$ rpki-client -vvf repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.mft File: 97776FFF02B90FFC17B658A0B1A598DBEA888F04.mft (raw, json) Hash identifier: G6Bbb9mtjn28oJ1SBCWGTtA+v+smvu3nFsnwAB5BpbU= Subject key identifier: 4C:28:97:73:2E:11:0D:54:DD:28:26:FB:F7:5B:06:1C:D3:A2:2A:47 Authority key identifier: 97:77:6F:FF:02:B9:0F:FC:17:B6:58:A0:B1:A5:98:DB:EA:88:8F:04 Certificate issuer: /CN=97776FFF02B90FFC17B658A0B1A598DBEA888F04 Certificate serial: 64C8B5306668F377DB15A955164DCAD3DABDF176 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97776FFF02B90FFC17B658A0B1A598DBEA888F04.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.mft Manifest number: 0132 Signing time: Wed 25 Mar 2026 07:31:12 +0000 Manifest this update: Wed 25 Mar 2026 07:26:12 +0000 Manifest next update: Sat 28 Mar 2026 15:59:12 +0000 Files and hashes: 1: 323030313a6466333a633334303a3a2f34382d3438203d3e20313532333932.roa (hash: DWvVDDRpAMOpRUqp8QzsrLlGUPEfbewyxxzSjcofq2U=) 2: 97776FFF02B90FFC17B658A0B1A598DBEA888F04.crl (hash: Hdh8mvI2MuQnDFuE25SjTjOJulHoUu+/TCaAqMUNajI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.crl rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97776FFF02B90FFC17B658A0B1A598DBEA888F04.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 15:59:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:c8:b5:30:66:68:f3:77:db:15:a9:55:16:4d:ca:d3:da:bd:f1:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97776FFF02B90FFC17B658A0B1A598DBEA888F04 Validity Not Before: Mar 25 07:26:12 2026 GMT Not After : Mar 28 15:59:12 2026 GMT Subject: CN=4C2897732E110D54DD2826FBF75B061CD3A22A47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:0a:18:0c:24:02:07:d3:54:91:a4:08:fb:64: 1f:0d:9e:07:a4:63:2f:91:93:85:ce:92:da:01:e4: bf:18:3f:37:3d:9e:98:d8:16:0d:e8:4a:fd:f8:4d: 68:d7:6e:e6:cd:72:a0:1b:13:53:d7:eb:41:b8:03: 0b:56:d3:36:9b:7d:31:65:cc:e6:65:4b:38:6e:01: 65:42:99:5b:50:22:f7:e6:43:14:d5:a3:66:f4:a3: 21:e1:81:22:98:ad:55:9e:ef:bb:f0:34:f0:dc:ed: 75:f6:9f:42:53:2e:c4:c1:a3:c9:56:4d:3f:53:59: 95:38:98:55:6e:a3:b2:bf:f0:02:5f:9a:99:d6:6a: 32:9a:ee:ed:06:df:33:b6:b6:70:fd:e4:03:64:62: 13:72:27:9f:01:3a:b9:cd:25:82:24:08:ee:80:40: a7:14:b5:7c:13:b4:95:ae:c7:a6:ea:a3:43:b0:d1: b8:ac:61:dc:cb:d6:6a:3c:6f:c2:e4:08:db:b0:26: 9e:9b:70:ff:3e:d4:19:a2:e0:f6:fb:82:7c:64:32: 4b:8f:99:78:1b:40:ac:f9:72:df:4d:2d:ea:c4:7f: 62:1a:47:27:09:c2:f0:27:dc:9c:0f:d7:1e:1b:f5: c0:31:39:a5:f9:9b:e1:05:04:50:a4:f7:8d:42:c9: b0:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:28:97:73:2E:11:0D:54:DD:28:26:FB:F7:5B:06:1C:D3:A2:2A:47 X509v3 Authority Key Identifier: keyid:97:77:6F:FF:02:B9:0F:FC:17:B6:58:A0:B1:A5:98:DB:EA:88:8F:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97776FFF02B90FFC17B658A0B1A598DBEA888F04.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/1/97776FFF02B90FFC17B658A0B1A598DBEA888F04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:58:46:e1:96:1b:b5:69:36:15:c4:f9:5c:03:da:4c:4b:83: 67:c6:2a:9f:a5:6b:4f:e0:74:13:1c:f1:16:6f:c5:a2:95:c1: 51:63:a3:b2:fe:6e:20:49:b5:f8:a8:bd:0a:48:e3:b1:90:c8: d2:b0:09:f6:2d:39:2c:13:49:3b:a3:32:f3:f1:5a:d7:14:b7: 0c:5e:2b:11:cd:02:f6:2e:89:b4:21:e2:64:f7:39:85:5b:af: 2f:f4:c6:58:66:4b:61:9d:5e:e0:7c:9e:7c:96:5c:96:c7:dd: 03:8a:1a:e2:7e:9c:d7:c4:18:7b:8e:e4:5b:38:59:10:28:29: b6:df:ac:35:27:7b:5a:31:a7:db:89:5d:28:74:46:fa:c5:1f: 72:dd:2b:f0:d6:56:25:a8:2b:73:41:62:b1:c9:7b:5f:be:75: 6b:01:58:f2:b9:86:ef:2d:93:43:65:3a:27:ee:91:f7:6c:59: 87:f9:71:6a:8a:22:2a:9d:46:e5:7c:32:0b:54:7d:0b:ab:31: a2:59:53:6b:2a:71:c9:07:00:35:96:8b:4e:eb:44:cf:bc:84: 44:9e:0c:7c:7e:d9:86:47:53:b5:82:a9:90:e9:10:c0:8a:d1: 51:f2:6e:40:f9:c0:ea:e6:c7:9f:fe:b3:73:10:c9:32:fe:bf: 55:93:d5:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZMi1MGZo83fbFalVFk3K09q98XYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc3NzZGRkYwMkI5MEZGQzE3QjY1OEEwQjFBNTk4REJF QTg4OEYwNDAeFw0yNjAzMjUwNzI2MTJaFw0yNjAzMjgxNTU5MTJaMDMxMTAvBgNV BAMTKDRDMjg5NzczMkUxMTBENTRERDI4MjZGQkY3NUIwNjFDRDNBMjJBNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjChgMJAIH01SRpAj7ZB8Nngek Yy+Rk4XOktoB5L8YPzc9npjYFg3oSv34TWjXbubNcqAbE1PX60G4AwtW0zabfTFl zOZlSzhuAWVCmVtQIvfmQxTVo2b0oyHhgSKYrVWe77vwNPDc7XX2n0JTLsTBo8lW TT9TWZU4mFVuo7K/8AJfmpnWajKa7u0G3zO2tnD95ANkYhNyJ58BOrnNJYIkCO6A QKcUtXwTtJWux6bqo0Ow0bisYdzL1mo8b8LkCNuwJp6bcP8+1Bmi4Pb7gnxkMkuP mXgbQKz5ct9NLerEf2IaRycJwvAn3JwP1x4b9cAxOaX5m+EFBFCk941CybDlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTCiXcy4RDVTdKCb791sGHNOiKkcwHwYDVR0j BBgwFoAUl3dv/wK5D/wXtligsaWY2+qIjwQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTg4ZGZmNy02YTkyLTQyOTMtODgwMC1iNTNlMmE5MThhY2EvMS85Nzc3NkZGRjAy QjkwRkZDMTdCNjU4QTBCMUE1OThEQkVBODg4RjA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTc3NzZGRkYwMkI5MEZGQzE3QjY1OEEwQjFBNTk4REJFQTg4 OEYwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU4OGRmZjctNmE5Mi00MjkzLTg4 MDAtYjUzZTJhOTE4YWNhLzEvOTc3NzZGRkYwMkI5MEZGQzE3QjY1OEEwQjFBNTk4 REJFQTg4OEYwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIVYRuGWG7VpNhXE+VwD2kxLg2fGKp+la0/g dBMc8RZvxaKVwVFjo7L+biBJtfiovQpI47GQyNKwCfYtOSwTSTujMvPxWtcUtwxe KxHNAvYuibQh4mT3OYVbry/0xlhmS2GdXuB8nnyWXJbH3QOKGuJ+nNfEGHuO5Fs4 WRAoKbbfrDUne1oxp9uJXSh0RvrFH3LdK/DWViWoK3NBYrHJe1++dWsBWPK5hu8t k0NlOifukfdsWYf5cWqKIiqdRuV8MgtUfQurMaJZU2sqcckHADWWi07rRM+8hESe DHx+2YZHU7WCqZDpEMCK0VHybkD5wOrmx5/+s3MQyTL+v1WT1aY= -----END CERTIFICATE-----Generated at Thu Mar 26 17:07:49 2026 by rpki-client