$ rpki-client -vvf repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft File: 968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft (raw, json) Hash identifier: kjUMih1N6uO/fTsPC6ncbOD89eBCiSV3cIKrcl7gx5Q= Subject key identifier: 27:9F:97:7A:7C:20:8C:19:7F:89:AC:58:33:98:BC:38:82:2D:87:FD Authority key identifier: 96:8A:6F:AD:63:7E:47:06:8D:2F:BC:54:7F:BF:2C:1C:12:F8:C5:88 Certificate issuer: /CN=968A6FAD637E47068D2FBC547FBF2C1C12F8C588 Certificate serial: 6690DC1E64FC3051CECB17EB3832C47B40B58AA6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft Manifest number: 022A Signing time: Thu 26 Mar 2026 03:12:44 +0000 Manifest this update: Thu 26 Mar 2026 03:07:44 +0000 Manifest next update: Sun 29 Mar 2026 13:15:44 +0000 Files and hashes: 1: 3130332e38372e36382e302f32342d3234203d3e20313530323439.roa (hash: 8lJPUsKlUGR1W/uo827D06TJO+cPwjSi9R8wQT4VPpg=) 2: 968A6FAD637E47068D2FBC547FBF2C1C12F8C588.crl (hash: i3Y74N7z9445xjRruL+rC3pa9yUtgSGt4DhS8vFxCFc=) 3: 323030313a6466313a373334303a3a2f34382d3438203d3e20313530323439.roa (hash: eNkBoyVM5lmriR4TCktsibpcmvUKMiPu24PT3RZP9b8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.crl rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 13:15:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:90:dc:1e:64:fc:30:51:ce:cb:17:eb:38:32:c4:7b:40:b5:8a:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=968A6FAD637E47068D2FBC547FBF2C1C12F8C588 Validity Not Before: Mar 26 03:07:44 2026 GMT Not After : Mar 29 13:15:44 2026 GMT Subject: CN=279F977A7C208C197F89AC583398BC38822D87FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f7:31:9a:37:a1:d7:ab:b2:8d:e5:15:80:4e: f9:aa:e9:cd:12:60:81:91:ee:6f:3f:e4:47:25:90: 4d:8d:1a:a7:85:88:96:da:d7:37:a5:59:9a:58:87: 19:11:43:7a:43:ad:1a:05:a0:f3:63:20:ba:3b:66: 88:76:5b:f0:d9:6e:b0:b5:f7:bc:5b:77:49:3a:1d: fa:e7:05:02:2d:89:98:51:1b:99:7e:03:d5:17:37: d1:5e:68:1f:58:eb:2a:37:94:67:ee:d0:56:f6:24: 65:36:a9:95:cf:10:b1:cc:0c:1d:ce:25:95:f8:32: d8:44:ac:6a:f0:e5:09:db:89:58:95:b7:20:50:59: 47:10:56:5b:ee:61:79:0c:22:07:24:73:96:1e:ef: dc:c9:e7:34:f7:50:1e:60:dd:f3:0f:dd:5a:17:7d: ad:95:9d:e8:51:ec:7a:82:e0:6f:91:7e:6c:3a:9f: a1:1e:85:40:93:31:d1:cc:3c:a3:8a:e7:b0:a9:aa: b7:72:c8:ac:48:e0:b6:23:73:09:a2:d2:3d:d2:c4: 28:d8:d5:ce:cf:37:db:67:5d:8d:6c:13:30:74:ba: 62:13:d4:df:ec:65:a6:da:71:40:9e:3f:8d:4f:45: 5f:2d:35:f5:09:39:d3:28:6f:e5:e0:ab:7c:37:81: 46:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:9F:97:7A:7C:20:8C:19:7F:89:AC:58:33:98:BC:38:82:2D:87:FD X509v3 Authority Key Identifier: keyid:96:8A:6F:AD:63:7E:47:06:8D:2F:BC:54:7F:BF:2C:1C:12:F8:C5:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:42:e3:4c:28:7c:fd:f4:38:8a:fa:7e:65:5d:ba:a8:ad:82: 9d:78:7b:bf:59:9a:29:a2:a9:71:a7:66:18:6c:0c:3c:2d:83: 9c:69:53:fa:60:ec:d3:39:4a:30:21:cb:3e:9c:25:e7:64:5d: 1a:bc:02:cc:7e:ea:3d:e8:85:41:20:36:be:3a:19:6d:3c:31: 84:20:a1:dc:0f:24:f6:00:39:04:cc:cb:da:10:2d:2e:e5:a2: 3a:0a:4c:4f:ff:9a:4f:97:3a:43:0c:71:a8:c6:75:61:90:2e: 3d:09:07:23:91:fb:c2:75:c9:47:05:9b:a0:fb:24:86:42:76: 06:cb:af:4d:36:9f:c2:9a:44:4c:b1:53:f0:12:79:5f:de:c1: 5a:86:11:d3:c7:64:51:7b:c5:c1:39:fd:0e:8e:09:14:41:4a: d7:59:58:7a:1f:a7:ac:09:89:7b:aa:6b:12:98:41:99:e3:7f: 46:14:75:2b:2b:fa:b3:4f:85:af:9f:3b:0a:53:39:68:fb:ca: 44:00:12:23:9a:e5:d9:bf:d0:58:b9:53:ba:8e:18:6f:07:ca: 31:05:59:96:8b:06:41:c1:a8:fb:c4:1b:1a:5e:08:4f:df:c5: e3:17:cd:67:55:b0:b3:7a:67:d8:49:1a:50:a4:ae:56:cf:45: ff:63:1a:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZpDcHmT8MFHOyxfrODLEe0C1iqYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY4QTZGQUQ2MzdFNDcwNjhEMkZCQzU0N0ZCRjJDMUMx MkY4QzU4ODAeFw0yNjAzMjYwMzA3NDRaFw0yNjAzMjkxMzE1NDRaMDMxMTAvBgNV BAMTKDI3OUY5NzdBN0MyMDhDMTk3Rjg5QUM1ODMzOThCQzM4ODIyRDg3RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc9zGaN6HXq7KN5RWATvmq6c0S YIGR7m8/5EclkE2NGqeFiJba1zelWZpYhxkRQ3pDrRoFoPNjILo7Zoh2W/DZbrC1 97xbd0k6HfrnBQItiZhRG5l+A9UXN9FeaB9Y6yo3lGfu0Fb2JGU2qZXPELHMDB3O JZX4MthErGrw5QnbiViVtyBQWUcQVlvuYXkMIgckc5Ye79zJ5zT3UB5g3fMP3VoX fa2VnehR7HqC4G+Rfmw6n6EehUCTMdHMPKOK57CpqrdyyKxI4LYjcwmi0j3SxCjY 1c7PN9tnXY1sEzB0umIT1N/sZabacUCeP41PRV8tNfUJOdMob+Xgq3w3gUZlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ5+XenwgjBl/iaxYM5i8OIIth/0wHwYDVR0j BBgwFoAUlopvrWN+RwaNL7xUf78sHBL4xYgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzljNTQ4NC0yZTM3LTQ4ZjktOGViYS0wYWY0ZWY2Mjk0N2QvMC85NjhBNkZBRDYz N0U0NzA2OEQyRkJDNTQ3RkJGMkMxQzEyRjhDNTg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTY4QTZGQUQ2MzdFNDcwNjhEMkZCQzU0N0ZCRjJDMUMxMkY4 QzU4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTM5YzU0ODQtMmUzNy00OGY5LThl YmEtMGFmNGVmNjI5NDdkLzAvOTY4QTZGQUQ2MzdFNDcwNjhEMkZCQzU0N0ZCRjJD MUMxMkY4QzU4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMtC40wofP30OIr6fmVduqitgp14e79Zmimi qXGnZhhsDDwtg5xpU/pg7NM5SjAhyz6cJedkXRq8Asx+6j3ohUEgNr46GW08MYQg odwPJPYAOQTMy9oQLS7lojoKTE//mk+XOkMMcajGdWGQLj0JByOR+8J1yUcFm6D7 JIZCdgbLr002n8KaREyxU/ASeV/ewVqGEdPHZFF7xcE5/Q6OCRRBStdZWHofp6wJ iXuqaxKYQZnjf0YUdSsr+rNPha+fOwpTOWj7ykQAEiOa5dm/0Fi5U7qOGG8HyjEF WZaLBkHBqPvEGxpeCE/fxeMXzWdVsLN6Z9hJGlCkrlbPRf9jGow= -----END CERTIFICATE-----Generated at Thu Mar 26 07:41:39 2026 by rpki-client