$ rpki-client -vvf repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/97D77F08669FB94E4E99F795519FB61DCAC62C9F.mft File: 97D77F08669FB94E4E99F795519FB61DCAC62C9F.mft (raw, json) Hash identifier: TeQqsN9aikze0RR7EsQN4bY7p4go3idNec9oP/N7GlI= Subject key identifier: 65:2C:0A:DF:D1:7D:56:DF:A5:61:7B:6F:41:D1:45:DC:95:5A:EE:07 Authority key identifier: 97:D7:7F:08:66:9F:B9:4E:4E:99:F7:95:51:9F:B6:1D:CA:C6:2C:9F Certificate issuer: /CN=97D77F08669FB94E4E99F795519FB61DCAC62C9F Certificate serial: 1ED90E9631A29FA1E7AC43B8B05AD50A74DA8150 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97D77F08669FB94E4E99F795519FB61DCAC62C9F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/97D77F08669FB94E4E99F795519FB61DCAC62C9F.mft Manifest number: 055D Signing time: Wed 25 Mar 2026 01:11:32 +0000 Manifest this update: Wed 25 Mar 2026 01:06:32 +0000 Manifest next update: Sat 28 Mar 2026 04:25:32 +0000 Files and hashes: 1: 3130332e3230382e3130322e302f32342d3234203d3e20313334363438.roa (hash: UcHmCNm704dRdxu5mGnFESd+cYb7vs2gxWT3im+cP2U=) 2: 3130332e3230382e3130332e302f32342d3234203d3e20313334363438.roa (hash: Jz7bd4l9iJshW7NcA6KcDnrf6hTtrcC3IwQK9KShw7w=) 3: 3130332e3230382e3130302e302f32342d3234203d3e20313334363438.roa (hash: EeloRAa8rxGIeEpGTxQGak2WLi+75Ry5Z63pTnvFrf8=) 4: 3130332e3230382e3130312e302f32342d3234203d3e20313334363438.roa (hash: vtrYPFcybkmKbw9RZMYXPUfTz3LO/v9B/HIV4T8BsWE=) 5: 97D77F08669FB94E4E99F795519FB61DCAC62C9F.crl (hash: 4hcca35lvk2fVAOdAGjO/h6s6eU3IADUz+C7V1Z4PD4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/97D77F08669FB94E4E99F795519FB61DCAC62C9F.crl rsync://repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/97D77F08669FB94E4E99F795519FB61DCAC62C9F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97D77F08669FB94E4E99F795519FB61DCAC62C9F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 04:25:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:d9:0e:96:31:a2:9f:a1:e7:ac:43:b8:b0:5a:d5:0a:74:da:81:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97D77F08669FB94E4E99F795519FB61DCAC62C9F Validity Not Before: Mar 25 01:06:32 2026 GMT Not After : Mar 28 04:25:32 2026 GMT Subject: CN=652C0ADFD17D56DFA5617B6F41D145DC955AEE07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:30:6c:97:33:d6:36:30:28:f8:7d:ea:f5:74: 2b:90:95:ba:e2:f4:8f:85:dd:f6:22:e4:f1:3f:fc: 69:50:cf:5c:49:b8:41:cf:46:fa:80:03:cb:7f:37: 19:ad:79:2c:f8:11:bb:ec:79:68:30:7a:22:8d:e1: 50:88:4e:5a:fa:e2:62:40:fd:14:37:af:1e:83:f7: 03:9d:b5:dd:c2:7e:14:02:84:74:b7:94:e4:b8:1c: 00:5e:19:f3:ae:05:4a:4b:c7:53:ed:8d:76:7b:31: e2:04:4d:8f:ab:71:09:ba:46:06:6a:62:5e:82:09: 87:2a:72:21:e3:b5:a7:1f:7f:1a:7c:71:55:da:6a: 6c:f0:8c:80:47:07:3c:12:79:e6:ee:4e:18:4f:10: 28:7f:ef:b4:af:e9:52:e8:74:90:86:cb:cd:6f:d9: 42:6a:55:04:bd:fc:ff:1f:33:9c:91:87:3c:ce:bc: 13:d2:b1:86:a4:6b:c1:19:e2:55:88:97:36:ca:26: e9:a6:b1:19:8d:1a:eb:8f:03:7e:5a:3f:ca:b3:f4: 6b:11:00:ea:1b:2c:b9:c1:dd:30:31:01:a0:9e:e0: 56:11:3a:f0:86:07:fe:c1:94:1a:6a:1f:40:c7:2a: 3a:76:34:ad:6f:f1:60:c7:8d:dc:ce:b7:12:a1:ab: 9a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:2C:0A:DF:D1:7D:56:DF:A5:61:7B:6F:41:D1:45:DC:95:5A:EE:07 X509v3 Authority Key Identifier: keyid:97:D7:7F:08:66:9F:B9:4E:4E:99:F7:95:51:9F:B6:1D:CA:C6:2C:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/97D77F08669FB94E4E99F795519FB61DCAC62C9F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97D77F08669FB94E4E99F795519FB61DCAC62C9F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/97D77F08669FB94E4E99F795519FB61DCAC62C9F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:5c:28:b9:b7:e5:68:cf:85:d0:2a:43:13:7e:b7:39:d9:92: 88:a3:b1:9d:f8:f3:10:82:21:af:c5:ba:96:b5:61:62:19:df: 69:7d:c1:83:34:78:5b:52:e7:1c:f6:97:7b:5e:61:39:82:18: 4a:cd:14:03:73:ad:dc:99:a5:0e:5a:cc:d3:ce:68:3e:ba:76: b3:6e:ae:bb:73:65:81:3e:0c:c9:6b:19:f8:bf:07:8f:ed:dc: 35:d3:cf:b2:c3:b8:26:72:7a:e5:65:5e:7b:46:d4:45:82:e2: 09:01:41:c5:bb:ab:9d:f5:e7:1a:78:64:25:eb:03:fb:da:eb: 86:a7:90:1a:71:02:05:7e:2d:1d:41:35:54:de:7d:b0:45:bc: af:ec:48:e5:af:49:e7:63:df:f4:ec:e0:ca:f5:eb:c4:2f:84: 11:5c:fb:3f:1f:3e:92:8e:3c:60:14:9d:bd:6e:5a:10:45:83: cf:a6:e5:00:8c:c3:05:e1:3a:39:88:fc:4f:54:9d:49:1a:b5: f7:06:ea:34:a9:bc:5d:dd:2a:ad:5d:e3:72:8a:bf:97:7a:b2: 30:18:a5:f7:d1:d6:ba:c5:13:b8:fd:73:cb:8f:55:2a:91:b8: 4b:c7:78:99:bc:1f:81:82:a5:8b:5f:34:26:af:72:98:56:1f: c8:74:82:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHtkOljGin6HnrEO4sFrVCnTagVAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTdENzdGMDg2NjlGQjk0RTRFOTlGNzk1NTE5RkI2MURD QUM2MkM5RjAeFw0yNjAzMjUwMTA2MzJaFw0yNjAzMjgwNDI1MzJaMDMxMTAvBgNV BAMTKDY1MkMwQURGRDE3RDU2REZBNTYxN0I2RjQxRDE0NURDOTU1QUVFMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPMGyXM9Y2MCj4fer1dCuQlbri 9I+F3fYi5PE//GlQz1xJuEHPRvqAA8t/NxmteSz4EbvseWgweiKN4VCITlr64mJA /RQ3rx6D9wOdtd3CfhQChHS3lOS4HABeGfOuBUpLx1PtjXZ7MeIETY+rcQm6RgZq Yl6CCYcqciHjtacffxp8cVXaamzwjIBHBzwSeebuThhPECh/77Sv6VLodJCGy81v 2UJqVQS9/P8fM5yRhzzOvBPSsYaka8EZ4lWIlzbKJummsRmNGuuPA35aP8qz9GsR AOobLLnB3TAxAaCe4FYROvCGB/7BlBpqH0DHKjp2NK1v8WDHjdzOtxKhq5rDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZSwK39F9Vt+lYXtvQdFF3JVa7gcwHwYDVR0j BBgwFoAUl9d/CGafuU5OmfeVUZ+2HcrGLJ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MmM2OTQ0MC04YjE3LTRhNjgtYTBmYS02NjE1OWUyMTYyZTAvMC85N0Q3N0YwODY2 OUZCOTRFNEU5OUY3OTU1MTlGQjYxRENBQzYyQzlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTdENzdGMDg2NjlGQjk0RTRFOTlGNzk1NTE5RkI2MURDQUM2 MkM5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjJjNjk0NDAtOGIxNy00YTY4LWEw ZmEtNjYxNTllMjE2MmUwLzAvOTdENzdGMDg2NjlGQjk0RTRFOTlGNzk1NTE5RkI2 MURDQUM2MkM5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGVcKLm35WjPhdAqQxN+tznZkoijsZ348xCC Ia/Fupa1YWIZ32l9wYM0eFtS5xz2l3teYTmCGErNFANzrdyZpQ5azNPOaD66drNu rrtzZYE+DMlrGfi/B4/t3DXTz7LDuCZyeuVlXntG1EWC4gkBQcW7q5315xp4ZCXr A/va64ankBpxAgV+LR1BNVTefbBFvK/sSOWvSedj3/Ts4Mr168QvhBFc+z8fPpKO PGAUnb1uWhBFg8+m5QCMwwXhOjmI/E9UnUkatfcG6jSpvF3dKq1d43KKv5d6sjAY pffR1rrFE7j9c8uPVSqRuEvHeJm8H4GCpYtfNCavcphWH8h0gnY= -----END CERTIFICATE-----Generated at Thu Mar 26 16:29:32 2026 by rpki-client