$ rpki-client -vvf repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.mft File: CA978B7ACEF55A251B74721E04A034CA3601A88B.mft (raw, json) Hash identifier: 8d4o7DlbBBJbOeLys1AxbfKubTuUVWHjxmtYHOk7q3g= Subject key identifier: E9:B1:9C:8C:F4:91:BE:9D:B8:18:5E:B7:EA:E9:69:D7:0B:C1:25:09 Authority key identifier: CA:97:8B:7A:CE:F5:5A:25:1B:74:72:1E:04:A0:34:CA:36:01:A8:8B Certificate issuer: /CN=CA978B7ACEF55A251B74721E04A034CA3601A88B Certificate serial: 7F04A8194D355322C43D3CC141FC20C4AB32B087 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA978B7ACEF55A251B74721E04A034CA3601A88B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.mft Manifest number: 0183 Signing time: Wed 15 Apr 2026 21:21:38 +0000 Manifest this update: Wed 15 Apr 2026 21:16:38 +0000 Manifest next update: Sat 18 Apr 2026 21:47:38 +0000 Files and hashes: 1: 3130332e38332e3233372e302f32342d3234203d3e20313530353430.roa (hash: Y1BreLVa1ZjV8+fm+79oJJhjLUjz8il238UQwEnA8vE=) 2: 3130332e38332e3233362e302f32342d3234203d3e20313530353430.roa (hash: 5p6wjGyXDMhYJEnC8e2hHCinkGJrBkWoW7KvueEj5dQ=) 3: CA978B7ACEF55A251B74721E04A034CA3601A88B.crl (hash: R8+LgrrX3XTGr8l8kYpCxRULCx8Nnvwpp2BFT/0NRkw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.crl rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA978B7ACEF55A251B74721E04A034CA3601A88B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 21:47:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:04:a8:19:4d:35:53:22:c4:3d:3c:c1:41:fc:20:c4:ab:32:b0:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA978B7ACEF55A251B74721E04A034CA3601A88B Validity Not Before: Apr 15 21:16:38 2026 GMT Not After : Apr 18 21:47:38 2026 GMT Subject: CN=E9B19C8CF491BE9DB8185EB7EAE969D70BC12509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b4:71:78:9c:92:9b:8d:60:38:11:02:0e:c6: e7:bd:c9:35:cb:44:a2:a2:d1:36:3f:37:29:fd:a1: 7b:18:da:66:63:a5:3f:b8:d2:5b:4a:5f:31:c4:31: 46:f1:63:3d:b2:b5:c8:ac:2e:ff:eb:b4:06:0d:f8: 46:7c:35:a2:5d:c1:32:20:01:92:31:1c:bc:d4:ca: 8f:43:b2:c0:55:1e:c3:60:b9:f3:fe:ad:f3:71:41: ad:3f:7b:b1:fa:a4:01:14:a4:ae:42:47:36:df:a6: 76:14:f1:5f:3a:3c:45:4f:d5:46:17:f6:d2:a6:8e: c9:fe:3b:58:e6:ef:61:49:2d:3d:c2:4d:62:1a:43: df:b3:16:2d:39:91:34:7f:76:9a:61:1e:13:67:7a: 96:08:fc:89:d1:0a:9b:66:1c:75:54:4e:49:41:19: 80:a1:ac:d6:7f:57:fb:b7:e4:91:c2:70:c9:5a:d4: c2:95:a8:bc:3c:4b:e0:e8:74:6f:87:be:33:ed:01: fb:c0:2c:c6:86:e1:af:94:f7:e8:1d:1b:2b:f5:ca: 5e:97:4c:25:d8:b0:b0:96:15:fc:2f:d1:6b:4b:d2: 56:b4:9e:18:ab:f2:10:a4:fd:38:30:f0:ae:90:1c: 69:8c:e3:c5:61:2c:f5:61:d5:e2:dc:8b:21:41:d5: b7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:B1:9C:8C:F4:91:BE:9D:B8:18:5E:B7:EA:E9:69:D7:0B:C1:25:09 X509v3 Authority Key Identifier: keyid:CA:97:8B:7A:CE:F5:5A:25:1B:74:72:1E:04:A0:34:CA:36:01:A8:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA978B7ACEF55A251B74721E04A034CA3601A88B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:c9:c7:ea:63:82:02:6e:ae:fa:4a:f5:0d:a8:71:32:1d:92: 72:56:50:56:b7:55:63:46:fa:f6:0f:07:96:0c:bf:e4:a6:40: 95:b6:52:d0:d1:80:8f:9f:80:06:31:d3:b6:ac:68:ef:d4:f6: ac:8f:f0:95:5d:a2:a0:d0:b0:b2:cf:b1:54:14:6d:c5:cd:5f: 43:d9:2b:6d:e4:95:72:13:34:e2:53:70:d8:59:91:a0:78:aa: 0c:6c:7a:1c:1d:21:3c:e9:f8:b3:89:3f:69:4f:64:53:0b:45: 9f:cf:3a:49:d2:52:39:24:b2:86:d6:e9:7f:2d:28:64:b9:42: 33:aa:ff:1d:b4:7c:52:4f:9b:eb:a5:b2:b6:22:b2:8a:f2:19: dc:7f:3a:af:c1:bd:7a:10:17:f8:3b:8c:68:c2:f8:df:fa:f1: 31:4d:49:62:ef:82:e1:00:2c:45:77:9b:3f:a0:3b:37:74:69: c5:66:8a:c3:cd:c1:f9:44:61:42:04:a3:72:c5:85:82:04:8f: c7:70:9c:71:48:2d:f1:c3:e4:00:8b:7d:ff:df:73:3f:b8:6a: 14:d9:9c:7a:db:48:59:9e:d3:d8:e1:9b:17:ae:83:3d:5d:cf: 6b:be:3f:a7:33:92:23:d2:eb:ca:c0:28:1a:35:ae:c4:6d:da: 7c:73:c9:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfwSoGU01UyLEPTzBQfwgxKsysIcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E5NzhCN0FDRUY1NUEyNTFCNzQ3MjFFMDRBMDM0Q0Ez NjAxQTg4QjAeFw0yNjA0MTUyMTE2MzhaFw0yNjA0MTgyMTQ3MzhaMDMxMTAvBgNV BAMTKEU5QjE5QzhDRjQ5MUJFOURCODE4NUVCN0VBRTk2OUQ3MEJDMTI1MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRtHF4nJKbjWA4EQIOxue9yTXL RKKi0TY/Nyn9oXsY2mZjpT+40ltKXzHEMUbxYz2ytcisLv/rtAYN+EZ8NaJdwTIg AZIxHLzUyo9DssBVHsNgufP+rfNxQa0/e7H6pAEUpK5CRzbfpnYU8V86PEVP1UYX 9tKmjsn+O1jm72FJLT3CTWIaQ9+zFi05kTR/dpphHhNnepYI/InRCptmHHVUTklB GYChrNZ/V/u35JHCcMla1MKVqLw8S+DodG+HvjPtAfvALMaG4a+U9+gdGyv1yl6X TCXYsLCWFfwv0WtL0la0nhir8hCk/Tgw8K6QHGmM48VhLPVh1eLciyFB1bedAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6bGcjPSRvp24GF636ulp1wvBJQkwHwYDVR0j BBgwFoAUypeLes71WiUbdHIeBKA0yjYBqIswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZmEzY2ZmNy0yYWExLTQ0ZGYtOTE0Yy1mMTkxODRmNmYzYjEvMC9DQTk3OEI3QUNF RjU1QTI1MUI3NDcyMUUwNEEwMzRDQTM2MDFBODhCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0E5NzhCN0FDRUY1NUEyNTFCNzQ3MjFFMDRBMDM0Q0EzNjAx QTg4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmZhM2NmZjctMmFhMS00NGRmLTkx NGMtZjE5MTg0ZjZmM2IxLzAvQ0E5NzhCN0FDRUY1NUEyNTFCNzQ3MjFFMDRBMDM0 Q0EzNjAxQTg4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFvJx+pjggJurvpK9Q2ocTIdknJWUFa3VWNG +vYPB5YMv+SmQJW2UtDRgI+fgAYx07asaO/U9qyP8JVdoqDQsLLPsVQUbcXNX0PZ K23klXITNOJTcNhZkaB4qgxsehwdITzp+LOJP2lPZFMLRZ/POknSUjkksobW6X8t KGS5QjOq/x20fFJPm+ulsrYisoryGdx/Oq/BvXoQF/g7jGjC+N/68TFNSWLvguEA LEV3mz+gOzd0acVmisPNwflEYUIEo3LFhYIEj8dwnHFILfHD5ACLff/fcz+4ahTZ nHrbSFme09jhmxeugz1dz2u+P6czkiPS68rAKBo1rsRt2nxzyZc= -----END CERTIFICATE-----Generated at Fri Apr 17 20:54:41 2026 by rpki-client