$ rpki-client -vvf repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft File: 961A52A522DEB902D9CBDDE98AF82B424422F566.mft (raw, json) Hash identifier: M8IXjLqJXjrMbKKpcofApRFxPK5xwphQg/yma7glXww= Subject key identifier: 1A:B5:D9:FE:5E:E0:CB:55:7E:8D:E7:D8:54:36:FA:96:C9:01:04:27 Authority key identifier: 96:1A:52:A5:22:DE:B9:02:D9:CB:DD:E9:8A:F8:2B:42:44:22:F5:66 Certificate issuer: /CN=961A52A522DEB902D9CBDDE98AF82B424422F566 Certificate serial: 6B62B1A11CD3EF3B96356CE6777106C0280E4B91 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/961A52A522DEB902D9CBDDE98AF82B424422F566.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft Manifest number: F2 Signing time: Thu 26 Mar 2026 03:02:07 +0000 Manifest this update: Thu 26 Mar 2026 02:57:07 +0000 Manifest next update: Sun 29 Mar 2026 12:26:07 +0000 Files and hashes: 1: 3136302e32352e3132312e302f32342d3234203d3e20313533303632.roa (hash: XtBt14fZ3818vCxS3m952cY63i6gO8+A0tVjyGHPoaU=) 2: 961A52A522DEB902D9CBDDE98AF82B424422F566.crl (hash: bBKyBaPUKHmeQry28DKxLXP5ZgyF4zvvfs6M2vv7flo=) 3: 3136302e32352e3132302e302f32342d3234203d3e20313533303632.roa (hash: N9c4heSXbZO9oKOiPxMzMpy/UHaeJZCIa3f88aATMcc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.crl rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/961A52A522DEB902D9CBDDE98AF82B424422F566.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 12:26:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:62:b1:a1:1c:d3:ef:3b:96:35:6c:e6:77:71:06:c0:28:0e:4b:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=961A52A522DEB902D9CBDDE98AF82B424422F566 Validity Not Before: Mar 26 02:57:07 2026 GMT Not After : Mar 29 12:26:07 2026 GMT Subject: CN=1AB5D9FE5EE0CB557E8DE7D85436FA96C9010427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d3:b2:f2:e4:b1:a6:69:05:55:3e:0b:a2:c6: 41:55:c6:98:67:b5:98:dc:0a:55:a4:d2:59:b6:17: 32:90:02:66:f5:c9:4b:54:b6:80:ca:ef:bf:f9:cc: ca:fc:0a:38:e7:e4:99:a0:db:09:8e:a5:74:9c:f4: 62:2a:dd:d6:b5:a2:f6:40:bd:d0:f8:15:7b:ff:01: 2f:62:9c:f4:50:6c:8c:b8:85:d7:00:21:e0:0b:90: 6f:23:f4:38:eb:4f:83:78:07:3c:7d:a4:a9:24:9f: 33:cd:dd:32:e0:68:9e:86:83:82:2a:99:c2:1c:c7: 3f:f9:4a:f2:e6:e9:01:bc:4e:3e:a4:28:92:08:5c: d9:7f:91:37:ef:4e:4e:cb:87:1b:e3:87:4f:39:97: 08:82:b2:74:f0:0e:ee:97:07:13:a9:a8:ed:fd:8d: ce:32:ae:e9:16:d4:7a:bc:de:9d:20:7b:67:28:76: 61:b9:f9:f3:aa:58:7d:b5:d6:b5:b7:bd:52:25:7b: c9:14:44:5b:15:b5:73:b8:a9:e4:45:68:66:10:fb: b8:b5:84:15:e2:66:ec:8f:8d:5d:52:76:4e:a8:ac: 66:84:42:43:3e:33:d7:da:d6:69:4e:7b:cd:3f:b3: a6:e5:1b:13:c0:45:dc:76:8f:3f:9f:ef:fe:9d:db: d0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B5:D9:FE:5E:E0:CB:55:7E:8D:E7:D8:54:36:FA:96:C9:01:04:27 X509v3 Authority Key Identifier: keyid:96:1A:52:A5:22:DE:B9:02:D9:CB:DD:E9:8A:F8:2B:42:44:22:F5:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/961A52A522DEB902D9CBDDE98AF82B424422F566.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:7d:2f:cc:7d:98:bd:09:9a:7d:28:d8:1f:0c:7a:4c:42:da: 19:da:ea:60:69:bd:16:3a:b5:10:1e:6c:db:9a:41:5d:e3:3a: ae:e7:71:f5:44:20:f1:0d:f4:f0:67:24:68:53:2a:11:24:11: 14:7d:b5:4d:9b:f4:96:99:30:93:d3:6b:20:ae:56:6b:4c:00: d3:cf:65:b1:53:67:8a:39:b7:54:a0:bc:2f:b2:73:40:a4:cb: c5:90:ab:10:3c:e5:ab:50:29:fe:13:dd:cf:e8:93:d0:15:c0: de:e0:25:88:02:f5:88:77:01:77:ec:bd:c3:31:eb:2a:4e:89: d7:20:64:37:90:d8:1e:75:fc:e8:a2:1b:b1:d4:13:d7:d7:e8: dc:3e:5b:1e:70:42:3a:c5:06:a8:95:7b:23:f2:f7:7a:a9:32: cd:80:11:a4:cc:96:05:1f:50:07:73:65:85:a6:6e:68:cb:1e: e1:9e:fe:07:f7:44:fa:27:1f:11:40:16:93:e6:a9:a9:22:3c: 4b:7e:39:08:35:ac:8f:14:03:c6:3e:4a:bc:31:09:3f:96:38: 6a:92:3d:0a:d1:e3:a8:d4:b8:c2:97:c0:05:ca:0f:6a:bf:75: 64:2e:e3:3a:a6:37:9d:79:af:d9:19:30:03:66:ee:3c:f3:02: fc:c0:39:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa2KxoRzT7zuWNWzmd3EGwCgOS5EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTYxQTUyQTUyMkRFQjkwMkQ5Q0JEREU5OEFGODJCNDI0 NDIyRjU2NjAeFw0yNjAzMjYwMjU3MDdaFw0yNjAzMjkxMjI2MDdaMDMxMTAvBgNV BAMTKDFBQjVEOUZFNUVFMENCNTU3RThERTdEODU0MzZGQTk2QzkwMTA0MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj07Ly5LGmaQVVPguixkFVxphn tZjcClWk0lm2FzKQAmb1yUtUtoDK77/5zMr8Cjjn5Jmg2wmOpXSc9GIq3da1ovZA vdD4FXv/AS9inPRQbIy4hdcAIeALkG8j9DjrT4N4Bzx9pKkknzPN3TLgaJ6Gg4Iq mcIcxz/5SvLm6QG8Tj6kKJIIXNl/kTfvTk7Lhxvjh085lwiCsnTwDu6XBxOpqO39 jc4yrukW1Hq83p0ge2codmG5+fOqWH211rW3vVIle8kURFsVtXO4qeRFaGYQ+7i1 hBXiZuyPjV1Sdk6orGaEQkM+M9fa1mlOe80/s6blGxPARdx2jz+f7/6d29CdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGrXZ/l7gy1V+jefYVDb6lskBBCcwHwYDVR0j BBgwFoAUlhpSpSLeuQLZy93pivgrQkQi9WYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjcyZjAxMi1hNDNhLTRmY2ItODZhOS1hYjNlOTU3M2E4ZDkvMC85NjFBNTJBNTIy REVCOTAyRDlDQkRERTk4QUY4MkI0MjQ0MjJGNTY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTYxQTUyQTUyMkRFQjkwMkQ5Q0JEREU5OEFGODJCNDI0NDIy RjU2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Y3MmYwMTItYTQzYS00ZmNiLTg2 YTktYWIzZTk1NzNhOGQ5LzAvOTYxQTUyQTUyMkRFQjkwMkQ5Q0JEREU5OEFGODJC NDI0NDIyRjU2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACB9L8x9mL0Jmn0o2B8MekxC2hna6mBpvRY6 tRAebNuaQV3jOq7ncfVEIPEN9PBnJGhTKhEkERR9tU2b9JaZMJPTayCuVmtMANPP ZbFTZ4o5t1SgvC+yc0Cky8WQqxA85atQKf4T3c/ok9AVwN7gJYgC9Yh3AXfsvcMx 6ypOidcgZDeQ2B51/OiiG7HUE9fX6Nw+Wx5wQjrFBqiVeyPy93qpMs2AEaTMlgUf UAdzZYWmbmjLHuGe/gf3RPonHxFAFpPmqakiPEt+OQg1rI8UA8Y+SrwxCT+WOGqS PQrR46jUuMKXwAXKD2q/dWQu4zqmN515r9kZMANm7jzzAvzAOYo= -----END CERTIFICATE-----Generated at Fri Mar 27 04:10:01 2026 by rpki-client