$ rpki-client -vvf repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.mft File: CA978B7ACEF55A251B74721E04A034CA3601A88B.mft (raw, json) Hash identifier: Id4Q4VwjUsezsy/27Tlhf5IGu9VACB5/EmfcI7fRj04= Subject key identifier: 73:C0:B4:2F:1F:87:3D:33:81:64:11:3A:1F:7C:0B:2B:82:27:15:1B Authority key identifier: CA:97:8B:7A:CE:F5:5A:25:1B:74:72:1E:04:A0:34:CA:36:01:A8:8B Certificate issuer: /CN=CA978B7ACEF55A251B74721E04A034CA3601A88B Certificate serial: 192D97E4827FC42AD9F0507D597389862353E7F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA978B7ACEF55A251B74721E04A034CA3601A88B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.mft Manifest number: 016F Signing time: Fri 27 Feb 2026 23:51:32 +0000 Manifest this update: Fri 27 Feb 2026 23:46:32 +0000 Manifest next update: Tue 03 Mar 2026 02:21:32 +0000 Files and hashes: 1: 3130332e38332e3233362e302f32342d3234203d3e20313530353430.roa (hash: 5p6wjGyXDMhYJEnC8e2hHCinkGJrBkWoW7KvueEj5dQ=) 2: 3130332e38332e3233372e302f32342d3234203d3e20313530353430.roa (hash: Y1BreLVa1ZjV8+fm+79oJJhjLUjz8il238UQwEnA8vE=) 3: CA978B7ACEF55A251B74721E04A034CA3601A88B.crl (hash: ufh8uJkB1zrC9CaTUigyvpuA+2Bz3yFMV9QSRHCctOg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.crl rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA978B7ACEF55A251B74721E04A034CA3601A88B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 02:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:2d:97:e4:82:7f:c4:2a:d9:f0:50:7d:59:73:89:86:23:53:e7:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA978B7ACEF55A251B74721E04A034CA3601A88B Validity Not Before: Feb 27 23:46:32 2026 GMT Not After : Mar 3 02:21:32 2026 GMT Subject: CN=73C0B42F1F873D338164113A1F7C0B2B8227151B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:74:f2:cf:20:bd:c4:6b:3e:c1:8e:20:e0:e0: 30:49:ee:c5:1f:30:fe:e6:21:9b:fe:28:60:74:d7: 0b:55:d9:2e:86:79:45:1f:8d:1b:6b:5c:74:79:d7: 64:a6:1f:14:0b:72:68:5f:a8:bc:d6:79:8d:68:c5: 57:d0:f5:42:f1:a8:f1:87:fe:74:ae:be:99:05:16: dc:df:c3:db:17:98:1a:5c:fc:19:bb:97:a3:8c:d1: 58:0e:47:c3:00:95:7d:ec:3a:ee:ec:e2:f8:2f:57: d0:4b:1d:17:c0:6f:58:5d:49:2b:06:c3:ee:34:62: b6:18:fa:26:21:c3:e0:5f:1f:f7:00:33:48:46:ff: b0:73:6c:2e:a7:2c:5e:e1:d9:3d:8a:50:c2:68:56: e9:85:cf:28:af:e7:38:66:df:0d:74:2f:aa:67:98: 91:00:33:c5:18:b3:21:cc:e2:3f:e6:e0:32:29:fd: ad:c4:22:52:57:b7:19:0d:9c:05:80:31:fb:3e:9a: 02:09:21:01:5f:5f:50:87:3e:43:01:70:b0:71:fa: ab:8b:6a:98:2b:5b:81:26:51:1e:c2:6d:a8:ea:88: af:3e:c2:45:cc:36:45:5f:90:cf:21:d1:1d:5e:16: da:89:a0:de:8c:98:c5:28:fb:d0:a0:58:80:7b:31: 9f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:C0:B4:2F:1F:87:3D:33:81:64:11:3A:1F:7C:0B:2B:82:27:15:1B X509v3 Authority Key Identifier: keyid:CA:97:8B:7A:CE:F5:5A:25:1B:74:72:1E:04:A0:34:CA:36:01:A8:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA978B7ACEF55A251B74721E04A034CA3601A88B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:c0:eb:f2:57:1f:9e:fe:80:b7:99:a0:ce:32:4d:c9:80:00: be:f5:3b:a1:71:5c:1e:c8:8a:05:4d:80:d5:a6:f2:d7:b9:17: 64:bd:65:1e:98:77:24:7d:e3:26:32:cf:25:35:a4:aa:f1:2c: 4a:49:0f:11:18:3c:99:42:21:46:01:68:74:9c:5a:c5:1b:2a: c5:7d:74:dd:31:6d:5a:4e:89:5f:02:55:24:da:ad:eb:46:d7: cd:9e:5a:0b:4b:5f:8d:91:25:76:9d:46:26:a8:4e:bc:bb:64: c9:bd:bf:d4:fd:0c:0f:57:ce:87:01:ab:9f:5f:d1:55:68:82: 87:23:ef:e8:ce:52:45:61:61:57:d1:b4:e6:39:6b:7b:fa:1e: c2:8c:c6:b0:83:13:c0:2f:ff:9f:f3:ff:01:bb:77:d1:93:32: b1:23:a4:c0:ad:2a:6a:05:e6:c9:c8:ea:90:43:31:94:81:e3: f4:cf:8c:b5:6b:bd:be:52:5d:3c:5e:84:c6:cf:82:de:8f:be: 9e:7e:0c:ad:47:50:36:71:9d:e0:e0:9a:49:98:d7:2b:99:7c: 06:3e:39:c7:b7:60:11:41:f1:a6:9e:e9:62:18:07:fb:40:5b: 1d:2e:c4:f0:bb:18:c4:22:29:0b:aa:eb:1c:9c:14:ca:fe:8c: 38:77:96:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGS2X5IJ/xCrZ8FB9WXOJhiNT5/kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E5NzhCN0FDRUY1NUEyNTFCNzQ3MjFFMDRBMDM0Q0Ez NjAxQTg4QjAeFw0yNjAyMjcyMzQ2MzJaFw0yNjAzMDMwMjIxMzJaMDMxMTAvBgNV BAMTKDczQzBCNDJGMUY4NzNEMzM4MTY0MTEzQTFGN0MwQjJCODIyNzE1MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCdPLPIL3Eaz7BjiDg4DBJ7sUf MP7mIZv+KGB01wtV2S6GeUUfjRtrXHR512SmHxQLcmhfqLzWeY1oxVfQ9ULxqPGH /nSuvpkFFtzfw9sXmBpc/Bm7l6OM0VgOR8MAlX3sOu7s4vgvV9BLHRfAb1hdSSsG w+40YrYY+iYhw+BfH/cAM0hG/7BzbC6nLF7h2T2KUMJoVumFzyiv5zhm3w10L6pn mJEAM8UYsyHM4j/m4DIp/a3EIlJXtxkNnAWAMfs+mgIJIQFfX1CHPkMBcLBx+quL apgrW4EmUR7CbajqiK8+wkXMNkVfkM8h0R1eFtqJoN6MmMUo+9CgWIB7MZ8XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc8C0Lx+HPTOBZBE6H3wLK4InFRswHwYDVR0j BBgwFoAUypeLes71WiUbdHIeBKA0yjYBqIswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZmEzY2ZmNy0yYWExLTQ0ZGYtOTE0Yy1mMTkxODRmNmYzYjEvMC9DQTk3OEI3QUNF RjU1QTI1MUI3NDcyMUUwNEEwMzRDQTM2MDFBODhCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0E5NzhCN0FDRUY1NUEyNTFCNzQ3MjFFMDRBMDM0Q0EzNjAx QTg4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmZhM2NmZjctMmFhMS00NGRmLTkx NGMtZjE5MTg0ZjZmM2IxLzAvQ0E5NzhCN0FDRUY1NUEyNTFCNzQ3MjFFMDRBMDM0 Q0EzNjAxQTg4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIDA6/JXH57+gLeZoM4yTcmAAL71O6FxXB7I igVNgNWm8te5F2S9ZR6YdyR94yYyzyU1pKrxLEpJDxEYPJlCIUYBaHScWsUbKsV9 dN0xbVpOiV8CVSTaretG182eWgtLX42RJXadRiaoTry7ZMm9v9T9DA9XzocBq59f 0VVogocj7+jOUkVhYVfRtOY5a3v6HsKMxrCDE8Av/5/z/wG7d9GTMrEjpMCtKmoF 5snI6pBDMZSB4/TPjLVrvb5SXTxehMbPgt6Pvp5+DK1HUDZxneDgmkmY1yuZfAY+ Oce3YBFB8aae6WIYB/tAWx0uxPC7GMQiKQuq6xycFMr+jDh3ln4= -----END CERTIFICATE-----Generated at Mon Mar 2 02:55:38 2026 by rpki-client