$ rpki-client -vvf repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.mft File: 73238FE50473DF8F457921BE1B0C04764209BBF1.mft (raw, json) Hash identifier: rHhZwmoWIemmTM5DHLT9NlvJYtNh9Pj1CVfxqhgbsco= Subject key identifier: 13:4D:7E:77:ED:37:28:9D:55:2F:33:B2:9C:01:FD:E5:4B:1C:44:3C Authority key identifier: 73:23:8F:E5:04:73:DF:8F:45:79:21:BE:1B:0C:04:76:42:09:BB:F1 Certificate issuer: /CN=73238FE50473DF8F457921BE1B0C04764209BBF1 Certificate serial: 20E7607D4133285608FC7A02423836D356763DDE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73238FE50473DF8F457921BE1B0C04764209BBF1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.mft Manifest number: 0112 Signing time: Thu 26 Mar 2026 11:51:13 +0000 Manifest this update: Thu 26 Mar 2026 11:46:13 +0000 Manifest next update: Sun 29 Mar 2026 16:48:13 +0000 Files and hashes: 1: 73238FE50473DF8F457921BE1B0C04764209BBF1.crl (hash: TSVJUyrKDXmEjAycKR+NKVB+zCaSbULHPNH47fxGcag=) 2: 3136302e32322e3130302e302f32342d3234203d3e20313532383038.roa (hash: 6ESo4EJBYW+TZiA7AQCDdrC7W+O2u7DLGxOGwrnalLc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.crl rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73238FE50473DF8F457921BE1B0C04764209BBF1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:23:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:e7:60:7d:41:33:28:56:08:fc:7a:02:42:38:36:d3:56:76:3d:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73238FE50473DF8F457921BE1B0C04764209BBF1 Validity Not Before: Mar 26 11:46:13 2026 GMT Not After : Mar 29 16:48:13 2026 GMT Subject: CN=134D7E77ED37289D552F33B29C01FDE54B1C443C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:21:ef:12:31:18:f3:55:01:21:3d:03:2c:6c: ee:29:11:5f:b2:f2:ef:51:29:6c:72:35:9e:66:8d: bd:0a:70:dc:1b:ff:02:9e:8b:e0:da:ac:28:ec:df: 29:2b:a6:04:46:9d:81:91:4f:98:38:6c:85:fd:57: fb:d1:35:00:1f:17:c5:04:cf:c9:e8:8f:e7:88:20: e0:a2:fd:f1:80:8a:74:a2:c9:ad:b4:f6:10:72:eb: f5:cf:0e:b7:51:37:52:10:7d:97:6d:9b:b7:89:d7: ea:dd:e1:d3:18:34:ec:cd:b1:88:2c:d7:96:50:ad: 20:52:27:3c:3a:81:a5:67:7d:41:34:17:0a:2f:0a: af:63:31:79:a7:e3:33:1a:34:21:1b:a2:42:f5:e0: 0a:d1:ff:35:6a:b0:b0:97:7b:2a:62:92:23:7b:bc: a7:07:bb:f6:de:30:b8:bd:c6:b3:f0:97:ae:9e:49: be:74:ec:82:2a:5f:8e:0c:b8:0a:00:de:59:75:a7: fd:d2:8c:72:df:b6:18:e5:94:0b:80:ab:6c:36:aa: 84:b8:03:c5:85:d5:b4:d8:13:b5:05:b8:90:a0:7e: c8:c1:b4:8d:3c:94:e3:ef:71:b2:72:24:56:35:c8: cc:cc:94:7a:96:b4:9e:1f:3a:1f:ee:5a:49:c9:e1: 1b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:4D:7E:77:ED:37:28:9D:55:2F:33:B2:9C:01:FD:E5:4B:1C:44:3C X509v3 Authority Key Identifier: keyid:73:23:8F:E5:04:73:DF:8F:45:79:21:BE:1B:0C:04:76:42:09:BB:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73238FE50473DF8F457921BE1B0C04764209BBF1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:f8:9b:36:ea:91:2d:b8:54:f8:d5:65:60:eb:94:af:83:3b: 03:ed:18:68:68:66:dd:12:e3:71:39:45:82:91:fc:45:b3:81: ab:2c:f3:08:a0:b5:73:da:e6:3f:af:55:c6:73:60:d1:e6:9b: 92:1c:48:b2:29:13:b6:1e:07:80:cc:36:70:44:7a:94:c2:9e: b4:3e:4d:4d:72:c4:1a:3b:ae:77:5c:85:ce:cd:48:cc:a3:2c: eb:ad:77:81:5c:23:83:f9:50:d1:b9:a7:37:9b:e2:1b:de:c2: 37:b0:bb:a6:81:d1:38:23:40:b8:3e:e1:7b:e0:b3:a0:05:d3: 95:73:12:c4:32:87:f3:1a:4c:b7:87:7d:c5:01:4d:21:7f:a6: 57:ff:e7:00:98:8b:e3:de:d0:b8:bf:3f:fe:98:4b:65:51:62: d6:63:25:ca:d9:e9:72:ac:25:e2:bf:d4:f8:a3:47:80:40:d1: 62:3e:7b:d4:08:00:51:60:c1:b8:e5:21:5d:59:88:ea:e6:0c: 88:dd:1d:cd:cf:e4:ca:fd:4e:77:6d:7e:8f:9b:ae:29:ed:91: 84:a5:57:ee:d7:13:ff:4c:c5:09:cc:54:30:b1:cf:e7:92:a4: e6:bf:0f:94:74:db:e0:fa:d3:ab:98:81:ee:18:95:07:22:3f: f2:fb:eb:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIOdgfUEzKFYI/HoCQjg201Z2Pd4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzMyMzhGRTUwNDczREY4RjQ1NzkyMUJFMUIwQzA0NzY0 MjA5QkJGMTAeFw0yNjAzMjYxMTQ2MTNaFw0yNjAzMjkxNjQ4MTNaMDMxMTAvBgNV BAMTKDEzNEQ3RTc3RUQzNzI4OUQ1NTJGMzNCMjlDMDFGREU1NEIxQzQ0M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Ie8SMRjzVQEhPQMsbO4pEV+y 8u9RKWxyNZ5mjb0KcNwb/wKei+DarCjs3ykrpgRGnYGRT5g4bIX9V/vRNQAfF8UE z8noj+eIIOCi/fGAinSiya209hBy6/XPDrdRN1IQfZdtm7eJ1+rd4dMYNOzNsYgs 15ZQrSBSJzw6gaVnfUE0FwovCq9jMXmn4zMaNCEbokL14ArR/zVqsLCXeypikiN7 vKcHu/beMLi9xrPwl66eSb507IIqX44MuAoA3ll1p/3SjHLfthjllAuAq2w2qoS4 A8WF1bTYE7UFuJCgfsjBtI08lOPvcbJyJFY1yMzMlHqWtJ4fOh/uWknJ4Rt7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE01+d+03KJ1VLzOynAH95UscRDwwHwYDVR0j BBgwFoAUcyOP5QRz349FeSG+GwwEdkIJu/EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MGE4Y2U2Yy04MjkwLTRiOWQtOWFlZC0wNzU0ZDNmZDhkMzIvMC83MzIzOEZFNTA0 NzNERjhGNDU3OTIxQkUxQjBDMDQ3NjQyMDlCQkYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzMyMzhGRTUwNDczREY4RjQ1NzkyMUJFMUIwQzA0NzY0MjA5 QkJGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDBhOGNlNmMtODI5MC00YjlkLTlh ZWQtMDc1NGQzZmQ4ZDMyLzAvNzMyMzhGRTUwNDczREY4RjQ1NzkyMUJFMUIwQzA0 NzY0MjA5QkJGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABr4mzbqkS24VPjVZWDrlK+DOwPtGGhoZt0S 43E5RYKR/EWzgass8wigtXPa5j+vVcZzYNHmm5IcSLIpE7YeB4DMNnBEepTCnrQ+ TU1yxBo7rndchc7NSMyjLOutd4FcI4P5UNG5pzeb4hvewjewu6aB0TgjQLg+4Xvg s6AF05VzEsQyh/MaTLeHfcUBTSF/plf/5wCYi+Pe0Li/P/6YS2VRYtZjJcrZ6XKs JeK/1PijR4BA0WI+e9QIAFFgwbjlIV1ZiOrmDIjdHc3P5Mr9Tndtfo+brintkYSl V+7XE/9MxQnMVDCxz+eSpOa/D5R02+D606uYge4YlQciP/L76/s= -----END CERTIFICATE-----Generated at Thu Mar 26 15:18:10 2026 by rpki-client