$ rpki-client -vvf repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft File: 961A52A522DEB902D9CBDDE98AF82B424422F566.mft (raw, json) Hash identifier: XIZcscMlCXQJ8OMTLMajTLBrmBtXZJGlWEOD96TLJLs= Subject key identifier: E3:94:23:0B:27:AF:38:3D:47:33:1B:BB:E4:3D:5B:75:E2:61:51:AF Authority key identifier: 96:1A:52:A5:22:DE:B9:02:D9:CB:DD:E9:8A:F8:2B:42:44:22:F5:66 Certificate issuer: /CN=961A52A522DEB902D9CBDDE98AF82B424422F566 Certificate serial: 79EF90562E236B95504D54D3726F7F112F39CC98 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/961A52A522DEB902D9CBDDE98AF82B424422F566.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft Manifest number: FD Signing time: Mon 20 Apr 2026 01:42:07 +0000 Manifest this update: Mon 20 Apr 2026 01:37:07 +0000 Manifest next update: Thu 23 Apr 2026 08:02:07 +0000 Files and hashes: 1: 3136302e32352e3132302e302f32342d3234203d3e20313533303632.roa (hash: N9c4heSXbZO9oKOiPxMzMpy/UHaeJZCIa3f88aATMcc=) 2: 3136302e32352e3132312e302f32342d3234203d3e20313533303632.roa (hash: XtBt14fZ3818vCxS3m952cY63i6gO8+A0tVjyGHPoaU=) 3: 961A52A522DEB902D9CBDDE98AF82B424422F566.crl (hash: /nGTSepROeqc7PvyqXrqsDLQuJVeuLmVqMOBWPraw1Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.crl rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/961A52A522DEB902D9CBDDE98AF82B424422F566.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 08:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:ef:90:56:2e:23:6b:95:50:4d:54:d3:72:6f:7f:11:2f:39:cc:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=961A52A522DEB902D9CBDDE98AF82B424422F566 Validity Not Before: Apr 20 01:37:07 2026 GMT Not After : Apr 23 08:02:07 2026 GMT Subject: CN=E394230B27AF383D47331BBBE43D5B75E26151AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4e:92:08:79:ac:76:27:f2:a5:9a:fc:da:6c: fe:3e:12:13:d0:a3:25:74:6c:3b:48:f8:65:ad:fe: b4:5e:8d:8c:23:54:05:b8:ba:f6:85:d5:88:42:04: f8:d9:7a:c6:f9:75:65:43:2d:13:00:1f:92:8e:40: f4:ee:81:a1:f1:88:fe:8d:d3:b1:d4:38:60:f7:9b: bb:3f:2d:4c:e1:af:75:1b:19:35:99:c8:4c:5c:d2: 22:f7:23:67:3c:c0:31:76:72:71:f4:ac:b0:c1:d1: 88:56:b7:74:41:0d:ed:ae:a2:71:75:b8:22:02:98: b6:d2:70:8c:db:fd:14:72:1f:ea:7d:1a:fb:ef:ae: 93:58:3f:7d:cf:18:43:42:37:09:5f:be:0a:a5:63: d6:8e:45:7d:0e:13:55:ca:04:cf:7e:9a:dc:0e:78: fc:5f:7a:bc:46:ae:8c:7b:f7:76:f0:38:a7:73:97: 20:42:f1:81:b4:d8:80:f5:88:11:75:89:63:f8:a6: c2:86:40:c3:e7:6a:bb:d9:75:dd:a0:05:01:b0:9d: e6:e2:ec:f2:32:97:fd:19:9a:53:6a:f6:ff:e1:43: 3b:6a:d6:da:5d:b0:70:f6:ed:a4:f2:62:d3:09:c5: 07:2a:3a:7c:38:ad:c5:cc:28:e4:2a:5c:61:a9:8f: 63:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:94:23:0B:27:AF:38:3D:47:33:1B:BB:E4:3D:5B:75:E2:61:51:AF X509v3 Authority Key Identifier: keyid:96:1A:52:A5:22:DE:B9:02:D9:CB:DD:E9:8A:F8:2B:42:44:22:F5:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/961A52A522DEB902D9CBDDE98AF82B424422F566.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:4f:6f:05:8f:05:d5:f9:28:21:79:dc:c3:26:8a:1a:3c:20: 6a:c9:1f:f6:33:e4:7c:22:16:da:38:ad:96:7b:de:af:8c:bd: 51:e6:3f:5d:f4:0c:06:df:85:aa:33:51:c6:ec:ed:e3:4f:42: 50:fe:9d:a6:a6:8c:43:e1:fe:e8:e8:b9:9d:78:2a:7d:29:13: c3:c4:b1:71:4b:00:8b:6d:ad:c7:4a:54:d1:04:cf:0d:1e:ef: 35:2d:79:85:e2:3b:49:3d:d4:e7:5a:e7:78:19:d3:57:ee:b4: 90:93:c4:15:48:a1:dd:d2:1d:7e:73:22:90:b3:2d:98:3e:cd: a3:7f:14:61:06:e3:3e:52:f9:a6:1f:93:f1:92:56:43:a5:ff: 8a:40:63:47:e5:3a:4b:f3:20:53:8c:65:8d:17:38:87:5c:f2: c3:71:d4:e1:50:41:aa:d4:c1:a3:4e:bc:12:65:91:26:5f:c1: 92:42:19:96:f1:bc:e3:6e:19:5a:bc:a0:fe:14:af:a9:b3:d3: 42:35:7b:2b:e3:1a:ca:a4:e2:a1:6c:75:f1:ec:09:49:4d:fd: 8c:c9:2a:6d:6b:03:b1:33:73:bd:4f:4e:1e:76:5f:e9:36:91: bc:8b:1e:e0:bc:05:59:8d:5c:eb:25:92:a0:b4:a0:ce:11:de: 27:4b:3f:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUee+QVi4ja5VQTVTTcm9/ES85zJgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTYxQTUyQTUyMkRFQjkwMkQ5Q0JEREU5OEFGODJCNDI0 NDIyRjU2NjAeFw0yNjA0MjAwMTM3MDdaFw0yNjA0MjMwODAyMDdaMDMxMTAvBgNV BAMTKEUzOTQyMzBCMjdBRjM4M0Q0NzMzMUJCQkU0M0Q1Qjc1RTI2MTUxQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtTpIIeax2J/KlmvzabP4+EhPQ oyV0bDtI+GWt/rRejYwjVAW4uvaF1YhCBPjZesb5dWVDLRMAH5KOQPTugaHxiP6N 07HUOGD3m7s/LUzhr3UbGTWZyExc0iL3I2c8wDF2cnH0rLDB0YhWt3RBDe2uonF1 uCICmLbScIzb/RRyH+p9GvvvrpNYP33PGENCNwlfvgqlY9aORX0OE1XKBM9+mtwO ePxferxGrox793bwOKdzlyBC8YG02ID1iBF1iWP4psKGQMPnarvZdd2gBQGwnebi 7PIyl/0ZmlNq9v/hQztq1tpdsHD27aTyYtMJxQcqOnw4rcXMKOQqXGGpj2NhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU45QjCyevOD1HMxu75D1bdeJhUa8wHwYDVR0j BBgwFoAUlhpSpSLeuQLZy93pivgrQkQi9WYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjcyZjAxMi1hNDNhLTRmY2ItODZhOS1hYjNlOTU3M2E4ZDkvMC85NjFBNTJBNTIy REVCOTAyRDlDQkRERTk4QUY4MkI0MjQ0MjJGNTY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTYxQTUyQTUyMkRFQjkwMkQ5Q0JEREU5OEFGODJCNDI0NDIy RjU2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Y3MmYwMTItYTQzYS00ZmNiLTg2 YTktYWIzZTk1NzNhOGQ5LzAvOTYxQTUyQTUyMkRFQjkwMkQ5Q0JEREU5OEFGODJC NDI0NDIyRjU2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACNPbwWPBdX5KCF53MMmiho8IGrJH/Yz5Hwi Fto4rZZ73q+MvVHmP130DAbfhaozUcbs7eNPQlD+naamjEPh/ujouZ14Kn0pE8PE sXFLAIttrcdKVNEEzw0e7zUteYXiO0k91Oda53gZ01futJCTxBVIod3SHX5zIpCz LZg+zaN/FGEG4z5S+aYfk/GSVkOl/4pAY0flOkvzIFOMZY0XOIdc8sNx1OFQQarU waNOvBJlkSZfwZJCGZbxvONuGVq8oP4Ur6mz00I1eyvjGsqk4qFsdfHsCUlN/YzJ Km1rA7Ezc71PTh52X+k2kbyLHuC8BVmNXOslkqC0oM4R3idLP4s= -----END CERTIFICATE-----Generated at Wed Apr 22 04:54:44 2026 by rpki-client