$ rpki-client -vvf repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft File: 2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft (raw, json) Hash identifier: ws414Aw1OdFPhT3rKkN2KXEtbKY2DMfTLkCSPRKRkVU= Subject key identifier: 81:40:DE:17:22:41:68:88:4E:A8:6C:D1:7D:09:72:C2:4F:19:A8:71 Authority key identifier: 29:76:AD:C7:44:8B:F0:CA:9B:57:DC:D7:88:49:A1:E0:F9:5F:2B:45 Certificate issuer: /CN=2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45 Certificate serial: 7F3EA378CBF120D01C0880F431D0D75C791E1EE1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft Manifest number: 0124 Signing time: Sun 19 Apr 2026 23:31:03 +0000 Manifest this update: Sun 19 Apr 2026 23:26:03 +0000 Manifest next update: Thu 23 Apr 2026 05:39:03 +0000 Files and hashes: 1: 3136302e32352e3137382e302f32342d3234203d3e20313533303735.roa (hash: iPqRbkelW4W9hPKQlPKh7dVapT99d9ruqUsqOdahl18=) 2: 3136302e32352e3137382e302f32332d3234203d3e20313533303735.roa (hash: FYy5UtFCXZKGCZxosr1oqFzrTkMP7sB8ytiR2n56UZs=) 3: 2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.crl (hash: 0tO8LTCODgoVUlzt0qGzYHQ0F0BjIuC4ZWgSvGfXVUk=) 4: 3136302e32352e3137392e302f32342d3234203d3e20313533303735.roa (hash: duCuSDamX6IXj6dNr3R2KvTWuX1Y0Ld9dMd4eFNkJZc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.crl rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 05:39:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:3e:a3:78:cb:f1:20:d0:1c:08:80:f4:31:d0:d7:5c:79:1e:1e:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45 Validity Not Before: Apr 19 23:26:03 2026 GMT Not After : Apr 23 05:39:03 2026 GMT Subject: CN=8140DE17224168884EA86CD17D0972C24F19A871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2c:6f:b6:e8:29:8b:c7:b3:a9:9b:22:e7:72: 82:eb:a1:24:35:e2:cf:1f:c5:ea:62:3a:f1:ef:30: d2:d2:96:4d:cc:16:16:dc:20:7f:17:11:00:42:47: f9:5c:20:9c:63:db:e6:a3:de:c6:03:a5:4f:e2:27: 06:91:00:89:de:3d:51:86:39:0e:f4:41:ec:4b:d4: ea:cd:e8:c0:7f:bf:b7:21:05:5d:b0:6b:b1:c3:74: e4:c5:57:7b:cd:89:30:fa:55:be:aa:ae:8e:7a:5e: 4a:fd:c5:9f:6e:94:e0:c3:47:bb:38:d0:5b:05:bb: 9c:39:18:10:9b:c5:10:3e:44:b9:39:5b:fc:ed:9d: b8:89:67:80:eb:1c:8a:c4:dc:52:df:66:87:41:a1: f3:b7:be:0d:a7:8a:87:f3:24:26:13:c7:28:06:83: c3:a5:5d:62:7a:73:aa:1f:dd:2d:ba:2a:cb:cb:1f: fb:2f:bb:5f:6e:5b:90:fb:75:8b:15:9b:71:5a:5c: 36:91:97:50:ba:81:a2:bf:7b:12:32:ac:22:46:79: 3f:cc:6f:54:16:61:18:5a:1f:96:9c:13:fe:e6:e4: b4:dd:51:5f:df:86:79:e0:66:83:ab:fc:a2:71:6c: e6:16:a9:16:2d:74:ad:ff:8a:32:20:e6:7d:0b:83: fe:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:40:DE:17:22:41:68:88:4E:A8:6C:D1:7D:09:72:C2:4F:19:A8:71 X509v3 Authority Key Identifier: keyid:29:76:AD:C7:44:8B:F0:CA:9B:57:DC:D7:88:49:A1:E0:F9:5F:2B:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:33:cf:78:ed:2c:c8:2c:62:f2:cb:eb:f4:ca:05:f1:85:27: a0:da:3c:76:62:98:6b:23:f4:80:35:1d:7f:5c:61:a8:86:50: d6:99:f4:49:ba:9b:24:a6:91:a8:09:1b:b8:26:cb:4e:3b:f9: 25:f7:d8:ad:1b:ce:45:04:a3:24:2f:d3:fb:7b:61:63:da:c2: 07:d8:c4:f9:cb:e1:c3:17:e1:0f:0d:09:fb:2e:46:b7:78:59: f6:71:1a:82:19:89:78:46:af:66:ff:93:a1:ed:b2:47:1a:1a: a4:6c:7a:90:80:31:35:bd:ac:2d:c6:0a:c5:09:8e:7f:29:64: 69:d2:27:de:da:8d:38:de:b8:f8:78:75:71:6b:81:9f:d1:e5: 43:27:fb:03:ea:14:c7:40:51:1e:0a:52:eb:e2:8c:9b:02:f4: 0a:10:ce:19:c0:22:af:dd:42:59:4e:f2:31:39:40:c0:6d:30: c1:bc:fe:10:00:02:cd:17:18:18:8d:92:ae:aa:61:57:0e:d9: fe:f7:80:5b:45:8f:a6:94:d6:eb:94:2e:af:0c:3e:a1:cb:e3: 08:4f:1c:7a:59:b3:cd:6d:4a:76:98:d4:0a:48:6a:4c:01:f5: 99:28:68:c7:62:b8:07:8b:25:09:cc:90:6b:84:59:d2:0c:a1: af:83:7b:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfz6jeMvxINAcCID0MdDXXHkeHuEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk3NkFEQzc0NDhCRjBDQTlCNTdEQ0Q3ODg0OUExRTBG OTVGMkI0NTAeFw0yNjA0MTkyMzI2MDNaFw0yNjA0MjMwNTM5MDNaMDMxMTAvBgNV BAMTKDgxNDBERTE3MjI0MTY4ODg0RUE4NkNEMTdEMDk3MkMyNEYxOUE4NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeLG+26CmLx7OpmyLncoLroSQ1 4s8fxepiOvHvMNLSlk3MFhbcIH8XEQBCR/lcIJxj2+aj3sYDpU/iJwaRAInePVGG OQ70QexL1OrN6MB/v7chBV2wa7HDdOTFV3vNiTD6Vb6qro56Xkr9xZ9ulODDR7s4 0FsFu5w5GBCbxRA+RLk5W/ztnbiJZ4DrHIrE3FLfZodBofO3vg2niofzJCYTxygG g8OlXWJ6c6of3S26KsvLH/svu19uW5D7dYsVm3FaXDaRl1C6gaK/exIyrCJGeT/M b1QWYRhaH5acE/7m5LTdUV/fhnngZoOr/KJxbOYWqRYtdK3/ijIg5n0Lg/5FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgUDeFyJBaIhOqGzRfQlywk8ZqHEwHwYDVR0j BBgwFoAUKXatx0SL8MqbV9zXiEmh4PlfK0UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 N2M0MzJlMC1kYzNlLTQyY2MtYmNjMC02MjliMTYyMDZjOWEvMC8yOTc2QURDNzQ0 OEJGMENBOUI1N0RDRDc4ODQ5QTFFMEY5NUYyQjQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjk3NkFEQzc0NDhCRjBDQTlCNTdEQ0Q3ODg0OUExRTBGOTVG MkI0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODdjNDMyZTAtZGMzZS00MmNjLWJj YzAtNjI5YjE2MjA2YzlhLzAvMjk3NkFEQzc0NDhCRjBDQTlCNTdEQ0Q3ODg0OUEx RTBGOTVGMkI0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACszz3jtLMgsYvLL6/TKBfGFJ6DaPHZimGsj 9IA1HX9cYaiGUNaZ9Em6mySmkagJG7gmy047+SX32K0bzkUEoyQv0/t7YWPawgfY xPnL4cMX4Q8NCfsuRrd4WfZxGoIZiXhGr2b/k6HtskcaGqRsepCAMTW9rC3GCsUJ jn8pZGnSJ97ajTjeuPh4dXFrgZ/R5UMn+wPqFMdAUR4KUuvijJsC9AoQzhnAIq/d QllO8jE5QMBtMMG8/hAAAs0XGBiNkq6qYVcO2f73gFtFj6aU1uuULq8MPqHL4whP HHpZs81tSnaY1ApIakwB9ZkoaMdiuAeLJQnMkGuEWdIMoa+De0Y= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:55 2026 by rpki-client