$ rpki-client -vvf repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.mft File: 979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.mft (raw, json) Hash identifier: lztz0+Rw0ZPuRvar4/mkEEUlIW27kssVgYSatj3yRPM= Subject key identifier: 3F:1C:75:BA:08:04:09:D7:BF:29:60:06:E5:36:3C:9D:B5:4D:EC:E5 Authority key identifier: 97:9B:32:93:5E:BF:A2:DA:6D:CB:0A:79:DB:39:7F:D7:B4:9D:4E:FE Certificate issuer: /CN=979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE Certificate serial: 0E00584D5B6E68EEB666EC25F2E550F925135E52 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.mft Manifest number: 023E Signing time: Fri 17 Apr 2026 08:10:58 +0000 Manifest this update: Fri 17 Apr 2026 08:05:58 +0000 Manifest next update: Mon 20 Apr 2026 09:30:58 +0000 Files and hashes: 1: 3130332e3231342e3233372e302f32342d3234203d3e20313335343339.roa (hash: ud0rm7NJrw3tkHGHEKsf4SnTq3zWIy8EUz6TubCb2Gs=) 2: 3130332e3231342e3233362e302f32322d3232203d3e20313335343339.roa (hash: K7I7X7V48aE6/5u83vWBkZ5nD0P/zd145TmQLmzpqzo=) 3: 3130332e3231342e3233382e302f32342d3234203d3e20313335343339.roa (hash: er2/SRYpyB8+9olReTVyWZnJn3PBJ1m2O7TeR4n9VJQ=) 4: 979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.crl (hash: 6lRtYizAiyORKB8sZbkMKcW2SQb5XqIfqIOImrS0y2k=) 5: 3130332e3231342e3233362e302f32342d3234203d3e20313335343339.roa (hash: wwz6ba6TxyJFQBFDyZrzQvQsc6tcIn83i8QBsYFEwr4=) 6: 3130332e3231342e3233392e302f32342d3234203d3e20313335343339.roa (hash: D08BFYTRnMd/bNThD9Kffk2jZOcvuFviPOLMtrY2nyM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.crl rsync://repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 09:30:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:00:58:4d:5b:6e:68:ee:b6:66:ec:25:f2:e5:50:f9:25:13:5e:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE Validity Not Before: Apr 17 08:05:58 2026 GMT Not After : Apr 20 09:30:58 2026 GMT Subject: CN=3F1C75BA080409D7BF296006E5363C9DB54DECE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d6:d5:6c:ae:0a:d0:62:d4:15:6e:cf:a2:98: ca:1c:e3:6e:10:d0:95:2d:82:b2:7f:62:6d:8d:c8: 8a:bc:cd:5b:86:13:43:6b:a3:32:ce:d1:84:0c:4f: ae:5d:86:07:7c:59:9f:ae:b6:59:04:e4:c6:fd:5b: 6a:62:c8:f4:81:1b:d8:fe:d5:cd:67:48:5c:ea:9e: b1:03:98:f8:05:b5:6c:14:e0:a4:56:ce:e8:3a:9f: 2b:3f:67:bd:e9:6a:1f:1c:ff:71:21:df:2d:17:68: aa:45:a1:84:6a:0a:cf:1b:47:b8:e6:b1:02:e7:bd: db:81:ce:71:07:ca:2d:47:c6:14:7e:89:00:82:12: 46:b7:91:e0:45:70:d3:ab:ff:53:ba:e9:a6:34:0a: 92:cf:18:0f:fb:92:f5:12:6c:de:79:42:58:26:b4: 8d:8a:23:91:0a:ef:47:db:3d:7f:c0:22:80:91:b7: 22:dc:03:5f:0d:a2:6b:6d:98:2f:bd:d2:a4:fd:88: 7d:a6:0d:4b:4d:1f:43:b5:f0:14:a4:97:cb:bd:72: 99:57:f1:8d:43:f5:e1:d7:67:df:fe:a0:39:9f:40: 77:1c:98:1b:a7:bc:ee:bb:62:03:71:a0:07:da:17: e7:37:be:3c:5d:4e:a0:26:a3:53:c2:d5:a9:70:cf: fb:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:1C:75:BA:08:04:09:D7:BF:29:60:06:E5:36:3C:9D:B5:4D:EC:E5 X509v3 Authority Key Identifier: keyid:97:9B:32:93:5E:BF:A2:DA:6D:CB:0A:79:DB:39:7F:D7:B4:9D:4E:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:a0:f3:17:87:fa:8f:e8:1e:9e:c2:71:b7:58:c3:38:36:2e: 23:8a:84:05:f3:4b:e3:9d:a3:73:25:8a:4a:10:a9:cd:fd:fe: cb:d9:3f:31:ea:89:15:91:ed:02:75:20:5b:24:8f:1e:ac:71: da:72:25:9f:0f:53:69:69:80:90:04:0b:b5:8d:08:96:ba:7f: d7:6b:87:06:ff:2a:93:5c:62:9f:d9:9c:29:2e:e5:df:ed:7a: ba:c7:b3:b1:4d:90:99:2f:9a:6e:1d:76:be:14:e6:30:16:c9: 30:c6:b6:c3:29:bb:0b:20:b4:25:35:c0:f7:72:6d:cd:44:1d: 94:a9:06:32:fe:88:78:be:ec:33:61:8b:8e:36:e2:b0:bf:4d: 9f:cd:1e:09:fd:0b:cb:1d:59:20:c2:ac:49:c9:fe:89:85:80: f4:17:e7:ee:17:6f:34:ab:d8:31:25:da:6d:7f:3d:4e:5c:e6: f1:82:1e:8c:75:04:d4:ee:ab:0d:70:78:be:de:f6:87:15:83: 05:ed:02:58:c7:aa:4e:08:53:bb:31:fc:c8:66:8a:7a:1e:af: 85:ae:cc:d4:d6:a2:71:a4:df:c2:b5:38:ef:22:30:cf:d8:be: ee:e0:da:06:ce:9e:b3:1a:32:33:cb:04:95:0e:9e:55:5c:04: 71:c4:fb:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDgBYTVtuaO62Zuwl8uVQ+SUTXlIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc5QjMyOTM1RUJGQTJEQTZEQ0IwQTc5REIzOTdGRDdC NDlENEVGRTAeFw0yNjA0MTcwODA1NThaFw0yNjA0MjAwOTMwNThaMDMxMTAvBgNV BAMTKDNGMUM3NUJBMDgwNDA5RDdCRjI5NjAwNkU1MzYzQzlEQjU0REVDRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe1tVsrgrQYtQVbs+imMoc424Q 0JUtgrJ/Ym2NyIq8zVuGE0NrozLO0YQMT65dhgd8WZ+utlkE5Mb9W2piyPSBG9j+ 1c1nSFzqnrEDmPgFtWwU4KRWzug6nys/Z73pah8c/3Eh3y0XaKpFoYRqCs8bR7jm sQLnvduBznEHyi1HxhR+iQCCEka3keBFcNOr/1O66aY0CpLPGA/7kvUSbN55Qlgm tI2KI5EK70fbPX/AIoCRtyLcA18NomttmC+90qT9iH2mDUtNH0O18BSkl8u9cplX 8Y1D9eHXZ9/+oDmfQHccmBunvO67YgNxoAfaF+c3vjxdTqAmo1PC1alwz/uTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPxx1uggECde/KWAG5TY8nbVN7OUwHwYDVR0j BBgwFoAUl5syk16/otptywp52zl/17SdTv4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZGU3MTQzNy04NWZjLTQ3YWYtOTY4Ny05MDNiYWZiMmMxNjEvMC85NzlCMzI5MzVF QkZBMkRBNkRDQjBBNzlEQjM5N0ZEN0I0OUQ0RUZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTc5QjMyOTM1RUJGQTJEQTZEQ0IwQTc5REIzOTdGRDdCNDlE NEVGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2RlNzE0MzctODVmYy00N2FmLTk2 ODctOTAzYmFmYjJjMTYxLzAvOTc5QjMyOTM1RUJGQTJEQTZEQ0IwQTc5REIzOTdG RDdCNDlENEVGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACCg8xeH+o/oHp7CcbdYwzg2LiOKhAXzS+Od o3MlikoQqc39/svZPzHqiRWR7QJ1IFskjx6scdpyJZ8PU2lpgJAEC7WNCJa6f9dr hwb/KpNcYp/ZnCku5d/terrHs7FNkJkvmm4ddr4U5jAWyTDGtsMpuwsgtCU1wPdy bc1EHZSpBjL+iHi+7DNhi4424rC/TZ/NHgn9C8sdWSDCrEnJ/omFgPQX5+4XbzSr 2DEl2m1/PU5c5vGCHox1BNTuqw1weL7e9ocVgwXtAljHqk4IU7sx/Mhminoer4Wu zNTWonGk38K1OO8iMM/Yvu7g2gbOnrMaMjPLBJUOnlVcBHHE+3U= -----END CERTIFICATE-----Generated at Fri Apr 17 12:29:57 2026 by rpki-client