$ rpki-client -vvf repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft File: 2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft (raw, json) Hash identifier: JwUFpmxKSA4VZaEhQG+El+M1Oompx5fz06B7iC7bjmA= Subject key identifier: 33:CA:F5:85:74:FF:C4:CD:01:D8:48:1D:64:FC:9D:CB:40:97:AF:72 Authority key identifier: 29:76:AD:C7:44:8B:F0:CA:9B:57:DC:D7:88:49:A1:E0:F9:5F:2B:45 Certificate issuer: /CN=2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45 Certificate serial: 447AA2564332EC2B6A6B0A57E808D69CDFD012AA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft Manifest number: 0119 Signing time: Wed 25 Mar 2026 19:31:04 +0000 Manifest this update: Wed 25 Mar 2026 19:26:04 +0000 Manifest next update: Sat 28 Mar 2026 20:05:04 +0000 Files and hashes: 1: 3136302e32352e3137382e302f32332d3234203d3e20313533303735.roa (hash: FYy5UtFCXZKGCZxosr1oqFzrTkMP7sB8ytiR2n56UZs=) 2: 3136302e32352e3137382e302f32342d3234203d3e20313533303735.roa (hash: iPqRbkelW4W9hPKQlPKh7dVapT99d9ruqUsqOdahl18=) 3: 3136302e32352e3137392e302f32342d3234203d3e20313533303735.roa (hash: duCuSDamX6IXj6dNr3R2KvTWuX1Y0Ld9dMd4eFNkJZc=) 4: 2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.crl (hash: 1gUi4TPfhqpfbvCeDi/LMG04o48Pp7E8NMRlWZazw20=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.crl rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 20:05:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:7a:a2:56:43:32:ec:2b:6a:6b:0a:57:e8:08:d6:9c:df:d0:12:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45 Validity Not Before: Mar 25 19:26:04 2026 GMT Not After : Mar 28 20:05:04 2026 GMT Subject: CN=33CAF58574FFC4CD01D8481D64FC9DCB4097AF72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:cd:21:71:fe:64:c2:37:eb:58:42:17:df:e0: 49:0c:76:81:e7:39:00:b6:78:90:6a:59:ff:c2:e0: 49:f1:ee:a1:3b:cc:61:a9:bd:a4:1c:82:84:58:9e: b3:90:6f:31:72:da:ca:13:66:3e:16:d3:3c:2c:b1: e4:3e:05:d6:5d:fa:87:29:5b:36:b9:ff:21:2e:d1: 40:51:48:ce:82:90:39:a3:b2:d8:d9:f8:de:0d:ce: 63:66:d5:73:34:eb:ae:b3:d6:a1:e1:42:c7:e7:d0: 5a:c6:58:b3:d3:52:60:e8:2a:8a:23:aa:c1:4c:2a: e0:5d:93:fd:a4:e6:f6:b4:c8:46:46:ec:b4:50:11: 98:cc:e1:cc:25:00:e8:64:a0:64:b0:21:1a:fd:a8: 0c:e4:b7:65:47:58:13:0a:4d:94:fa:5a:04:e5:af: 4c:c4:72:b9:22:e8:c3:a1:46:73:14:8d:f4:8e:4f: 93:ba:d1:f3:9e:83:a7:17:49:e1:51:28:00:92:3a: 7d:7f:56:6e:03:f8:55:6c:83:a1:25:9b:51:ac:73: f7:66:7e:d8:46:39:a9:23:02:56:2d:4d:a7:90:43: b0:04:27:7b:05:4e:ab:fe:05:4e:dd:93:ba:7d:39: c3:e4:c2:ef:78:6c:49:14:0a:f5:2d:29:3b:08:13: bc:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:CA:F5:85:74:FF:C4:CD:01:D8:48:1D:64:FC:9D:CB:40:97:AF:72 X509v3 Authority Key Identifier: keyid:29:76:AD:C7:44:8B:F0:CA:9B:57:DC:D7:88:49:A1:E0:F9:5F:2B:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:1d:21:80:c0:41:eb:93:58:1e:85:8d:d9:cc:15:45:30:b1: 56:08:3c:89:28:d2:3e:39:95:11:d5:3b:70:c0:ce:39:3c:52: 79:e2:b7:87:9a:7a:2c:ed:bf:71:f8:c6:b5:0d:bc:3f:4b:7e: 20:a6:b6:65:8a:6c:8c:cc:ae:c3:0d:05:da:a5:74:3a:82:ec: dd:5e:e7:3a:6f:48:b1:c9:07:46:32:f3:0d:79:a8:b0:03:b0: 09:61:ac:d9:27:02:eb:c8:7e:6b:f7:17:05:7b:46:85:40:c3: ee:ec:18:93:9d:b0:95:b7:69:d4:87:82:4c:9c:6f:2c:4f:17: eb:38:4c:bc:bb:6d:d9:fb:eb:35:71:24:e0:0d:ea:ad:e9:90: 70:f5:13:83:ac:35:f8:5d:48:87:6a:97:46:90:84:71:d5:12: be:12:59:8e:69:a1:cc:b8:a3:21:9b:6f:f4:ee:c5:d3:c8:dd: 4a:9e:f2:6d:4d:c0:fb:b6:fe:3e:3e:ac:47:07:70:47:32:d5: bb:4f:3d:3c:d1:ca:9a:ce:bc:1c:50:4f:00:4a:af:6f:4d:b9: 48:77:b3:b1:a0:c0:58:ec:5f:2a:c5:a4:64:3c:3f:5c:13:d1: c2:c2:4b:c7:b8:e1:ff:85:c5:dc:3e:eb:0e:89:aa:0f:34:c4: ea:a6:81:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURHqiVkMy7CtqawpX6AjWnN/QEqowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk3NkFEQzc0NDhCRjBDQTlCNTdEQ0Q3ODg0OUExRTBG OTVGMkI0NTAeFw0yNjAzMjUxOTI2MDRaFw0yNjAzMjgyMDA1MDRaMDMxMTAvBgNV BAMTKDMzQ0FGNTg1NzRGRkM0Q0QwMUQ4NDgxRDY0RkM5RENCNDA5N0FGNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqzSFx/mTCN+tYQhff4EkMdoHn OQC2eJBqWf/C4Enx7qE7zGGpvaQcgoRYnrOQbzFy2soTZj4W0zwsseQ+BdZd+ocp Wza5/yEu0UBRSM6CkDmjstjZ+N4NzmNm1XM0666z1qHhQsfn0FrGWLPTUmDoKooj qsFMKuBdk/2k5va0yEZG7LRQEZjM4cwlAOhkoGSwIRr9qAzkt2VHWBMKTZT6WgTl r0zEcrki6MOhRnMUjfSOT5O60fOeg6cXSeFRKACSOn1/Vm4D+FVsg6Elm1Gsc/dm fthGOakjAlYtTaeQQ7AEJ3sFTqv+BU7dk7p9OcPkwu94bEkUCvUtKTsIE7x3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM8r1hXT/xM0B2EgdZPydy0CXr3IwHwYDVR0j BBgwFoAUKXatx0SL8MqbV9zXiEmh4PlfK0UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 N2M0MzJlMC1kYzNlLTQyY2MtYmNjMC02MjliMTYyMDZjOWEvMC8yOTc2QURDNzQ0 OEJGMENBOUI1N0RDRDc4ODQ5QTFFMEY5NUYyQjQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjk3NkFEQzc0NDhCRjBDQTlCNTdEQ0Q3ODg0OUExRTBGOTVG MkI0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODdjNDMyZTAtZGMzZS00MmNjLWJj YzAtNjI5YjE2MjA2YzlhLzAvMjk3NkFEQzc0NDhCRjBDQTlCNTdEQ0Q3ODg0OUEx RTBGOTVGMkI0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABQdIYDAQeuTWB6FjdnMFUUwsVYIPIko0j45 lRHVO3DAzjk8Unnit4eaeiztv3H4xrUNvD9LfiCmtmWKbIzMrsMNBdqldDqC7N1e 5zpvSLHJB0Yy8w15qLADsAlhrNknAuvIfmv3FwV7RoVAw+7sGJOdsJW3adSHgkyc byxPF+s4TLy7bdn76zVxJOAN6q3pkHD1E4OsNfhdSIdql0aQhHHVEr4SWY5pocy4 oyGbb/TuxdPI3Uqe8m1NwPu2/j4+rEcHcEcy1btPPTzRyprOvBxQTwBKr29NuUh3 s7GgwFjsXyrFpGQ8P1wT0cLCS8e44f+Fxdw+6w6Jqg80xOqmga0= -----END CERTIFICATE-----Generated at Thu Mar 26 13:39:27 2026 by rpki-client