$ rpki-client -vvf repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft File: 967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft (raw, json) Hash identifier: ngdK/9v/R+f6My6qr+L40H7AYGDWJejNDpVdgXlLkjg= Subject key identifier: 36:E5:C8:46:90:32:EC:E9:9C:D8:A2:6E:24:60:98:A0:77:37:48:10 Authority key identifier: 96:7E:94:B3:DE:77:1E:4C:59:77:FF:1E:0C:2A:61:A1:DF:44:49:39 Certificate issuer: /CN=967E94B3DE771E4C5977FF1E0C2A61A1DF444939 Certificate serial: 12E7163E9E3FA4C8479D66E5D1B92C287D59DC7F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft Manifest number: 010A Signing time: Wed 15 Apr 2026 14:12:21 +0000 Manifest this update: Wed 15 Apr 2026 14:07:21 +0000 Manifest next update: Sun 19 Apr 2026 01:03:21 +0000 Files and hashes: 1: 3230322e37342e37342e302f32332d3234203d3e20313333383030.roa (hash: QnpXNgQS0ANzts5qE/GQxLZvArtSxvVua1P/pq1g7S0=) 2: 967E94B3DE771E4C5977FF1E0C2A61A1DF444939.crl (hash: PRtic/20ADJmMtpb2V7Q96SCbhykOodiYSRIl8R/L/w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.crl rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 01:03:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:e7:16:3e:9e:3f:a4:c8:47:9d:66:e5:d1:b9:2c:28:7d:59:dc:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=967E94B3DE771E4C5977FF1E0C2A61A1DF444939 Validity Not Before: Apr 15 14:07:21 2026 GMT Not After : Apr 19 01:03:21 2026 GMT Subject: CN=36E5C8469032ECE99CD8A26E246098A077374810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:09:a1:a7:a5:c1:09:c7:f8:ca:09:d2:c0:86: 05:2a:c3:4e:2b:f8:7f:b4:90:ef:34:1a:f9:1d:76: fb:93:f5:ea:78:4b:3b:8b:5e:ae:87:0a:ba:64:c4: 19:b0:71:ec:94:e2:eb:ea:00:95:7c:a8:2c:93:bd: 1d:7d:16:99:18:7f:25:33:c3:85:6a:13:16:04:9e: ea:b4:cc:3d:d5:c9:a2:8c:71:c0:a1:d9:ee:c1:a4: 95:05:82:be:01:d6:de:fa:8e:12:b7:d3:c5:81:c0: c2:41:02:81:22:c8:cf:c5:52:43:bd:6a:f6:82:2f: 26:8a:77:53:e1:25:16:82:39:84:d0:8b:c2:80:00: c5:2e:22:23:2b:6e:6f:73:87:a7:85:39:ae:6b:b0: e6:e8:70:53:49:19:84:db:16:9e:ef:2e:03:db:f5: 97:ba:22:35:d5:e5:b7:3e:7e:06:b3:4d:43:80:4f: 4f:a1:76:13:fe:68:4f:cf:87:84:b7:19:04:51:2c: 88:dd:61:eb:a1:ff:47:93:e3:c8:ff:6d:2f:4c:93: 2d:66:6e:e3:8b:30:64:d8:3c:37:6f:8e:ae:94:39: 39:a5:07:47:e5:7e:8b:5b:5d:25:86:e7:24:2f:f2: f0:47:69:86:39:54:c7:fb:e1:5e:59:fb:de:94:52: 77:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:E5:C8:46:90:32:EC:E9:9C:D8:A2:6E:24:60:98:A0:77:37:48:10 X509v3 Authority Key Identifier: keyid:96:7E:94:B3:DE:77:1E:4C:59:77:FF:1E:0C:2A:61:A1:DF:44:49:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:6f:4c:69:55:97:a2:c5:22:30:3a:dc:e3:cb:39:7a:2e:44: 6a:c8:b7:eb:c0:9b:cd:f1:14:6e:84:ae:bd:86:b9:cb:ad:4a: 2f:ce:86:80:e8:05:84:a7:b5:69:0c:4f:f8:a9:a1:a9:4e:74: 35:02:56:81:87:68:20:90:f5:e3:a9:b5:a3:1d:bc:1a:38:34: 56:ff:03:d3:05:44:cc:52:9a:dc:c3:ca:92:9c:06:5a:a3:5c: 0a:0f:02:aa:99:ab:4f:4b:1e:35:8b:82:e7:fa:82:5e:6f:9b: c2:d6:1d:d6:df:c4:b6:bb:23:ab:af:ea:d8:1a:63:65:98:6f: fc:88:bb:ab:09:87:6a:5b:16:4c:8e:b3:ec:94:55:83:66:f8: 6d:d1:62:4f:bb:1a:6f:51:82:6c:d0:b2:a5:49:a6:f8:3c:e8: fe:19:b5:19:7e:75:6a:1f:86:86:00:f6:99:75:b1:21:d7:33: 4f:a8:48:6a:b7:b4:a1:5d:59:0d:21:76:59:5e:2b:b0:83:6b: 56:a0:80:c4:7c:33:2d:c3:da:b4:4f:b6:e6:50:96:25:31:0b: 88:c2:1b:f2:b0:fd:f7:f5:1c:03:fd:df:45:e3:43:cf:53:27: ea:44:9c:ce:f0:7d:25:a8:fe:42:ef:d0:46:22:21:3e:db:77: 81:ed:4b:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEucWPp4/pMhHnWbl0bksKH1Z3H8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY3RTk0QjNERTc3MUU0QzU5NzdGRjFFMEMyQTYxQTFE RjQ0NDkzOTAeFw0yNjA0MTUxNDA3MjFaFw0yNjA0MTkwMTAzMjFaMDMxMTAvBgNV BAMTKDM2RTVDODQ2OTAzMkVDRTk5Q0Q4QTI2RTI0NjA5OEEwNzczNzQ4MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQCaGnpcEJx/jKCdLAhgUqw04r +H+0kO80GvkddvuT9ep4SzuLXq6HCrpkxBmwceyU4uvqAJV8qCyTvR19FpkYfyUz w4VqExYEnuq0zD3VyaKMccCh2e7BpJUFgr4B1t76jhK308WBwMJBAoEiyM/FUkO9 avaCLyaKd1PhJRaCOYTQi8KAAMUuIiMrbm9zh6eFOa5rsObocFNJGYTbFp7vLgPb 9Ze6IjXV5bc+fgazTUOAT0+hdhP+aE/Ph4S3GQRRLIjdYeuh/0eT48j/bS9Mky1m buOLMGTYPDdvjq6UOTmlB0flfotbXSWG5yQv8vBHaYY5VMf74V5Z+96UUnd/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNuXIRpAy7Omc2KJuJGCYoHc3SBAwHwYDVR0j BBgwFoAUln6Us953HkxZd/8eDCphod9ESTkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTBjODY3Yi0yY2I5LTQ1N2ItODU2Yi1hMmFmYTM4ZjU3Y2MvMC85NjdFOTRCM0RF NzcxRTRDNTk3N0ZGMUUwQzJBNjFBMURGNDQ0OTM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTY3RTk0QjNERTc3MUU0QzU5NzdGRjFFMEMyQTYxQTFERjQ0 NDkzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDUwYzg2N2ItMmNiOS00NTdiLTg1 NmItYTJhZmEzOGY1N2NjLzAvOTY3RTk0QjNERTc3MUU0QzU5NzdGRjFFMEMyQTYx QTFERjQ0NDkzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABpvTGlVl6LFIjA63OPLOXouRGrIt+vAm83x FG6Err2GucutSi/OhoDoBYSntWkMT/ipoalOdDUCVoGHaCCQ9eOptaMdvBo4NFb/ A9MFRMxSmtzDypKcBlqjXAoPAqqZq09LHjWLguf6gl5vm8LWHdbfxLa7I6uv6tga Y2WYb/yIu6sJh2pbFkyOs+yUVYNm+G3RYk+7Gm9RgmzQsqVJpvg86P4ZtRl+dWof hoYA9pl1sSHXM0+oSGq3tKFdWQ0hdlleK7CDa1aggMR8My3D2rRPtuZQliUxC4jC G/Kw/ff1HAP930XjQ89TJ+pEnM7wfSWo/kLv0EYiIT7bd4HtS94= -----END CERTIFICATE-----Generated at Fri Apr 17 13:44:16 2026 by rpki-client