$ rpki-client -vvf repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft File: 967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft (raw, json) Hash identifier: zqUEoVGG74/+81DIOYvWg6ijYxZ5fBVbUJxxVxlQaiw= Subject key identifier: 51:14:0A:D3:34:55:70:5A:83:5A:C5:C6:DC:B5:94:08:25:10:07:44 Authority key identifier: 96:7E:94:B3:DE:77:1E:4C:59:77:FF:1E:0C:2A:61:A1:DF:44:49:39 Certificate issuer: /CN=967E94B3DE771E4C5977FF1E0C2A61A1DF444939 Certificate serial: 68C57D1B9121F7F82AA7BCFD3DD51B5D1EA47946 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft Manifest number: 0100 Signing time: Tue 24 Mar 2026 02:42:22 +0000 Manifest this update: Tue 24 Mar 2026 02:37:22 +0000 Manifest next update: Fri 27 Mar 2026 11:35:22 +0000 Files and hashes: 1: 3230322e37342e37342e302f32332d3234203d3e20313333383030.roa (hash: QnpXNgQS0ANzts5qE/GQxLZvArtSxvVua1P/pq1g7S0=) 2: 967E94B3DE771E4C5977FF1E0C2A61A1DF444939.crl (hash: mNEz0HU/q6MgomV9cLX/3DDt/d1dXActhI7WOBqPBJQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.crl rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 11:35:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:c5:7d:1b:91:21:f7:f8:2a:a7:bc:fd:3d:d5:1b:5d:1e:a4:79:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=967E94B3DE771E4C5977FF1E0C2A61A1DF444939 Validity Not Before: Mar 24 02:37:22 2026 GMT Not After : Mar 27 11:35:22 2026 GMT Subject: CN=51140AD33455705A835AC5C6DCB5940825100744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f3:16:23:16:15:31:09:7f:bd:5f:87:82:34: b6:81:df:d3:e0:43:bd:0f:fc:f4:83:fc:25:f7:df: 36:c6:fa:00:9d:4f:9b:59:22:5a:54:75:ac:25:96: 61:89:b3:5b:9c:7b:da:65:4c:63:43:8d:ea:21:72: 42:9d:f7:67:41:76:2b:ed:8f:33:23:34:a0:ed:f0: a3:c7:d1:9d:36:74:48:60:a9:81:15:51:8f:4f:4e: e8:e8:bb:0d:67:a6:f1:39:c5:bc:9e:08:b9:6d:df: 2d:3c:3d:2c:1f:bb:d6:ee:4c:1b:a1:5a:a3:bc:aa: 91:87:76:c4:a4:27:a4:e2:8d:2c:5e:6c:d8:9f:3f: df:e1:66:51:03:29:af:4a:04:86:8e:7f:a0:1d:f5: 41:94:03:88:20:c2:09:5e:60:a8:8f:cb:cc:d4:b3: 13:df:d1:9b:a8:32:52:91:b6:71:f9:59:14:06:ae: 87:3d:d2:1f:be:0d:07:a7:ec:72:b6:78:e1:f3:ce: 9d:b0:7c:57:ae:c4:e9:45:42:40:54:33:61:f4:d5: de:bb:95:03:73:17:7a:51:02:3b:36:f1:ce:a8:11: 5c:97:2b:97:49:0a:ee:6a:9f:61:f1:5a:fd:e2:5f: c6:1d:cc:6e:f3:e4:a9:14:4f:22:a2:51:40:08:70: 87:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:14:0A:D3:34:55:70:5A:83:5A:C5:C6:DC:B5:94:08:25:10:07:44 X509v3 Authority Key Identifier: keyid:96:7E:94:B3:DE:77:1E:4C:59:77:FF:1E:0C:2A:61:A1:DF:44:49:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:01:57:83:cf:81:e4:dc:e2:c5:f5:a4:c1:20:99:75:32:41: 6f:28:72:fe:bd:44:a3:22:e3:71:d1:02:f0:9a:98:ac:56:85: 1c:5d:38:a5:8b:4a:9d:bd:af:8b:f3:3d:4e:14:59:de:9d:b7: d6:27:c4:3d:95:47:59:e2:72:a3:f4:d4:0f:6e:2c:0f:9e:9e: 15:71:c2:01:a7:57:f9:e2:72:c4:69:6b:ef:64:33:fb:5f:24: d9:77:06:d6:09:dd:3a:9b:28:ca:2e:bf:41:92:88:31:9c:cd: bf:7f:66:ed:d7:97:2f:69:8d:03:75:19:31:0e:a1:af:d4:68: 3f:5b:b0:c9:83:60:f8:52:e3:a2:03:5c:b6:60:3e:8e:b2:eb: 41:8d:c0:28:15:08:3f:09:32:20:e5:40:75:8e:05:bd:bf:b3: 73:fa:99:c0:e2:24:1b:bb:89:dc:79:59:da:24:15:db:1e:7b: 34:f3:68:6f:07:98:02:ea:cc:80:4d:e1:4e:15:5a:8b:83:41: 42:3d:fc:c0:fc:91:1d:15:69:a2:0d:50:1b:23:04:1a:b5:ec: 53:89:55:f3:c2:09:75:cc:15:b2:96:f9:c4:2e:23:b1:18:69: f3:f4:69:cc:9f:c9:37:ae:14:a0:22:dc:d6:89:d4:5d:d8:e6: 74:a9:46:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaMV9G5Eh9/gqp7z9PdUbXR6keUYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY3RTk0QjNERTc3MUU0QzU5NzdGRjFFMEMyQTYxQTFE RjQ0NDkzOTAeFw0yNjAzMjQwMjM3MjJaFw0yNjAzMjcxMTM1MjJaMDMxMTAvBgNV BAMTKDUxMTQwQUQzMzQ1NTcwNUE4MzVBQzVDNkRDQjU5NDA4MjUxMDA3NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh8xYjFhUxCX+9X4eCNLaB39Pg Q70P/PSD/CX33zbG+gCdT5tZIlpUdawllmGJs1uce9plTGNDjeohckKd92dBdivt jzMjNKDt8KPH0Z02dEhgqYEVUY9PTujouw1npvE5xbyeCLlt3y08PSwfu9buTBuh WqO8qpGHdsSkJ6TijSxebNifP9/hZlEDKa9KBIaOf6Ad9UGUA4ggwgleYKiPy8zU sxPf0ZuoMlKRtnH5WRQGroc90h++DQen7HK2eOHzzp2wfFeuxOlFQkBUM2H01d67 lQNzF3pRAjs28c6oEVyXK5dJCu5qn2HxWv3iX8YdzG7z5KkUTyKiUUAIcIfdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUURQK0zRVcFqDWsXG3LWUCCUQB0QwHwYDVR0j BBgwFoAUln6Us953HkxZd/8eDCphod9ESTkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTBjODY3Yi0yY2I5LTQ1N2ItODU2Yi1hMmFmYTM4ZjU3Y2MvMC85NjdFOTRCM0RF NzcxRTRDNTk3N0ZGMUUwQzJBNjFBMURGNDQ0OTM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTY3RTk0QjNERTc3MUU0QzU5NzdGRjFFMEMyQTYxQTFERjQ0 NDkzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDUwYzg2N2ItMmNiOS00NTdiLTg1 NmItYTJhZmEzOGY1N2NjLzAvOTY3RTk0QjNERTc3MUU0QzU5NzdGRjFFMEMyQTYx QTFERjQ0NDkzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABgBV4PPgeTc4sX1pMEgmXUyQW8ocv69RKMi 43HRAvCamKxWhRxdOKWLSp29r4vzPU4UWd6dt9YnxD2VR1nicqP01A9uLA+enhVx wgGnV/nicsRpa+9kM/tfJNl3BtYJ3TqbKMouv0GSiDGczb9/Zu3Xly9pjQN1GTEO oa/UaD9bsMmDYPhS46IDXLZgPo6y60GNwCgVCD8JMiDlQHWOBb2/s3P6mcDiJBu7 idx5WdokFdseezTzaG8HmALqzIBN4U4VWouDQUI9/MD8kR0VaaINUBsjBBq17FOJ VfPCCXXMFbKW+cQuI7EYafP0acyfyTeuFKAi3NaJ1F3Y5nSpRvY= -----END CERTIFICATE-----Generated at Thu Mar 26 10:35:00 2026 by rpki-client