$ rpki-client -vvf repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft File: 968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft (raw, json) Hash identifier: fNq9DaV6akfiN1jK2T1+cerMf2iuESpEFQnLguM8sXA= Subject key identifier: DC:5C:0C:57:F0:F4:95:42:8F:99:76:C8:05:A8:FC:84:1A:0A:D1:4A Authority key identifier: 96:8A:6F:AD:63:7E:47:06:8D:2F:BC:54:7F:BF:2C:1C:12:F8:C5:88 Certificate issuer: /CN=968A6FAD637E47068D2FBC547FBF2C1C12F8C588 Certificate serial: 797E018965B18CE1D3A179268FB1D12E8F246D63 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft Manifest number: 0233 Signing time: Thu 16 Apr 2026 01:52:40 +0000 Manifest this update: Thu 16 Apr 2026 01:47:40 +0000 Manifest next update: Sun 19 Apr 2026 10:45:40 +0000 Files and hashes: 1: 3130332e38372e36382e302f32342d3234203d3e20313530323439.roa (hash: 8lJPUsKlUGR1W/uo827D06TJO+cPwjSi9R8wQT4VPpg=) 2: 323030313a6466313a373334303a3a2f34382d3438203d3e20313530323439.roa (hash: eNkBoyVM5lmriR4TCktsibpcmvUKMiPu24PT3RZP9b8=) 3: 968A6FAD637E47068D2FBC547FBF2C1C12F8C588.crl (hash: 60idjGPIvrfPmHN+i8dGiKefh+kz8wylfniiWWdOEvs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.crl rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 10:45:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:7e:01:89:65:b1:8c:e1:d3:a1:79:26:8f:b1:d1:2e:8f:24:6d:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=968A6FAD637E47068D2FBC547FBF2C1C12F8C588 Validity Not Before: Apr 16 01:47:40 2026 GMT Not After : Apr 19 10:45:40 2026 GMT Subject: CN=DC5C0C57F0F495428F9976C805A8FC841A0AD14A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7c:ff:24:30:86:ea:3a:5b:c3:6d:75:2a:66: de:e5:bd:d1:ab:c2:1e:f4:0c:85:aa:39:76:c2:21: d9:9e:40:30:b8:50:8c:fe:dd:71:5d:75:b3:da:a0: 68:29:8a:7e:c8:3c:54:8c:7a:39:d6:80:89:59:03: 89:4d:ea:d1:c0:40:ff:71:8f:59:1a:f8:dc:1e:3c: c7:9c:66:05:61:56:87:7d:6f:d6:69:3b:37:c2:d3: f3:d4:bb:21:08:cd:31:b7:e8:37:62:65:a1:a4:44: bd:f5:ad:e7:3d:04:51:23:f6:0e:05:5a:17:de:87: b4:aa:66:80:59:8a:f1:f7:ad:af:ec:ed:c9:17:1e: 41:1b:39:d4:30:12:00:50:a5:dd:f8:46:a1:5c:fb: 08:ce:7f:da:24:15:f1:76:85:41:ab:86:f3:a2:16: 39:af:56:aa:fe:d6:5b:75:e2:88:c8:15:95:74:36: d2:6c:8f:d4:ed:e3:8d:db:b6:f3:fa:7e:d6:e8:cd: 89:1d:05:79:47:f8:1a:4a:b2:5f:1a:1c:51:61:c7: 29:eb:50:8d:9e:6d:59:6f:df:d6:cd:54:3d:09:38: 62:56:57:55:e4:8b:2e:c3:15:11:7e:54:c0:19:14: 71:10:58:14:81:b1:7b:99:ab:3b:27:03:97:29:da: 82:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:5C:0C:57:F0:F4:95:42:8F:99:76:C8:05:A8:FC:84:1A:0A:D1:4A X509v3 Authority Key Identifier: keyid:96:8A:6F:AD:63:7E:47:06:8D:2F:BC:54:7F:BF:2C:1C:12:F8:C5:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:a2:df:03:09:e9:14:0c:94:88:92:d4:83:c8:62:ca:35:35: b1:65:08:00:1f:5d:79:1c:d7:66:2b:9a:3b:83:1c:78:bf:12: ec:95:ea:5b:e8:68:db:cc:be:1c:c9:90:5f:fa:10:cc:9e:aa: f0:47:be:a0:5a:47:0f:7f:dd:00:67:94:a9:fc:2b:88:c3:54: e2:a9:4d:d8:68:62:6a:d8:26:a7:fe:4b:13:ca:0f:25:ba:fd: fd:cf:af:71:a3:75:db:34:02:63:cc:85:e8:68:aa:6a:bc:ea: b0:8f:a6:80:7f:2e:71:f7:6c:f6:9b:00:c3:f9:d9:95:db:09: e6:2b:29:81:c8:66:24:ac:b9:3a:3e:ab:1e:ae:a8:29:41:ed: 78:6d:ac:3c:e0:8f:21:06:3d:6e:33:c1:b9:c5:dd:dc:d8:f9: 8b:b0:77:28:35:67:c2:72:b8:8f:c2:9a:a4:d2:92:5c:be:78: 7b:e3:40:b7:fd:fa:8f:4b:64:d7:43:be:ba:49:dc:db:fc:4b: 1b:14:88:a7:19:7b:be:98:30:98:8f:ac:32:3d:ea:e5:d8:4c: 64:1e:a0:97:1d:3d:04:84:ac:3e:9e:28:e8:2e:b8:c3:cd:f8: 7d:11:42:8f:9a:a0:3e:68:c0:c0:82:d2:ff:d0:10:a7:01:2d: 3f:6c:34:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeX4BiWWxjOHToXkmj7HRLo8kbWMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY4QTZGQUQ2MzdFNDcwNjhEMkZCQzU0N0ZCRjJDMUMx MkY4QzU4ODAeFw0yNjA0MTYwMTQ3NDBaFw0yNjA0MTkxMDQ1NDBaMDMxMTAvBgNV BAMTKERDNUMwQzU3RjBGNDk1NDI4Rjk5NzZDODA1QThGQzg0MUEwQUQxNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVfP8kMIbqOlvDbXUqZt7lvdGr wh70DIWqOXbCIdmeQDC4UIz+3XFddbPaoGgpin7IPFSMejnWgIlZA4lN6tHAQP9x j1ka+NwePMecZgVhVod9b9ZpOzfC0/PUuyEIzTG36DdiZaGkRL31rec9BFEj9g4F Whfeh7SqZoBZivH3ra/s7ckXHkEbOdQwEgBQpd34RqFc+wjOf9okFfF2hUGrhvOi FjmvVqr+1lt14ojIFZV0NtJsj9Tt443btvP6ftbozYkdBXlH+BpKsl8aHFFhxynr UI2ebVlv39bNVD0JOGJWV1Xkiy7DFRF+VMAZFHEQWBSBsXuZqzsnA5cp2oLNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3FwMV/D0lUKPmXbIBaj8hBoK0UowHwYDVR0j BBgwFoAUlopvrWN+RwaNL7xUf78sHBL4xYgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzljNTQ4NC0yZTM3LTQ4ZjktOGViYS0wYWY0ZWY2Mjk0N2QvMC85NjhBNkZBRDYz N0U0NzA2OEQyRkJDNTQ3RkJGMkMxQzEyRjhDNTg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTY4QTZGQUQ2MzdFNDcwNjhEMkZCQzU0N0ZCRjJDMUMxMkY4 QzU4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTM5YzU0ODQtMmUzNy00OGY5LThl YmEtMGFmNGVmNjI5NDdkLzAvOTY4QTZGQUQ2MzdFNDcwNjhEMkZCQzU0N0ZCRjJD MUMxMkY4QzU4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACui3wMJ6RQMlIiS1IPIYso1NbFlCAAfXXkc 12YrmjuDHHi/EuyV6lvoaNvMvhzJkF/6EMyeqvBHvqBaRw9/3QBnlKn8K4jDVOKp TdhoYmrYJqf+SxPKDyW6/f3Pr3Gjdds0AmPMhehoqmq86rCPpoB/LnH3bPabAMP5 2ZXbCeYrKYHIZiSsuTo+qx6uqClB7XhtrDzgjyEGPW4zwbnF3dzY+Yuwdyg1Z8Jy uI/CmqTSkly+eHvjQLf9+o9LZNdDvrpJ3Nv8SxsUiKcZe76YMJiPrDI96uXYTGQe oJcdPQSErD6eKOguuMPN+H0RQo+aoD5owMCC0v/QEKcBLT9sNFA= -----END CERTIFICATE-----Generated at Sat Apr 18 01:50:06 2026 by rpki-client