
$ rpki-client -vvf repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/97D77F08669FB94E4E99F795519FB61DCAC62C9F.mft
File: 97D77F08669FB94E4E99F795519FB61DCAC62C9F.mft (raw, json)
Hash identifier: VTi4d36ZvRJY4pxHp7UjgAlGkG85qBEgs08szrHv0Z0=
Subject key identifier: 2B:A0:2D:91:75:29:A7:2B:15:D1:03:3A:BB:D9:99:1D:E0:57:00:10
Authority key identifier: 97:D7:7F:08:66:9F:B9:4E:4E:99:F7:95:51:9F:B6:1D:CA:C6:2C:9F
Certificate issuer: /CN=97D77F08669FB94E4E99F795519FB61DCAC62C9F
Certificate serial: 1E1F480444DC952BB02B0D4CB399F2167D8E6B58
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97D77F08669FB94E4E99F795519FB61DCAC62C9F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/97D77F08669FB94E4E99F795519FB61DCAC62C9F.mft
Manifest number: 055A
Signing time: Wed 18 Mar 2026 12:41:41 +0000
Manifest this update: Wed 18 Mar 2026 12:36:41 +0000
Manifest next update: Sat 21 Mar 2026 16:09:41 +0000
Files and hashes: 1: 3130332e3230382e3130302e302f32342d3234203d3e20313334363438.roa (hash: EeloRAa8rxGIeEpGTxQGak2WLi+75Ry5Z63pTnvFrf8=)
2: 3130332e3230382e3130332e302f32342d3234203d3e20313334363438.roa (hash: Jz7bd4l9iJshW7NcA6KcDnrf6hTtrcC3IwQK9KShw7w=)
3: 3130332e3230382e3130322e302f32342d3234203d3e20313334363438.roa (hash: UcHmCNm704dRdxu5mGnFESd+cYb7vs2gxWT3im+cP2U=)
4: 97D77F08669FB94E4E99F795519FB61DCAC62C9F.crl (hash: fyW/dRwuh+z0zhjslZRS4x4k2duXd28XiWk8QzUSAKQ=)
5: 3130332e3230382e3130312e302f32342d3234203d3e20313334363438.roa (hash: vtrYPFcybkmKbw9RZMYXPUfTz3LO/v9B/HIV4T8BsWE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/97D77F08669FB94E4E99F795519FB61DCAC62C9F.crl
rsync://repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/97D77F08669FB94E4E99F795519FB61DCAC62C9F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97D77F08669FB94E4E99F795519FB61DCAC62C9F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Mar 2026 16:09:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:1f:48:04:44:dc:95:2b:b0:2b:0d:4c:b3:99:f2:16:7d:8e:6b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97D77F08669FB94E4E99F795519FB61DCAC62C9F
Validity
Not Before: Mar 18 12:36:41 2026 GMT
Not After : Mar 21 16:09:41 2026 GMT
Subject: CN=2BA02D917529A72B15D1033ABBD9991DE0570010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c9:c7:f8:ba:22:42:23:58:8b:d4:6a:6f:6c:
ff:b6:ae:65:f9:9a:62:8d:98:06:a4:c8:cf:4c:3f:
b5:b1:f5:bd:02:e0:98:5f:5e:66:a0:19:0f:39:57:
35:3c:de:03:9c:fc:ae:68:0b:8f:08:9d:d1:71:08:
f7:58:4d:c3:f5:82:cd:13:d1:dd:b4:36:0a:2c:ac:
85:f5:6d:39:f6:58:ec:3b:66:f7:05:84:bf:48:4f:
db:3e:bc:e1:09:11:7d:c1:9d:15:f1:19:48:92:48:
20:94:1d:4f:2e:24:6a:7f:3b:91:e9:3e:c1:f1:75:
a6:b8:f2:33:9c:5c:08:f9:4c:6d:17:1c:19:7b:69:
7c:81:56:b5:47:5a:42:45:55:9e:0c:12:ef:50:d1:
c6:77:e0:d8:9e:69:46:c8:fb:18:de:22:f3:73:06:
aa:bf:3d:69:d2:21:66:4b:8e:35:08:94:85:2e:9a:
b3:2e:90:e3:09:76:ff:1e:3d:6a:07:61:37:a0:4b:
e5:3f:ed:d4:04:e3:79:da:d4:b4:6b:a5:f9:a9:72:
fa:2d:d0:14:fe:50:8c:b4:79:61:c9:81:e9:52:30:
c9:03:48:86:a0:f6:cc:f2:6a:a7:6a:c2:25:ed:ee:
4c:34:ba:05:42:bd:83:3d:dd:41:b9:ad:07:e4:d4:
e9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A0:2D:91:75:29:A7:2B:15:D1:03:3A:BB:D9:99:1D:E0:57:00:10
X509v3 Authority Key Identifier:
keyid:97:D7:7F:08:66:9F:B9:4E:4E:99:F7:95:51:9F:B6:1D:CA:C6:2C:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/97D77F08669FB94E4E99F795519FB61DCAC62C9F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97D77F08669FB94E4E99F795519FB61DCAC62C9F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/97D77F08669FB94E4E99F795519FB61DCAC62C9F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:c1:10:9b:99:90:14:36:bd:0d:d0:05:33:d6:91:68:47:df:
65:23:17:5c:c4:e9:88:01:7e:9c:8b:2a:0d:b7:03:4b:9c:7e:
b0:56:1d:b2:f4:c1:9a:67:f5:3f:b3:bd:43:57:d6:cf:f3:d1:
65:12:46:87:4a:3c:97:fe:0a:80:09:92:ac:41:84:5f:b5:5e:
53:d2:92:ca:21:94:89:05:fa:5c:78:92:e7:f0:22:38:0a:b7:
14:d2:19:9f:ef:0d:ae:78:0a:03:f0:dc:79:c9:c7:31:f2:a9:
02:57:21:39:f1:d2:7a:e6:bd:56:35:22:64:67:7b:fd:8c:87:
53:26:a9:b2:fd:65:e1:4b:e1:e7:f8:b1:6a:d9:b9:b7:6f:c5:
90:91:79:a1:87:49:14:56:d5:1d:b0:0f:ed:8a:c7:ba:a0:8c:
85:29:af:60:d8:d1:44:97:83:4c:1d:c0:94:25:50:42:cd:89:
25:9a:31:a4:25:25:97:88:11:ac:66:40:a8:53:7c:3f:ce:75:
1a:66:bc:1a:43:1d:14:e5:de:71:6d:e5:c6:14:9b:77:90:f4:
4c:10:b8:60:7f:dd:af:6f:64:9b:50:79:0b:07:f6:58:95:f9:
a0:14:e2:ab:54:dd:aa:4f:14:ab:43:09:08:5e:5d:e4:da:83:
c0:f5:21:9f
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUHh9IBETclSuwKw1Ms5nyFn2Oa1gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTdENzdGMDg2NjlGQjk0RTRFOTlGNzk1NTE5RkI2MURD
QUM2MkM5RjAeFw0yNjAzMTgxMjM2NDFaFw0yNjAzMjExNjA5NDFaMDMxMTAvBgNV
BAMTKDJCQTAyRDkxNzUyOUE3MkIxNUQxMDMzQUJCRDk5OTFERTA1NzAwMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNycf4uiJCI1iL1GpvbP+2rmX5
mmKNmAakyM9MP7Wx9b0C4JhfXmagGQ85VzU83gOc/K5oC48IndFxCPdYTcP1gs0T
0d20NgosrIX1bTn2WOw7ZvcFhL9IT9s+vOEJEX3BnRXxGUiSSCCUHU8uJGp/O5Hp
PsHxdaa48jOcXAj5TG0XHBl7aXyBVrVHWkJFVZ4MEu9Q0cZ34NieaUbI+xjeIvNz
Bqq/PWnSIWZLjjUIlIUumrMukOMJdv8ePWoHYTegS+U/7dQE43na1LRrpfmpcvot
0BT+UIy0eWHJgelSMMkDSIag9szyaqdqwiXt7kw0ugVCvYM93UG5rQfk1OmbAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUK6AtkXUppysV0QM6u9mZHeBXABAwHwYDVR0j
BBgwFoAUl9d/CGafuU5OmfeVUZ+2HcrGLJ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
MmM2OTQ0MC04YjE3LTRhNjgtYTBmYS02NjE1OWUyMTYyZTAvMC85N0Q3N0YwODY2
OUZCOTRFNEU5OUY3OTU1MTlGQjYxRENBQzYyQzlGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTdENzdGMDg2NjlGQjk0RTRFOTlGNzk1NTE5RkI2MURDQUM2
MkM5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjJjNjk0NDAtOGIxNy00YTY4LWEw
ZmEtNjYxNTllMjE2MmUwLzAvOTdENzdGMDg2NjlGQjk0RTRFOTlGNzk1NTE5RkI2
MURDQUM2MkM5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAL/BEJuZkBQ2vQ3QBTPWkWhH32UjF1zE6YgB
fpyLKg23A0ucfrBWHbL0wZpn9T+zvUNX1s/z0WUSRodKPJf+CoAJkqxBhF+1XlPS
ksohlIkF+lx4kufwIjgKtxTSGZ/vDa54CgPw3HnJxzHyqQJXITnx0nrmvVY1ImRn
e/2Mh1MmqbL9ZeFL4ef4sWrZubdvxZCReaGHSRRW1R2wD+2Kx7qgjIUpr2DY0USX
g0wdwJQlUELNiSWaMaQlJZeIEaxmQKhTfD/OdRpmvBpDHRTl3nFt5cYUm3eQ9EwQ
uGB/3a9vZJtQeQsH9liV+aAU4qtU3apPFKtDCQheXeTag8D1IZ8=
-----END CERTIFICATE-----
Generated at Thu Mar 19 09:41:05 2026 by rpki-client