$ rpki-client -vvf repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.mft File: 73238FE50473DF8F457921BE1B0C04764209BBF1.mft (raw, json) Hash identifier: 0loPCZKl9uiaqgbLsNlOm0P9feyoTt0ZDXiuJrgp4rM= Subject key identifier: 66:E0:B2:85:76:AF:BB:CB:71:49:65:5E:57:13:10:EE:A4:DF:3D:5A Authority key identifier: 73:23:8F:E5:04:73:DF:8F:45:79:21:BE:1B:0C:04:76:42:09:BB:F1 Certificate issuer: /CN=73238FE50473DF8F457921BE1B0C04764209BBF1 Certificate serial: 225E52ED06A07907980D447C317D09DF5CFE0DB7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73238FE50473DF8F457921BE1B0C04764209BBF1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.mft Manifest number: 0109 Signing time: Thu 05 Mar 2026 20:21:14 +0000 Manifest this update: Thu 05 Mar 2026 20:16:14 +0000 Manifest next update: Mon 09 Mar 2026 06:54:14 +0000 Files and hashes: 1: 73238FE50473DF8F457921BE1B0C04764209BBF1.crl (hash: /hGMlP1J/wZCTr2cWjv1lADwHEhPUnryyoKX2ceaXL4=) 2: 3136302e32322e3130302e302f32342d3234203d3e20313532383038.roa (hash: 6ESo4EJBYW+TZiA7AQCDdrC7W+O2u7DLGxOGwrnalLc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.crl rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73238FE50473DF8F457921BE1B0C04764209BBF1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 06:54:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:5e:52:ed:06:a0:79:07:98:0d:44:7c:31:7d:09:df:5c:fe:0d:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73238FE50473DF8F457921BE1B0C04764209BBF1 Validity Not Before: Mar 5 20:16:14 2026 GMT Not After : Mar 9 06:54:14 2026 GMT Subject: CN=66E0B28576AFBBCB7149655E571310EEA4DF3D5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0b:d9:a0:97:69:89:a4:87:a6:a3:91:93:65: 97:9a:92:a5:f8:31:30:bc:a5:82:33:f7:06:cf:64: ba:5d:a3:a4:00:ca:96:31:43:8a:a6:fc:a6:0a:d1: 58:1b:52:15:3b:44:7e:da:fd:d4:a2:a8:7e:46:80: 1d:b5:a2:f8:7e:1d:65:98:94:7b:89:48:25:d0:d3: 3f:fd:9d:16:86:45:7c:7a:33:85:a8:5d:84:78:a4: 44:89:0e:d2:9b:7a:d4:67:1f:72:93:01:28:56:8f: 19:45:82:8b:ff:bc:00:32:88:3b:e6:9c:31:5a:b9: 92:8d:32:c8:97:83:a0:56:85:9e:2d:22:d6:8f:06: e1:26:ec:cb:31:27:25:59:bc:1b:e6:7a:f4:b5:bd: 5d:b0:7a:93:6d:55:d7:35:5b:8a:27:e8:e5:5d:48: 52:ba:1c:60:58:5e:a9:16:f0:a9:99:58:fb:ff:a3: f2:07:26:91:ea:5c:0e:65:51:92:85:24:28:8d:bf: dd:a7:37:74:97:28:3d:a6:2c:6b:57:d5:db:55:f9: 70:69:5a:d4:2f:3d:a9:dc:d9:04:85:36:42:74:f1: 67:04:81:d9:08:bd:0e:7f:4a:f5:2c:c7:f7:21:57: ce:96:42:a0:2a:0a:07:25:24:e3:df:05:7e:32:22: c4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:E0:B2:85:76:AF:BB:CB:71:49:65:5E:57:13:10:EE:A4:DF:3D:5A X509v3 Authority Key Identifier: keyid:73:23:8F:E5:04:73:DF:8F:45:79:21:BE:1B:0C:04:76:42:09:BB:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73238FE50473DF8F457921BE1B0C04764209BBF1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:5a:45:10:07:5e:24:a4:24:6c:57:ef:79:25:63:aa:a4:20: 12:c7:85:aa:61:80:60:da:7e:ee:7b:ae:2d:77:25:11:9d:6c: f7:9c:11:d4:fe:b2:25:57:b2:3c:39:b7:d0:a6:c0:ac:54:91: 65:4a:18:1c:16:38:24:1b:6a:ab:1b:de:4c:c5:a5:13:eb:51: d0:f3:66:ca:84:d4:20:f4:44:de:e5:d6:2d:2e:bf:ba:43:68: b7:ca:c7:07:57:0c:60:5b:21:1c:fb:7f:9c:94:20:0d:6e:8f: 3b:45:c4:bc:21:25:6a:d9:ac:3d:c0:27:5d:f2:16:ad:b2:46: f8:d9:fe:43:90:69:97:ba:30:e3:ef:bf:58:9d:6d:d9:fa:e2: 30:6b:cf:fa:f8:54:62:25:8a:79:fb:31:9b:6c:07:b3:e8:75: cb:f8:1d:b4:90:fb:95:82:6a:8b:1d:62:a7:d7:93:d7:2b:d1: 1d:97:bf:92:8f:36:28:b9:59:b7:d4:05:01:6e:d2:51:28:bc: 82:d6:c8:14:aa:5a:fa:47:31:6b:1f:ee:1b:80:ca:21:0c:c3: b2:56:59:c0:59:d4:3e:79:94:3e:f7:4c:da:99:ca:bd:17:30: 51:29:49:00:78:90:c8:ce:63:71:65:77:bc:be:30:70:c0:75: 41:71:c7:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIl5S7QageQeYDUR8MX0J31z+DbcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzMyMzhGRTUwNDczREY4RjQ1NzkyMUJFMUIwQzA0NzY0 MjA5QkJGMTAeFw0yNjAzMDUyMDE2MTRaFw0yNjAzMDkwNjU0MTRaMDMxMTAvBgNV BAMTKDY2RTBCMjg1NzZBRkJCQ0I3MTQ5NjU1RTU3MTMxMEVFQTRERjNENUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQC9mgl2mJpIemo5GTZZeakqX4 MTC8pYIz9wbPZLpdo6QAypYxQ4qm/KYK0VgbUhU7RH7a/dSiqH5GgB21ovh+HWWY lHuJSCXQ0z/9nRaGRXx6M4WoXYR4pESJDtKbetRnH3KTAShWjxlFgov/vAAyiDvm nDFauZKNMsiXg6BWhZ4tItaPBuEm7MsxJyVZvBvmevS1vV2wepNtVdc1W4on6OVd SFK6HGBYXqkW8KmZWPv/o/IHJpHqXA5lUZKFJCiNv92nN3SXKD2mLGtX1dtV+XBp WtQvPanc2QSFNkJ08WcEgdkIvQ5/SvUsx/chV86WQqAqCgclJOPfBX4yIsT9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZuCyhXavu8txSWVeVxMQ7qTfPVowHwYDVR0j BBgwFoAUcyOP5QRz349FeSG+GwwEdkIJu/EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MGE4Y2U2Yy04MjkwLTRiOWQtOWFlZC0wNzU0ZDNmZDhkMzIvMC83MzIzOEZFNTA0 NzNERjhGNDU3OTIxQkUxQjBDMDQ3NjQyMDlCQkYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzMyMzhGRTUwNDczREY4RjQ1NzkyMUJFMUIwQzA0NzY0MjA5 QkJGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDBhOGNlNmMtODI5MC00YjlkLTlh ZWQtMDc1NGQzZmQ4ZDMyLzAvNzMyMzhGRTUwNDczREY4RjQ1NzkyMUJFMUIwQzA0 NzY0MjA5QkJGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALxaRRAHXiSkJGxX73klY6qkIBLHhaphgGDa fu57ri13JRGdbPecEdT+siVXsjw5t9CmwKxUkWVKGBwWOCQbaqsb3kzFpRPrUdDz ZsqE1CD0RN7l1i0uv7pDaLfKxwdXDGBbIRz7f5yUIA1ujztFxLwhJWrZrD3AJ13y Fq2yRvjZ/kOQaZe6MOPvv1idbdn64jBrz/r4VGIlinn7MZtsB7Podcv4HbSQ+5WC aosdYqfXk9cr0R2Xv5KPNii5WbfUBQFu0lEovILWyBSqWvpHMWsf7huAyiEMw7JW WcBZ1D55lD73TNqZyr0XMFEpSQB4kMjOY3Fld7y+MHDAdUFxx0s= -----END CERTIFICATE-----Generated at Sat Mar 7 17:49:04 2026 by rpki-client