$ rpki-client -vvf repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.mft File: 73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.mft (raw, json) Hash identifier: bImMNOAIsAZRcTQKBsZNegf28X6hybdMH/lCRLAZ+xE= Subject key identifier: 3D:15:8E:DF:90:FE:CE:EF:82:0C:25:2B:DF:EA:59:CF:C5:2A:84:46 Authority key identifier: 73:AF:94:5E:FF:5E:A9:D1:EF:DC:26:17:FA:43:43:0E:87:E1:9A:B6 Certificate issuer: /CN=73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6 Certificate serial: 0424E3C3F66F8B91F344F27D8C7A2520DFF0B09B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.mft Manifest number: 0115 Signing time: Thu 26 Mar 2026 09:41:26 +0000 Manifest this update: Thu 26 Mar 2026 09:36:26 +0000 Manifest next update: Sun 29 Mar 2026 10:17:26 +0000 Files and hashes: 1: 3135372e36362e3137302e302f32332d3233203d3e20313532373737.roa (hash: bCp+hfr7ROEtQWyvQHaGucdWFI7N+d4ip6n9SavuoOk=) 2: 73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.crl (hash: ZrufhssUQc9La9vBF9u9MzNQiWO5BY1YpRDjlTM3Orw=) 3: 3135372e36362e3137302e302f32342d3234203d3e20313532373737.roa (hash: mWn5DPCiekSxGNB8RumBKf5syIxB4d7+KUn6ZNJHctk=) 4: 3135372e36362e3137312e302f32342d3234203d3e20313532373737.roa (hash: uOA4jTwlkcqlsjP32WwaK900NFV6wePG9q2fIgGqlJw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.crl rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 10:17:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:24:e3:c3:f6:6f:8b:91:f3:44:f2:7d:8c:7a:25:20:df:f0:b0:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6 Validity Not Before: Mar 26 09:36:26 2026 GMT Not After : Mar 29 10:17:26 2026 GMT Subject: CN=3D158EDF90FECEEF820C252BDFEA59CFC52A8446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:35:df:43:29:61:b1:cd:01:c7:a1:68:b6:91: 0b:dc:78:ef:23:bd:3f:66:e0:bd:16:d7:10:97:fd: 66:cb:b8:53:08:8a:76:87:8c:f8:13:df:37:48:08: 80:e6:00:ad:1f:75:ee:94:b7:25:1c:6d:d9:c4:4d: 73:8e:85:e8:85:9d:7f:80:aa:5c:da:0d:ac:c6:a8: a9:46:4e:1b:d3:16:58:cc:b5:62:eb:04:fd:40:49: 06:bd:c7:0a:1e:2d:92:17:dc:90:9d:1d:fe:9e:ab: 19:06:2d:b4:df:aa:a2:da:29:13:cd:55:21:bc:e1: 7a:7b:ed:3f:ff:32:9e:ff:cf:4c:47:15:37:71:41: 80:5d:9c:97:09:af:d3:2a:bd:d7:94:5d:40:24:d5: af:15:0e:40:58:ea:d1:d9:6d:88:05:18:fb:69:00: 70:dd:2f:4f:84:3e:43:22:6e:84:0e:12:16:c3:91: a8:85:57:c5:bd:ae:fe:09:c5:ad:04:2b:d1:2f:a7: 46:f9:ea:85:06:d3:3b:5b:85:97:4f:06:26:a8:f7: 63:dd:fe:00:58:90:81:81:4f:a6:f7:8e:d5:60:2f: 79:85:64:62:47:2c:b9:9a:b9:2c:af:36:d2:c9:f0: b7:2e:2b:f5:26:72:e7:2e:da:8a:85:4e:5e:5a:55: b6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:15:8E:DF:90:FE:CE:EF:82:0C:25:2B:DF:EA:59:CF:C5:2A:84:46 X509v3 Authority Key Identifier: keyid:73:AF:94:5E:FF:5E:A9:D1:EF:DC:26:17:FA:43:43:0E:87:E1:9A:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:03:63:1e:38:88:bd:7f:b2:f9:e9:1d:d5:65:ca:23:e0:18: ca:9f:ca:cb:4c:b4:8d:4f:c6:3e:d5:bd:cb:2b:c8:75:15:54: b4:3b:ad:a9:f4:bc:c6:1f:38:80:f6:dd:d2:02:f6:a3:c2:2c: 08:dd:41:e4:a0:aa:de:d3:79:74:b1:f2:60:24:1b:d7:b4:c8: 83:81:03:3c:36:39:37:93:58:30:9d:73:9a:ea:c2:19:56:c6: 06:e4:d0:f2:ac:10:24:f4:cb:d6:da:ae:27:c6:dd:bf:ee:9a: 54:4d:01:a6:3c:a6:26:36:2c:5b:e6:82:d1:7f:5d:76:05:53: f4:a8:e0:95:a3:d9:00:ef:42:15:57:9e:63:47:9c:70:d2:8c: 1a:5b:a4:8f:0d:ac:85:1d:50:6d:8a:31:a0:e4:5b:fc:cf:12: 11:ad:20:14:3c:5f:46:c1:03:e6:81:f3:c3:05:4c:87:55:9d: cf:f2:cf:03:6b:db:a3:1e:ca:ab:56:ae:f1:84:28:02:4b:a6: 45:c1:c5:c8:c2:2f:1c:f0:e6:9e:d7:83:b0:34:03:ca:8f:31: ed:69:a1:2d:4e:b3:d3:99:a7:4f:87:d9:c7:26:2d:e2:99:18: 1e:cd:59:43:db:14:a1:4b:60:a0:5e:86:d2:47:64:77:b4:1a: d7:3a:0d:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBCTjw/Zvi5HzRPJ9jHolIN/wsJswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNBRjk0NUVGRjVFQTlEMUVGREMyNjE3RkE0MzQzMEU4 N0UxOUFCNjAeFw0yNjAzMjYwOTM2MjZaFw0yNjAzMjkxMDE3MjZaMDMxMTAvBgNV BAMTKDNEMTU4RURGOTBGRUNFRUY4MjBDMjUyQkRGRUE1OUNGQzUyQTg0NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqNd9DKWGxzQHHoWi2kQvceO8j vT9m4L0W1xCX/WbLuFMIinaHjPgT3zdICIDmAK0fde6UtyUcbdnETXOOheiFnX+A qlzaDazGqKlGThvTFljMtWLrBP1ASQa9xwoeLZIX3JCdHf6eqxkGLbTfqqLaKRPN VSG84Xp77T//Mp7/z0xHFTdxQYBdnJcJr9MqvdeUXUAk1a8VDkBY6tHZbYgFGPtp AHDdL0+EPkMiboQOEhbDkaiFV8W9rv4Jxa0EK9Evp0b56oUG0ztbhZdPBiao92Pd /gBYkIGBT6b3jtVgL3mFZGJHLLmauSyvNtLJ8LcuK/Umcucu2oqFTl5aVbahAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPRWO35D+zu+CDCUr3+pZz8UqhEYwHwYDVR0j BBgwFoAUc6+UXv9eqdHv3CYX+kNDDofhmrYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NTQ4MTYwNi1kNWZkLTQxOTYtYWJjZC01OGU2Yzc2MjQzYzUvMC83M0FGOTQ1RUZG NUVBOUQxRUZEQzI2MTdGQTQzNDMwRTg3RTE5QUI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzNBRjk0NUVGRjVFQTlEMUVGREMyNjE3RkE0MzQzMEU4N0Ux OUFCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTU0ODE2MDYtZDVmZC00MTk2LWFi Y2QtNThlNmM3NjI0M2M1LzAvNzNBRjk0NUVGRjVFQTlEMUVGREMyNjE3RkE0MzQz MEU4N0UxOUFCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI8DYx44iL1/svnpHdVlyiPgGMqfystMtI1P xj7VvcsryHUVVLQ7ran0vMYfOID23dIC9qPCLAjdQeSgqt7TeXSx8mAkG9e0yIOB Azw2OTeTWDCdc5rqwhlWxgbk0PKsECT0y9barifG3b/umlRNAaY8piY2LFvmgtF/ XXYFU/So4JWj2QDvQhVXnmNHnHDSjBpbpI8NrIUdUG2KMaDkW/zPEhGtIBQ8X0bB A+aB88MFTIdVnc/yzwNr26MeyqtWrvGEKAJLpkXBxcjCLxzw5p7Xg7A0A8qPMe1p oS1Os9OZp0+H2ccmLeKZGB7NWUPbFKFLYKBehtJHZHe0Gtc6Dd4= -----END CERTIFICATE-----Generated at Thu Mar 26 17:24:13 2026 by rpki-client