$ rpki-client -vvf repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.mft File: 952177DE616DE181FF461A8481C060AD744E2603.mft (raw, json) Hash identifier: qAIRtqZOqTa8eCiscnOijj9ulJ9bVde5E8eteRqwK/c= Subject key identifier: A4:32:D9:39:5F:FE:04:3C:81:38:44:E9:DA:1A:41:8A:FA:76:1A:41 Authority key identifier: 95:21:77:DE:61:6D:E1:81:FF:46:1A:84:81:C0:60:AD:74:4E:26:03 Certificate issuer: /CN=952177DE616DE181FF461A8481C060AD744E2603 Certificate serial: 322D0DA0D469D72FA53B8A754A2A1ADD171C75E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/952177DE616DE181FF461A8481C060AD744E2603.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.mft Manifest number: 010F Signing time: Sat 07 Mar 2026 13:00:46 +0000 Manifest this update: Sat 07 Mar 2026 12:55:46 +0000 Manifest next update: Tue 10 Mar 2026 21:51:46 +0000 Files and hashes: 1: 952177DE616DE181FF461A8481C060AD744E2603.crl (hash: 2vcZfrwQfCr+rr6/Lxf5BX2aM+RJZO3TN91NaEVvWbI=) 2: 3135372e31352e3137342e302f32342d3234203d3e20313532333739.roa (hash: keRrjXE2aFv5lood59DLSEKDpD72rCKDg82GWlf1ewQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.crl rsync://repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/952177DE616DE181FF461A8481C060AD744E2603.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:2d:0d:a0:d4:69:d7:2f:a5:3b:8a:75:4a:2a:1a:dd:17:1c:75:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=952177DE616DE181FF461A8481C060AD744E2603 Validity Not Before: Mar 7 12:55:46 2026 GMT Not After : Mar 10 21:51:46 2026 GMT Subject: CN=A432D9395FFE043C813844E9DA1A418AFA761A41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a6:86:9f:79:98:52:1c:a5:3f:f3:8d:1b:19: c1:fc:66:21:eb:c4:07:ae:42:1e:92:9e:46:dc:49: 31:f3:1c:c8:16:a6:72:0c:de:6b:d4:12:98:63:51: af:2a:8a:4f:0d:10:ca:dd:36:6e:8d:a1:2d:ca:40: 8c:cd:3b:ac:34:8d:c8:f3:e5:71:8b:5b:ee:18:37: a4:cb:52:0f:cd:2a:64:44:c0:fd:89:f7:ab:ed:86: 12:8d:13:ed:19:fe:84:ae:65:0e:44:28:68:e0:6c: 2f:cd:39:dc:49:7e:59:97:5b:54:57:9c:cb:44:3e: 31:67:a8:df:e7:76:5f:02:b8:28:97:16:64:06:e4: 1d:0f:b2:86:e1:fc:c0:dd:03:1f:4d:c5:f7:e0:23: 3b:73:c9:4f:6a:dc:80:60:83:0b:42:bf:94:d7:17: 90:df:ac:8a:a3:4d:0a:ba:5a:dc:1d:ae:5f:dc:92: 53:d8:c9:f1:0b:d6:11:1f:4f:9d:85:65:d6:9a:5a: ab:5f:a0:e7:8e:82:89:43:c7:79:0c:45:46:1d:f4: e6:69:df:7e:7e:3c:ca:9e:fd:d7:8b:03:ab:94:4e: 43:28:ee:4f:8f:56:c3:58:56:a1:f7:e0:01:bf:56: 7c:dc:13:a2:d9:e8:56:2e:58:fc:9f:61:6f:6d:9e: 6a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:32:D9:39:5F:FE:04:3C:81:38:44:E9:DA:1A:41:8A:FA:76:1A:41 X509v3 Authority Key Identifier: keyid:95:21:77:DE:61:6D:E1:81:FF:46:1A:84:81:C0:60:AD:74:4E:26:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/952177DE616DE181FF461A8481C060AD744E2603.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/952177DE616DE181FF461A8481C060AD744E2603.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:66:18:48:8c:48:d4:c6:57:51:53:ee:fe:11:9c:31:6b:93: 80:92:4b:e6:12:3d:fe:d8:b8:ea:cd:fb:f7:b2:eb:07:14:ae: 02:4d:5c:dc:3e:a4:98:ba:e4:0b:12:aa:84:64:2c:37:c7:81: a0:1c:2a:25:5f:e9:86:b3:c9:b5:3a:4a:82:2f:60:2b:70:91: 99:60:e7:75:d3:f6:2c:cd:5d:f2:fe:36:fe:3f:d0:74:60:55: bd:fa:97:69:1c:54:b2:bd:a6:60:54:17:4d:28:60:94:57:33: 32:92:96:6e:1d:9a:e1:e2:17:a2:de:df:60:06:4e:22:81:10: 26:79:48:0a:36:08:91:44:5b:66:86:1a:a0:ab:35:44:71:5a: 3e:f6:b5:dc:81:ac:80:ea:38:99:0d:2f:25:74:50:41:2d:b5: ef:f0:f1:bc:db:99:35:60:82:da:25:46:71:bf:43:9c:28:ec: 43:fc:40:3c:55:ed:1b:31:fd:a2:ff:b4:b0:04:b7:09:0a:d4: b3:10:c2:08:b2:ca:e4:1e:ea:ad:0f:a5:ab:dd:83:4e:4f:73: 00:13:1a:a2:b3:1f:0e:63:e5:55:da:24:31:48:d7:77:db:d4: 1b:5c:04:90:bc:9e:e8:35:59:f2:6d:b6:0f:c5:8b:fd:23:93: 4e:e5:de:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMi0NoNRp1y+lO4p1Sioa3RccdegwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTUyMTc3REU2MTZERTE4MUZGNDYxQTg0ODFDMDYwQUQ3 NDRFMjYwMzAeFw0yNjAzMDcxMjU1NDZaFw0yNjAzMTAyMTUxNDZaMDMxMTAvBgNV BAMTKEE0MzJEOTM5NUZGRTA0M0M4MTM4NDRFOURBMUE0MThBRkE3NjFBNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2poafeZhSHKU/840bGcH8ZiHr xAeuQh6SnkbcSTHzHMgWpnIM3mvUEphjUa8qik8NEMrdNm6NoS3KQIzNO6w0jcjz 5XGLW+4YN6TLUg/NKmREwP2J96vthhKNE+0Z/oSuZQ5EKGjgbC/NOdxJflmXW1RX nMtEPjFnqN/ndl8CuCiXFmQG5B0Psobh/MDdAx9NxffgIztzyU9q3IBggwtCv5TX F5DfrIqjTQq6Wtwdrl/cklPYyfEL1hEfT52FZdaaWqtfoOeOgolDx3kMRUYd9OZp 335+PMqe/deLA6uUTkMo7k+PVsNYVqH34AG/VnzcE6LZ6FYuWPyfYW9tnmrJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpDLZOV/+BDyBOETp2hpBivp2GkEwHwYDVR0j BBgwFoAUlSF33mFt4YH/RhqEgcBgrXROJgMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YjAwMjk5Mi1hY2IyLTRmNzctOTk3ZC0zMjE3ZWFkOTliYjUvMC85NTIxNzdERTYx NkRFMTgxRkY0NjFBODQ4MUMwNjBBRDc0NEUyNjAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTUyMTc3REU2MTZERTE4MUZGNDYxQTg0ODFDMDYwQUQ3NDRF MjYwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWIwMDI5OTItYWNiMi00Zjc3LTk5 N2QtMzIxN2VhZDk5YmI1LzAvOTUyMTc3REU2MTZERTE4MUZGNDYxQTg0ODFDMDYw QUQ3NDRFMjYwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIZmGEiMSNTGV1FT7v4RnDFrk4CSS+YSPf7Y uOrN+/ey6wcUrgJNXNw+pJi65AsSqoRkLDfHgaAcKiVf6YazybU6SoIvYCtwkZlg 53XT9izNXfL+Nv4/0HRgVb36l2kcVLK9pmBUF00oYJRXMzKSlm4dmuHiF6Le32AG TiKBECZ5SAo2CJFEW2aGGqCrNURxWj72tdyBrIDqOJkNLyV0UEEtte/w8bzbmTVg gtolRnG/Q5wo7EP8QDxV7Rsx/aL/tLAEtwkK1LMQwgiyyuQe6q0Ppavdg05PcwAT GqKzHw5j5VXaJDFI13fb1BtcBJC8nug1WfJttg/Fi/0jk07l3rw= -----END CERTIFICATE-----Generated at Sat Mar 7 17:50:40 2026 by rpki-client