$ rpki-client -vvf repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft File: 977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft (raw, json) Hash identifier: drEPqYsJx+YfEc8o1uTuwkZZzOmeOxwO9NHNnwyYBmI= Subject key identifier: 15:36:CA:89:F1:F6:0E:AB:5B:22:87:0C:05:4B:D0:A5:7D:59:77:6A Authority key identifier: 97:7E:A5:11:85:51:E9:8A:EA:A8:BB:11:C9:D9:9D:71:96:D3:DE:BA Certificate issuer: /CN=977EA5118551E98AEAA8BB11C9D99D7196D3DEBA Certificate serial: 18A6C3BECD6134B111708F07628A2E1C5F517822 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft Manifest number: 0568 Signing time: Thu 16 Apr 2026 09:01:23 +0000 Manifest this update: Thu 16 Apr 2026 08:56:23 +0000 Manifest next update: Sun 19 Apr 2026 20:37:23 +0000 Files and hashes: 1: 977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.crl (hash: Scn1hNLuO69gydT+XkUp298XK9gyq+poAdmsE9b+3PE=) 2: 3130332e3132332e3130382e302f32342d3234203d3e20313338303636.roa (hash: q9pcjfkInqPcGghxGeh0wF/8x9n+wp0JshUKi76J40w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.crl rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 20:37:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:a6:c3:be:cd:61:34:b1:11:70:8f:07:62:8a:2e:1c:5f:51:78:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=977EA5118551E98AEAA8BB11C9D99D7196D3DEBA Validity Not Before: Apr 16 08:56:23 2026 GMT Not After : Apr 19 20:37:23 2026 GMT Subject: CN=1536CA89F1F60EAB5B22870C054BD0A57D59776A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:dd:ba:e3:7a:26:d2:c4:6b:73:69:65:d6:0d: 97:7b:18:be:83:c5:0f:d3:8f:fb:8e:4b:ab:3b:1c: 8d:d3:08:08:0e:b2:5e:e3:f1:84:95:71:6f:04:36: df:ed:7a:ab:d8:c6:a2:ce:5f:99:79:6b:0e:59:44: eb:25:7f:2a:98:13:74:e0:5c:8c:2d:32:a6:64:a9: 89:68:69:7e:8f:97:27:b5:01:41:c8:fa:8e:fe:30: b5:3c:d3:9a:34:2c:e2:8f:95:65:1e:a4:36:6b:48: a2:39:b1:4f:d6:ac:dc:10:4c:28:76:54:ef:d0:a1: e2:68:61:37:90:5e:32:f9:02:5a:bf:d4:1d:61:a9: 92:0e:c8:fc:19:88:a3:18:2f:12:04:a8:03:ab:01: 6c:f5:87:83:20:10:33:2a:27:92:86:5b:42:f8:8b: 2d:7f:30:19:13:7b:16:cf:48:67:c4:ef:8d:ab:bf: 87:5f:0a:03:4b:e9:61:88:3d:ff:19:7f:e8:10:79: 6c:3d:f5:f3:de:65:83:8a:78:f8:68:5a:4d:b6:26: d9:82:a4:d7:e1:2a:09:6b:f8:ce:99:13:fd:05:b3: 04:aa:6c:b8:16:f5:1e:9d:e0:a6:2e:01:bc:81:17: 7b:dc:ba:5c:d3:1d:a9:de:ac:bf:58:88:81:33:87: a4:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:36:CA:89:F1:F6:0E:AB:5B:22:87:0C:05:4B:D0:A5:7D:59:77:6A X509v3 Authority Key Identifier: keyid:97:7E:A5:11:85:51:E9:8A:EA:A8:BB:11:C9:D9:9D:71:96:D3:DE:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:0b:e8:e8:8f:89:b2:63:5b:cb:07:3e:be:dd:78:09:32:aa: 09:8b:b6:a2:18:58:17:ee:63:7c:d0:47:e7:bd:51:94:39:a8: 81:7a:95:02:38:aa:58:e2:98:fe:9e:a9:eb:b1:5d:96:e5:7f: f8:c0:30:7f:64:cd:30:74:01:06:4c:60:59:7d:ae:df:3e:85: 9f:9c:cd:6c:f9:c6:11:5d:d2:6b:d5:47:98:cf:f5:ea:18:dd: 39:16:ae:69:0d:2a:18:6f:51:1b:72:25:96:ff:fa:51:67:f3: 50:f7:22:d6:77:8d:fc:15:48:96:eb:38:90:5e:0b:17:32:82: b2:cb:fd:bc:5e:83:c8:a1:f2:6c:c5:a4:58:12:d2:53:d0:c7: 7e:dc:49:9b:04:b8:86:5a:e6:43:96:bc:a6:87:a6:c9:34:ae: d4:78:40:d6:cc:2c:d3:b7:9a:6b:13:1e:37:16:b6:c5:31:cb: 02:d2:e6:4c:d5:0d:bd:96:a8:c9:01:30:b8:1d:7f:87:a0:ee: d0:ef:20:5e:81:f2:bd:c9:2d:02:53:91:e2:49:a5:a7:6d:16: 28:f8:f2:fc:c5:df:a4:d7:0e:2f:79:25:75:e0:99:11:8c:6d: fa:f3:23:ff:2c:e7:88:2f:7f:28:ac:9a:36:91:ba:30:cb:9b: 2f:eb:34:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGKbDvs1hNLERcI8HYoouHF9ReCIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc3RUE1MTE4NTUxRTk4QUVBQThCQjExQzlEOTlENzE5 NkQzREVCQTAeFw0yNjA0MTYwODU2MjNaFw0yNjA0MTkyMDM3MjNaMDMxMTAvBgNV BAMTKDE1MzZDQTg5RjFGNjBFQUI1QjIyODcwQzA1NEJEMEE1N0Q1OTc3NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv3brjeibSxGtzaWXWDZd7GL6D xQ/Tj/uOS6s7HI3TCAgOsl7j8YSVcW8ENt/teqvYxqLOX5l5aw5ZROslfyqYE3Tg XIwtMqZkqYloaX6Plye1AUHI+o7+MLU805o0LOKPlWUepDZrSKI5sU/WrNwQTCh2 VO/QoeJoYTeQXjL5Alq/1B1hqZIOyPwZiKMYLxIEqAOrAWz1h4MgEDMqJ5KGW0L4 iy1/MBkTexbPSGfE742rv4dfCgNL6WGIPf8Zf+gQeWw99fPeZYOKePhoWk22JtmC pNfhKglr+M6ZE/0FswSqbLgW9R6d4KYuAbyBF3vculzTHanerL9YiIEzh6R5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFTbKifH2DqtbIocMBUvQpX1Zd2owHwYDVR0j BBgwFoAUl36lEYVR6YrqqLsRydmdcZbT3rowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OTg4YzBmMi0yODAwLTQ4ZGEtYTgzZS1hYjU0ZGY2NWM1NzQvMC85NzdFQTUxMTg1 NTFFOThBRUFBOEJCMTFDOUQ5OUQ3MTk2RDNERUJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTc3RUE1MTE4NTUxRTk4QUVBQThCQjExQzlEOTlENzE5NkQz REVCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODk4OGMwZjItMjgwMC00OGRhLWE4 M2UtYWI1NGRmNjVjNTc0LzAvOTc3RUE1MTE4NTUxRTk4QUVBQThCQjExQzlEOTlE NzE5NkQzREVCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF0L6OiPibJjW8sHPr7deAkyqgmLtqIYWBfu Y3zQR+e9UZQ5qIF6lQI4qljimP6eqeuxXZblf/jAMH9kzTB0AQZMYFl9rt8+hZ+c zWz5xhFd0mvVR5jP9eoY3TkWrmkNKhhvURtyJZb/+lFn81D3ItZ3jfwVSJbrOJBe CxcygrLL/bxeg8ih8mzFpFgS0lPQx37cSZsEuIZa5kOWvKaHpsk0rtR4QNbMLNO3 mmsTHjcWtsUxywLS5kzVDb2WqMkBMLgdf4eg7tDvIF6B8r3JLQJTkeJJpadtFij4 8vzF36TXDi95JXXgmRGMbfrzI/8s54gvfyismjaRujDLmy/rNAs= -----END CERTIFICATE-----Generated at Sat Apr 18 06:22:17 2026 by rpki-client