$ rpki-client -vvf repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft File: 968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft (raw, json) Hash identifier: 0Wig0CsykoPzqom4hCx3CiMuZ0gX763bgGPSfSc4mGg= Subject key identifier: E3:31:E5:A8:67:4A:D4:AD:6D:4B:4B:AA:E8:87:E1:02:E8:8B:87:B0 Authority key identifier: 96:8A:6F:AD:63:7E:47:06:8D:2F:BC:54:7F:BF:2C:1C:12:F8:C5:88 Certificate issuer: /CN=968A6FAD637E47068D2FBC547FBF2C1C12F8C588 Certificate serial: 0EB9C671D4DC31390E767B84FB204124C0A76F35 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft Manifest number: 0225 Signing time: Sun 15 Mar 2026 05:02:41 +0000 Manifest this update: Sun 15 Mar 2026 04:57:41 +0000 Manifest next update: Wed 18 Mar 2026 07:03:41 +0000 Files and hashes: 1: 968A6FAD637E47068D2FBC547FBF2C1C12F8C588.crl (hash: Q9vsI2+Mf0Qmz71LD5oWeEHbs1V2YfeN1kjlnmb9Q8g=) 2: 323030313a6466313a373334303a3a2f34382d3438203d3e20313530323439.roa (hash: eNkBoyVM5lmriR4TCktsibpcmvUKMiPu24PT3RZP9b8=) 3: 3130332e38372e36382e302f32342d3234203d3e20313530323439.roa (hash: 8lJPUsKlUGR1W/uo827D06TJO+cPwjSi9R8wQT4VPpg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.crl rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Mar 2026 07:03:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:b9:c6:71:d4:dc:31:39:0e:76:7b:84:fb:20:41:24:c0:a7:6f:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=968A6FAD637E47068D2FBC547FBF2C1C12F8C588 Validity Not Before: Mar 15 04:57:41 2026 GMT Not After : Mar 18 07:03:41 2026 GMT Subject: CN=E331E5A8674AD4AD6D4B4BAAE887E102E88B87B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:8a:15:f6:6d:e2:0d:5a:fe:d0:07:c2:a5:70: 13:c6:d8:20:93:5e:e5:ff:99:95:49:20:bb:98:b5: 61:2d:4c:fa:6f:42:75:71:53:27:97:e0:84:4c:f6: 39:eb:e4:5b:a1:4e:7e:10:3b:e9:f7:ec:78:c4:58: ec:f0:4a:73:bc:30:0e:97:8d:ad:46:03:83:63:82: 30:65:88:0b:ee:ea:22:95:09:e4:93:95:82:33:4d: 3d:67:33:b7:4d:4a:36:8c:42:16:5e:80:d2:35:3b: fd:06:b9:de:f1:18:05:a3:c4:f7:ed:54:41:2b:83: ed:29:6f:6f:97:5d:31:ae:2b:be:ad:6a:8a:f5:26: 95:44:c4:50:ab:47:9f:04:f3:09:2e:1b:60:a4:c7: 1b:ba:13:93:58:7a:2f:f6:72:34:57:31:51:f5:21: 43:5b:f7:3e:d7:41:43:e1:ec:cf:0f:75:c9:c7:73: b9:2e:e5:d4:68:4c:64:62:e2:96:20:5d:d9:a0:de: 29:75:aa:94:2a:68:f8:cc:2f:01:c2:30:87:04:c0: a8:18:d3:cd:f3:86:7e:f9:cb:01:d6:68:82:b7:9c: ff:2f:92:8c:31:1d:11:15:a3:d0:7a:4a:6f:e3:fb: 82:15:1c:14:eb:18:6e:0e:f2:e8:8a:19:fb:8a:01: 33:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:31:E5:A8:67:4A:D4:AD:6D:4B:4B:AA:E8:87:E1:02:E8:8B:87:B0 X509v3 Authority Key Identifier: keyid:96:8A:6F:AD:63:7E:47:06:8D:2F:BC:54:7F:BF:2C:1C:12:F8:C5:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:8a:0d:5f:cf:ab:ce:22:d0:65:06:9e:96:b7:93:2a:68:fc: 25:6d:cc:32:42:73:fa:fe:a3:ca:c0:1c:09:47:bf:59:78:d9: 26:8f:45:d7:d5:cc:f8:f4:43:b6:e6:5a:85:82:1a:48:5c:c5: a2:8d:0e:99:e2:9c:24:5a:bc:d8:f1:ec:ba:a7:2b:be:0d:af: c2:66:ca:59:b7:8f:d4:f2:99:eb:c8:16:f2:23:1f:df:b1:1b: 16:6a:ee:1c:62:06:08:5c:df:bb:e9:c9:d4:43:82:44:67:d4: e0:21:93:74:31:d2:0d:34:37:d1:9b:e0:89:15:02:c6:f6:79: 97:c8:fa:16:60:0d:8a:fb:97:1a:35:da:0e:f0:6f:d6:54:ac: 67:c2:bd:4d:da:52:e0:c4:48:7f:ff:a1:1d:ad:1c:44:86:81: 2f:ce:a3:6f:01:58:8b:e3:c3:09:43:03:9e:4e:96:ec:8b:22: c8:6b:63:5d:da:f5:8d:2e:50:7e:ae:91:d4:84:6d:6f:c6:80: 6c:90:c3:c1:e3:ee:c3:b4:a5:c1:be:5a:08:c6:4b:1e:7e:ed: ce:81:6a:1e:d9:32:e7:29:39:7b:13:c9:83:0c:b4:69:f4:62: 1a:f0:c8:2d:20:b3:fc:fd:14:4f:cb:a2:d5:fe:9f:59:d8:7b: d8:ba:2b:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDrnGcdTcMTkOdnuE+yBBJMCnbzUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY4QTZGQUQ2MzdFNDcwNjhEMkZCQzU0N0ZCRjJDMUMx MkY4QzU4ODAeFw0yNjAzMTUwNDU3NDFaFw0yNjAzMTgwNzAzNDFaMDMxMTAvBgNV BAMTKEUzMzFFNUE4Njc0QUQ0QUQ2RDRCNEJBQUU4ODdFMTAyRTg4Qjg3QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpihX2beINWv7QB8KlcBPG2CCT XuX/mZVJILuYtWEtTPpvQnVxUyeX4IRM9jnr5FuhTn4QO+n37HjEWOzwSnO8MA6X ja1GA4NjgjBliAvu6iKVCeSTlYIzTT1nM7dNSjaMQhZegNI1O/0Gud7xGAWjxPft VEErg+0pb2+XXTGuK76taor1JpVExFCrR58E8wkuG2Ckxxu6E5NYei/2cjRXMVH1 IUNb9z7XQUPh7M8PdcnHc7ku5dRoTGRi4pYgXdmg3il1qpQqaPjMLwHCMIcEwKgY 083zhn75ywHWaIK3nP8vkowxHREVo9B6Sm/j+4IVHBTrGG4O8uiKGfuKATNHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4zHlqGdK1K1tS0uq6IfhAuiLh7AwHwYDVR0j BBgwFoAUlopvrWN+RwaNL7xUf78sHBL4xYgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzljNTQ4NC0yZTM3LTQ4ZjktOGViYS0wYWY0ZWY2Mjk0N2QvMC85NjhBNkZBRDYz N0U0NzA2OEQyRkJDNTQ3RkJGMkMxQzEyRjhDNTg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTY4QTZGQUQ2MzdFNDcwNjhEMkZCQzU0N0ZCRjJDMUMxMkY4 QzU4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTM5YzU0ODQtMmUzNy00OGY5LThl YmEtMGFmNGVmNjI5NDdkLzAvOTY4QTZGQUQ2MzdFNDcwNjhEMkZCQzU0N0ZCRjJD MUMxMkY4QzU4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGGKDV/Pq84i0GUGnpa3kypo/CVtzDJCc/r+ o8rAHAlHv1l42SaPRdfVzPj0Q7bmWoWCGkhcxaKNDpninCRavNjx7LqnK74Nr8Jm ylm3j9TymevIFvIjH9+xGxZq7hxiBghc37vpydRDgkRn1OAhk3Qx0g00N9Gb4IkV Asb2eZfI+hZgDYr7lxo12g7wb9ZUrGfCvU3aUuDESH//oR2tHESGgS/Oo28BWIvj wwlDA55OluyLIshrY13a9Y0uUH6ukdSEbW/GgGyQw8Hj7sO0pcG+WgjGSx5+7c6B ah7ZMucpOXsTyYMMtGn0YhrwyC0gs/z9FE/LotX+n1nYe9i6K5A= -----END CERTIFICATE-----Generated at Mon Mar 16 22:13:55 2026 by rpki-client