$ rpki-client -vvf repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft File: 977D89E37F6F6C3815B2BC731E694AB878F26F30.mft (raw, json) Hash identifier: DwHtddUG+5eDbRa3kUnW+ZwvGKewKSP9Wz1Sm6LtnmY= Subject key identifier: 4D:7B:D8:38:C0:96:53:49:25:F7:3F:DA:79:68:53:D1:9D:3F:96:DB Authority key identifier: 97:7D:89:E3:7F:6F:6C:38:15:B2:BC:73:1E:69:4A:B8:78:F2:6F:30 Certificate issuer: /CN=977D89E37F6F6C3815B2BC731E694AB878F26F30 Certificate serial: 1D2DA9D9A97C2E3477C13A125C404FB8EF2F56D9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft Manifest number: 021E Signing time: Wed 18 Mar 2026 19:02:01 +0000 Manifest this update: Wed 18 Mar 2026 18:57:01 +0000 Manifest next update: Sun 22 Mar 2026 03:44:01 +0000 Files and hashes: 1: 3130332e33312e34322e302f32342d3234203d3e2039333431.roa (hash: j8MhQFCNNpgWTqqvo4wUA4sj1OS1sCETyG/kmulGJXY=) 2: 3130332e33312e34332e302f32342d3234203d3e2039333431.roa (hash: uM0XA0AM+x7njeHld4x4WvIPIQYCBW6QBEs97/wT47g=) 3: 3130332e33312e34322e302f32332d3233203d3e2039333431.roa (hash: stIIdICFAUmmjPJbZPuus0zTsstOOiSfpPEmNfACiJs=) 4: 977D89E37F6F6C3815B2BC731E694AB878F26F30.crl (hash: of4xIqSdydbmhZMDEgRzllku+wWXTyAkJHltEcv+dts=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.crl rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 03:44:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:2d:a9:d9:a9:7c:2e:34:77:c1:3a:12:5c:40:4f:b8:ef:2f:56:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=977D89E37F6F6C3815B2BC731E694AB878F26F30 Validity Not Before: Mar 18 18:57:01 2026 GMT Not After : Mar 22 03:44:01 2026 GMT Subject: CN=4D7BD838C096534925F73FDA796853D19D3F96DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:87:ac:6a:16:8e:00:b1:33:fb:f9:8a:22:7e: 12:9e:ef:2d:ee:58:35:88:6b:41:97:06:ef:bd:52: 7a:6d:a5:06:27:cc:f6:4c:6f:e3:46:36:70:a3:f7: 46:b3:18:c1:06:79:a6:aa:2e:08:cc:4a:14:88:08: af:34:a1:8f:93:5c:29:4f:35:cd:2c:34:0d:d8:b4: 62:2a:a1:3e:af:a0:d4:6e:07:e5:38:93:28:23:7e: 9c:a4:71:63:bf:09:e6:5c:b7:aa:5a:6c:bf:f6:b2: 8c:00:68:b0:0f:fd:00:0c:a8:99:c9:a0:5e:c3:40: 96:9b:f7:6e:07:b0:c1:4e:c9:04:41:df:7d:b7:fa: bc:9e:1d:76:3d:2c:a9:b1:d6:89:bb:ac:ad:7b:0a: 8b:94:25:41:10:43:89:ca:fb:83:06:ca:46:10:85: 7f:10:69:1c:4f:26:51:c4:8f:b4:4f:f5:88:84:7c: 1c:80:f6:8a:ab:0f:b3:06:25:85:60:bd:24:93:b2: d7:3a:b5:98:77:42:bd:48:14:43:06:ba:70:41:f2: 5f:7b:e5:c5:b4:0c:9d:1a:2d:bc:23:b8:89:0a:05: a9:be:24:c1:40:b8:5f:45:de:c1:b5:85:ae:9f:79: e1:95:89:d9:54:cf:48:84:47:53:0f:a7:a5:7f:8e: 93:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:7B:D8:38:C0:96:53:49:25:F7:3F:DA:79:68:53:D1:9D:3F:96:DB X509v3 Authority Key Identifier: keyid:97:7D:89:E3:7F:6F:6C:38:15:B2:BC:73:1E:69:4A:B8:78:F2:6F:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:ff:ff:4d:de:14:12:39:3f:b4:6c:06:2f:91:58:5e:fd:c2: 0e:08:a7:50:0a:42:26:91:57:ff:fa:cf:d0:4b:a2:ae:18:33: c5:8d:c2:ba:8a:97:c8:91:98:18:37:0e:53:55:be:c5:53:73: 1a:37:d0:b4:a7:65:d0:88:69:f0:3e:a7:f3:75:cb:11:db:5c: 6f:40:82:f9:21:24:bb:36:a9:23:54:65:15:f8:2f:3b:c3:cd: d4:90:58:35:ba:e3:ec:ca:22:2c:a9:82:63:92:48:86:5a:9e: f2:91:03:db:75:8b:ca:c2:7a:41:49:bb:08:9e:96:17:9e:54: 4f:45:57:85:c0:e1:13:d3:b0:28:3e:db:4f:7d:e4:56:e2:99: 17:6e:5c:ec:0b:9a:41:93:35:61:9e:fc:da:a1:90:62:ce:e0: c9:43:b1:bb:66:f3:bf:9b:d2:a5:d4:04:46:db:23:2e:ef:d6: 54:69:95:bd:5d:30:63:a0:a3:ab:12:84:1c:a2:81:ca:94:be: e1:75:0f:b9:12:c0:c1:c7:04:03:97:c6:17:7d:2a:d3:02:69: 83:56:32:7c:1c:a6:d7:85:b8:ab:ab:0c:44:bc:37:95:ff:02: fd:72:ac:bf:45:ea:15:18:d0:1d:a8:42:25:6c:56:5c:fb:19: 07:dc:47:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHS2p2al8LjR3wToSXEBPuO8vVtkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc3RDg5RTM3RjZGNkMzODE1QjJCQzczMUU2OTRBQjg3 OEYyNkYzMDAeFw0yNjAzMTgxODU3MDFaFw0yNjAzMjIwMzQ0MDFaMDMxMTAvBgNV BAMTKDREN0JEODM4QzA5NjUzNDkyNUY3M0ZEQTc5Njg1M0QxOUQzRjk2REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5h6xqFo4AsTP7+YoifhKe7y3u WDWIa0GXBu+9UnptpQYnzPZMb+NGNnCj90azGMEGeaaqLgjMShSICK80oY+TXClP Nc0sNA3YtGIqoT6voNRuB+U4kygjfpykcWO/CeZct6pabL/2sowAaLAP/QAMqJnJ oF7DQJab924HsMFOyQRB3323+ryeHXY9LKmx1om7rK17CouUJUEQQ4nK+4MGykYQ hX8QaRxPJlHEj7RP9YiEfByA9oqrD7MGJYVgvSSTstc6tZh3Qr1IFEMGunBB8l97 5cW0DJ0aLbwjuIkKBam+JMFAuF9F3sG1ha6feeGVidlUz0iER1MPp6V/jpNnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTXvYOMCWU0kl9z/aeWhT0Z0/ltswHwYDVR0j BBgwFoAUl32J439vbDgVsrxzHmlKuHjybzAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZTRhY2UxMS05MTM5LTQ0ODUtYWJhOS0wNGJlZGRjNWJjMjYvMC85NzdEODlFMzdG NkY2QzM4MTVCMkJDNzMxRTY5NEFCODc4RjI2RjMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTc3RDg5RTM3RjZGNkMzODE1QjJCQzczMUU2OTRBQjg3OEYy NkYzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmU0YWNlMTEtOTEzOS00NDg1LWFi YTktMDRiZWRkYzViYzI2LzAvOTc3RDg5RTM3RjZGNkMzODE1QjJCQzczMUU2OTRB Qjg3OEYyNkYzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFz//03eFBI5P7RsBi+RWF79wg4Ip1AKQiaR V//6z9BLoq4YM8WNwrqKl8iRmBg3DlNVvsVTcxo30LSnZdCIafA+p/N1yxHbXG9A gvkhJLs2qSNUZRX4LzvDzdSQWDW64+zKIiypgmOSSIZanvKRA9t1i8rCekFJuwie lheeVE9FV4XA4RPTsCg+20995FbimRduXOwLmkGTNWGe/NqhkGLO4MlDsbtm87+b 0qXUBEbbIy7v1lRplb1dMGOgo6sShByigcqUvuF1D7kSwMHHBAOXxhd9KtMCaYNW MnwcpteFuKurDES8N5X/Av1yrL9F6hUY0B2oQiVsVlz7GQfcRwg= -----END CERTIFICATE-----Generated at Fri Mar 20 12:41:31 2026 by rpki-client