$ rpki-client -vvf repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.mft File: 73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.mft (raw, json) Hash identifier: m1ksDZ2Q5FaRfMuEW4xyjo8pDKj6mPsfUpOZo+zk6+A= Subject key identifier: F2:0A:27:5E:26:7C:16:88:BD:F1:E0:86:AA:BD:16:F0:88:90:49:2E Authority key identifier: 73:AF:94:5E:FF:5E:A9:D1:EF:DC:26:17:FA:43:43:0E:87:E1:9A:B6 Certificate issuer: /CN=73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6 Certificate serial: 0BF8EA1A8D31CB122F1DF525C736467F0B65EA71 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.mft Manifest number: 0121 Signing time: Tue 21 Apr 2026 13:11:28 +0000 Manifest this update: Tue 21 Apr 2026 13:06:28 +0000 Manifest next update: Fri 24 Apr 2026 14:00:28 +0000 Files and hashes: 1: 3135372e36362e3137312e302f32342d3234203d3e20313532373737.roa (hash: uOA4jTwlkcqlsjP32WwaK900NFV6wePG9q2fIgGqlJw=) 2: 73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.crl (hash: uFKGEhq3giaHOmmJC10ZL6lSWpJr1+rhDnNug8YgEto=) 3: 3135372e36362e3137302e302f32342d3234203d3e20313532373737.roa (hash: mWn5DPCiekSxGNB8RumBKf5syIxB4d7+KUn6ZNJHctk=) 4: 3135372e36362e3137302e302f32332d3233203d3e20313532373737.roa (hash: bCp+hfr7ROEtQWyvQHaGucdWFI7N+d4ip6n9SavuoOk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.crl rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 13:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:f8:ea:1a:8d:31:cb:12:2f:1d:f5:25:c7:36:46:7f:0b:65:ea:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6 Validity Not Before: Apr 21 13:06:28 2026 GMT Not After : Apr 24 14:00:28 2026 GMT Subject: CN=F20A275E267C1688BDF1E086AABD16F08890492E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:39:03:67:c6:5e:31:70:12:a9:86:3a:19:17: 54:a1:62:96:f0:82:fc:f0:d9:6b:a0:05:33:87:e4: 92:73:70:7f:21:3f:ff:dd:cf:23:87:c2:6e:ce:05: 03:e6:05:ef:11:b7:0a:0b:6a:93:2a:b7:3f:cf:73: af:43:18:26:77:da:07:de:11:e2:17:4f:4d:cd:c0: ac:ec:44:eb:13:c2:0f:88:f6:6f:32:62:3c:4d:7b: 12:8d:6e:65:21:30:c3:23:3b:af:04:c0:7b:ea:2f: c2:c7:cb:31:25:39:f6:89:1f:6d:34:1f:29:e7:ed: 53:48:ee:4b:89:f6:7d:30:00:0a:ed:0c:9a:23:cf: c4:4a:3b:4a:0b:46:ee:6d:9f:b6:2a:c0:9c:84:12: a0:a3:60:f8:86:11:d6:5e:26:c9:3e:b1:52:e4:e6: 72:93:17:85:a6:d2:cb:43:47:3a:97:5b:de:0d:fb: a6:b6:29:13:b6:80:73:36:9e:18:5e:5a:17:3f:2a: eb:6d:16:cf:b3:87:3e:fd:59:b2:48:2a:30:d8:ec: a9:1f:76:42:e5:58:74:d0:ee:21:af:61:76:8b:21: d3:e5:18:4e:e7:63:cd:22:a7:40:13:cd:32:bd:4d: ec:da:a3:ec:99:08:a7:64:46:b1:41:cc:49:a0:a4: e3:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:0A:27:5E:26:7C:16:88:BD:F1:E0:86:AA:BD:16:F0:88:90:49:2E X509v3 Authority Key Identifier: keyid:73:AF:94:5E:FF:5E:A9:D1:EF:DC:26:17:FA:43:43:0E:87:E1:9A:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/73AF945EFF5EA9D1EFDC2617FA43430E87E19AB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:69:8a:68:53:39:00:38:94:14:e7:ef:87:56:e4:61:7e:78: da:da:60:b3:d4:e9:dd:83:d8:fd:8a:f7:99:b4:91:43:ab:d8: f9:39:d1:86:00:e4:34:c1:9d:62:75:34:46:49:ea:4d:c5:e9: f7:ce:30:f0:96:3d:86:2d:53:c8:3c:80:80:ad:83:b6:58:11: 43:9e:46:9f:eb:6a:55:1c:50:c5:6f:f7:d6:53:c3:56:d5:db: 8d:f0:c5:30:d2:45:ae:74:b7:47:9a:3e:dc:28:60:06:12:89: 8b:32:8e:51:03:b1:4b:c6:4a:0c:33:a0:ac:a6:0b:28:7b:26: 1f:77:63:b0:60:f7:80:1a:00:1c:34:7f:a0:6b:98:51:04:2f: 7c:f7:3d:e7:25:32:bd:a5:6f:91:ee:74:01:01:20:38:f8:44: 98:6e:c1:25:91:34:b5:7d:d4:7b:1f:bb:e7:20:93:5d:14:da: ed:90:a4:48:67:6f:a7:ae:65:b6:aa:26:a5:a8:f2:24:31:57: 66:e9:08:0f:07:17:7e:11:1a:f9:80:1d:e9:27:ed:08:15:c6: e8:68:b3:3b:23:74:cf:77:87:1a:65:a4:9d:90:8d:7a:90:1c: 5d:76:85:b4:cd:2f:ef:cb:07:5c:fc:7c:d1:0d:9e:84:b2:7a: cf:b3:5b:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC/jqGo0xyxIvHfUlxzZGfwtl6nEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNBRjk0NUVGRjVFQTlEMUVGREMyNjE3RkE0MzQzMEU4 N0UxOUFCNjAeFw0yNjA0MjExMzA2MjhaFw0yNjA0MjQxNDAwMjhaMDMxMTAvBgNV BAMTKEYyMEEyNzVFMjY3QzE2ODhCREYxRTA4NkFBQkQxNkYwODg5MDQ5MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWOQNnxl4xcBKphjoZF1ShYpbw gvzw2WugBTOH5JJzcH8hP//dzyOHwm7OBQPmBe8RtwoLapMqtz/Pc69DGCZ32gfe EeIXT03NwKzsROsTwg+I9m8yYjxNexKNbmUhMMMjO68EwHvqL8LHyzElOfaJH200 Hynn7VNI7kuJ9n0wAArtDJojz8RKO0oLRu5tn7YqwJyEEqCjYPiGEdZeJsk+sVLk 5nKTF4Wm0stDRzqXW94N+6a2KRO2gHM2nhheWhc/KuttFs+zhz79WbJIKjDY7Kkf dkLlWHTQ7iGvYXaLIdPlGE7nY80ip0ATzTK9Tezao+yZCKdkRrFBzEmgpOO3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8gonXiZ8Foi98eCGqr0W8IiQSS4wHwYDVR0j BBgwFoAUc6+UXv9eqdHv3CYX+kNDDofhmrYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NTQ4MTYwNi1kNWZkLTQxOTYtYWJjZC01OGU2Yzc2MjQzYzUvMC83M0FGOTQ1RUZG NUVBOUQxRUZEQzI2MTdGQTQzNDMwRTg3RTE5QUI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzNBRjk0NUVGRjVFQTlEMUVGREMyNjE3RkE0MzQzMEU4N0Ux OUFCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTU0ODE2MDYtZDVmZC00MTk2LWFi Y2QtNThlNmM3NjI0M2M1LzAvNzNBRjk0NUVGRjVFQTlEMUVGREMyNjE3RkE0MzQz MEU4N0UxOUFCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACxpimhTOQA4lBTn74dW5GF+eNraYLPU6d2D 2P2K95m0kUOr2Pk50YYA5DTBnWJ1NEZJ6k3F6ffOMPCWPYYtU8g8gICtg7ZYEUOe Rp/ralUcUMVv99ZTw1bV243wxTDSRa50t0eaPtwoYAYSiYsyjlEDsUvGSgwzoKym Cyh7Jh93Y7Bg94AaABw0f6BrmFEEL3z3PeclMr2lb5HudAEBIDj4RJhuwSWRNLV9 1Hsfu+cgk10U2u2QpEhnb6euZbaqJqWo8iQxV2bpCA8HF34RGvmAHekn7QgVxuho szsjdM93hxplpJ2QjXqQHF12hbTNL+/LB1z8fNENnoSyes+zW7w= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:55 2026 by rpki-client