$ rpki-client -vvf repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.mft File: 969449FF3E24842B0CECC61AB398E88F83709FC1.mft (raw, json) Hash identifier: VPd/zBhZzRY7TxFAS9T0impAoFohVHSa0uUDO4LRpzM= Subject key identifier: 7A:B4:D1:23:35:1D:C3:E4:ED:1A:35:90:0D:0A:39:A5:D2:FC:F8:76 Authority key identifier: 96:94:49:FF:3E:24:84:2B:0C:EC:C6:1A:B3:98:E8:8F:83:70:9F:C1 Certificate issuer: /CN=969449FF3E24842B0CECC61AB398E88F83709FC1 Certificate serial: 02DD5FAEC908657F2CFFA0E1F3230E7116425999 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/969449FF3E24842B0CECC61AB398E88F83709FC1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.mft Manifest number: 013B Signing time: Sun 01 Mar 2026 15:52:04 +0000 Manifest this update: Sun 01 Mar 2026 15:47:04 +0000 Manifest next update: Wed 04 Mar 2026 23:24:04 +0000 Files and hashes: 1: 969449FF3E24842B0CECC61AB398E88F83709FC1.crl (hash: Ak2YtOMj70bMIhSxNBV0i8lW8fmxZATctNYkTmnQ+a4=) 2: 3135372e32302e3134352e302f32342d3234203d3e20313532343231.roa (hash: EGoAWeYOzKbfduhwyAgCeaaXls51T+6E5vcysGiLR90=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.crl rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/969449FF3E24842B0CECC61AB398E88F83709FC1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 23:24:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:dd:5f:ae:c9:08:65:7f:2c:ff:a0:e1:f3:23:0e:71:16:42:59:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=969449FF3E24842B0CECC61AB398E88F83709FC1 Validity Not Before: Mar 1 15:47:04 2026 GMT Not After : Mar 4 23:24:04 2026 GMT Subject: CN=7AB4D123351DC3E4ED1A35900D0A39A5D2FCF876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6e:d6:03:5e:c5:4d:61:31:d9:6e:95:52:b0: 25:c6:20:fa:4a:a6:54:f7:e7:99:3d:ed:75:51:98: 81:79:e6:e4:87:d3:65:ed:0e:1f:e0:74:96:7d:a5: a5:2d:0b:eb:57:9c:83:1c:d3:85:a5:06:2e:09:d6: 53:76:47:f8:7e:6f:13:59:d3:8e:6c:0a:f0:d6:c9: db:50:0f:d5:cb:ec:dc:46:68:18:0d:d0:22:3a:fb: 1c:b3:d9:94:01:5e:e2:52:a5:69:41:c2:df:65:f4: f5:d3:9b:cd:7a:8c:e3:77:60:6d:00:4e:60:23:95: c7:c6:35:a1:23:7b:bd:2b:d0:92:d4:5b:e9:3b:9e: 22:3b:70:b7:bf:6b:65:a5:45:e7:8a:82:a6:fa:80: 6d:6d:6c:6d:a3:0f:0e:5a:ed:f6:ff:2c:59:ad:cc: c5:d9:e4:8d:2d:cd:46:aa:96:3b:65:51:62:1a:6f: 4a:32:e4:c7:15:4a:3e:86:ea:1d:ab:f2:55:68:0d: 44:cf:05:da:7b:9e:87:97:34:2b:2c:3a:67:ae:8b: 6b:89:9f:86:f7:63:af:33:00:b9:50:de:29:54:0c: f7:e1:d0:78:64:52:4e:d5:af:88:cd:b3:28:8f:01: a3:f4:f4:58:5e:6c:07:4b:29:a5:ee:6b:4f:8e:47: ee:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:B4:D1:23:35:1D:C3:E4:ED:1A:35:90:0D:0A:39:A5:D2:FC:F8:76 X509v3 Authority Key Identifier: keyid:96:94:49:FF:3E:24:84:2B:0C:EC:C6:1A:B3:98:E8:8F:83:70:9F:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/969449FF3E24842B0CECC61AB398E88F83709FC1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/969449FF3E24842B0CECC61AB398E88F83709FC1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:4d:41:e3:49:2d:c8:e1:05:12:0b:f9:d9:f3:92:ed:27:0f: eb:62:0d:98:f8:32:8c:d8:ea:b5:5b:76:10:6c:01:e3:38:25: ba:90:96:21:24:d3:b1:97:f2:94:21:d3:63:0a:fa:46:76:92: 9b:9b:12:b3:59:63:05:ac:c9:80:a5:e1:12:b4:f2:b6:6a:a5: 90:43:26:1b:75:56:58:3e:61:cb:49:1c:c6:ce:d2:fe:10:05: 0a:18:a1:fa:36:94:09:c8:d1:ab:1e:26:5f:1c:b9:65:4a:ae: c4:89:c9:04:31:49:26:e1:cf:7d:b6:ff:f5:5d:2f:9b:a9:2f: ee:4a:25:86:af:ea:d9:07:66:9b:31:f0:d7:39:a4:7a:a2:e0: f8:96:e2:e6:32:ea:82:d5:56:c1:3b:50:08:c2:5c:24:ce:95: 5a:41:88:c1:77:57:1b:0b:40:19:ff:a6:ec:c2:7a:a3:3f:30: a3:4d:3b:f2:2b:4b:d7:33:89:93:a0:68:f3:e3:85:5b:c1:1a: 16:8a:c2:45:32:0b:52:34:67:7a:f5:38:32:3a:cd:ce:5a:aa: b1:be:b9:e5:73:b5:25:bb:0d:bf:ac:f4:4a:d4:c1:6c:75:80: b7:de:dd:44:1a:b8:f2:53:3d:35:5f:25:0a:8e:cf:57:33:3b: 04:5f:c3:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAt1frskIZX8s/6Dh8yMOcRZCWZkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY5NDQ5RkYzRTI0ODQyQjBDRUNDNjFBQjM5OEU4OEY4 MzcwOUZDMTAeFw0yNjAzMDExNTQ3MDRaFw0yNjAzMDQyMzI0MDRaMDMxMTAvBgNV BAMTKDdBQjREMTIzMzUxREMzRTRFRDFBMzU5MDBEMEEzOUE1RDJGQ0Y4NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9btYDXsVNYTHZbpVSsCXGIPpK plT355k97XVRmIF55uSH02XtDh/gdJZ9paUtC+tXnIMc04WlBi4J1lN2R/h+bxNZ 045sCvDWydtQD9XL7NxGaBgN0CI6+xyz2ZQBXuJSpWlBwt9l9PXTm816jON3YG0A TmAjlcfGNaEje70r0JLUW+k7niI7cLe/a2WlReeKgqb6gG1tbG2jDw5a7fb/LFmt zMXZ5I0tzUaqljtlUWIab0oy5McVSj6G6h2r8lVoDUTPBdp7noeXNCssOmeui2uJ n4b3Y68zALlQ3ilUDPfh0HhkUk7Vr4jNsyiPAaP09FhebAdLKaXua0+OR+6JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUerTRIzUdw+TtGjWQDQo5pdL8+HYwHwYDVR0j BBgwFoAUlpRJ/z4khCsM7MYas5joj4Nwn8EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTRmNzkzNC1jZGM3LTQwODItODNmYi1kZjdkNGY4MjE5YWYvMC85Njk0NDlGRjNF MjQ4NDJCMENFQ0M2MUFCMzk4RTg4RjgzNzA5RkMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTY5NDQ5RkYzRTI0ODQyQjBDRUNDNjFBQjM5OEU4OEY4Mzcw OUZDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE0Zjc5MzQtY2RjNy00MDgyLTgz ZmItZGY3ZDRmODIxOWFmLzAvOTY5NDQ5RkYzRTI0ODQyQjBDRUNDNjFBQjM5OEU4 OEY4MzcwOUZDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHxNQeNJLcjhBRIL+dnzku0nD+tiDZj4MozY 6rVbdhBsAeM4JbqQliEk07GX8pQh02MK+kZ2kpubErNZYwWsyYCl4RK08rZqpZBD Jht1Vlg+YctJHMbO0v4QBQoYofo2lAnI0aseJl8cuWVKrsSJyQQxSSbhz322//Vd L5upL+5KJYav6tkHZpsx8Nc5pHqi4PiW4uYy6oLVVsE7UAjCXCTOlVpBiMF3VxsL QBn/puzCeqM/MKNNO/IrS9cziZOgaPPjhVvBGhaKwkUyC1I0Z3r1ODI6zc5aqrG+ ueVztSW7Db+s9ErUwWx1gLfe3UQauPJTPTVfJQqOz1czOwRfw9o= -----END CERTIFICATE-----Generated at Mon Mar 2 14:59:18 2026 by rpki-client