$ rpki-client -vvf repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.mft File: 979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.mft (raw, json) Hash identifier: i9z+us9ZSUqp4NiKY7w8EE7dPPfhKDc2UoCv0d8Wz2w= Subject key identifier: 9B:3F:AD:F0:1C:ED:CD:A9:D2:06:D7:B5:D5:5F:06:7E:8F:5F:FC:09 Authority key identifier: 97:9B:32:93:5E:BF:A2:DA:6D:CB:0A:79:DB:39:7F:D7:B4:9D:4E:FE Certificate issuer: /CN=979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE Certificate serial: 05657DAB3B24F146C1388CF489340951B5BD955A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.mft Manifest number: 0229 Signing time: Sun 01 Mar 2026 10:00:55 +0000 Manifest this update: Sun 01 Mar 2026 09:55:55 +0000 Manifest next update: Wed 04 Mar 2026 11:36:55 +0000 Files and hashes: 1: 979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.crl (hash: +JrJD71Na3cODZes7vmhzSz5WAv9Cgj0RFCXmmSR0ks=) 2: 3130332e3231342e3233362e302f32342d3234203d3e20313335343339.roa (hash: wwz6ba6TxyJFQBFDyZrzQvQsc6tcIn83i8QBsYFEwr4=) 3: 3130332e3231342e3233382e302f32342d3234203d3e20313335343339.roa (hash: er2/SRYpyB8+9olReTVyWZnJn3PBJ1m2O7TeR4n9VJQ=) 4: 3130332e3231342e3233362e302f32322d3232203d3e20313335343339.roa (hash: K7I7X7V48aE6/5u83vWBkZ5nD0P/zd145TmQLmzpqzo=) 5: 3130332e3231342e3233392e302f32342d3234203d3e20313335343339.roa (hash: D08BFYTRnMd/bNThD9Kffk2jZOcvuFviPOLMtrY2nyM=) 6: 3130332e3231342e3233372e302f32342d3234203d3e20313335343339.roa (hash: ud0rm7NJrw3tkHGHEKsf4SnTq3zWIy8EUz6TubCb2Gs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.crl rsync://repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 11:36:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:65:7d:ab:3b:24:f1:46:c1:38:8c:f4:89:34:09:51:b5:bd:95:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE Validity Not Before: Mar 1 09:55:55 2026 GMT Not After : Mar 4 11:36:55 2026 GMT Subject: CN=9B3FADF01CEDCDA9D206D7B5D55F067E8F5FFC09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:13:08:62:9e:0e:5c:97:d8:5c:5e:18:41:fc: 33:d0:cd:a6:bc:8b:eb:c9:b7:91:16:93:15:85:20: c7:ea:9a:51:7c:09:10:1b:29:98:5f:37:9a:5a:29: 63:9d:89:89:1b:b8:6b:8e:f9:4e:ad:be:68:62:26: 51:18:bb:a1:e9:3c:fe:2f:a2:f9:6d:04:b4:ed:c7: 0f:eb:9b:10:32:81:6d:ad:af:44:47:24:00:bd:04: ba:35:8e:58:b0:cc:be:cf:27:47:05:9b:27:85:0d: 2a:4d:56:fe:37:5f:3b:97:d1:ed:51:58:53:d4:f9: 96:75:fd:78:bd:d2:1c:4a:75:81:99:73:95:8b:0e: f2:bd:97:52:8e:37:70:59:5e:c0:61:e0:30:fd:33: 19:48:3f:67:a5:3a:4a:44:0c:22:d9:3b:35:fd:15: 02:34:e1:82:30:91:c7:7a:00:4c:f9:37:e1:1c:f8: f7:77:aa:fa:6f:da:84:90:d2:2d:70:41:61:03:dd: b7:cf:e9:6e:85:4c:ed:3b:4d:a7:72:cf:2c:b8:54: c6:93:3f:d0:71:bd:e3:fa:ca:b4:4d:b7:e2:9b:84: 2b:96:3e:00:0d:4d:3e:ce:38:c7:50:11:e5:03:65: a8:cd:71:44:de:9d:a0:c0:56:a9:99:d4:26:70:54: f2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:3F:AD:F0:1C:ED:CD:A9:D2:06:D7:B5:D5:5F:06:7E:8F:5F:FC:09 X509v3 Authority Key Identifier: keyid:97:9B:32:93:5E:BF:A2:DA:6D:CB:0A:79:DB:39:7F:D7:B4:9D:4E:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:b4:22:47:46:3b:44:d3:76:fd:8c:38:9a:ab:42:1b:10:8d: d8:b4:69:82:8c:ee:51:dc:f9:0b:ba:f1:1c:96:f0:cd:29:64: 86:14:48:7e:bd:26:e5:fa:78:d5:ed:dd:f6:17:0d:cf:fc:60: e9:77:8f:2d:af:66:cf:5e:68:0c:5a:49:10:26:ff:ad:4b:1e: d5:08:c1:bb:cc:b1:c0:a0:79:c1:be:b0:af:86:75:64:c1:c2: df:bb:96:3b:5e:2e:a3:8f:1b:3d:ef:81:6c:0c:d0:e1:7b:95: 40:51:7c:d4:da:84:98:06:e0:37:29:fd:b8:50:a6:0a:ba:7e: 2b:89:07:4f:b6:b7:cf:67:2f:05:b8:b7:f8:99:c3:fb:5d:c7: c9:b4:cc:91:8a:ee:d7:14:db:ef:a6:0a:96:a9:ab:72:a6:b7: f7:a3:39:18:43:17:27:3b:3b:f6:53:dc:7f:15:42:59:7b:84: cb:71:b6:90:17:00:dd:cc:22:e9:de:87:6f:3b:ec:e8:b5:66: 6b:14:23:d4:8c:f2:b3:21:85:94:4f:92:08:28:6a:9a:66:e0: 54:dd:95:5e:de:4a:83:f3:19:a2:b9:41:7d:78:d3:f6:8a:b4: 9f:d1:94:54:ce:fa:65:65:71:f7:fd:6b:10:18:50:bf:d5:81: b2:a0:9d:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBWV9qzsk8UbBOIz0iTQJUbW9lVowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc5QjMyOTM1RUJGQTJEQTZEQ0IwQTc5REIzOTdGRDdC NDlENEVGRTAeFw0yNjAzMDEwOTU1NTVaFw0yNjAzMDQxMTM2NTVaMDMxMTAvBgNV BAMTKDlCM0ZBREYwMUNFRENEQTlEMjA2RDdCNUQ1NUYwNjdFOEY1RkZDMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaEwhing5cl9hcXhhB/DPQzaa8 i+vJt5EWkxWFIMfqmlF8CRAbKZhfN5paKWOdiYkbuGuO+U6tvmhiJlEYu6HpPP4v ovltBLTtxw/rmxAygW2tr0RHJAC9BLo1jliwzL7PJ0cFmyeFDSpNVv43XzuX0e1R WFPU+ZZ1/Xi90hxKdYGZc5WLDvK9l1KON3BZXsBh4DD9MxlIP2elOkpEDCLZOzX9 FQI04YIwkcd6AEz5N+Ec+Pd3qvpv2oSQ0i1wQWED3bfP6W6FTO07Tadyzyy4VMaT P9BxveP6yrRNt+KbhCuWPgANTT7OOMdQEeUDZajNcUTenaDAVqmZ1CZwVPJpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmz+t8BztzanSBte11V8Gfo9f/AkwHwYDVR0j BBgwFoAUl5syk16/otptywp52zl/17SdTv4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZGU3MTQzNy04NWZjLTQ3YWYtOTY4Ny05MDNiYWZiMmMxNjEvMC85NzlCMzI5MzVF QkZBMkRBNkRDQjBBNzlEQjM5N0ZEN0I0OUQ0RUZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTc5QjMyOTM1RUJGQTJEQTZEQ0IwQTc5REIzOTdGRDdCNDlE NEVGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2RlNzE0MzctODVmYy00N2FmLTk2 ODctOTAzYmFmYjJjMTYxLzAvOTc5QjMyOTM1RUJGQTJEQTZEQ0IwQTc5REIzOTdG RDdCNDlENEVGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGu0IkdGO0TTdv2MOJqrQhsQjdi0aYKM7lHc +Qu68RyW8M0pZIYUSH69JuX6eNXt3fYXDc/8YOl3jy2vZs9eaAxaSRAm/61LHtUI wbvMscCgecG+sK+GdWTBwt+7ljteLqOPGz3vgWwM0OF7lUBRfNTahJgG4Dcp/bhQ pgq6fiuJB0+2t89nLwW4t/iZw/tdx8m0zJGK7tcU2++mCpapq3Kmt/ejORhDFyc7 O/ZT3H8VQll7hMtxtpAXAN3MIuneh2877Oi1ZmsUI9SM8rMhhZRPkggoappm4FTd lV7eSoPzGaK5QX140/aKtJ/RlFTO+mVlcff9axAYUL/VgbKgnUE= -----END CERTIFICATE-----Generated at Mon Mar 2 07:11:36 2026 by rpki-client