$ rpki-client -vvf repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.mft File: 73238FE50473DF8F457921BE1B0C04764209BBF1.mft (raw, json) Hash identifier: b8X6wjtYfdyi4vo5IWIRHRroYzXxqi/NKAYha4V1a5o= Subject key identifier: D8:6B:68:3E:EF:25:16:BF:BB:CF:B2:B5:01:B9:1A:0D:B7:2F:02:F7 Authority key identifier: 73:23:8F:E5:04:73:DF:8F:45:79:21:BE:1B:0C:04:76:42:09:BB:F1 Certificate issuer: /CN=73238FE50473DF8F457921BE1B0C04764209BBF1 Certificate serial: 77A2E5E7AB3D1DBDFDC8C14E8204D5799955AC2D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73238FE50473DF8F457921BE1B0C04764209BBF1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.mft Manifest number: 011D Signing time: Mon 20 Apr 2026 14:41:16 +0000 Manifest this update: Mon 20 Apr 2026 14:36:16 +0000 Manifest next update: Thu 23 Apr 2026 20:02:16 +0000 Files and hashes: 1: 73238FE50473DF8F457921BE1B0C04764209BBF1.crl (hash: L8nGNKbsrzUCuhMBJDhdHKC2DKIYTXtQhnsjN91B4b4=) 2: 3136302e32322e3130302e302f32342d3234203d3e20313532383038.roa (hash: 6ESo4EJBYW+TZiA7AQCDdrC7W+O2u7DLGxOGwrnalLc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.crl rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73238FE50473DF8F457921BE1B0C04764209BBF1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 20:02:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:a2:e5:e7:ab:3d:1d:bd:fd:c8:c1:4e:82:04:d5:79:99:55:ac:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73238FE50473DF8F457921BE1B0C04764209BBF1 Validity Not Before: Apr 20 14:36:16 2026 GMT Not After : Apr 23 20:02:16 2026 GMT Subject: CN=D86B683EEF2516BFBBCFB2B501B91A0DB72F02F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:20:2b:e2:91:fd:36:a5:b1:c0:64:95:16:a2: ac:a8:09:71:1f:6b:1d:29:2a:ac:ea:e2:1e:26:1a: 2e:9a:c0:5a:8e:b6:90:59:43:35:b8:e2:cd:40:d9: b6:e6:ef:1d:98:a3:91:ab:a0:9d:97:6f:d7:37:31: bb:c5:2c:9d:08:cf:c4:83:4f:49:c2:2c:dc:94:02: 76:81:85:ee:4d:44:e7:cf:b7:c7:23:d2:8f:c1:3f: 0a:e8:b4:7e:1f:5e:a3:c5:97:87:83:a1:16:7c:7e: 5b:6e:e0:14:68:f3:1a:d7:19:b2:ff:91:ad:71:d4: 92:13:73:5d:1b:37:05:69:6d:b2:aa:98:9c:f7:62: dd:d0:2e:7c:ba:b4:f4:9b:1a:b8:d9:40:0e:2e:89: 79:ac:a9:1a:c4:ba:01:dd:fa:ec:da:ed:03:67:30: 74:cf:30:66:f7:6b:85:96:d6:a5:dc:77:64:25:23: 9f:2e:8c:39:bd:f0:a7:cb:42:12:76:d9:d4:77:80: a3:cd:03:17:25:05:0f:45:6b:b0:54:be:ff:8b:45: 2a:10:0c:a1:d9:6e:bc:0f:51:ca:bd:8b:f4:15:d7: 34:af:cd:96:81:5b:87:53:43:23:05:3c:35:c6:18: b6:2a:d5:44:1d:8b:d1:6e:f6:8e:ee:d1:cd:de:43: d1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:6B:68:3E:EF:25:16:BF:BB:CF:B2:B5:01:B9:1A:0D:B7:2F:02:F7 X509v3 Authority Key Identifier: keyid:73:23:8F:E5:04:73:DF:8F:45:79:21:BE:1B:0C:04:76:42:09:BB:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73238FE50473DF8F457921BE1B0C04764209BBF1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:0e:c4:fd:6a:5f:c3:c8:d1:5a:fa:79:14:ae:6e:d9:8f:7e: 68:36:50:ee:f8:e8:98:16:7d:e4:ea:88:e0:80:c3:e9:c5:da: 9d:96:84:0b:0e:65:fd:8c:11:f2:c5:7b:29:82:2d:c8:4b:a1: c4:21:df:48:0b:9e:e5:12:45:17:54:a1:1a:7e:ac:b3:4c:36: 37:a4:f1:57:99:7b:58:7f:8f:ae:14:48:9d:e1:46:40:d1:cf: 94:20:de:cf:2f:08:7a:bf:3d:90:f5:30:4c:8f:f4:e4:03:0b: 3e:2f:c5:7d:63:95:ab:9e:69:92:6a:ec:64:b4:28:a6:6a:7b: 3a:5f:0a:46:36:64:98:99:2b:8f:92:a1:34:e0:ae:b3:26:86: 83:d9:b9:1a:c6:65:1b:02:fe:fb:1e:f7:48:c1:45:f4:df:3c: 1d:f1:c8:13:02:86:c6:a3:70:15:4a:7f:4c:ec:b0:b7:22:94: 13:24:76:f4:2c:49:4f:ae:20:db:c6:bb:ab:74:ee:00:7d:36: 21:8b:72:99:33:b1:cb:38:79:b5:c1:8c:a3:f1:c6:0d:5b:d0: 19:24:6e:41:54:5c:f1:b4:49:7c:a5:a8:2d:55:e1:86:c7:1f: 05:44:6c:94:e2:01:b2:98:c5:ca:d0:e4:f1:41:d8:f6:f9:90: 94:56:12:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd6Ll56s9Hb39yMFOggTVeZlVrC0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzMyMzhGRTUwNDczREY4RjQ1NzkyMUJFMUIwQzA0NzY0 MjA5QkJGMTAeFw0yNjA0MjAxNDM2MTZaFw0yNjA0MjMyMDAyMTZaMDMxMTAvBgNV BAMTKEQ4NkI2ODNFRUYyNTE2QkZCQkNGQjJCNTAxQjkxQTBEQjcyRjAyRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjICvikf02pbHAZJUWoqyoCXEf ax0pKqzq4h4mGi6awFqOtpBZQzW44s1A2bbm7x2Yo5GroJ2Xb9c3MbvFLJ0Iz8SD T0nCLNyUAnaBhe5NROfPt8cj0o/BPwrotH4fXqPFl4eDoRZ8fltu4BRo8xrXGbL/ ka1x1JITc10bNwVpbbKqmJz3Yt3QLny6tPSbGrjZQA4uiXmsqRrEugHd+uza7QNn MHTPMGb3a4WW1qXcd2QlI58ujDm98KfLQhJ22dR3gKPNAxclBQ9Fa7BUvv+LRSoQ DKHZbrwPUcq9i/QV1zSvzZaBW4dTQyMFPDXGGLYq1UQdi9Fu9o7u0c3eQ9HrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2GtoPu8lFr+7z7K1AbkaDbcvAvcwHwYDVR0j BBgwFoAUcyOP5QRz349FeSG+GwwEdkIJu/EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MGE4Y2U2Yy04MjkwLTRiOWQtOWFlZC0wNzU0ZDNmZDhkMzIvMC83MzIzOEZFNTA0 NzNERjhGNDU3OTIxQkUxQjBDMDQ3NjQyMDlCQkYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzMyMzhGRTUwNDczREY4RjQ1NzkyMUJFMUIwQzA0NzY0MjA5 QkJGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDBhOGNlNmMtODI5MC00YjlkLTlh ZWQtMDc1NGQzZmQ4ZDMyLzAvNzMyMzhGRTUwNDczREY4RjQ1NzkyMUJFMUIwQzA0 NzY0MjA5QkJGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADoOxP1qX8PI0Vr6eRSubtmPfmg2UO746JgW feTqiOCAw+nF2p2WhAsOZf2MEfLFeymCLchLocQh30gLnuUSRRdUoRp+rLNMNjek 8VeZe1h/j64USJ3hRkDRz5Qg3s8vCHq/PZD1MEyP9OQDCz4vxX1jlaueaZJq7GS0 KKZqezpfCkY2ZJiZK4+SoTTgrrMmhoPZuRrGZRsC/vse90jBRfTfPB3xyBMChsaj cBVKf0zssLcilBMkdvQsSU+uINvGu6t07gB9NiGLcpkzscs4ebXBjKPxxg1b0Bkk bkFUXPG0SXylqC1V4YbHHwVEbJTiAbKYxcrQ5PFB2Pb5kJRWEkQ= -----END CERTIFICATE-----Generated at Wed Apr 22 04:52:47 2026 by rpki-client