$ rpki-client -vvf repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft File: 977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft (raw, json) Hash identifier: f1KHYvo50+iLmCSTDxqznVYGMSIenGAhkJ5aWiT4jdw= Subject key identifier: EF:70:3B:C9:4F:6E:49:4C:D4:4B:EF:D3:A9:97:31:59:52:32:D5:38 Authority key identifier: 97:7E:A5:11:85:51:E9:8A:EA:A8:BB:11:C9:D9:9D:71:96:D3:DE:BA Certificate issuer: /CN=977EA5118551E98AEAA8BB11C9D99D7196D3DEBA Certificate serial: 5E60420897920F0758B9D6634CB62F744D5C5512 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft Manifest number: 0554 Signing time: Mon 02 Mar 2026 04:21:16 +0000 Manifest this update: Mon 02 Mar 2026 04:16:16 +0000 Manifest next update: Thu 05 Mar 2026 09:40:16 +0000 Files and hashes: 1: 3130332e3132332e3130382e302f32342d3234203d3e20313338303636.roa (hash: q9pcjfkInqPcGghxGeh0wF/8x9n+wp0JshUKi76J40w=) 2: 977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.crl (hash: qID8AkuJQ/CkmTV3UDwRFe9FxJCzz8i5y68Y47gGF2A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.crl rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:60:42:08:97:92:0f:07:58:b9:d6:63:4c:b6:2f:74:4d:5c:55:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=977EA5118551E98AEAA8BB11C9D99D7196D3DEBA Validity Not Before: Mar 2 04:16:16 2026 GMT Not After : Mar 5 09:40:16 2026 GMT Subject: CN=EF703BC94F6E494CD44BEFD3A99731595232D538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:85:0b:5d:fc:63:4c:4e:18:67:01:72:8d:0b: ed:4b:d5:b9:5b:f5:be:55:a2:32:17:a0:06:14:23: a2:e9:b0:a3:f2:63:43:90:d8:a2:38:d5:4c:d9:0b: bb:31:96:1e:9d:ee:56:b3:84:cc:6c:fb:51:f3:27: f3:67:e9:b7:f0:4b:a8:58:a6:a3:5b:e8:19:66:90: 5d:67:8e:64:69:40:42:eb:aa:60:9a:b9:f2:e8:3c: ce:71:22:d3:f6:db:82:f8:6f:c5:51:51:12:fe:e0: 7e:67:42:47:52:58:16:23:54:72:b8:af:07:74:6b: 71:44:ee:8a:dd:21:77:ed:c4:a3:6e:8c:05:72:a8: b0:df:74:14:f7:18:d5:e4:4c:77:f2:06:7b:32:1c: bb:db:f4:fa:d6:15:9c:15:74:e9:98:4e:32:77:ad: 03:4b:1a:31:46:53:8d:5a:23:c6:31:4e:36:ca:d8: 78:ce:23:73:e2:93:e0:fc:ff:fd:3b:e5:b7:0b:67: de:2a:22:67:91:96:a1:5f:e9:11:de:87:d3:c2:96: d3:bf:5e:d8:ce:69:42:58:59:43:bf:96:a6:b1:ae: 3b:52:5f:1b:67:81:9b:fd:c5:2d:0a:39:57:c0:82: 1d:ff:be:40:b2:b4:04:47:45:d5:ab:8f:c5:75:dc: d8:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:70:3B:C9:4F:6E:49:4C:D4:4B:EF:D3:A9:97:31:59:52:32:D5:38 X509v3 Authority Key Identifier: keyid:97:7E:A5:11:85:51:E9:8A:EA:A8:BB:11:C9:D9:9D:71:96:D3:DE:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:d0:d9:3b:32:08:8f:1c:04:78:65:fe:b8:0a:05:c0:c2:a3: 7f:78:22:a3:a0:45:3f:a0:a9:b1:96:d6:3a:24:36:70:69:98: 22:0b:4c:50:ed:60:b3:b5:6a:b8:6c:be:ee:ca:d6:f4:fa:b6: 1d:33:a5:05:02:ca:b3:29:b7:40:e2:85:40:ef:45:63:2f:29: d3:7b:8d:4d:bb:f3:90:2b:6e:97:5e:e9:8d:b0:c5:dc:e9:d3: c3:49:be:98:f4:f4:da:ef:00:8a:1c:6c:ff:bb:62:a1:55:c3: c1:cd:fa:a4:6c:26:68:3f:66:51:31:92:ed:d4:2f:7c:85:a4: b4:98:01:c7:bc:79:5d:7c:36:f7:5f:b7:f9:b9:df:17:4b:28: a6:a9:d6:7e:4c:c7:be:c0:7e:82:c1:4b:80:1e:15:f1:9f:96: a1:39:4e:00:f1:b1:94:68:31:b0:aa:9a:88:63:2e:ca:7f:ad: 74:c6:9b:d0:04:99:12:00:5f:c1:38:66:4b:8f:bf:4b:c5:11: 17:2b:02:be:01:c2:bb:0e:f5:8b:b7:3d:98:2b:e8:e3:1b:4a: b4:98:ee:dc:d8:57:61:c6:a0:db:69:54:da:d1:1c:d2:5e:e8: 90:bf:f9:41:3b:ee:1a:31:b2:c7:7e:89:1e:86:7f:f4:80:d8: 55:33:5c:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXmBCCJeSDwdYudZjTLYvdE1cVRIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc3RUE1MTE4NTUxRTk4QUVBQThCQjExQzlEOTlENzE5 NkQzREVCQTAeFw0yNjAzMDIwNDE2MTZaFw0yNjAzMDUwOTQwMTZaMDMxMTAvBgNV BAMTKEVGNzAzQkM5NEY2RTQ5NENENDRCRUZEM0E5OTczMTU5NTIzMkQ1MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFhQtd/GNMThhnAXKNC+1L1blb 9b5VojIXoAYUI6LpsKPyY0OQ2KI41UzZC7sxlh6d7lazhMxs+1HzJ/Nn6bfwS6hY pqNb6BlmkF1njmRpQELrqmCaufLoPM5xItP224L4b8VRURL+4H5nQkdSWBYjVHK4 rwd0a3FE7ordIXftxKNujAVyqLDfdBT3GNXkTHfyBnsyHLvb9PrWFZwVdOmYTjJ3 rQNLGjFGU41aI8YxTjbK2HjOI3Pik+D8//075bcLZ94qImeRlqFf6RHeh9PCltO/ XtjOaUJYWUO/lqaxrjtSXxtngZv9xS0KOVfAgh3/vkCytARHRdWrj8V13Nj/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU73A7yU9uSUzUS+/TqZcxWVIy1TgwHwYDVR0j BBgwFoAUl36lEYVR6YrqqLsRydmdcZbT3rowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OTg4YzBmMi0yODAwLTQ4ZGEtYTgzZS1hYjU0ZGY2NWM1NzQvMC85NzdFQTUxMTg1 NTFFOThBRUFBOEJCMTFDOUQ5OUQ3MTk2RDNERUJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTc3RUE1MTE4NTUxRTk4QUVBQThCQjExQzlEOTlENzE5NkQz REVCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODk4OGMwZjItMjgwMC00OGRhLWE4 M2UtYWI1NGRmNjVjNTc0LzAvOTc3RUE1MTE4NTUxRTk4QUVBQThCQjExQzlEOTlE NzE5NkQzREVCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFnQ2TsyCI8cBHhl/rgKBcDCo394IqOgRT+g qbGW1jokNnBpmCILTFDtYLO1arhsvu7K1vT6th0zpQUCyrMpt0DihUDvRWMvKdN7 jU2785Arbpde6Y2wxdzp08NJvpj09NrvAIocbP+7YqFVw8HN+qRsJmg/ZlExku3U L3yFpLSYAce8eV18Nvdft/m53xdLKKap1n5Mx77AfoLBS4AeFfGflqE5TgDxsZRo MbCqmohjLsp/rXTGm9AEmRIAX8E4ZkuPv0vFERcrAr4BwrsO9Yu3PZgr6OMbSrSY 7tzYV2HGoNtpVNrRHNJe6JC/+UE77hoxssd+iR6Gf/SA2FUzXI8= -----END CERTIFICATE-----Generated at Mon Mar 2 15:20:01 2026 by rpki-client