$ rpki-client -vvf repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.mft File: 73626536B3B2A503E6D53473A97CF39A13301753.mft (raw, json) Hash identifier: zC5Ox+Iapsg7Hjp8N4/ysbKZXMlZx6cYf263e8qh+2o= Subject key identifier: 26:34:01:74:4B:CF:EE:2D:AC:9F:A9:41:89:59:3D:10:B6:E0:18:36 Authority key identifier: 73:62:65:36:B3:B2:A5:03:E6:D5:34:73:A9:7C:F3:9A:13:30:17:53 Certificate issuer: /CN=73626536B3B2A503E6D53473A97CF39A13301753 Certificate serial: 0A436519F25BDA22789AF3A720CFF918EE212264 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73626536B3B2A503E6D53473A97CF39A13301753.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.mft Manifest number: F2 Signing time: Wed 25 Mar 2026 18:21:02 +0000 Manifest this update: Wed 25 Mar 2026 18:16:02 +0000 Manifest next update: Sat 28 Mar 2026 21:32:02 +0000 Files and hashes: 1: 3136302e3138372e3133392e302f32342d3234203d3e20313533313232.roa (hash: ddc27gBMr3OYby+60rTsFN4jTsnZf0K6QpQ3U8AJvJI=) 2: 3136302e3138372e3133382e302f32342d3234203d3e20313533313232.roa (hash: DkaD62yPmgT3rL8vnnIbnI/XVBv8VoP+g+l6Q15s5Ng=) 3: 73626536B3B2A503E6D53473A97CF39A13301753.crl (hash: gx3QCKmiTUDtsA9VmC/bJ4oCRRGxcXBJflTEBDJjxVk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.crl rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73626536B3B2A503E6D53473A97CF39A13301753.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 21:32:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:43:65:19:f2:5b:da:22:78:9a:f3:a7:20:cf:f9:18:ee:21:22:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73626536B3B2A503E6D53473A97CF39A13301753 Validity Not Before: Mar 25 18:16:02 2026 GMT Not After : Mar 28 21:32:02 2026 GMT Subject: CN=263401744BCFEE2DAC9FA94189593D10B6E01836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:29:cb:f8:9d:c4:b8:00:69:bc:28:dd:e0:b2: cd:d7:65:ed:46:aa:5b:2a:a7:48:20:93:7e:76:12: 0d:ff:92:bd:64:e2:33:c6:e8:05:ac:85:5a:66:ef: 0e:c0:62:84:13:79:54:95:b4:7d:24:c2:19:85:43: 49:4b:ac:49:cd:65:ae:fd:f2:a3:a3:f7:4e:31:c0: 62:e1:8c:d8:70:cb:93:2e:83:76:db:4c:ec:b4:19: de:b1:37:2e:14:ef:88:1c:67:60:ad:7a:8e:65:3e: 64:6a:a6:c0:d6:6f:f2:15:11:dc:89:87:46:b7:f9: f5:3a:d3:e7:6f:da:a0:c5:ff:c7:54:8a:4b:e1:71: 6a:91:fb:3a:20:3c:f4:f9:d2:1f:d8:5e:93:86:d1: 7e:b0:a8:89:c0:86:86:90:bd:f4:9a:09:60:21:94: bf:34:1f:6f:3d:73:29:92:81:9d:18:2f:e7:27:33: db:d3:03:e9:00:f8:18:1d:9b:44:18:db:40:6f:1b: 75:96:d8:31:b0:b1:96:b0:f9:59:01:d3:24:9c:be: e8:bf:0c:a6:45:35:d4:dc:58:12:81:55:8a:3e:28: 67:84:f0:ae:f9:ab:12:0b:1b:07:ba:e6:88:26:a4: 6d:e5:66:8f:38:fb:37:81:82:78:63:9a:42:64:53: aa:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:34:01:74:4B:CF:EE:2D:AC:9F:A9:41:89:59:3D:10:B6:E0:18:36 X509v3 Authority Key Identifier: keyid:73:62:65:36:B3:B2:A5:03:E6:D5:34:73:A9:7C:F3:9A:13:30:17:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73626536B3B2A503E6D53473A97CF39A13301753.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:6e:6c:04:28:9d:b1:7c:39:28:cb:4d:ee:d7:02:34:b1:f0: f7:de:3b:73:90:41:86:65:dc:54:4e:a6:27:9a:1b:1d:76:8a: 13:50:22:b2:ad:84:5f:e8:41:ed:84:82:1d:be:f3:97:fa:f8: 5d:80:b0:cc:e0:31:8a:0a:30:c2:c3:0f:dc:03:f5:b6:f0:27: c6:83:81:ee:1a:1f:b4:47:56:dd:7c:bb:c5:58:77:f4:4f:f6: 17:27:27:9c:86:fe:af:9f:2b:b2:38:19:ef:62:fc:59:3b:28: dc:e6:26:d7:57:32:8c:28:62:47:91:3d:25:9e:70:8f:41:d3: 27:70:73:84:2c:66:e7:7c:37:43:f7:6f:48:3e:7d:c3:23:e2: 91:5e:d3:e8:26:4e:56:75:e0:3f:2f:bd:dc:3f:7f:c0:25:44: 80:c7:58:94:ff:6b:19:3c:8e:b2:2c:05:ac:01:a5:f1:b1:5e: 11:d8:ec:3f:53:ce:ac:cc:a6:27:33:89:4f:5c:07:f0:db:f3: 5c:84:f8:5f:58:3d:54:14:fd:63:b6:72:ae:4f:ab:58:62:fc: 5d:bf:3b:af:37:fa:db:bc:6b:a7:58:57:55:17:20:b5:50:33: cf:d2:13:aa:2c:2d:72:0d:45:cb:97:d6:37:b4:d7:30:c8:30: 9e:72:ed:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCkNlGfJb2iJ4mvOnIM/5GO4hImQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzM2MjY1MzZCM0IyQTUwM0U2RDUzNDczQTk3Q0YzOUEx MzMwMTc1MzAeFw0yNjAzMjUxODE2MDJaFw0yNjAzMjgyMTMyMDJaMDMxMTAvBgNV BAMTKDI2MzQwMTc0NEJDRkVFMkRBQzlGQTk0MTg5NTkzRDEwQjZFMDE4MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpKcv4ncS4AGm8KN3gss3XZe1G qlsqp0ggk352Eg3/kr1k4jPG6AWshVpm7w7AYoQTeVSVtH0kwhmFQ0lLrEnNZa79 8qOj904xwGLhjNhwy5Mug3bbTOy0Gd6xNy4U74gcZ2Cteo5lPmRqpsDWb/IVEdyJ h0a3+fU60+dv2qDF/8dUikvhcWqR+zogPPT50h/YXpOG0X6wqInAhoaQvfSaCWAh lL80H289cymSgZ0YL+cnM9vTA+kA+Bgdm0QY20BvG3WW2DGwsZaw+VkB0yScvui/ DKZFNdTcWBKBVYo+KGeE8K75qxILGwe65ogmpG3lZo84+zeBgnhjmkJkU6rpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJjQBdEvP7i2sn6lBiVk9ELbgGDYwHwYDVR0j BBgwFoAUc2JlNrOypQPm1TRzqXzzmhMwF1MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDIyZjY0OS05OTY4LTQ5NWQtYmRmMS03ZDc2MjU2ZGFhZDUvMC83MzYyNjUzNkIz QjJBNTAzRTZENTM0NzNBOTdDRjM5QTEzMzAxNzUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzM2MjY1MzZCM0IyQTUwM0U2RDUzNDczQTk3Q0YzOUExMzMw MTc1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQyMmY2NDktOTk2OC00OTVkLWJk ZjEtN2Q3NjI1NmRhYWQ1LzAvNzM2MjY1MzZCM0IyQTUwM0U2RDUzNDczQTk3Q0Yz OUExMzMwMTc1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAdubAQonbF8OSjLTe7XAjSx8PfeO3OQQYZl 3FROpieaGx12ihNQIrKthF/oQe2Egh2+85f6+F2AsMzgMYoKMMLDD9wD9bbwJ8aD ge4aH7RHVt18u8VYd/RP9hcnJ5yG/q+fK7I4Ge9i/Fk7KNzmJtdXMowoYkeRPSWe cI9B0ydwc4QsZud8N0P3b0g+fcMj4pFe0+gmTlZ14D8vvdw/f8AlRIDHWJT/axk8 jrIsBawBpfGxXhHY7D9TzqzMpicziU9cB/Db81yE+F9YPVQU/WO2cq5Pq1hi/F2/ O683+tu8a6dYV1UXILVQM8/SE6osLXINRcuX1je01zDIMJ5y7WA= -----END CERTIFICATE-----Generated at Thu Mar 26 21:15:19 2026 by rpki-client