$ rpki-client -vvf repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/97D77F08669FB94E4E99F795519FB61DCAC62C9F.mft File: 97D77F08669FB94E4E99F795519FB61DCAC62C9F.mft (raw, json) Hash identifier: nxj2/AULrEOzXu8tvl7DloQYuRCx9Kc660WXxPdNkbE= Subject key identifier: 46:9B:04:7F:04:55:6D:15:92:62:E7:5B:E5:1D:CC:83:28:C5:5D:F2 Authority key identifier: 97:D7:7F:08:66:9F:B9:4E:4E:99:F7:95:51:9F:B6:1D:CA:C6:2C:9F Certificate issuer: /CN=97D77F08669FB94E4E99F795519FB61DCAC62C9F Certificate serial: 412CDEE42E373AA1DEB13A47EDE9CFB8AE72B9AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97D77F08669FB94E4E99F795519FB61DCAC62C9F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/97D77F08669FB94E4E99F795519FB61DCAC62C9F.mft Manifest number: 0568 Signing time: Sat 18 Apr 2026 15:11:34 +0000 Manifest this update: Sat 18 Apr 2026 15:06:34 +0000 Manifest next update: Tue 21 Apr 2026 22:30:34 +0000 Files and hashes: 1: 3130332e3230382e3130302e302f32342d3234203d3e20313334363438.roa (hash: EeloRAa8rxGIeEpGTxQGak2WLi+75Ry5Z63pTnvFrf8=) 2: 3130332e3230382e3130322e302f32342d3234203d3e20313334363438.roa (hash: UcHmCNm704dRdxu5mGnFESd+cYb7vs2gxWT3im+cP2U=) 3: 97D77F08669FB94E4E99F795519FB61DCAC62C9F.crl (hash: qGygtgTkh3MQ7DlRwr3SohWqyvzSQ57+Gbioa1WBldY=) 4: 3130332e3230382e3130332e302f32342d3234203d3e20313334363438.roa (hash: Jz7bd4l9iJshW7NcA6KcDnrf6hTtrcC3IwQK9KShw7w=) 5: 3130332e3230382e3130312e302f32342d3234203d3e20313334363438.roa (hash: vtrYPFcybkmKbw9RZMYXPUfTz3LO/v9B/HIV4T8BsWE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/97D77F08669FB94E4E99F795519FB61DCAC62C9F.crl rsync://repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/97D77F08669FB94E4E99F795519FB61DCAC62C9F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97D77F08669FB94E4E99F795519FB61DCAC62C9F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 20:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:2c:de:e4:2e:37:3a:a1:de:b1:3a:47:ed:e9:cf:b8:ae:72:b9:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97D77F08669FB94E4E99F795519FB61DCAC62C9F Validity Not Before: Apr 18 15:06:34 2026 GMT Not After : Apr 21 22:30:34 2026 GMT Subject: CN=469B047F04556D159262E75BE51DCC8328C55DF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:14:a0:c6:8d:b2:10:e4:c8:75:31:2a:c6:73: a4:0f:3c:14:ec:3a:e0:d3:d4:74:21:55:11:93:80: 8a:bf:07:0d:f3:3d:5a:b1:e9:3a:a1:4c:1c:86:ec: 8c:c4:fa:00:8f:12:c4:39:cc:d2:3c:e7:bd:99:b7: 40:78:cc:26:f0:f2:ee:0d:72:66:2f:b6:c1:fb:de: 97:40:b5:6b:73:3d:23:2f:6d:aa:22:e7:eb:3f:15: a4:67:d3:04:6f:ea:ad:9d:00:f9:a1:63:c8:da:b4: d7:17:26:b5:13:04:fd:9d:a6:8d:98:22:78:21:a4: 2c:8e:86:53:2c:a6:b7:47:bf:99:02:83:62:d6:a6: 02:a2:80:b1:16:ba:02:c7:ee:9d:f5:df:9c:1e:20: d8:00:a5:3a:4c:34:fd:5c:3b:91:60:31:9e:c3:35: bc:36:1a:50:b1:e9:68:33:e9:60:63:1c:bd:85:83: ba:c8:f0:28:3c:4e:9e:2e:f9:6a:0b:5c:7c:bc:9c: 43:87:e9:77:81:74:7b:cc:b8:b3:5b:a2:22:39:30: df:6f:aa:01:13:4f:5b:7b:2b:6e:a1:38:73:a8:20: 55:83:b3:42:95:57:d1:cf:31:93:b1:3b:05:c3:10: 8c:61:cb:20:5a:9f:20:4a:fb:47:90:5d:00:13:90: 81:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:9B:04:7F:04:55:6D:15:92:62:E7:5B:E5:1D:CC:83:28:C5:5D:F2 X509v3 Authority Key Identifier: keyid:97:D7:7F:08:66:9F:B9:4E:4E:99:F7:95:51:9F:B6:1D:CA:C6:2C:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/97D77F08669FB94E4E99F795519FB61DCAC62C9F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97D77F08669FB94E4E99F795519FB61DCAC62C9F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/97D77F08669FB94E4E99F795519FB61DCAC62C9F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:46:af:ae:b4:d0:2c:8d:4c:63:48:5a:55:b1:2d:3e:34:69: 88:eb:57:3d:e3:5d:bd:6e:63:20:df:2a:e2:3b:c8:9a:7d:3e: e9:78:66:19:ff:6b:b5:ab:31:a5:62:e3:73:85:d1:96:28:c6: db:4a:92:d8:8f:82:65:92:ee:55:91:ed:95:21:7b:bc:8b:4b: b8:db:a4:45:cf:39:29:39:c8:46:d9:e2:ba:98:f9:e0:07:85: df:87:cf:84:ca:9d:e3:3f:85:98:fa:62:03:1c:93:c3:a2:a8: ca:6b:12:68:dc:1d:b6:0a:54:a4:be:59:3d:76:85:4d:e2:b9: c7:09:52:bc:0a:d1:63:0b:c2:da:99:54:8f:17:cf:3e:c4:8f: db:08:02:f3:11:41:1d:b4:1d:56:00:d9:23:db:48:85:1d:d9: 0a:f4:1b:3c:64:e8:4f:3e:f2:60:32:78:88:b0:08:fa:a1:3d: d7:fa:bc:91:66:a8:89:dc:97:45:80:24:02:b5:6f:d2:64:33: 39:73:f5:70:ed:b6:76:e0:a5:c7:cc:f0:52:05:15:60:1e:e1: 51:ee:45:bc:80:f5:d9:92:64:05:a8:57:d9:29:5a:4a:d9:cf: da:92:08:32:87:bf:e1:aa:ad:14:2d:a0:e4:7e:19:12:36:f2: 6e:b1:6f:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQSze5C43OqHesTpH7enPuK5yua4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTdENzdGMDg2NjlGQjk0RTRFOTlGNzk1NTE5RkI2MURD QUM2MkM5RjAeFw0yNjA0MTgxNTA2MzRaFw0yNjA0MjEyMjMwMzRaMDMxMTAvBgNV BAMTKDQ2OUIwNDdGMDQ1NTZEMTU5MjYyRTc1QkU1MURDQzgzMjhDNTVERjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWFKDGjbIQ5Mh1MSrGc6QPPBTs OuDT1HQhVRGTgIq/Bw3zPVqx6TqhTByG7IzE+gCPEsQ5zNI8572Zt0B4zCbw8u4N cmYvtsH73pdAtWtzPSMvbaoi5+s/FaRn0wRv6q2dAPmhY8jatNcXJrUTBP2dpo2Y InghpCyOhlMsprdHv5kCg2LWpgKigLEWugLH7p3135weINgApTpMNP1cO5FgMZ7D Nbw2GlCx6Wgz6WBjHL2Fg7rI8Cg8Tp4u+WoLXHy8nEOH6XeBdHvMuLNboiI5MN9v qgETT1t7K26hOHOoIFWDs0KVV9HPMZOxOwXDEIxhyyBanyBK+0eQXQATkIHvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURpsEfwRVbRWSYudb5R3MgyjFXfIwHwYDVR0j BBgwFoAUl9d/CGafuU5OmfeVUZ+2HcrGLJ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MmM2OTQ0MC04YjE3LTRhNjgtYTBmYS02NjE1OWUyMTYyZTAvMC85N0Q3N0YwODY2 OUZCOTRFNEU5OUY3OTU1MTlGQjYxRENBQzYyQzlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTdENzdGMDg2NjlGQjk0RTRFOTlGNzk1NTE5RkI2MURDQUM2 MkM5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjJjNjk0NDAtOGIxNy00YTY4LWEw ZmEtNjYxNTllMjE2MmUwLzAvOTdENzdGMDg2NjlGQjk0RTRFOTlGNzk1NTE5RkI2 MURDQUM2MkM5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACtGr6600CyNTGNIWlWxLT40aYjrVz3jXb1u YyDfKuI7yJp9Pul4Zhn/a7WrMaVi43OF0ZYoxttKktiPgmWS7lWR7ZUhe7yLS7jb pEXPOSk5yEbZ4rqY+eAHhd+Hz4TKneM/hZj6YgMck8OiqMprEmjcHbYKVKS+WT12 hU3iuccJUrwK0WMLwtqZVI8Xzz7Ej9sIAvMRQR20HVYA2SPbSIUd2Qr0Gzxk6E8+ 8mAyeIiwCPqhPdf6vJFmqIncl0WAJAK1b9JkMzlz9XDttnbgpcfM8FIFFWAe4VHu RbyA9dmSZAWoV9kpWkrZz9qSCDKHv+GqrRQtoOR+GRI28m6xb+A= -----END CERTIFICATE-----Generated at Sun Apr 19 10:23:49 2026 by rpki-client