af:d9:79:60:3c:66:e2:ed:a4:38:fb: e4:47:3c:76:57:0e:e4:6a:03:d4:07:22:2d:93:1d:d8:97:a5: 26:d8:8a:43:68:ac:c3:ce:a4:a9:60:df:c7:22:fc:f5:5a:60: 21:1d:d3:bd:49:78:da:a0:22:ae:ed:5b:57:58:62:5c:28:ba: 95:65:76:9f:ed:4f:dd:5e:0f:a5:2e:82:cb:39:d0:c3:22:ee: 21:80:14:cf:c4:5d:11:4b:16:95:fc:f5:f8:3f:8c:71:41:ae: ad:8e:d7:c3:b7:3a:ee:6e:12:27:f8:c4:a2:bb:ad:99:5c:7b: 60:2c:25:90:70:6a:5b:38:83:d0:e9:79:bd:23:39:73:b2:ce: 06:d8:9e:19:52:37:03:b4:26:fe:c6:43:7a:e9:98:fa:ee:f2: d9:bd:c4:25:a8:7e:ea:eb:17:90:3f:67:ba:27:43:1e:16:fa: 05:65:6e:49:a7:14:a4:73:f2:62:28:1e:f7:f9:f1:be:03:05: 9b:3f:8d:09:4a:dd:f9:fe:a8:9c:62:bd:94:c5:8e:dc:24:5a: 14:ea:05:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKiK/+ECBJFpUOhg0vSIUcsRnrlYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNBMkMwNjlBM0IyRUJBQzc1RUNCMzczRjM5OEI1NjAy QjU1QTZGRDAeFw0yNjAzMjQxNzQ2MjFaFw0yNjAzMjgwMzQxMjFaMDMxMTAvBgNV BAMTKEJGN0JBNDJFNDJCOEM2RDVDN0Q0N0FCQjRFM0I4MzY2NzhCNEVBOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqfyvdVfmz6TxOXgAVACTYpIKu lM7cX3AX+w9WPQ/WhtWKSR0OKAtFcGWQ1vEqrABYHEkQC6Gn94irbXo/ADkjq4eK 7AQSII1F8UdsdNSFuLChB8IIrqnm3o041gwG9lVz+IXY7w11Vov1ONx265ApsNZd yihfg2sNd/id1oHOJiQ2baUMG7/XcbAgLpBVIAbCd/hpMRiED09TXoGgSKimq3tt QnZPDvT1DmCAyASJB+Xd0iq2mDdhA34dZg+YW6ZqH3oqTQbbw3YOS9rJO5Q7oVhZ R2X1B8AtZowv4W/5nTCJyXBw1jbFoTq6Vk7UHRfFdVxthxgDXxJK2XQeYr1ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv3ukLkK4xtXH1Hq7TjuDZni06p4wHwYDVR0j BBgwFoAUc6LAaaOy66x17LNz85i1YCtVpv0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OWMyNzYyMS1lMjk3LTQxMDAtOTcxYS0xYzY5NjdjNTJiMWIvMC83M0EyQzA2OUEz QjJFQkFDNzVFQ0IzNzNGMzk4QjU2MDJCNTVBNkZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzNBMkMwNjlBM0IyRUJBQzc1RUNCMzczRjM5OEI1NjAyQjU1 QTZGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTljMjc2MjEtZTI5Ny00MTAwLTk3 MWEtMWM2OTY3YzUyYjFiLzAvNzNBMkMwNjlBM0IyRUJBQzc1RUNCMzczRjM5OEI1 NjAyQjU1QTZGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIsmCDoy9v6/ooeFUxHI085tqRlMwX4/gMhh vbbrDi0urhIVDTwnjt+4Qa2v2XlgPGbi7aQ4++RHPHZXDuRqA9QHIi2THdiXpSbY ikNorMPOpKlg38ci/PVaYCEd071JeNqgIq7tW1dYYlwoupVldp/tT91eD6Uugss5 0MMi7iGAFM/EXRFLFpX89fg/jHFBrq2O18O3Ou5uEif4xKK7rZlce2AsJZBwals4 g9Dpeb0jOXOyzgbYnhlSNwO0Jv7GQ3rpmPru8tm9xCWofurrF5A/Z7onQx4W+gVl bkmnFKRz8mIoHvf58b4DBZs/jQlK3fn+qJxivZTFjtwkWhTqBQM= -----END CERTIFICATE-----Generated at Thu Mar 26 08:54:07 2026 by rpki-client