$ rpki-client -vvf repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft File: 2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft (raw, json) Hash identifier: LA9otrHtRy0rAqIFoI7jLenhetFV/ArRscJ7sIuqRVA= Subject key identifier: 4B:70:C3:3B:2B:56:65:84:A0:C3:7B:14:CB:19:36:D5:FC:33:CF:5B Authority key identifier: 29:76:AD:C7:44:8B:F0:CA:9B:57:DC:D7:88:49:A1:E0:F9:5F:2B:45 Certificate issuer: /CN=2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45 Certificate serial: 48611504E2C4B37B411E30A3019823C9D45B25DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft Manifest number: 0122 Signing time: Wed 15 Apr 2026 11:31:05 +0000 Manifest this update: Wed 15 Apr 2026 11:26:05 +0000 Manifest next update: Sat 18 Apr 2026 18:50:05 +0000 Files and hashes: 1: 2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.crl (hash: 1VW8taJZgLQwesX0N6dR9d4Wg0AdEyKLhAN7RAwbuzI=) 2: 3136302e32352e3137382e302f32332d3234203d3e20313533303735.roa (hash: FYy5UtFCXZKGCZxosr1oqFzrTkMP7sB8ytiR2n56UZs=) 3: 3136302e32352e3137382e302f32342d3234203d3e20313533303735.roa (hash: iPqRbkelW4W9hPKQlPKh7dVapT99d9ruqUsqOdahl18=) 4: 3136302e32352e3137392e302f32342d3234203d3e20313533303735.roa (hash: duCuSDamX6IXj6dNr3R2KvTWuX1Y0Ld9dMd4eFNkJZc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.crl rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 18:50:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:61:15:04:e2:c4:b3:7b:41:1e:30:a3:01:98:23:c9:d4:5b:25:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45 Validity Not Before: Apr 15 11:26:05 2026 GMT Not After : Apr 18 18:50:05 2026 GMT Subject: CN=4B70C33B2B566584A0C37B14CB1936D5FC33CF5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:73:63:25:dd:7f:ce:4b:67:ad:71:92:8a:01: a5:31:fb:4e:3e:50:96:66:31:5d:6b:e6:cb:74:88: 0e:fe:bb:c4:7c:c1:ec:51:52:a1:3a:82:20:e8:c5: 4a:3a:c7:b6:1c:7f:68:93:16:de:72:be:b3:b9:76: cc:fe:ef:ca:55:53:50:37:86:4f:b4:ef:60:39:2d: 0f:51:8f:95:1a:3c:1e:c0:dc:c7:fe:54:b6:c1:d2: ff:30:6a:ef:0e:63:13:3d:12:81:70:e9:3f:00:00: 5f:bf:30:94:e1:ba:29:6b:75:28:cd:b6:e4:50:59: 38:73:f3:7f:cf:12:72:7f:be:5c:70:b9:c5:8c:97: c2:b7:5a:03:c7:19:a7:52:59:94:7e:5d:4c:b5:ae: 95:da:31:b1:64:73:8e:44:65:b2:ae:9e:08:29:c2: 6f:37:54:3b:ac:b8:e5:5a:d1:b4:19:25:84:40:be: 6d:00:5c:8c:29:68:68:f2:db:ee:ac:13:32:47:13: 4f:31:0a:3d:cc:79:5a:4b:82:9f:4d:60:24:19:ed: 42:b8:96:66:5a:01:11:8c:bd:13:01:21:35:92:2d: 7d:c3:e1:5e:7a:09:be:56:2b:39:db:9c:f3:a3:ad: a1:89:29:09:fe:be:8d:45:59:19:ce:c4:5e:e5:47: 81:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:70:C3:3B:2B:56:65:84:A0:C3:7B:14:CB:19:36:D5:FC:33:CF:5B X509v3 Authority Key Identifier: keyid:29:76:AD:C7:44:8B:F0:CA:9B:57:DC:D7:88:49:A1:E0:F9:5F:2B:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:6f:6f:27:c9:9b:3d:9c:08:1e:5e:a6:23:0f:3b:f6:4b:70: 86:20:fb:4a:69:64:0a:de:a6:4b:de:d0:c8:7a:e1:43:ec:24: 19:89:02:06:a1:5d:00:dc:65:95:fd:f0:f0:0e:7d:e4:df:cf: 8e:2a:33:8e:7e:5e:ef:c4:1e:4e:d7:a7:12:07:8f:d0:fb:9e: 36:61:e6:5f:bf:91:3d:02:5c:99:3e:90:af:34:c4:54:fd:07: 26:35:31:ce:8c:93:09:24:4f:45:2f:ef:3f:01:f5:47:cc:dc: 21:3d:ee:44:da:df:52:dc:8e:6e:ab:8e:38:f3:48:0c:28:8f: b5:e1:d5:8c:d6:3d:a6:20:9d:ae:8f:17:44:62:35:a5:5f:d1: 80:24:46:ce:6e:04:67:65:fc:bc:1f:12:e7:96:a1:5a:68:22: a9:47:7d:37:6d:2c:fc:2a:95:26:73:c1:56:24:d7:15:34:e2: 5e:19:90:f3:53:04:d2:43:19:16:ce:da:be:a9:fb:82:da:44: 1d:d4:b1:25:e3:02:fb:5d:ea:f7:3b:da:3b:02:0e:7a:9e:27: e6:ea:dc:9c:21:6b:2a:7e:2b:3b:a1:07:a3:bd:d1:57:d0:2e: cc:b1:18:1b:8b:ea:3c:eb:fe:18:71:6c:3a:cc:52:6f:85:52: 37:6f:61:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSGEVBOLEs3tBHjCjAZgjydRbJd4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk3NkFEQzc0NDhCRjBDQTlCNTdEQ0Q3ODg0OUExRTBG OTVGMkI0NTAeFw0yNjA0MTUxMTI2MDVaFw0yNjA0MTgxODUwMDVaMDMxMTAvBgNV BAMTKDRCNzBDMzNCMkI1NjY1ODRBMEMzN0IxNENCMTkzNkQ1RkMzM0NGNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzc2Ml3X/OS2etcZKKAaUx+04+ UJZmMV1r5st0iA7+u8R8wexRUqE6giDoxUo6x7Ycf2iTFt5yvrO5dsz+78pVU1A3 hk+072A5LQ9Rj5UaPB7A3Mf+VLbB0v8wau8OYxM9EoFw6T8AAF+/MJThuilrdSjN tuRQWThz83/PEnJ/vlxwucWMl8K3WgPHGadSWZR+XUy1rpXaMbFkc45EZbKunggp wm83VDusuOVa0bQZJYRAvm0AXIwpaGjy2+6sEzJHE08xCj3MeVpLgp9NYCQZ7UK4 lmZaARGMvRMBITWSLX3D4V56Cb5WKznbnPOjraGJKQn+vo1FWRnOxF7lR4ENAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS3DDOytWZYSgw3sUyxk21fwzz1swHwYDVR0j BBgwFoAUKXatx0SL8MqbV9zXiEmh4PlfK0UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 N2M0MzJlMC1kYzNlLTQyY2MtYmNjMC02MjliMTYyMDZjOWEvMC8yOTc2QURDNzQ0 OEJGMENBOUI1N0RDRDc4ODQ5QTFFMEY5NUYyQjQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjk3NkFEQzc0NDhCRjBDQTlCNTdEQ0Q3ODg0OUExRTBGOTVG MkI0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODdjNDMyZTAtZGMzZS00MmNjLWJj YzAtNjI5YjE2MjA2YzlhLzAvMjk3NkFEQzc0NDhCRjBDQTlCNTdEQ0Q3ODg0OUEx RTBGOTVGMkI0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFFvbyfJmz2cCB5epiMPO/ZLcIYg+0ppZAre pkve0Mh64UPsJBmJAgahXQDcZZX98PAOfeTfz44qM45+Xu/EHk7XpxIHj9D7njZh 5l+/kT0CXJk+kK80xFT9ByY1Mc6MkwkkT0Uv7z8B9UfM3CE97kTa31Lcjm6rjjjz SAwoj7Xh1YzWPaYgna6PF0RiNaVf0YAkRs5uBGdl/LwfEueWoVpoIqlHfTdtLPwq lSZzwVYk1xU04l4ZkPNTBNJDGRbO2r6p+4LaRB3UsSXjAvtd6vc72jsCDnqeJ+bq 3Jwhayp+KzuhB6O90VfQLsyxGBuL6jzr/hhxbDrMUm+FUjdvYYQ= -----END CERTIFICATE-----Generated at Fri Apr 17 15:24:32 2026 by rpki-client