$ rpki-client -vvf repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft File: 977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft (raw, json) Hash identifier: pWxv97iH3hV75I9eymID10S5Q/TUO3fIT5oTtWImriE= Subject key identifier: 1C:86:25:3E:C6:EB:5C:EA:5F:4C:BD:AE:FC:D5:CC:AE:68:03:D9:55 Authority key identifier: 97:7E:A5:11:85:51:E9:8A:EA:A8:BB:11:C9:D9:9D:71:96:D3:DE:BA Certificate issuer: /CN=977EA5118551E98AEAA8BB11C9D99D7196D3DEBA Certificate serial: 3C6A3C00E4BD9ED71ECF13ED80E4490F2714C519 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft Manifest number: 055E Signing time: Tue 24 Mar 2026 22:31:21 +0000 Manifest this update: Tue 24 Mar 2026 22:26:21 +0000 Manifest next update: Sat 28 Mar 2026 07:28:21 +0000 Files and hashes: 1: 3130332e3132332e3130382e302f32342d3234203d3e20313338303636.roa (hash: q9pcjfkInqPcGghxGeh0wF/8x9n+wp0JshUKi76J40w=) 2: 977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.crl (hash: PqHwp3VWCvL38c7Scb0EOaHCjgXG4nkytQvu4148thE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.crl rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 07:28:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:6a:3c:00:e4:bd:9e:d7:1e:cf:13:ed:80:e4:49:0f:27:14:c5:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=977EA5118551E98AEAA8BB11C9D99D7196D3DEBA Validity Not Before: Mar 24 22:26:21 2026 GMT Not After : Mar 28 07:28:21 2026 GMT Subject: CN=1C86253EC6EB5CEA5F4CBDAEFCD5CCAE6803D955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:69:7b:c7:c2:85:78:cf:14:72:42:17:f5:78: 84:39:9b:6d:93:7c:13:f2:7d:8c:0c:4c:3e:5f:ca: 23:a0:87:69:50:b7:2c:e8:3e:29:15:b8:f4:5b:ea: 44:39:34:19:87:11:ea:d8:71:61:34:cb:2e:88:b1: 13:ff:bd:70:a1:dc:5c:33:14:6b:48:cb:75:0e:15: e1:c4:84:a2:f2:b5:cf:04:d5:53:5b:af:79:dd:80: e6:7e:a3:13:58:cc:67:60:30:f9:d0:db:a9:0d:79: bd:95:cd:a7:31:aa:80:01:fa:0f:4e:ec:f7:8c:4b: 32:06:f3:d3:b5:bc:4b:82:3a:03:87:a8:b4:25:13: 62:c7:b4:05:54:5c:e9:79:53:ba:1d:49:32:71:39: 80:24:91:e5:0d:33:fc:a2:52:b9:1d:7f:23:c5:ac: b6:c8:4d:77:11:61:5b:08:38:9e:be:7a:7d:f1:fe: 5d:30:99:9a:c4:17:38:fb:7a:40:c2:70:e9:57:8d: 5d:fd:30:2e:3c:87:3c:1d:e5:9e:fd:e3:a1:45:a6: af:55:55:21:a8:58:4f:ce:d1:1c:ec:dc:06:d0:7b: 76:77:79:ca:42:df:a1:4c:ec:a7:31:1f:27:3e:5c: 3c:c8:10:56:c9:ac:92:5f:10:9b:cd:7c:28:b6:db: 6a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:86:25:3E:C6:EB:5C:EA:5F:4C:BD:AE:FC:D5:CC:AE:68:03:D9:55 X509v3 Authority Key Identifier: keyid:97:7E:A5:11:85:51:E9:8A:EA:A8:BB:11:C9:D9:9D:71:96:D3:DE:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8988c0f2-2800-48da-a83e-ab54df65c574/0/977EA5118551E98AEAA8BB11C9D99D7196D3DEBA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:61:58:a5:a0:0d:dd:ce:25:6f:d9:90:98:07:10:02:a6:c2: e4:d8:9b:22:41:da:15:43:b5:62:b3:69:b3:e8:f5:12:52:e6: cc:7e:de:ee:f3:b4:04:03:3e:c9:ec:ea:13:ab:6a:23:b5:e3: cf:1e:9e:a8:47:0f:15:0e:18:04:6e:22:c7:15:37:78:5c:2e: cb:72:95:5a:3b:01:26:31:f5:ee:81:fd:b5:2f:f0:1a:8a:b4: 9b:00:68:74:08:80:05:36:c8:25:32:30:ea:37:50:bc:99:bc: 0b:ac:71:88:b6:5c:04:43:3c:60:40:8c:6e:6a:3c:aa:a7:69: 4e:cd:fb:1f:5c:0e:44:8b:c7:41:29:29:b6:3a:74:a0:0f:1e: fb:bb:d0:0b:15:9d:4d:d4:fa:d1:c9:f1:e0:e9:ce:4e:f5:21: 7e:f7:cf:1e:b4:b9:04:85:1c:b5:dc:83:4f:98:89:27:4c:6d: 64:05:dd:0e:44:e0:72:29:09:03:81:38:68:66:4e:15:06:23: db:cb:21:30:c4:b9:5a:f4:d8:66:fa:78:2c:4c:4c:d3:28:4e: 9e:ec:4d:13:85:d7:a8:6e:6b:e3:3c:1a:55:7a:0d:ca:cd:16: 02:8c:02:22:2b:4f:d7:69:af:71:e7:ed:f0:b1:96:0d:ce:92: cc:55:29:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPGo8AOS9ntcezxPtgORJDycUxRkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc3RUE1MTE4NTUxRTk4QUVBQThCQjExQzlEOTlENzE5 NkQzREVCQTAeFw0yNjAzMjQyMjI2MjFaFw0yNjAzMjgwNzI4MjFaMDMxMTAvBgNV BAMTKDFDODYyNTNFQzZFQjVDRUE1RjRDQkRBRUZDRDVDQ0FFNjgwM0Q5NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmaXvHwoV4zxRyQhf1eIQ5m22T fBPyfYwMTD5fyiOgh2lQtyzoPikVuPRb6kQ5NBmHEerYcWE0yy6IsRP/vXCh3Fwz FGtIy3UOFeHEhKLytc8E1VNbr3ndgOZ+oxNYzGdgMPnQ26kNeb2VzacxqoAB+g9O 7PeMSzIG89O1vEuCOgOHqLQlE2LHtAVUXOl5U7odSTJxOYAkkeUNM/yiUrkdfyPF rLbITXcRYVsIOJ6+en3x/l0wmZrEFzj7ekDCcOlXjV39MC48hzwd5Z7946FFpq9V VSGoWE/O0Rzs3AbQe3Z3ecpC36FM7KcxHyc+XDzIEFbJrJJfEJvNfCi222qrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHIYlPsbrXOpfTL2u/NXMrmgD2VUwHwYDVR0j BBgwFoAUl36lEYVR6YrqqLsRydmdcZbT3rowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OTg4YzBmMi0yODAwLTQ4ZGEtYTgzZS1hYjU0ZGY2NWM1NzQvMC85NzdFQTUxMTg1 NTFFOThBRUFBOEJCMTFDOUQ5OUQ3MTk2RDNERUJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTc3RUE1MTE4NTUxRTk4QUVBQThCQjExQzlEOTlENzE5NkQz REVCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODk4OGMwZjItMjgwMC00OGRhLWE4 M2UtYWI1NGRmNjVjNTc0LzAvOTc3RUE1MTE4NTUxRTk4QUVBQThCQjExQzlEOTlE NzE5NkQzREVCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB5hWKWgDd3OJW/ZkJgHEAKmwuTYmyJB2hVD tWKzabPo9RJS5sx+3u7ztAQDPsns6hOraiO1488enqhHDxUOGARuIscVN3hcLsty lVo7ASYx9e6B/bUv8BqKtJsAaHQIgAU2yCUyMOo3ULyZvAuscYi2XARDPGBAjG5q PKqnaU7N+x9cDkSLx0EpKbY6dKAPHvu70AsVnU3U+tHJ8eDpzk71IX73zx60uQSF HLXcg0+YiSdMbWQF3Q5E4HIpCQOBOGhmThUGI9vLITDEuVr02Gb6eCxMTNMoTp7s TROF16hua+M8GlV6DcrNFgKMAiIrT9dpr3Hn7fCxlg3OksxVKQo= -----END CERTIFICATE-----Generated at Fri Mar 27 02:03:56 2026 by rpki-client