$ rpki-client -vvf repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft File: B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft (raw, json) Hash identifier: ERGmKW9AXSPlI7JuLYmZzQC27YIfkI5ylPuRUVWkhac= Subject key identifier: A1:D6:A5:88:DF:4E:7C:18:7E:9B:C9:54:FE:1F:0D:38:12:C9:63:2A Authority key identifier: B9:72:F0:73:B8:AF:26:B8:53:3E:97:AA:FB:AE:C1:7F:CE:FD:6F:8C Certificate issuer: /CN=B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C Certificate serial: 2E33E8454B8DFFCACF17BC9861FE78F57C7909E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft Manifest number: 03CA Signing time: Sun 01 Mar 2026 19:42:14 +0000 Manifest this update: Sun 01 Mar 2026 19:37:14 +0000 Manifest next update: Thu 05 Mar 2026 06:05:14 +0000 Files and hashes: 1: B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.crl (hash: XmQ6j1Fk+ozADKSwTiFoiJFFur1WBx6WlAk6R9bIBPM=) 2: 3130332e3135352e3135362e302f32342d3234203d3e20313431303632.roa (hash: neE3zrlksOzJV8H0qe9TgTIuCvuChMBCqnrQKxlvrQU=) 3: 3130332e3135352e3135372e302f32342d3234203d3e20313431303632.roa (hash: 0/uMdmxlRYv0BxLj1kLNukE06046JVFdcxHugW59xeM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.crl rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:33:e8:45:4b:8d:ff:ca:cf:17:bc:98:61:fe:78:f5:7c:79:09:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C Validity Not Before: Mar 1 19:37:14 2026 GMT Not After : Mar 5 06:05:14 2026 GMT Subject: CN=A1D6A588DF4E7C187E9BC954FE1F0D3812C9632A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:8f:95:dc:50:8c:e9:67:b1:8c:1b:68:c3:4a: 98:f4:9f:8f:c3:96:8e:35:66:48:36:ff:6d:5b:e7: 3f:76:ff:68:7f:83:39:18:4c:99:5a:ad:70:65:10: 8c:81:d6:e6:e9:32:06:3a:21:5a:1d:12:ab:aa:bb: 64:61:32:d8:ef:e9:f5:52:cb:e6:e4:01:df:c5:27: 34:d2:31:da:ee:96:2a:74:42:ba:2c:73:75:a2:9c: 6d:24:9b:7c:15:a5:cc:9e:ef:52:77:43:32:7c:f0: f2:e2:bf:ed:89:8a:5a:ae:49:dd:66:3f:eb:6c:e2: 3c:5a:56:2c:6b:66:60:28:a7:1b:ce:b8:1d:68:1e: 86:30:30:90:a6:6b:94:a4:ce:2b:16:05:8c:84:c0: 6e:e3:dc:47:dd:e2:5a:dd:3e:6d:1b:fe:c4:d0:df: d5:a9:2e:d7:88:96:a9:a5:b7:03:3c:03:05:07:52: 6d:34:92:46:d7:fb:da:b3:c7:de:4d:8e:2b:a2:9a: 89:16:27:f6:23:e9:af:33:29:18:7b:a4:70:3a:eb: 7a:bd:48:a2:94:e3:83:63:3b:d3:2e:d4:e6:47:4c: 5f:1a:1b:d5:b3:22:12:f9:15:c4:34:1b:2a:f0:86: b4:e6:be:6b:3b:4a:a6:22:3b:23:fd:5c:fa:1f:3b: 94:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:D6:A5:88:DF:4E:7C:18:7E:9B:C9:54:FE:1F:0D:38:12:C9:63:2A X509v3 Authority Key Identifier: keyid:B9:72:F0:73:B8:AF:26:B8:53:3E:97:AA:FB:AE:C1:7F:CE:FD:6F:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:7a:58:78:d8:e0:2c:c1:eb:5d:76:2c:32:c1:da:d8:07:91: 30:1d:b7:fb:03:c5:48:2b:9e:25:98:03:20:3f:6f:34:76:b0: 6d:97:d4:91:e0:9a:55:b3:29:59:ee:cf:85:2e:93:28:f8:97: dc:77:64:aa:0a:5d:36:b3:8c:97:11:6f:3a:bb:ff:ac:87:ed: 78:cc:de:01:6d:9e:d0:ea:61:7c:ed:3d:b8:fa:76:70:ee:77: 09:39:a7:38:20:3f:1b:1f:5e:8a:0c:6e:c7:c8:9e:fe:96:a6: 3f:78:43:33:95:92:57:98:d0:06:63:4f:6e:d3:ac:af:57:e7: 4a:65:24:84:a3:17:07:cd:12:bd:a0:c9:42:59:12:75:76:a2: 24:19:08:65:87:8e:f8:b6:fd:dd:78:09:c8:13:a7:2f:4b:0d: 25:5e:bc:90:b1:b7:57:f1:f7:eb:e2:81:65:af:c9:ae:83:77: 43:9b:e9:dd:aa:20:e4:00:57:88:f5:d4:a7:df:55:a3:23:37: aa:a2:76:c2:05:f3:61:e4:68:53:e7:27:8e:64:60:2f:41:bb: 43:93:df:95:33:20:60:03:51:bb:74:02:8f:c5:47:f9:e2:a7: 05:68:60:1b:a5:54:7f:e7:28:06:9b:be:f4:3d:af:ea:0b:8f: ef:cb:7f:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULjPoRUuN/8rPF7yYYf549Xx5CeQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk3MkYwNzNCOEFGMjZCODUzM0U5N0FBRkJBRUMxN0ZD RUZENkY4QzAeFw0yNjAzMDExOTM3MTRaFw0yNjAzMDUwNjA1MTRaMDMxMTAvBgNV BAMTKEExRDZBNTg4REY0RTdDMTg3RTlCQzk1NEZFMUYwRDM4MTJDOTYzMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXj5XcUIzpZ7GMG2jDSpj0n4/D lo41Zkg2/21b5z92/2h/gzkYTJlarXBlEIyB1ubpMgY6IVodEququ2RhMtjv6fVS y+bkAd/FJzTSMdrulip0Qrosc3WinG0km3wVpcye71J3QzJ88PLiv+2JilquSd1m P+ts4jxaVixrZmAopxvOuB1oHoYwMJCma5SkzisWBYyEwG7j3Efd4lrdPm0b/sTQ 39WpLteIlqmltwM8AwUHUm00kkbX+9qzx95NjiuimokWJ/Yj6a8zKRh7pHA663q9 SKKU44NjO9Mu1OZHTF8aG9WzIhL5FcQ0GyrwhrTmvms7SqYiOyP9XPofO5TPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUodaliN9OfBh+m8lU/h8NOBLJYyowHwYDVR0j BBgwFoAUuXLwc7ivJrhTPpeq+67Bf879b4wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZDE2MTljYi1jMDFjLTQ2MTQtODYzZS1jZTI4OGQ3YmE3NjUvMC9COTcyRjA3M0I4 QUYyNkI4NTMzRTk3QUFGQkFFQzE3RkNFRkQ2RjhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjk3MkYwNzNCOEFGMjZCODUzM0U5N0FBRkJBRUMxN0ZDRUZE NkY4Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWQxNjE5Y2ItYzAxYy00NjE0LTg2 M2UtY2UyODhkN2JhNzY1LzAvQjk3MkYwNzNCOEFGMjZCODUzM0U5N0FBRkJBRUMx N0ZDRUZENkY4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADJ6WHjY4CzB6112LDLB2tgHkTAdt/sDxUgr niWYAyA/bzR2sG2X1JHgmlWzKVnuz4Uukyj4l9x3ZKoKXTazjJcRbzq7/6yH7XjM 3gFtntDqYXztPbj6dnDudwk5pzggPxsfXooMbsfInv6Wpj94QzOVkleY0AZjT27T rK9X50plJISjFwfNEr2gyUJZEnV2oiQZCGWHjvi2/d14CcgTpy9LDSVevJCxt1fx 9+vigWWvya6Dd0Ob6d2qIOQAV4j11KffVaMjN6qidsIF82HkaFPnJ45kYC9Bu0OT 35UzIGADUbt0Ao/FR/nipwVoYBulVH/nKAabvvQ9r+oLj+/LfyQ= -----END CERTIFICATE-----Generated at Mon Mar 2 00:33:47 2026 by rpki-client