$ rpki-client -vvf repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft File: 961A52A522DEB902D9CBDDE98AF82B424422F566.mft (raw, json) Hash identifier: J2QFT27egyOREmiBnDVWhLg5aqDGaqzqpOST3vqjAqk= Subject key identifier: 35:7E:F7:59:3C:15:B7:23:94:77:A4:61:A6:C5:8E:FA:BC:FF:76:D7 Authority key identifier: 96:1A:52:A5:22:DE:B9:02:D9:CB:DD:E9:8A:F8:2B:42:44:22:F5:66 Certificate issuer: /CN=961A52A522DEB902D9CBDDE98AF82B424422F566 Certificate serial: 0EE4973C2CBB7F8584BC8E65AEB7E5D0483456DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/961A52A522DEB902D9CBDDE98AF82B424422F566.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft Manifest number: E9 Signing time: Thu 05 Mar 2026 10:42:07 +0000 Manifest this update: Thu 05 Mar 2026 10:37:07 +0000 Manifest next update: Sun 08 Mar 2026 16:19:07 +0000 Files and hashes: 1: 961A52A522DEB902D9CBDDE98AF82B424422F566.crl (hash: lSB7mfmGNfvNhRY6bafdeSU8Qy+2A3k3V39/vDYX3h0=) 2: 3136302e32352e3132312e302f32342d3234203d3e20313533303632.roa (hash: XtBt14fZ3818vCxS3m952cY63i6gO8+A0tVjyGHPoaU=) 3: 3136302e32352e3132302e302f32342d3234203d3e20313533303632.roa (hash: N9c4heSXbZO9oKOiPxMzMpy/UHaeJZCIa3f88aATMcc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.crl rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/961A52A522DEB902D9CBDDE98AF82B424422F566.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 16:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:e4:97:3c:2c:bb:7f:85:84:bc:8e:65:ae:b7:e5:d0:48:34:56:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=961A52A522DEB902D9CBDDE98AF82B424422F566 Validity Not Before: Mar 5 10:37:07 2026 GMT Not After : Mar 8 16:19:07 2026 GMT Subject: CN=357EF7593C15B7239477A461A6C58EFABCFF76D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:76:4d:7e:28:34:3d:84:58:14:58:57:c1:71: d1:89:35:4f:f5:cf:05:41:e7:11:5f:15:ad:ba:61: 60:6d:1e:31:92:bc:53:bf:be:09:9a:ce:23:51:e5: af:e1:55:86:ab:88:24:2f:a4:fa:e8:98:49:73:67: 3e:77:f0:0f:bd:8b:e5:c5:30:bd:db:bf:9d:f0:71: 7c:c2:95:16:ee:f6:34:02:a6:cb:6d:ef:ee:27:ed: 11:2f:65:3c:d4:5a:b1:0b:13:f7:3c:e5:8d:eb:e9: 87:9e:f1:77:fe:f5:32:f7:61:d2:89:36:c6:cb:1c: b7:d5:df:44:98:c4:0b:29:c8:68:25:aa:99:99:5a: 3d:59:cf:15:dd:82:5b:08:b9:e4:49:40:32:4d:3b: a4:35:21:73:b8:eb:f5:5f:66:4b:7b:06:88:82:5f: 40:75:1c:fc:17:30:87:9d:77:61:25:40:55:67:5e: 18:7d:48:5a:2a:cc:87:31:ed:6f:b1:84:8d:59:b5: f5:fa:eb:15:d5:42:d1:3e:ae:f1:d8:a7:2b:20:be: 4d:d2:25:f4:66:5f:74:8d:43:56:23:b8:f3:e2:c1: d5:23:38:fb:6a:6e:92:fe:b3:ab:c7:ef:93:e3:51: 1a:73:d0:54:c8:f7:9e:9b:61:ca:ff:a4:d2:f1:71: 2b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:7E:F7:59:3C:15:B7:23:94:77:A4:61:A6:C5:8E:FA:BC:FF:76:D7 X509v3 Authority Key Identifier: keyid:96:1A:52:A5:22:DE:B9:02:D9:CB:DD:E9:8A:F8:2B:42:44:22:F5:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/961A52A522DEB902D9CBDDE98AF82B424422F566.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:2b:31:2b:24:6a:a2:33:e9:2e:fa:58:d9:8e:fc:6f:5d:f2: c7:f4:b7:6f:c5:df:26:4a:84:b6:da:43:42:af:43:00:9f:79: 57:c3:e7:59:79:93:aa:b6:c7:63:84:a2:59:0e:89:93:a2:34: 04:52:be:95:53:8d:6a:f1:92:fe:10:4d:e0:76:a4:f4:be:a7: 14:4d:20:37:1e:96:8a:37:bf:f9:c1:19:cb:c1:58:a4:9a:04: c1:6c:92:8f:5e:36:af:6e:44:a6:31:fb:90:d4:4f:9c:64:56: 05:0f:85:cd:90:88:e6:ff:65:25:d1:ac:ec:ef:c4:42:e8:02: 8c:b8:e1:5d:75:54:89:b0:d5:dd:46:99:5b:1c:13:4c:47:59: 43:f3:3c:9a:7a:09:b2:43:66:8a:6e:2b:44:8e:49:c1:57:d0: 48:a2:f0:e3:d8:28:f6:60:5d:46:ec:49:bb:ee:96:44:e8:7f: 6b:0f:87:26:67:59:7d:87:5d:8c:ec:69:32:36:86:e6:6a:a9: 18:64:95:2f:4d:d9:eb:19:17:bd:81:4e:f3:ec:e6:78:fc:30: bd:8f:43:93:df:37:c1:78:2b:64:c8:40:0b:99:f9:21:d8:66: 16:02:8e:1d:f2:52:9a:cd:9a:ba:ba:77:bf:7f:7c:cc:00:9c: 91:19:ff:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDuSXPCy7f4WEvI5lrrfl0Eg0Vt0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTYxQTUyQTUyMkRFQjkwMkQ5Q0JEREU5OEFGODJCNDI0 NDIyRjU2NjAeFw0yNjAzMDUxMDM3MDdaFw0yNjAzMDgxNjE5MDdaMDMxMTAvBgNV BAMTKDM1N0VGNzU5M0MxNUI3MjM5NDc3QTQ2MUE2QzU4RUZBQkNGRjc2RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtdk1+KDQ9hFgUWFfBcdGJNU/1 zwVB5xFfFa26YWBtHjGSvFO/vgmaziNR5a/hVYariCQvpPromElzZz538A+9i+XF ML3bv53wcXzClRbu9jQCpstt7+4n7REvZTzUWrELE/c85Y3r6Yee8Xf+9TL3YdKJ NsbLHLfV30SYxAspyGglqpmZWj1ZzxXdglsIueRJQDJNO6Q1IXO46/VfZkt7BoiC X0B1HPwXMIedd2ElQFVnXhh9SFoqzIcx7W+xhI1ZtfX66xXVQtE+rvHYpysgvk3S JfRmX3SNQ1YjuPPiwdUjOPtqbpL+s6vH75PjURpz0FTI956bYcr/pNLxcSsrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNX73WTwVtyOUd6RhpsWO+rz/dtcwHwYDVR0j BBgwFoAUlhpSpSLeuQLZy93pivgrQkQi9WYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjcyZjAxMi1hNDNhLTRmY2ItODZhOS1hYjNlOTU3M2E4ZDkvMC85NjFBNTJBNTIy REVCOTAyRDlDQkRERTk4QUY4MkI0MjQ0MjJGNTY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTYxQTUyQTUyMkRFQjkwMkQ5Q0JEREU5OEFGODJCNDI0NDIy RjU2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Y3MmYwMTItYTQzYS00ZmNiLTg2 YTktYWIzZTk1NzNhOGQ5LzAvOTYxQTUyQTUyMkRFQjkwMkQ5Q0JEREU5OEFGODJC NDI0NDIyRjU2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAUrMSskaqIz6S76WNmO/G9d8sf0t2/F3yZK hLbaQ0KvQwCfeVfD51l5k6q2x2OEolkOiZOiNARSvpVTjWrxkv4QTeB2pPS+pxRN IDceloo3v/nBGcvBWKSaBMFsko9eNq9uRKYx+5DUT5xkVgUPhc2QiOb/ZSXRrOzv xELoAoy44V11VImw1d1GmVscE0xHWUPzPJp6CbJDZopuK0SOScFX0Eii8OPYKPZg XUbsSbvulkTof2sPhyZnWX2HXYzsaTI2huZqqRhklS9N2esZF72BTvPs5nj8ML2P Q5PfN8F4K2TIQAuZ+SHYZhYCjh3yUprNmrq6d79/fMwAnJEZ/yQ= -----END CERTIFICATE-----Generated at Sat Mar 7 17:50:40 2026 by rpki-client