$ rpki-client -vvf repo-rpki.idnic.net/repo/2eb06569-0a2b-4b1b-9b0d-d95d08a34a76/0/73B2672C08B690F833DFB8E315335FFC9FBBD378.mft File: 73B2672C08B690F833DFB8E315335FFC9FBBD378.mft (raw, json) Hash identifier: 9eF18+IijCFPtyKltaVb5rcoXRWcvq7BXN+tZW+cty8= Subject key identifier: 38:2D:DA:F8:53:19:B9:D4:7F:B1:3F:75:EA:78:C4:68:FE:58:46:E3 Authority key identifier: 73:B2:67:2C:08:B6:90:F8:33:DF:B8:E3:15:33:5F:FC:9F:BB:D3:78 Certificate issuer: /CN=73B2672C08B690F833DFB8E315335FFC9FBBD378 Certificate serial: 6F638E2FAC01EFA05DE917D3A306678181101253 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73B2672C08B690F833DFB8E315335FFC9FBBD378.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2eb06569-0a2b-4b1b-9b0d-d95d08a34a76/0/73B2672C08B690F833DFB8E315335FFC9FBBD378.mft Manifest number: 14 Signing time: Fri 17 Apr 2026 11:30:52 +0000 Manifest this update: Fri 17 Apr 2026 11:25:52 +0000 Manifest next update: Mon 20 Apr 2026 22:06:52 +0000 Files and hashes: 1: 73B2672C08B690F833DFB8E315335FFC9FBBD378.crl (hash: oqWTB+ZYnFWxdoLiyAa+V6cntcrIJd4mqBGOl9G1zW0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2eb06569-0a2b-4b1b-9b0d-d95d08a34a76/0/73B2672C08B690F833DFB8E315335FFC9FBBD378.crl rsync://repo-rpki.idnic.net/repo/2eb06569-0a2b-4b1b-9b0d-d95d08a34a76/0/73B2672C08B690F833DFB8E315335FFC9FBBD378.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73B2672C08B690F833DFB8E315335FFC9FBBD378.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 22:06:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:63:8e:2f:ac:01:ef:a0:5d:e9:17:d3:a3:06:67:81:81:10:12:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73B2672C08B690F833DFB8E315335FFC9FBBD378 Validity Not Before: Apr 17 11:25:52 2026 GMT Not After : Apr 20 22:06:52 2026 GMT Subject: CN=382DDAF85319B9D47FB13F75EA78C468FE5846E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:26:cd:2f:8f:4c:4c:5f:d6:82:35:90:0a:c9: f4:2f:bc:22:f4:09:d6:15:04:2b:a2:c4:71:e8:ce: 30:28:f8:3a:d7:16:96:fa:e2:b0:c1:09:2c:d5:31: 53:94:bb:a0:68:e8:ee:7a:62:a4:f0:eb:a4:51:76: 0e:89:a6:7b:fe:38:23:16:af:ea:90:95:82:e1:8b: 89:f7:3a:e7:a2:6f:e2:cc:0f:03:06:ae:bb:28:1c: dd:fb:4f:b8:b5:68:09:60:0d:32:26:2e:06:d8:5c: b6:ed:dc:91:da:e1:73:4b:9d:5b:13:ff:8d:86:7d: 46:f2:7d:fc:60:77:bb:df:14:42:93:4a:dd:99:ec: 9a:27:09:69:76:17:91:78:fa:ed:49:db:a4:52:f4: 4b:3a:31:42:33:c1:7e:95:ba:d9:d4:d6:51:e7:0f: 2c:63:46:07:50:19:0b:6f:5e:ee:6a:08:e4:d4:65: 0c:55:87:5b:98:8e:d6:d8:0b:2f:43:8b:5a:62:bf: d7:a8:3b:1f:e3:4a:f3:fb:ec:c6:ef:a7:3f:9f:b9: c5:da:d4:16:20:0d:41:aa:54:2b:c2:a8:5b:7e:60: b8:ef:7c:d6:14:b4:78:d1:42:43:01:fd:99:09:bd: 22:e9:7c:20:05:63:80:ff:b2:c1:ba:19:3e:fe:09: 9b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:2D:DA:F8:53:19:B9:D4:7F:B1:3F:75:EA:78:C4:68:FE:58:46:E3 X509v3 Authority Key Identifier: keyid:73:B2:67:2C:08:B6:90:F8:33:DF:B8:E3:15:33:5F:FC:9F:BB:D3:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2eb06569-0a2b-4b1b-9b0d-d95d08a34a76/0/73B2672C08B690F833DFB8E315335FFC9FBBD378.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73B2672C08B690F833DFB8E315335FFC9FBBD378.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2eb06569-0a2b-4b1b-9b0d-d95d08a34a76/0/73B2672C08B690F833DFB8E315335FFC9FBBD378.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:5d:0c:42:4a:39:12:1a:94:0c:db:bc:ec:6c:bc:3e:00:e1: 53:2d:c0:dc:e4:1f:b7:f7:b4:c3:13:1e:13:a9:81:d5:45:66: 9f:f1:19:79:ea:c1:b7:a5:f9:d8:54:52:9d:30:ff:c5:15:bc: 41:9a:7f:b6:2c:f9:0a:2a:c4:1f:ac:0d:3b:e6:32:a8:df:fc: 11:55:36:b6:d8:e1:03:71:10:1d:0d:81:ce:f7:cf:12:ef:9f: 12:86:a8:9f:b2:cd:ea:cb:f0:61:da:e2:08:e4:8a:41:66:0d: 42:42:3e:7c:2f:a3:b8:11:cf:4d:16:00:b4:1c:06:f6:36:b2: 3f:40:8d:e8:d3:78:08:5a:5d:3f:7e:08:f1:da:62:b9:2b:7c: 23:a9:de:c1:c0:2d:06:98:74:3e:1d:0c:d8:f2:e8:54:e9:06: 4a:56:b2:e5:32:57:f0:97:c0:6b:ba:fe:32:0e:9d:8f:49:d1: c1:9e:fd:cf:7b:ca:a7:f6:11:e7:56:60:03:8b:0a:1e:8e:6c: ac:c3:4f:bc:47:6e:93:6d:27:6f:75:6e:26:88:6c:a0:71:ec: 8f:48:50:ad:38:e4:1d:28:97:f6:00:5b:99:ca:6e:12:40:dc: 63:b7:55:68:bb:b1:d8:31:38:a3:0d:3b:ab:67:bc:c1:c7:4a: 31:23:0d:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb2OOL6wB76Bd6RfTowZngYEQElMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNCMjY3MkMwOEI2OTBGODMzREZCOEUzMTUzMzVGRkM5 RkJCRDM3ODAeFw0yNjA0MTcxMTI1NTJaFw0yNjA0MjAyMjA2NTJaMDMxMTAvBgNV BAMTKDM4MkREQUY4NTMxOUI5RDQ3RkIxM0Y3NUVBNzhDNDY4RkU1ODQ2RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnJs0vj0xMX9aCNZAKyfQvvCL0 CdYVBCuixHHozjAo+DrXFpb64rDBCSzVMVOUu6Bo6O56YqTw66RRdg6Jpnv+OCMW r+qQlYLhi4n3Oueib+LMDwMGrrsoHN37T7i1aAlgDTImLgbYXLbt3JHa4XNLnVsT /42GfUbyffxgd7vfFEKTSt2Z7JonCWl2F5F4+u1J26RS9Es6MUIzwX6VutnU1lHn DyxjRgdQGQtvXu5qCOTUZQxVh1uYjtbYCy9Di1piv9eoOx/jSvP77Mbvpz+fucXa 1BYgDUGqVCvCqFt+YLjvfNYUtHjRQkMB/ZkJvSLpfCAFY4D/ssG6GT7+CZvXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOC3a+FMZudR/sT916njEaP5YRuMwHwYDVR0j BBgwFoAUc7JnLAi2kPgz37jjFTNf/J+703gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZWIwNjU2OS0wYTJiLTRiMWItOWIwZC1kOTVkMDhhMzRhNzYvMC83M0IyNjcyQzA4 QjY5MEY4MzNERkI4RTMxNTMzNUZGQzlGQkJEMzc4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzNCMjY3MkMwOEI2OTBGODMzREZCOEUzMTUzMzVGRkM5RkJC RDM3OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmViMDY1NjktMGEyYi00YjFiLTli MGQtZDk1ZDA4YTM0YTc2LzAvNzNCMjY3MkMwOEI2OTBGODMzREZCOEUzMTUzMzVG RkM5RkJCRDM3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIldDEJKORIalAzbvOxsvD4A4VMtwNzkH7f3 tMMTHhOpgdVFZp/xGXnqwbel+dhUUp0w/8UVvEGaf7Ys+QoqxB+sDTvmMqjf/BFV NrbY4QNxEB0Ngc73zxLvnxKGqJ+yzerL8GHa4gjkikFmDUJCPnwvo7gRz00WALQc BvY2sj9AjejTeAhaXT9+CPHaYrkrfCOp3sHALQaYdD4dDNjy6FTpBkpWsuUyV/CX wGu6/jIOnY9J0cGe/c97yqf2EedWYAOLCh6ObKzDT7xHbpNtJ291biaIbKBx7I9I UK045B0ol/YAW5nKbhJA3GO3VWi7sdgxOKMNO6tnvMHHSjEjDcM= -----END CERTIFICATE-----Generated at Sun Apr 19 10:25:22 2026 by rpki-client