$ rpki-client -vvf repo-rpki.idnic.net/repo/2eb06569-0a2b-4b1b-9b0d-d95d08a34a76/0/73B2672C08B690F833DFB8E315335FFC9FBBD378.mft File: 73B2672C08B690F833DFB8E315335FFC9FBBD378.mft (raw, json) Hash identifier: /iZEBXj6gilWiHOWRox9kxmEt9mVkSThQ2pCzBQMIGo= Subject key identifier: 8A:7B:9C:8E:B9:BD:1E:51:75:28:68:02:EC:0D:2D:03:32:C2:1B:85 Authority key identifier: 73:B2:67:2C:08:B6:90:F8:33:DF:B8:E3:15:33:5F:FC:9F:BB:D3:78 Certificate issuer: /CN=73B2672C08B690F833DFB8E315335FFC9FBBD378 Certificate serial: 693BA3468070FAE935E5D1593542F180F6DFB9B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73B2672C08B690F833DFB8E315335FFC9FBBD378.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2eb06569-0a2b-4b1b-9b0d-d95d08a34a76/0/73B2672C08B690F833DFB8E315335FFC9FBBD378.mft Manifest number: 06 Signing time: Tue 17 Mar 2026 06:20:51 +0000 Manifest this update: Tue 17 Mar 2026 06:15:51 +0000 Manifest next update: Fri 20 Mar 2026 08:45:51 +0000 Files and hashes: 1: 73B2672C08B690F833DFB8E315335FFC9FBBD378.crl (hash: PZWOofpSl05YUEY0GzZ8GZANwxObJM7F2s8JnDhXsO8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2eb06569-0a2b-4b1b-9b0d-d95d08a34a76/0/73B2672C08B690F833DFB8E315335FFC9FBBD378.crl rsync://repo-rpki.idnic.net/repo/2eb06569-0a2b-4b1b-9b0d-d95d08a34a76/0/73B2672C08B690F833DFB8E315335FFC9FBBD378.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73B2672C08B690F833DFB8E315335FFC9FBBD378.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 08:45:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:3b:a3:46:80:70:fa:e9:35:e5:d1:59:35:42:f1:80:f6:df:b9:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73B2672C08B690F833DFB8E315335FFC9FBBD378 Validity Not Before: Mar 17 06:15:51 2026 GMT Not After : Mar 20 08:45:51 2026 GMT Subject: CN=8A7B9C8EB9BD1E5175286802EC0D2D0332C21B85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3f:f2:a3:01:88:37:2b:af:93:06:62:a9:12: 06:5e:57:dd:e8:84:80:c8:41:73:72:58:5f:3b:ad: 6e:88:54:04:79:33:4b:ea:78:5f:b6:55:d1:f7:8d: 75:ad:50:72:c0:84:1c:3f:9a:a6:15:8d:d0:f5:67: 70:84:4f:36:6b:64:37:00:c8:8c:8b:d3:72:0f:d4: 73:76:7e:40:2b:3c:12:61:ff:fd:83:58:3d:e6:eb: d3:20:ad:bb:bb:b1:22:4f:5d:a0:72:44:b8:0b:de: 8e:89:eb:1b:23:ac:6f:3b:c3:83:79:2a:8b:69:57: ae:0e:11:5a:4a:21:ca:c0:d7:f4:4e:6a:ea:84:e6: 76:b5:48:a2:42:8a:d5:fc:0d:97:f2:1a:f9:80:5b: 7b:b2:42:11:e1:20:69:da:c0:df:78:6c:82:9c:b6: 38:9e:75:d8:96:66:41:c1:b8:bc:f2:31:48:8c:07: de:c7:84:de:a9:a0:d4:52:e7:bb:7d:1a:2c:0b:ab: 87:4b:97:d7:e7:82:89:b8:c3:65:97:4d:a4:cf:1e: 60:87:e0:88:bc:58:fb:ae:6a:d1:26:05:ee:b8:fa: 9b:29:b2:23:4e:5c:cb:6d:f4:de:9c:35:00:9a:25: 42:e7:94:b7:04:14:53:36:0f:b2:62:9c:2f:1d:f2: 9d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:7B:9C:8E:B9:BD:1E:51:75:28:68:02:EC:0D:2D:03:32:C2:1B:85 X509v3 Authority Key Identifier: keyid:73:B2:67:2C:08:B6:90:F8:33:DF:B8:E3:15:33:5F:FC:9F:BB:D3:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2eb06569-0a2b-4b1b-9b0d-d95d08a34a76/0/73B2672C08B690F833DFB8E315335FFC9FBBD378.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73B2672C08B690F833DFB8E315335FFC9FBBD378.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2eb06569-0a2b-4b1b-9b0d-d95d08a34a76/0/73B2672C08B690F833DFB8E315335FFC9FBBD378.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:f9:4a:e4:55:d5:f1:3b:50:6b:da:bf:3b:11:fd:3e:70:61: 89:f2:21:ba:31:24:cb:8d:1f:1e:77:66:25:fa:c4:f3:0d:2e: 14:31:a6:4e:c1:8c:77:95:ac:14:0e:d4:86:71:38:eb:4d:54: e6:04:9c:53:aa:38:98:cc:91:d7:68:be:c8:eb:ab:81:2b:15: ed:7c:46:67:d9:60:cc:e1:63:98:4c:0c:61:8d:6f:e1:b6:f9: 0c:d9:cc:42:84:54:98:3e:c4:f0:1c:9a:d3:8c:0f:f4:b9:1f: 2f:0b:f8:95:21:d7:8c:50:49:9c:f9:ba:e1:6e:64:e7:1f:b2: bd:9c:9b:5e:75:d9:fd:a0:53:67:90:bd:00:75:94:02:fb:7f: 40:f4:c4:65:d8:95:c8:c1:cb:d6:cb:8c:67:b5:02:17:16:c3: de:55:93:52:80:b7:60:d6:f8:04:59:20:fb:87:9a:f1:71:8e: 71:d4:ff:61:f3:c7:b7:72:f3:d3:d6:d8:49:ed:28:76:e9:02: db:2d:38:fe:3c:cd:41:36:72:e7:92:67:23:0c:1d:9d:3f:0c: 42:ec:de:ab:af:6d:97:6b:57:15:38:35:ae:e2:51:19:d2:15: a5:22:b9:c7:bb:f6:29:3a:04:78:0e:7d:5a:df:50:2e:eb:32: 28:4d:22:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaTujRoBw+uk15dFZNULxgPbfubEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNCMjY3MkMwOEI2OTBGODMzREZCOEUzMTUzMzVGRkM5 RkJCRDM3ODAeFw0yNjAzMTcwNjE1NTFaFw0yNjAzMjAwODQ1NTFaMDMxMTAvBgNV BAMTKDhBN0I5QzhFQjlCRDFFNTE3NTI4NjgwMkVDMEQyRDAzMzJDMjFCODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/P/KjAYg3K6+TBmKpEgZeV93o hIDIQXNyWF87rW6IVAR5M0vqeF+2VdH3jXWtUHLAhBw/mqYVjdD1Z3CETzZrZDcA yIyL03IP1HN2fkArPBJh//2DWD3m69Mgrbu7sSJPXaByRLgL3o6J6xsjrG87w4N5 KotpV64OEVpKIcrA1/ROauqE5na1SKJCitX8DZfyGvmAW3uyQhHhIGnawN94bIKc tjieddiWZkHBuLzyMUiMB97HhN6poNRS57t9GiwLq4dLl9fngom4w2WXTaTPHmCH 4Ii8WPuuatEmBe64+pspsiNOXMtt9N6cNQCaJULnlLcEFFM2D7JinC8d8p2NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUinucjrm9HlF1KGgC7A0tAzLCG4UwHwYDVR0j BBgwFoAUc7JnLAi2kPgz37jjFTNf/J+703gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZWIwNjU2OS0wYTJiLTRiMWItOWIwZC1kOTVkMDhhMzRhNzYvMC83M0IyNjcyQzA4 QjY5MEY4MzNERkI4RTMxNTMzNUZGQzlGQkJEMzc4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzNCMjY3MkMwOEI2OTBGODMzREZCOEUzMTUzMzVGRkM5RkJC RDM3OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmViMDY1NjktMGEyYi00YjFiLTli MGQtZDk1ZDA4YTM0YTc2LzAvNzNCMjY3MkMwOEI2OTBGODMzREZCOEUzMTUzMzVG RkM5RkJCRDM3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIz5SuRV1fE7UGvavzsR/T5wYYnyIboxJMuN Hx53ZiX6xPMNLhQxpk7BjHeVrBQO1IZxOOtNVOYEnFOqOJjMkddovsjrq4ErFe18 RmfZYMzhY5hMDGGNb+G2+QzZzEKEVJg+xPAcmtOMD/S5Hy8L+JUh14xQSZz5uuFu ZOcfsr2cm1512f2gU2eQvQB1lAL7f0D0xGXYlcjBy9bLjGe1AhcWw95Vk1KAt2DW +ARZIPuHmvFxjnHU/2Hzx7dy89PW2EntKHbpAtstOP48zUE2cueSZyMMHZ0/DELs 3quvbZdrVxU4Na7iURnSFaUiuce79ik6BHgOfVrfUC7rMihNIp0= -----END CERTIFICATE-----Generated at Thu Mar 19 09:35:56 2026 by rpki-client