$ rpki-client -vvf repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.mft File: 73626536B3B2A503E6D53473A97CF39A13301753.mft (raw, json) Hash identifier: jQOkK6Lce6e6XNCx+4rvJAgWCT/J8Cai6O0TaEy1mUo= Subject key identifier: 28:77:CA:25:3D:3E:66:09:DE:EE:B9:3B:06:3B:31:68:3E:3B:5C:B8 Authority key identifier: 73:62:65:36:B3:B2:A5:03:E6:D5:34:73:A9:7C:F3:9A:13:30:17:53 Certificate issuer: /CN=73626536B3B2A503E6D53473A97CF39A13301753 Certificate serial: 37E33789C8C0BFFDCB842F8BD7CD3F54D3313DE5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73626536B3B2A503E6D53473A97CF39A13301753.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.mft Manifest number: E7 Signing time: Sun 01 Mar 2026 20:51:02 +0000 Manifest this update: Sun 01 Mar 2026 20:46:02 +0000 Manifest next update: Thu 05 Mar 2026 00:11:02 +0000 Files and hashes: 1: 3136302e3138372e3133382e302f32342d3234203d3e20313533313232.roa (hash: DkaD62yPmgT3rL8vnnIbnI/XVBv8VoP+g+l6Q15s5Ng=) 2: 3136302e3138372e3133392e302f32342d3234203d3e20313533313232.roa (hash: ddc27gBMr3OYby+60rTsFN4jTsnZf0K6QpQ3U8AJvJI=) 3: 73626536B3B2A503E6D53473A97CF39A13301753.crl (hash: 61hp4oGZh2+NHCPYqSt9FBkKRUTAVGAyLgRDgBYb6LU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.crl rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73626536B3B2A503E6D53473A97CF39A13301753.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:11:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:e3:37:89:c8:c0:bf:fd:cb:84:2f:8b:d7:cd:3f:54:d3:31:3d:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73626536B3B2A503E6D53473A97CF39A13301753 Validity Not Before: Mar 1 20:46:02 2026 GMT Not After : Mar 5 00:11:02 2026 GMT Subject: CN=2877CA253D3E6609DEEEB93B063B31683E3B5CB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f0:83:c4:cd:76:34:61:bc:5d:90:68:a1:e7: 70:d7:c7:8e:03:59:cf:58:9e:98:0d:a0:87:d3:27: dd:cb:9d:74:9b:ae:18:d3:c1:3e:1a:20:be:60:05: 97:c6:25:8b:3f:1d:51:13:79:83:78:e8:2c:fb:f8: da:10:3b:c8:9d:5c:e4:e7:fc:04:67:eb:28:0e:69: 79:c6:f0:1c:7d:37:df:87:01:40:ff:67:d4:43:96: 0c:28:6e:1e:76:9e:fc:59:3b:d3:68:55:bd:a3:67: a1:d6:e7:36:5e:f8:36:21:6b:a6:fe:9e:eb:d2:90: 59:37:1c:e4:d9:33:0c:aa:f4:05:00:28:77:d6:a4: 22:cc:de:19:2b:ca:34:da:a1:49:b9:98:f4:7f:f7: 4e:b8:8b:3c:4d:5f:f9:76:a8:9f:39:4f:cf:0b:c2: ed:fa:a1:3a:bc:f1:e0:71:5e:d4:34:38:78:c1:2a: 45:48:ae:0a:d2:08:14:20:fe:cb:c0:54:90:7e:a8: f7:de:e0:82:25:ac:87:9d:de:6e:fe:8a:d9:9d:14: f2:43:e7:62:8c:b2:d3:ef:4b:03:73:91:fe:26:51: 22:c2:2b:ac:0e:45:79:92:00:80:ea:4b:f9:e4:de: a8:bf:5b:99:49:90:86:f0:c3:f9:52:58:d2:31:40: 35:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:77:CA:25:3D:3E:66:09:DE:EE:B9:3B:06:3B:31:68:3E:3B:5C:B8 X509v3 Authority Key Identifier: keyid:73:62:65:36:B3:B2:A5:03:E6:D5:34:73:A9:7C:F3:9A:13:30:17:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73626536B3B2A503E6D53473A97CF39A13301753.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:cf:f3:d9:84:2f:20:fb:7d:ec:e9:32:a4:58:39:94:9b:40: 01:58:a7:df:c0:a3:3b:e2:3b:35:82:b8:e7:be:85:15:8f:78: 8e:1b:1e:3a:65:10:f9:44:e3:af:9a:90:c2:ed:4f:c5:f7:c7: d6:43:cf:0a:8e:79:3d:ef:7e:49:9a:ba:2b:14:c5:f0:12:2e: 5c:a8:aa:be:d1:94:a6:d8:2c:b8:5e:f2:4f:01:b7:9d:77:63: 00:47:9e:a3:39:75:be:6e:42:7e:9e:8a:eb:69:15:e8:2a:30: 94:23:3e:89:fc:60:39:73:ba:cb:0d:23:d6:d5:c7:56:8e:ee: e8:ab:e0:8c:b7:d2:d6:ae:79:e9:ad:06:d8:ff:7e:ba:57:cf: ef:b3:94:9e:b2:4c:16:88:a0:64:02:03:ec:ad:16:96:1b:8a: fc:5b:83:a9:ec:a5:1f:de:23:2d:bb:34:11:2e:6f:48:06:b8: fa:9c:ae:03:da:22:5b:99:87:7d:a2:72:f8:ab:99:1b:d4:67: 54:50:af:23:b7:7e:52:04:1f:af:82:f7:22:29:eb:a2:df:85: b4:ed:e3:30:8e:a0:72:e2:76:a2:d4:5d:fd:1b:d6:3b:d3:f1: e5:87:e9:38:60:e3:a8:39:3f:3b:9e:cb:6f:b9:b5:8f:96:ba: f1:01:24:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN+M3icjAv/3LhC+L180/VNMxPeUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzM2MjY1MzZCM0IyQTUwM0U2RDUzNDczQTk3Q0YzOUEx MzMwMTc1MzAeFw0yNjAzMDEyMDQ2MDJaFw0yNjAzMDUwMDExMDJaMDMxMTAvBgNV BAMTKDI4NzdDQTI1M0QzRTY2MDlERUVFQjkzQjA2M0IzMTY4M0UzQjVDQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu8IPEzXY0YbxdkGih53DXx44D Wc9YnpgNoIfTJ93LnXSbrhjTwT4aIL5gBZfGJYs/HVETeYN46Cz7+NoQO8idXOTn /ARn6ygOaXnG8Bx9N9+HAUD/Z9RDlgwobh52nvxZO9NoVb2jZ6HW5zZe+DYha6b+ nuvSkFk3HOTZMwyq9AUAKHfWpCLM3hkryjTaoUm5mPR/9064izxNX/l2qJ85T88L wu36oTq88eBxXtQ0OHjBKkVIrgrSCBQg/svAVJB+qPfe4IIlrIed3m7+itmdFPJD 52KMstPvSwNzkf4mUSLCK6wORXmSAIDqS/nk3qi/W5lJkIbww/lSWNIxQDV/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKHfKJT0+Zgne7rk7BjsxaD47XLgwHwYDVR0j BBgwFoAUc2JlNrOypQPm1TRzqXzzmhMwF1MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDIyZjY0OS05OTY4LTQ5NWQtYmRmMS03ZDc2MjU2ZGFhZDUvMC83MzYyNjUzNkIz QjJBNTAzRTZENTM0NzNBOTdDRjM5QTEzMzAxNzUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzM2MjY1MzZCM0IyQTUwM0U2RDUzNDczQTk3Q0YzOUExMzMw MTc1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQyMmY2NDktOTk2OC00OTVkLWJk ZjEtN2Q3NjI1NmRhYWQ1LzAvNzM2MjY1MzZCM0IyQTUwM0U2RDUzNDczQTk3Q0Yz OUExMzMwMTc1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC7P89mELyD7fezpMqRYOZSbQAFYp9/Aozvi OzWCuOe+hRWPeI4bHjplEPlE46+akMLtT8X3x9ZDzwqOeT3vfkmauisUxfASLlyo qr7RlKbYLLhe8k8Bt513YwBHnqM5db5uQn6eiutpFegqMJQjPon8YDlzussNI9bV x1aO7uir4Iy30taueemtBtj/frpXz++zlJ6yTBaIoGQCA+ytFpYbivxbg6nspR/e Iy27NBEub0gGuPqcrgPaIluZh32icvirmRvUZ1RQryO3flIEH6+C9yIp66LfhbTt 4zCOoHLidqLUXf0b1jvT8eWH6Thg46g5Pzuey2+5tY+WuvEBJFE= -----END CERTIFICATE-----Generated at Mon Mar 2 09:41:36 2026 by rpki-client