$ rpki-client -vvf repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft File: 977D89E37F6F6C3815B2BC731E694AB878F26F30.mft (raw, json) Hash identifier: XOoPJtcES7IPdxWke3uar8u9blHNE1fqFD2QzyFC+qc= Subject key identifier: 87:1A:BB:6C:F5:F6:68:F7:2A:F8:81:C7:C0:7C:4B:12:25:50:FD:CE Authority key identifier: 97:7D:89:E3:7F:6F:6C:38:15:B2:BC:73:1E:69:4A:B8:78:F2:6F:30 Certificate issuer: /CN=977D89E37F6F6C3815B2BC731E694AB878F26F30 Certificate serial: 3114452D1CA9ED938B67503DEBE25A46996B5F9B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft Manifest number: 022B Signing time: Fri 17 Apr 2026 07:01:25 +0000 Manifest this update: Fri 17 Apr 2026 06:56:25 +0000 Manifest next update: Mon 20 Apr 2026 10:29:25 +0000 Files and hashes: 1: 3130332e33312e34322e302f32342d3234203d3e2039333431.roa (hash: j8MhQFCNNpgWTqqvo4wUA4sj1OS1sCETyG/kmulGJXY=) 2: 3130332e33312e34322e302f32332d3233203d3e2039333431.roa (hash: stIIdICFAUmmjPJbZPuus0zTsstOOiSfpPEmNfACiJs=) 3: 3130332e33312e34332e302f32342d3234203d3e2039333431.roa (hash: uM0XA0AM+x7njeHld4x4WvIPIQYCBW6QBEs97/wT47g=) 4: 977D89E37F6F6C3815B2BC731E694AB878F26F30.crl (hash: SA1jxKFGN9eFMgWqQVI+7VF3FMDl+wl4r2nENIubifY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.crl rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 10:29:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:14:45:2d:1c:a9:ed:93:8b:67:50:3d:eb:e2:5a:46:99:6b:5f:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=977D89E37F6F6C3815B2BC731E694AB878F26F30 Validity Not Before: Apr 17 06:56:25 2026 GMT Not After : Apr 20 10:29:25 2026 GMT Subject: CN=871ABB6CF5F668F72AF881C7C07C4B122550FDCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9e:c0:1d:a3:7f:23:ca:00:a6:dd:08:d4:fc: 90:8a:89:5a:80:f0:e2:eb:65:74:70:eb:8c:29:e9: 42:29:64:7a:51:43:f5:7a:08:32:53:b1:03:e7:f4: 8d:17:07:c7:31:1e:e3:b5:dc:79:be:29:4e:d4:e7: 37:06:d2:dd:cd:39:ec:19:8a:55:eb:7b:db:39:71: 9d:71:af:93:32:2b:c9:7c:47:11:39:aa:0a:b9:25: 0e:04:88:9e:2f:83:8b:70:9b:27:64:ca:5f:d1:c3: f3:85:58:04:56:b2:86:82:76:a9:29:7e:3c:7d:6a: b9:e8:64:9d:a6:0f:03:7e:9d:2e:e4:04:48:85:e2: 86:36:74:ba:aa:1d:a4:8a:a3:4a:3c:71:6e:69:75: 86:16:1c:cd:45:c5:5f:d4:47:bf:f0:a3:5a:d2:e9: e4:6d:8f:62:ad:d8:61:55:38:2c:1e:c7:a6:8b:33: 6c:1a:d0:58:8a:2f:6f:a4:55:5e:75:ad:08:a7:1b: 3e:b7:26:f9:24:fb:c6:a8:19:23:90:db:75:cb:4d: d5:19:3f:21:a1:24:a3:39:89:51:61:a1:89:fc:d5: 36:1e:40:26:0f:80:53:ff:d4:c4:f3:67:1d:c6:69: 30:26:63:00:ba:79:b1:20:9c:1e:76:9d:94:88:2e: 43:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:1A:BB:6C:F5:F6:68:F7:2A:F8:81:C7:C0:7C:4B:12:25:50:FD:CE X509v3 Authority Key Identifier: keyid:97:7D:89:E3:7F:6F:6C:38:15:B2:BC:73:1E:69:4A:B8:78:F2:6F:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:91:ff:f0:b0:ed:ec:a0:7d:a0:c5:ce:72:51:1c:50:92:8a: 9d:c0:43:70:33:d5:2d:63:9e:74:3c:c7:92:47:17:5f:f6:7f: 33:5b:e5:07:e5:05:44:b2:44:fb:f2:96:63:31:30:b6:7d:13: c2:65:ae:16:e0:d2:39:0f:0f:65:21:01:e7:68:51:b9:fa:f8: 8c:56:1d:a9:df:22:ed:92:60:93:90:63:a4:fb:ee:cc:08:ab: 9e:71:0c:23:b4:35:82:13:39:df:07:c8:0d:3a:02:26:32:70: 29:44:78:1b:1f:15:96:84:ef:1c:7f:e7:71:6d:02:2d:1b:87: f0:d7:d4:c7:70:7d:ca:6a:d9:09:25:8d:6a:92:c8:19:31:d8: 1e:48:99:a1:37:6b:c3:cf:4e:0c:72:2b:08:ec:97:ad:a4:e7: af:b2:3b:5d:b4:dc:74:ea:4c:03:d1:20:38:89:68:ad:b7:31: 3d:1a:4e:4d:fb:e9:dd:e1:f2:57:78:6b:98:79:4b:42:83:46: 6d:fe:26:78:16:7e:02:33:6c:ed:3d:bb:04:31:61:48:4e:e1: 24:e2:de:68:0b:58:bf:67:9c:2d:5a:aa:c2:ce:d6:78:84:30: a9:5c:09:b3:81:31:7e:25:fc:d4:3e:f9:a9:36:a0:91:98:35: 99:08:0c:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMRRFLRyp7ZOLZ1A96+JaRplrX5swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc3RDg5RTM3RjZGNkMzODE1QjJCQzczMUU2OTRBQjg3 OEYyNkYzMDAeFw0yNjA0MTcwNjU2MjVaFw0yNjA0MjAxMDI5MjVaMDMxMTAvBgNV BAMTKDg3MUFCQjZDRjVGNjY4RjcyQUY4ODFDN0MwN0M0QjEyMjU1MEZEQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCynsAdo38jygCm3QjU/JCKiVqA 8OLrZXRw64wp6UIpZHpRQ/V6CDJTsQPn9I0XB8cxHuO13Hm+KU7U5zcG0t3NOewZ ilXre9s5cZ1xr5MyK8l8RxE5qgq5JQ4EiJ4vg4twmydkyl/Rw/OFWARWsoaCdqkp fjx9arnoZJ2mDwN+nS7kBEiF4oY2dLqqHaSKo0o8cW5pdYYWHM1FxV/UR7/wo1rS 6eRtj2Kt2GFVOCwex6aLM2wa0FiKL2+kVV51rQinGz63Jvkk+8aoGSOQ23XLTdUZ PyGhJKM5iVFhoYn81TYeQCYPgFP/1MTzZx3GaTAmYwC6ebEgnB52nZSILkNbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhxq7bPX2aPcq+IHHwHxLEiVQ/c4wHwYDVR0j BBgwFoAUl32J439vbDgVsrxzHmlKuHjybzAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZTRhY2UxMS05MTM5LTQ0ODUtYWJhOS0wNGJlZGRjNWJjMjYvMC85NzdEODlFMzdG NkY2QzM4MTVCMkJDNzMxRTY5NEFCODc4RjI2RjMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTc3RDg5RTM3RjZGNkMzODE1QjJCQzczMUU2OTRBQjg3OEYy NkYzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmU0YWNlMTEtOTEzOS00NDg1LWFi YTktMDRiZWRkYzViYzI2LzAvOTc3RDg5RTM3RjZGNkMzODE1QjJCQzczMUU2OTRB Qjg3OEYyNkYzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFeR//Cw7eygfaDFznJRHFCSip3AQ3Az1S1j nnQ8x5JHF1/2fzNb5QflBUSyRPvylmMxMLZ9E8Jlrhbg0jkPD2UhAedoUbn6+IxW HanfIu2SYJOQY6T77swIq55xDCO0NYITOd8HyA06AiYycClEeBsfFZaE7xx/53Ft Ai0bh/DX1Mdwfcpq2QkljWqSyBkx2B5ImaE3a8PPTgxyKwjsl62k56+yO1203HTq TAPRIDiJaK23MT0aTk376d3h8ld4a5h5S0KDRm3+JngWfgIzbO09uwQxYUhO4STi 3mgLWL9nnC1aqsLO1niEMKlcCbOBMX4l/NQ++ak2oJGYNZkIDI0= -----END CERTIFICATE-----Generated at Sat Apr 18 01:41:31 2026 by rpki-client