$ rpki-client -vvf repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft File: 977D89E37F6F6C3815B2BC731E694AB878F26F30.mft (raw, json) Hash identifier: FItqv0+tWVt9XhgD3uWkQWTEJJd538bOCC3o6yIizcs= Subject key identifier: EC:AB:8A:F9:FE:8E:84:0A:6B:F4:AD:76:7B:4A:BC:FB:21:05:72:9E Authority key identifier: 97:7D:89:E3:7F:6F:6C:38:15:B2:BC:73:1E:69:4A:B8:78:F2:6F:30 Certificate issuer: /CN=977D89E37F6F6C3815B2BC731E694AB878F26F30 Certificate serial: 1DB31CCAE3C9E66649F21509631F8635291C339B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft Manifest number: 0221 Signing time: Wed 25 Mar 2026 22:21:27 +0000 Manifest this update: Wed 25 Mar 2026 22:16:27 +0000 Manifest next update: Sun 29 Mar 2026 01:43:27 +0000 Files and hashes: 1: 3130332e33312e34322e302f32342d3234203d3e2039333431.roa (hash: j8MhQFCNNpgWTqqvo4wUA4sj1OS1sCETyG/kmulGJXY=) 2: 3130332e33312e34332e302f32342d3234203d3e2039333431.roa (hash: uM0XA0AM+x7njeHld4x4WvIPIQYCBW6QBEs97/wT47g=) 3: 977D89E37F6F6C3815B2BC731E694AB878F26F30.crl (hash: yA8XnYFSV0C+ArhnmH08/U1+yTRbhnQ4BybI7qUSxfU=) 4: 3130332e33312e34322e302f32332d3233203d3e2039333431.roa (hash: stIIdICFAUmmjPJbZPuus0zTsstOOiSfpPEmNfACiJs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.crl rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 01:43:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:b3:1c:ca:e3:c9:e6:66:49:f2:15:09:63:1f:86:35:29:1c:33:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=977D89E37F6F6C3815B2BC731E694AB878F26F30 Validity Not Before: Mar 25 22:16:27 2026 GMT Not After : Mar 29 01:43:27 2026 GMT Subject: CN=ECAB8AF9FE8E840A6BF4AD767B4ABCFB2105729E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ee:2f:12:ff:f0:86:6a:7d:c1:08:52:71:e0: 0a:89:bc:bf:2a:17:fc:0f:7f:d9:da:08:e5:23:c0: 5b:40:5c:11:90:6d:ea:7d:61:ca:fb:3f:48:e5:6f: 8b:5e:2d:72:d0:43:f7:cc:14:9d:de:38:83:25:63: 48:a9:4b:4a:c1:5b:d5:6c:39:00:1b:9f:40:b9:05: 28:60:88:c1:9c:5a:c7:58:7d:db:d7:a7:7a:20:b6: d6:f0:82:50:7f:a1:d6:72:ae:37:d3:01:ca:28:27: 49:cc:78:57:7f:ad:02:17:88:03:11:eb:9f:9b:44: ec:eb:0e:bd:ff:ba:f1:09:01:f1:bf:d7:bd:39:96: 14:39:87:6f:7d:ff:5b:69:ba:d2:32:93:dc:6c:90: 5f:22:11:d5:53:ce:44:f3:93:fa:17:0d:ad:95:a4: 3d:b5:bf:03:23:b5:1c:88:06:f2:91:e6:1d:21:50: 27:40:e9:e8:c4:d7:b6:65:02:e2:7e:01:a9:e4:f2: 92:ee:b0:f4:8d:43:37:09:85:f7:b1:15:fc:46:8f: 64:11:1f:d7:e0:a6:16:52:43:6e:ec:92:f0:b0:06: 44:c3:e0:c0:ff:69:0f:e6:44:e7:50:ba:ba:1a:75: 1b:88:60:8d:69:08:0a:c5:33:c0:c8:8c:68:e8:94: b6:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:AB:8A:F9:FE:8E:84:0A:6B:F4:AD:76:7B:4A:BC:FB:21:05:72:9E X509v3 Authority Key Identifier: keyid:97:7D:89:E3:7F:6F:6C:38:15:B2:BC:73:1E:69:4A:B8:78:F2:6F:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:97:89:29:e3:f7:fc:99:4a:37:a8:56:ea:ee:fe:32:96:3e: 61:a7:15:0c:7b:ce:6f:ba:d9:02:a0:c5:42:b7:ea:70:29:ec: f4:13:e5:5a:de:4c:22:e2:53:69:02:13:ba:65:f6:ad:2c:8c: d8:d5:97:cd:dc:3a:28:8d:23:d3:87:dd:ea:4e:bb:56:61:55: 9f:8e:89:f1:33:59:af:aa:60:5c:b5:af:4e:6f:18:2d:2c:a2: 8e:3f:3c:93:8e:d3:4c:61:64:52:09:9c:1a:53:94:a0:79:b4: 0d:5a:09:99:4b:93:dc:07:85:f5:fb:b0:13:9d:54:67:6e:81: 83:d1:30:30:e7:ae:71:fc:3b:79:a0:73:04:bb:4b:68:f6:e6: 6d:82:93:59:a9:12:d7:39:a2:b4:a8:fe:ca:9e:db:10:16:92: e6:ba:ae:3d:8b:c1:9d:2f:3b:3d:14:2d:e0:c2:c5:aa:7d:fc: 22:44:4b:6d:37:b7:d5:d5:45:2c:59:10:0c:0b:00:d9:82:f5: 60:41:28:85:40:2a:66:03:4e:63:1b:83:5e:94:c8:76:1f:d6: 80:2f:8f:54:86:f5:b9:17:9f:97:c7:e6:a1:3d:aa:12:25:c5: 64:58:4a:6e:6e:6b:b3:d2:d0:ce:e3:9a:f8:05:9c:00:dc:0d: 45:9c:41:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHbMcyuPJ5mZJ8hUJYx+GNSkcM5swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc3RDg5RTM3RjZGNkMzODE1QjJCQzczMUU2OTRBQjg3 OEYyNkYzMDAeFw0yNjAzMjUyMjE2MjdaFw0yNjAzMjkwMTQzMjdaMDMxMTAvBgNV BAMTKEVDQUI4QUY5RkU4RTg0MEE2QkY0QUQ3NjdCNEFCQ0ZCMjEwNTcyOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp7i8S//CGan3BCFJx4AqJvL8q F/wPf9naCOUjwFtAXBGQbep9Ycr7P0jlb4teLXLQQ/fMFJ3eOIMlY0ipS0rBW9Vs OQAbn0C5BShgiMGcWsdYfdvXp3ogttbwglB/odZyrjfTAcooJ0nMeFd/rQIXiAMR 65+bROzrDr3/uvEJAfG/1705lhQ5h299/1tputIyk9xskF8iEdVTzkTzk/oXDa2V pD21vwMjtRyIBvKR5h0hUCdA6ejE17ZlAuJ+Aank8pLusPSNQzcJhfexFfxGj2QR H9fgphZSQ27skvCwBkTD4MD/aQ/mROdQuroadRuIYI1pCArFM8DIjGjolLYzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7KuK+f6OhApr9K12e0q8+yEFcp4wHwYDVR0j BBgwFoAUl32J439vbDgVsrxzHmlKuHjybzAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZTRhY2UxMS05MTM5LTQ0ODUtYWJhOS0wNGJlZGRjNWJjMjYvMC85NzdEODlFMzdG NkY2QzM4MTVCMkJDNzMxRTY5NEFCODc4RjI2RjMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTc3RDg5RTM3RjZGNkMzODE1QjJCQzczMUU2OTRBQjg3OEYy NkYzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmU0YWNlMTEtOTEzOS00NDg1LWFi YTktMDRiZWRkYzViYzI2LzAvOTc3RDg5RTM3RjZGNkMzODE1QjJCQzczMUU2OTRB Qjg3OEYyNkYzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADiXiSnj9/yZSjeoVuru/jKWPmGnFQx7zm+6 2QKgxUK36nAp7PQT5VreTCLiU2kCE7pl9q0sjNjVl83cOiiNI9OH3epOu1ZhVZ+O ifEzWa+qYFy1r05vGC0soo4/PJOO00xhZFIJnBpTlKB5tA1aCZlLk9wHhfX7sBOd VGdugYPRMDDnrnH8O3mgcwS7S2j25m2Ck1mpEtc5orSo/sqe2xAWkua6rj2LwZ0v Oz0ULeDCxap9/CJES203t9XVRSxZEAwLANmC9WBBKIVAKmYDTmMbg16UyHYf1oAv j1SG9bkXn5fH5qE9qhIlxWRYSm5ua7PS0M7jmvgFnADcDUWcQUE= -----END CERTIFICATE-----Generated at Thu Mar 26 14:33:07 2026 by rpki-client