$ rpki-client -vvf repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft File: 967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft (raw, json) Hash identifier: NM0FdeJIglelCdrMqcn5k6At08zmOoshUfq7uaAXsCc= Subject key identifier: A1:05:06:A8:4F:DC:9F:00:39:53:A3:10:AC:AB:A1:90:37:38:2C:E8 Authority key identifier: 96:7E:94:B3:DE:77:1E:4C:59:77:FF:1E:0C:2A:61:A1:DF:44:49:39 Certificate issuer: /CN=967E94B3DE771E4C5977FF1E0C2A61A1DF444939 Certificate serial: 6273B26565942136384A794B934F1A49A5C5ABB5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft Manifest number: F6 Signing time: Sun 01 Mar 2026 22:12:21 +0000 Manifest this update: Sun 01 Mar 2026 22:07:21 +0000 Manifest next update: Thu 05 Mar 2026 07:26:21 +0000 Files and hashes: 1: 967E94B3DE771E4C5977FF1E0C2A61A1DF444939.crl (hash: hG/12fkoFfvSpCFZnq16WXV0mG4iyGE0PunJS0mBQrU=) 2: 3230322e37342e37342e302f32332d3234203d3e20313333383030.roa (hash: QnpXNgQS0ANzts5qE/GQxLZvArtSxvVua1P/pq1g7S0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.crl rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:73:b2:65:65:94:21:36:38:4a:79:4b:93:4f:1a:49:a5:c5:ab:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=967E94B3DE771E4C5977FF1E0C2A61A1DF444939 Validity Not Before: Mar 1 22:07:21 2026 GMT Not After : Mar 5 07:26:21 2026 GMT Subject: CN=A10506A84FDC9F003953A310ACABA19037382CE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:cf:d9:9c:04:31:eb:52:17:41:59:7c:d8:03: ee:64:60:ea:68:86:5d:f2:68:43:22:05:ea:1d:13: cf:f5:3f:97:bc:66:ba:47:71:1a:4f:65:36:5f:fc: f7:cd:6d:de:15:29:b7:b9:fb:81:97:e4:4b:8c:35: 4f:94:39:92:90:2d:fd:5f:4d:96:9e:7e:d4:44:6e: 1c:16:ce:d8:00:0e:26:8a:f2:e3:9f:ff:66:f0:bb: 54:9b:70:f6:45:88:43:a5:04:86:ee:47:66:8f:0c: 38:1d:59:10:da:55:69:c8:08:52:70:18:ae:43:74: 1b:da:a0:21:88:70:af:0b:9b:d3:5a:95:d3:f2:5d: 73:12:5b:67:06:8f:da:0c:d2:45:c3:38:68:79:39: 04:22:7d:58:5e:01:f7:f5:52:c4:2c:72:39:db:16: 67:c5:91:7a:8c:33:f2:28:ca:d8:79:33:2b:63:75: 4e:ea:96:83:be:60:9e:9f:29:9a:1a:1e:53:c2:d0: 4b:80:ae:60:76:e5:86:cc:bb:da:e6:8f:9d:50:d6: aa:b0:6a:f6:e0:f6:9e:3d:03:63:91:af:7e:a6:9c: 7a:fd:1a:34:37:4b:50:d4:68:5b:96:55:ae:a8:02: 7c:bd:3d:00:69:dc:e1:90:a6:96:a4:a0:53:f7:a8: 09:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:05:06:A8:4F:DC:9F:00:39:53:A3:10:AC:AB:A1:90:37:38:2C:E8 X509v3 Authority Key Identifier: keyid:96:7E:94:B3:DE:77:1E:4C:59:77:FF:1E:0C:2A:61:A1:DF:44:49:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:9b:91:c7:84:0b:97:36:05:ed:09:99:d5:1d:1e:43:89:dd: 04:0e:15:a3:73:45:e6:01:87:42:7b:fe:a7:70:de:5e:bd:ab: 0a:13:1e:31:7a:9f:df:bf:82:47:4d:00:06:37:db:1d:3d:5f: 98:04:4a:71:bc:18:39:21:c6:d3:48:07:8f:8b:f0:e0:7e:3a: da:fa:e1:02:41:fe:fe:d8:f6:f9:59:07:8c:26:37:de:eb:66: fa:2e:b7:47:8a:a9:24:00:86:51:b8:89:3f:5c:76:84:e6:e1: fc:27:0a:30:c0:fd:83:b5:5e:47:61:d3:5e:da:05:6f:3f:79: c1:79:0e:76:e7:8f:cd:1b:4b:e8:bd:95:fd:25:56:f8:60:df: 85:49:8b:e5:57:a1:3e:64:76:32:7c:97:9a:cf:33:cd:08:a4: d5:08:56:5b:36:64:8c:31:7b:13:40:35:fb:d0:05:72:2b:29: 96:57:7b:ab:81:c1:77:6f:15:6c:be:6e:69:e2:5f:b0:6d:03: 6a:ea:c3:84:b0:d0:74:99:4a:65:f3:ed:ea:b9:1d:fe:80:76: 2b:fb:f4:38:70:fb:9a:88:97:8b:37:1f:99:d0:5a:dc:c6:21: ac:77:f9:d5:e1:a3:fb:b3:77:4e:ca:d1:8b:ea:47:98:f6:c3: 49:c6:d9:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYnOyZWWUITY4SnlLk08aSaXFq7UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY3RTk0QjNERTc3MUU0QzU5NzdGRjFFMEMyQTYxQTFE RjQ0NDkzOTAeFw0yNjAzMDEyMjA3MjFaFw0yNjAzMDUwNzI2MjFaMDMxMTAvBgNV BAMTKEExMDUwNkE4NEZEQzlGMDAzOTUzQTMxMEFDQUJBMTkwMzczODJDRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdz9mcBDHrUhdBWXzYA+5kYOpo hl3yaEMiBeodE8/1P5e8ZrpHcRpPZTZf/PfNbd4VKbe5+4GX5EuMNU+UOZKQLf1f TZaeftREbhwWztgADiaK8uOf/2bwu1SbcPZFiEOlBIbuR2aPDDgdWRDaVWnICFJw GK5DdBvaoCGIcK8Lm9NaldPyXXMSW2cGj9oM0kXDOGh5OQQifVheAff1UsQscjnb FmfFkXqMM/Ioyth5MytjdU7qloO+YJ6fKZoaHlPC0EuArmB25YbMu9rmj51Q1qqw avbg9p49A2ORr36mnHr9GjQ3S1DUaFuWVa6oAny9PQBp3OGQppakoFP3qAkvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoQUGqE/cnwA5U6MQrKuhkDc4LOgwHwYDVR0j BBgwFoAUln6Us953HkxZd/8eDCphod9ESTkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTBjODY3Yi0yY2I5LTQ1N2ItODU2Yi1hMmFmYTM4ZjU3Y2MvMC85NjdFOTRCM0RF NzcxRTRDNTk3N0ZGMUUwQzJBNjFBMURGNDQ0OTM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTY3RTk0QjNERTc3MUU0QzU5NzdGRjFFMEMyQTYxQTFERjQ0 NDkzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDUwYzg2N2ItMmNiOS00NTdiLTg1 NmItYTJhZmEzOGY1N2NjLzAvOTY3RTk0QjNERTc3MUU0QzU5NzdGRjFFMEMyQTYx QTFERjQ0NDkzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFGbkceEC5c2Be0JmdUdHkOJ3QQOFaNzReYB h0J7/qdw3l69qwoTHjF6n9+/gkdNAAY32x09X5gESnG8GDkhxtNIB4+L8OB+Otr6 4QJB/v7Y9vlZB4wmN97rZvout0eKqSQAhlG4iT9cdoTm4fwnCjDA/YO1Xkdh017a BW8/ecF5Dnbnj80bS+i9lf0lVvhg34VJi+VXoT5kdjJ8l5rPM80IpNUIVls2ZIwx exNANfvQBXIrKZZXe6uBwXdvFWy+bmniX7BtA2rqw4Sw0HSZSmXz7eq5Hf6Adiv7 9Dhw+5qIl4s3H5nQWtzGIax3+dXho/uzd07K0YvqR5j2w0nG2U8= -----END CERTIFICATE-----Generated at Mon Mar 2 02:51:49 2026 by rpki-client