$ rpki-client -vvf repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft File: B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft (raw, json) Hash identifier: qHBTPAheNLy3ZAEwYOcK6ZJTNC3x1Q6K4GMrjO6Ta5w= Subject key identifier: 5F:3F:12:9A:20:18:8D:1C:3D:E6:75:A8:B2:3E:82:A9:C0:D0:DD:50 Authority key identifier: B9:72:F0:73:B8:AF:26:B8:53:3E:97:AA:FB:AE:C1:7F:CE:FD:6F:8C Certificate issuer: /CN=B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C Certificate serial: 79B81C60BFAE64DD3AA1FC686468458EC37D35A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft Manifest number: 03D6 Signing time: Thu 26 Mar 2026 01:52:13 +0000 Manifest this update: Thu 26 Mar 2026 01:47:13 +0000 Manifest next update: Sun 29 Mar 2026 04:43:13 +0000 Files and hashes: 1: B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.crl (hash: b1qPbqRwK0ETyMzygedOeJqlWaeETBLO5ibd0VgX4kQ=) 2: 3130332e3135352e3135362e302f32342d3234203d3e20313431303632.roa (hash: 3Qg9iurIgTfr9YpCp3r7IVR3FrXPSUTSH/qNP2Qjoek=) 3: 3130332e3135352e3135372e302f32342d3234203d3e20313431303632.roa (hash: tOeSC/UYI1d4VEyND1xd4XMbu7BuoBzNTjB5yRQkaU8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.crl rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 04:43:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:b8:1c:60:bf:ae:64:dd:3a:a1:fc:68:64:68:45:8e:c3:7d:35:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C Validity Not Before: Mar 26 01:47:13 2026 GMT Not After : Mar 29 04:43:13 2026 GMT Subject: CN=5F3F129A20188D1C3DE675A8B23E82A9C0D0DD50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:a5:52:06:17:ea:ae:df:7a:ad:0c:8d:c1:ea: af:1f:89:18:09:66:89:9a:56:d3:90:1b:d6:9b:38: ef:e9:86:94:43:a1:21:f2:e3:15:13:d6:e3:33:4b: 99:f1:43:a2:0c:8e:eb:9f:c6:c6:b5:8f:db:bf:ff: 10:21:d0:d9:78:8f:1e:31:34:26:99:13:fc:80:aa: 52:95:d6:f3:8f:13:e1:67:c4:07:e6:fe:c9:0c:da: ba:97:0e:17:f1:1e:38:27:6e:9f:2c:be:8e:7c:4c: ad:da:31:0e:24:52:e4:6d:29:d0:9a:19:12:b4:a0: e1:3b:1e:8b:d8:55:e7:69:12:67:e3:65:f8:b9:b0: df:f0:a7:63:b9:67:3d:98:37:f3:ea:af:84:8a:6b: 18:d9:60:36:49:b1:34:9c:d6:dc:f5:c3:50:74:ac: e9:1e:5c:7f:5b:3b:5b:0e:9e:8b:e2:93:64:fd:88: 65:69:bf:b6:5c:b1:19:73:73:4c:12:a6:91:25:ed: 92:ab:9e:e1:c1:bc:bb:09:1b:46:89:04:b8:b7:a5: ec:04:9e:d7:49:9b:bc:2c:2e:8e:b4:d6:75:9c:18: aa:6d:14:05:af:2c:7a:b9:cb:56:4b:3f:82:97:64: b9:a1:9d:ce:f1:19:e1:a9:ab:41:51:b8:f4:a6:d3: 76:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:3F:12:9A:20:18:8D:1C:3D:E6:75:A8:B2:3E:82:A9:C0:D0:DD:50 X509v3 Authority Key Identifier: keyid:B9:72:F0:73:B8:AF:26:B8:53:3E:97:AA:FB:AE:C1:7F:CE:FD:6F:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:c0:2d:c6:02:ed:e7:dc:20:81:bb:8f:60:18:e4:01:dc:9e: 79:78:c9:d5:52:89:99:30:ec:43:f4:b6:3a:8b:ed:57:e3:7d: 48:62:c9:4a:8f:6c:a3:bd:c2:af:5c:20:06:ce:55:2a:45:bc: 57:0c:2d:65:d3:34:1b:d5:34:20:9a:2d:0a:2c:23:85:8a:77: 28:b3:e3:4e:ac:f9:6f:2f:d4:ed:ea:73:07:25:ae:f8:70:c5: 94:a0:26:b0:fa:0f:a0:af:83:08:ad:51:55:8d:95:4a:c9:ba: 2a:0d:3b:77:84:bf:66:30:5a:11:0e:d2:04:63:00:be:15:46: 0f:87:ff:ee:8b:e1:96:28:64:f2:b4:40:13:06:04:dd:50:d3: 93:51:82:33:fe:37:13:b0:f4:5b:50:18:a7:a8:3b:fa:69:13: 07:db:b5:08:13:70:87:16:4d:dc:b1:0b:30:2a:8a:2f:00:d4: df:25:1d:de:bd:5f:4c:28:e7:ef:7a:0a:00:2b:a4:44:41:42: 91:f9:7e:08:d8:ab:84:c3:a3:0b:94:3f:04:d0:c0:47:61:b8: 28:98:0e:5b:7e:e9:3d:ea:50:92:51:8c:31:2f:f1:0f:25:69: d5:15:34:30:fa:ab:3c:92:9b:b4:34:9b:f5:54:90:fd:0c:6f: 1a:75:8e:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUebgcYL+uZN06ofxoZGhFjsN9NaIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk3MkYwNzNCOEFGMjZCODUzM0U5N0FBRkJBRUMxN0ZD RUZENkY4QzAeFw0yNjAzMjYwMTQ3MTNaFw0yNjAzMjkwNDQzMTNaMDMxMTAvBgNV BAMTKDVGM0YxMjlBMjAxODhEMUMzREU2NzVBOEIyM0U4MkE5QzBEMERENTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhpVIGF+qu33qtDI3B6q8fiRgJ ZomaVtOQG9abOO/phpRDoSHy4xUT1uMzS5nxQ6IMjuufxsa1j9u//xAh0Nl4jx4x NCaZE/yAqlKV1vOPE+FnxAfm/skM2rqXDhfxHjgnbp8svo58TK3aMQ4kUuRtKdCa GRK0oOE7HovYVedpEmfjZfi5sN/wp2O5Zz2YN/Pqr4SKaxjZYDZJsTSc1tz1w1B0 rOkeXH9bO1sOnovik2T9iGVpv7ZcsRlzc0wSppEl7ZKrnuHBvLsJG0aJBLi3pewE ntdJm7wsLo601nWcGKptFAWvLHq5y1ZLP4KXZLmhnc7xGeGpq0FRuPSm03YtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXz8SmiAYjRw95nWosj6CqcDQ3VAwHwYDVR0j BBgwFoAUuXLwc7ivJrhTPpeq+67Bf879b4wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZDE2MTljYi1jMDFjLTQ2MTQtODYzZS1jZTI4OGQ3YmE3NjUvMC9COTcyRjA3M0I4 QUYyNkI4NTMzRTk3QUFGQkFFQzE3RkNFRkQ2RjhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjk3MkYwNzNCOEFGMjZCODUzM0U5N0FBRkJBRUMxN0ZDRUZE NkY4Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWQxNjE5Y2ItYzAxYy00NjE0LTg2 M2UtY2UyODhkN2JhNzY1LzAvQjk3MkYwNzNCOEFGMjZCODUzM0U5N0FBRkJBRUMx N0ZDRUZENkY4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGDALcYC7efcIIG7j2AY5AHcnnl4ydVSiZkw 7EP0tjqL7VfjfUhiyUqPbKO9wq9cIAbOVSpFvFcMLWXTNBvVNCCaLQosI4WKdyiz 406s+W8v1O3qcwclrvhwxZSgJrD6D6CvgwitUVWNlUrJuioNO3eEv2YwWhEO0gRj AL4VRg+H/+6L4ZYoZPK0QBMGBN1Q05NRgjP+NxOw9FtQGKeoO/ppEwfbtQgTcIcW TdyxCzAqii8A1N8lHd69X0wo5+96CgArpERBQpH5fgjYq4TDowuUPwTQwEdhuCiY Dlt+6T3qUJJRjDEv8Q8ladUVNDD6qzySm7Q0m/VUkP0Mbxp1jjQ= -----END CERTIFICATE-----Generated at Thu Mar 26 07:21:58 2026 by rpki-client