$ rpki-client -vvf repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft File: 961A52A522DEB902D9CBDDE98AF82B424422F566.mft (raw, json) Hash identifier: fm2XkGBtyWoNULW5P3v9wjdhtoydyO51GTHQHg6I/bI= Subject key identifier: 98:13:10:4C:06:37:DE:BF:D6:03:F2:76:49:30:67:CD:06:33:B5:A0 Authority key identifier: 96:1A:52:A5:22:DE:B9:02:D9:CB:DD:E9:8A:F8:2B:42:44:22:F5:66 Certificate issuer: /CN=961A52A522DEB902D9CBDDE98AF82B424422F566 Certificate serial: 385EA60AAE70E87F9A13F09DAC6F86054C18167C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/961A52A522DEB902D9CBDDE98AF82B424422F566.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft Manifest number: E7 Signing time: Sat 28 Feb 2026 19:52:06 +0000 Manifest this update: Sat 28 Feb 2026 19:47:06 +0000 Manifest next update: Wed 04 Mar 2026 04:32:06 +0000 Files and hashes: 1: 961A52A522DEB902D9CBDDE98AF82B424422F566.crl (hash: bVtO7lrOXpXb5xWlm+PNDclmGx929syL/opWuLLCUtI=) 2: 3136302e32352e3132312e302f32342d3234203d3e20313533303632.roa (hash: XtBt14fZ3818vCxS3m952cY63i6gO8+A0tVjyGHPoaU=) 3: 3136302e32352e3132302e302f32342d3234203d3e20313533303632.roa (hash: N9c4heSXbZO9oKOiPxMzMpy/UHaeJZCIa3f88aATMcc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.crl rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/961A52A522DEB902D9CBDDE98AF82B424422F566.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 04:32:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:5e:a6:0a:ae:70:e8:7f:9a:13:f0:9d:ac:6f:86:05:4c:18:16:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=961A52A522DEB902D9CBDDE98AF82B424422F566 Validity Not Before: Feb 28 19:47:06 2026 GMT Not After : Mar 4 04:32:06 2026 GMT Subject: CN=9813104C0637DEBFD603F276493067CD0633B5A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:28:87:2f:49:6e:33:b8:8c:39:22:53:79:79: d8:de:9b:72:82:70:ea:6c:9c:9f:7b:cf:cf:6e:c1: 1d:ad:8d:81:9d:45:5a:b1:9a:52:0e:28:95:0f:d5: 3f:c5:2a:0c:9f:78:56:68:72:3c:2b:1a:d9:50:7e: a5:15:a9:bb:14:8d:3c:db:ce:3a:34:71:40:fd:48: a2:12:90:52:12:1c:e2:33:5e:36:2f:61:12:2b:34: f2:3c:84:cc:50:f5:b3:ca:71:6f:ef:0b:b1:c4:31: 06:91:97:61:87:25:b8:7d:0f:1f:8b:90:6e:04:c7: ff:e4:0d:08:24:6b:74:a7:64:15:6d:fd:55:59:b0: 5e:88:57:3b:1f:44:d0:66:a2:6a:c1:69:a6:65:ab: ee:60:74:bf:15:d9:16:aa:ed:d7:59:1a:fb:fa:96: 1c:70:fc:f9:b8:24:45:56:55:a2:89:1b:a3:bb:b1: c7:1c:f7:dd:b3:4a:b5:5b:6c:31:75:c4:14:f9:f8: e1:23:6e:1a:f7:0c:3d:1b:e1:43:e1:69:1c:af:99: aa:7c:8d:36:a7:86:46:56:17:77:3f:b9:8b:bb:74: 1d:19:4b:ce:66:0b:03:d3:5e:4e:c5:1e:61:7b:02: 5d:60:1c:3c:94:e9:80:e7:a3:41:67:92:e1:21:07: 37:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:13:10:4C:06:37:DE:BF:D6:03:F2:76:49:30:67:CD:06:33:B5:A0 X509v3 Authority Key Identifier: keyid:96:1A:52:A5:22:DE:B9:02:D9:CB:DD:E9:8A:F8:2B:42:44:22:F5:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/961A52A522DEB902D9CBDDE98AF82B424422F566.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/961A52A522DEB902D9CBDDE98AF82B424422F566.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:4b:e8:cf:da:b4:30:2b:1a:7f:27:3f:d4:25:f4:f6:6b:6e: 35:55:54:d3:b3:c2:31:b3:96:e9:ce:46:9f:7d:be:4d:d1:8b: 50:c6:4d:1f:80:64:7c:a0:45:c1:d4:51:21:f6:75:86:88:36: 12:aa:73:eb:57:ad:91:76:4d:97:ad:d9:e2:b5:46:4a:d8:57: 82:97:9f:64:5a:86:53:6e:dd:94:70:3f:30:bc:8f:9a:9c:8c: d3:dd:d1:5a:44:45:d3:a9:5b:c8:32:7c:e4:95:93:95:e3:e5: 83:41:a0:76:ab:d1:0f:d8:57:3d:79:49:8b:c7:99:67:20:2e: 44:32:28:56:c6:1f:c6:b0:fb:d1:f4:b9:39:c2:0f:51:c0:ff: 84:b5:f5:05:19:a2:21:3f:1f:66:50:40:fe:1f:2e:75:7b:26: f2:e7:5d:15:78:c9:47:9f:f1:53:e3:33:2c:96:e8:b7:05:3b: 1f:91:c7:15:d9:8f:f6:bd:d5:39:64:0b:c9:2e:c5:89:c5:30: c4:50:45:92:b4:67:b1:cf:b9:72:9f:05:14:18:62:cb:5d:a1: 35:20:05:4b:37:50:ab:71:3b:6b:01:4e:ac:40:34:72:9a:fb: 91:29:72:4a:b6:8e:68:86:41:7d:6d:a4:0f:dc:ca:67:a6:06: c6:0f:5e:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOF6mCq5w6H+aE/CdrG+GBUwYFnwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTYxQTUyQTUyMkRFQjkwMkQ5Q0JEREU5OEFGODJCNDI0 NDIyRjU2NjAeFw0yNjAyMjgxOTQ3MDZaFw0yNjAzMDQwNDMyMDZaMDMxMTAvBgNV BAMTKDk4MTMxMDRDMDYzN0RFQkZENjAzRjI3NjQ5MzA2N0NEMDYzM0I1QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRKIcvSW4zuIw5IlN5edjem3KC cOpsnJ97z89uwR2tjYGdRVqxmlIOKJUP1T/FKgyfeFZocjwrGtlQfqUVqbsUjTzb zjo0cUD9SKISkFISHOIzXjYvYRIrNPI8hMxQ9bPKcW/vC7HEMQaRl2GHJbh9Dx+L kG4Ex//kDQgka3SnZBVt/VVZsF6IVzsfRNBmomrBaaZlq+5gdL8V2Raq7ddZGvv6 lhxw/Pm4JEVWVaKJG6O7sccc992zSrVbbDF1xBT5+OEjbhr3DD0b4UPhaRyvmap8 jTanhkZWF3c/uYu7dB0ZS85mCwPTXk7FHmF7Al1gHDyU6YDno0FnkuEhBzchAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmBMQTAY33r/WA/J2STBnzQYztaAwHwYDVR0j BBgwFoAUlhpSpSLeuQLZy93pivgrQkQi9WYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjcyZjAxMi1hNDNhLTRmY2ItODZhOS1hYjNlOTU3M2E4ZDkvMC85NjFBNTJBNTIy REVCOTAyRDlDQkRERTk4QUY4MkI0MjQ0MjJGNTY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTYxQTUyQTUyMkRFQjkwMkQ5Q0JEREU5OEFGODJCNDI0NDIy RjU2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Y3MmYwMTItYTQzYS00ZmNiLTg2 YTktYWIzZTk1NzNhOGQ5LzAvOTYxQTUyQTUyMkRFQjkwMkQ5Q0JEREU5OEFGODJC NDI0NDIyRjU2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABhL6M/atDArGn8nP9Ql9PZrbjVVVNOzwjGz lunORp99vk3Ri1DGTR+AZHygRcHUUSH2dYaINhKqc+tXrZF2TZet2eK1RkrYV4KX n2RahlNu3ZRwPzC8j5qcjNPd0VpERdOpW8gyfOSVk5Xj5YNBoHar0Q/YVz15SYvH mWcgLkQyKFbGH8aw+9H0uTnCD1HA/4S19QUZoiE/H2ZQQP4fLnV7JvLnXRV4yUef 8VPjMyyW6LcFOx+RxxXZj/a91TlkC8kuxYnFMMRQRZK0Z7HPuXKfBRQYYstdoTUg BUs3UKtxO2sBTqxANHKa+5Epckq2jmiGQX1tpA/cymemBsYPXoM= -----END CERTIFICATE-----Generated at Tue Mar 3 01:14:41 2026 by rpki-client