$ rpki-client -vvf repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/961C97EF8E7664408011D05E6A81CF905A1336B1.mft File: 961C97EF8E7664408011D05E6A81CF905A1336B1.mft (raw, json) Hash identifier: dheIZkgpgZoWwtJEIiINUjuCtpe+POY1T5FYCf0GOnY= Subject key identifier: F2:AA:76:41:67:A0:7F:58:AC:D9:A7:D6:8E:9C:59:CB:F3:20:1A:A3 Authority key identifier: 96:1C:97:EF:8E:76:64:40:80:11:D0:5E:6A:81:CF:90:5A:13:36:B1 Certificate issuer: /CN=961C97EF8E7664408011D05E6A81CF905A1336B1 Certificate serial: 2B38E0D7A309E630F3C0B2A51EF693420088B946 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/961C97EF8E7664408011D05E6A81CF905A1336B1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/961C97EF8E7664408011D05E6A81CF905A1336B1.mft Manifest number: 01E1 Signing time: Wed 18 Mar 2026 16:31:50 +0000 Manifest this update: Wed 18 Mar 2026 16:26:50 +0000 Manifest next update: Sat 21 Mar 2026 22:39:50 +0000 Files and hashes: 1: 961C97EF8E7664408011D05E6A81CF905A1336B1.crl (hash: M68sDsPwsvPV70tg2fdIZEhDIgbbTMdJGXTCAc9R/HI=) 2: 3130332e3133302e38302e302f32332d3234203d3e20313339393737.roa (hash: QAv8L/SfO4pmTvlOrUOe85CRHhQ8zH/NkbLzEqjzAes=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/961C97EF8E7664408011D05E6A81CF905A1336B1.crl rsync://repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/961C97EF8E7664408011D05E6A81CF905A1336B1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/961C97EF8E7664408011D05E6A81CF905A1336B1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 22:39:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:38:e0:d7:a3:09:e6:30:f3:c0:b2:a5:1e:f6:93:42:00:88:b9:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=961C97EF8E7664408011D05E6A81CF905A1336B1 Validity Not Before: Mar 18 16:26:50 2026 GMT Not After : Mar 21 22:39:50 2026 GMT Subject: CN=F2AA764167A07F58ACD9A7D68E9C59CBF3201AA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b0:d8:e0:99:4e:6c:78:70:a4:72:b6:6c:22: 2e:56:51:6d:b4:bb:57:94:92:a4:35:a7:c4:ea:06: 6e:78:91:d5:a7:34:5a:82:98:13:06:9b:91:57:4e: 2e:06:5b:b6:4d:bb:f7:71:ec:3e:f9:d1:7c:61:d5: 8b:66:78:9c:a9:2c:88:61:5d:8a:0e:14:c1:42:c2: 21:dc:e6:92:49:31:ec:5d:8f:ec:c2:0f:ad:50:35: a3:c2:b2:5f:86:1d:58:82:b0:13:83:e8:dc:e4:38: 92:05:6c:25:8d:f9:94:29:dc:4e:09:1d:74:3b:db: ec:23:fd:3e:bb:0d:3e:67:d1:d6:a0:b6:84:3e:61: fc:d7:2f:fc:a2:39:29:92:5e:d6:60:3d:58:61:5b: 8a:4b:d3:d3:cf:19:07:44:c7:81:31:e5:e6:d9:4e: 6e:de:19:5d:97:bd:f8:35:d2:c5:1e:7b:51:d2:cd: 54:60:5e:14:06:8e:5e:4c:8b:c6:ce:b7:d6:13:5b: 94:78:62:ce:a4:79:f0:50:83:20:86:ac:6a:16:6c: d5:bd:98:f0:a7:15:37:bd:60:0d:84:56:df:3d:b1: 29:34:01:ef:1f:c7:30:fb:27:f6:a0:45:7d:58:87: a5:24:87:cb:50:c8:66:3a:04:3b:04:2c:72:e7:ae: ed:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:AA:76:41:67:A0:7F:58:AC:D9:A7:D6:8E:9C:59:CB:F3:20:1A:A3 X509v3 Authority Key Identifier: keyid:96:1C:97:EF:8E:76:64:40:80:11:D0:5E:6A:81:CF:90:5A:13:36:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/961C97EF8E7664408011D05E6A81CF905A1336B1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/961C97EF8E7664408011D05E6A81CF905A1336B1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/961C97EF8E7664408011D05E6A81CF905A1336B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:cc:6d:5a:bc:fb:f2:7c:62:dc:98:04:e5:63:51:79:ca:6e: 24:a3:f6:05:87:50:18:3b:23:4c:6f:64:be:c7:c9:7d:19:52: 59:f7:a4:08:3e:2e:93:b3:e6:42:6c:41:b0:e6:1f:7a:77:c3: ff:f7:a1:3d:20:cd:25:d3:c7:3e:f6:b7:7d:47:e5:8e:9d:40: 27:43:38:68:19:ae:b4:d3:ab:87:0b:2f:a6:c2:95:59:fd:58: 5f:a9:9d:6e:25:d1:44:8d:1a:40:b0:42:c4:dd:38:be:3e:dc: a2:ee:80:90:e5:45:f3:55:57:72:5d:40:65:d9:d7:eb:38:e4: 0e:46:de:64:8e:89:9f:00:18:85:10:71:f0:67:52:c0:a4:e2: 3a:f1:e4:f4:01:c3:ac:7e:d7:cb:52:c9:61:38:78:7b:38:59: 5a:c9:57:81:6f:46:05:4e:90:e8:01:d6:97:14:3d:9d:67:89: 56:ad:24:2e:fe:b5:42:93:25:63:1a:ed:e6:3e:e9:e0:33:34: 38:94:11:cb:2d:57:a2:de:bd:07:2c:4a:04:ca:17:4d:11:43: 32:46:46:26:d3:84:00:59:f2:74:96:38:22:9f:c4:99:88:be: e5:4f:5a:32:19:b2:18:13:ac:6e:a5:01:fa:01:5c:b9:50:23: c5:18:c4:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKzjg16MJ5jDzwLKlHvaTQgCIuUYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTYxQzk3RUY4RTc2NjQ0MDgwMTFEMDVFNkE4MUNGOTA1 QTEzMzZCMTAeFw0yNjAzMTgxNjI2NTBaFw0yNjAzMjEyMjM5NTBaMDMxMTAvBgNV BAMTKEYyQUE3NjQxNjdBMDdGNThBQ0Q5QTdENjhFOUM1OUNCRjMyMDFBQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEsNjgmU5seHCkcrZsIi5WUW20 u1eUkqQ1p8TqBm54kdWnNFqCmBMGm5FXTi4GW7ZNu/dx7D750Xxh1YtmeJypLIhh XYoOFMFCwiHc5pJJMexdj+zCD61QNaPCsl+GHViCsBOD6NzkOJIFbCWN+ZQp3E4J HXQ72+wj/T67DT5n0dagtoQ+YfzXL/yiOSmSXtZgPVhhW4pL09PPGQdEx4Ex5ebZ Tm7eGV2Xvfg10sUee1HSzVRgXhQGjl5Mi8bOt9YTW5R4Ys6kefBQgyCGrGoWbNW9 mPCnFTe9YA2EVt89sSk0Ae8fxzD7J/agRX1Yh6Ukh8tQyGY6BDsELHLnru3VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8qp2QWegf1is2afWjpxZy/MgGqMwHwYDVR0j BBgwFoAUlhyX7452ZECAEdBeaoHPkFoTNrEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NGFlNTdiMy00NmEyLTQyM2QtYjI0NC0wM2ZmZWUxMDViNzcvMC85NjFDOTdFRjhF NzY2NDQwODAxMUQwNUU2QTgxQ0Y5MDVBMTMzNkIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTYxQzk3RUY4RTc2NjQ0MDgwMTFEMDVFNkE4MUNGOTA1QTEz MzZCMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTRhZTU3YjMtNDZhMi00MjNkLWIy NDQtMDNmZmVlMTA1Yjc3LzAvOTYxQzk3RUY4RTc2NjQ0MDgwMTFEMDVFNkE4MUNG OTA1QTEzMzZCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ7MbVq8+/J8YtyYBOVjUXnKbiSj9gWHUBg7 I0xvZL7HyX0ZUln3pAg+LpOz5kJsQbDmH3p3w//3oT0gzSXTxz72t31H5Y6dQCdD OGgZrrTTq4cLL6bClVn9WF+pnW4l0USNGkCwQsTdOL4+3KLugJDlRfNVV3JdQGXZ 1+s45A5G3mSOiZ8AGIUQcfBnUsCk4jrx5PQBw6x+18tSyWE4eHs4WVrJV4FvRgVO kOgB1pcUPZ1niVatJC7+tUKTJWMa7eY+6eAzNDiUEcstV6LevQcsSgTKF00RQzJG RibThABZ8nSWOCKfxJmIvuVPWjIZshgTrG6lAfoBXLlQI8UYxPk= -----END CERTIFICATE-----Generated at Fri Mar 20 22:33:47 2026 by rpki-client