$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.mft File: 2977BC17912D681A78EBCC27EDFF03B1E1A3413D.mft (raw, json) Hash identifier: p6A1epugM4+J/XuVSfpwOLXs4iVCKHSMui2k9y+BXro= Subject key identifier: 07:92:F2:6F:4A:5B:63:53:4C:06:94:5B:AB:E7:A8:FA:EB:4A:BC:30 Authority key identifier: 29:77:BC:17:91:2D:68:1A:78:EB:CC:27:ED:FF:03:B1:E1:A3:41:3D Certificate issuer: /CN=2977BC17912D681A78EBCC27EDFF03B1E1A3413D Certificate serial: 70654B2C6F81B0EA4B5A49166C5A1F4D1FFD2588 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.mft Manifest number: DE Signing time: Wed 14 Oct 2026 17:16:32 +0000 Manifest this update: Wed 14 Oct 2026 17:11:32 +0000 Manifest next update: Thu 15 Oct 2026 19:24:32 +0000 Files and hashes: 1: 3130332e3133372e3138382e302f32332d3233203d3e2039333431.roa (hash: 4eLS0uFtvc6ZLIswt7CJrqR+R0zoO9oGHIp+2JRkWks=) 2: 2977BC17912D681A78EBCC27EDFF03B1E1A3413D.crl (hash: Xj1s3h2eVN93XVD3AyhYz1zw2ru7IA+brIUUE8JHbQQ=) 3: 3130332e3133372e3138382e302f32342d3234203d3e2039333431.roa (hash: FFnOk4HB7OKneNdDsrwIq074TXsPeVLMjjjZCukxhr0=) 4: 3130332e3133372e3138392e302f32342d3234203d3e2039333431.roa (hash: lVpCKcFYUqX/2KbNeN3w6yXmYxgP/zijbXI7fWNZ5jk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.crl rsync://rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 16:06:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:65:4b:2c:6f:81:b0:ea:4b:5a:49:16:6c:5a:1f:4d:1f:fd:25:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2977BC17912D681A78EBCC27EDFF03B1E1A3413D Validity Not Before: Oct 14 17:11:32 2026 GMT Not After : Oct 15 19:24:32 2026 GMT Subject: CN=0792F26F4A5B63534C06945BABE7A8FAEB4ABC30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8d:f9:a9:5a:48:a9:2c:29:4b:e0:4a:f1:5f: a5:f1:84:10:dc:f9:ed:08:36:6a:bb:4f:18:5e:46: eb:12:fe:32:15:be:47:ec:cc:05:03:2f:1a:bd:bc: 32:8f:ae:ef:28:e1:1d:b5:b0:2e:ba:44:9b:a3:73: d8:86:44:7a:8d:6b:39:5d:e3:3c:cc:d5:ac:e8:1d: 36:75:83:f4:75:b7:aa:0a:f2:e2:14:20:ea:df:9a: b2:50:f2:98:a9:03:06:be:42:e1:9e:ed:e3:0a:70: b1:fd:d4:54:78:ed:83:b1:96:c4:6a:cb:88:ee:4a: d3:85:f9:ee:64:af:bd:20:e2:f6:38:48:50:d3:d2: 2d:bc:8c:5e:cc:2f:8c:45:53:9e:13:6a:1e:f0:2b: 3b:10:64:b1:2b:df:1c:4e:04:d1:7a:61:0e:f6:8e: 6a:0e:18:43:61:97:37:07:75:cc:cf:e1:76:86:86: f4:6b:9c:d9:7f:ab:54:54:46:40:55:e6:0e:20:b6: e7:b9:ae:06:1d:a3:19:14:2a:e5:00:f2:c9:64:c2: 39:86:82:67:d0:fd:bf:d6:d2:70:40:54:a9:9d:72: ca:ab:d2:9b:9d:62:94:9e:19:3f:b4:c0:05:3d:97: 6d:c5:31:fb:06:b7:f7:bc:89:52:5a:2c:9b:d2:46: 1a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:92:F2:6F:4A:5B:63:53:4C:06:94:5B:AB:E7:A8:FA:EB:4A:BC:30 X509v3 Authority Key Identifier: keyid:29:77:BC:17:91:2D:68:1A:78:EB:CC:27:ED:FF:03:B1:E1:A3:41:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:d6:2e:4a:a3:65:34:6b:74:04:f7:38:6d:a6:ff:1a:38:e2: 82:7f:53:0c:12:e7:44:2d:14:97:ed:40:8a:c1:49:0d:bb:66: 76:00:78:07:c9:ae:e2:e2:70:e9:87:a3:26:ef:7b:d4:cd:79: e9:2f:b2:cc:2a:99:95:18:84:13:9d:7a:6a:ec:80:7d:6c:bc: 0b:48:25:65:74:bf:ad:95:8c:cf:9f:33:2f:ad:8f:80:19:74: ca:89:6f:be:94:3a:6e:fe:9f:8c:3e:87:d6:1c:59:85:3c:40: 9a:37:67:0b:00:b8:54:c7:43:c6:39:35:f4:ca:7c:7a:17:18: 7d:7c:fc:f9:9a:30:6d:8f:55:99:06:4c:4c:29:6d:15:e2:a8: 6f:a9:2d:63:06:8e:09:36:d1:32:4f:a3:54:d3:d9:64:04:a0: 5a:92:65:6c:c9:65:51:e6:3b:00:77:2f:25:39:7e:de:cd:7b: 26:e6:46:d5:94:b9:48:1a:5e:a7:bc:47:9c:78:58:8b:b2:ab: e0:a0:96:ea:9d:ff:07:b8:94:7c:3c:14:31:da:2c:9a:91:a1: 96:1d:a0:84:16:6c:b7:7c:ec:72:0e:6a:22:c2:5e:28:ad:cf: 21:f5:f9:06:5e:9b:05:d9:fd:c5:b3:52:96:d2:15:16:69:2c: 46:8b:18:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcGVLLG+BsOpLWkkWbFofTR/9JYgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk3N0JDMTc5MTJENjgxQTc4RUJDQzI3RURGRjAzQjFF MUEzNDEzRDAeFw0yNjEwMTQxNzExMzJaFw0yNjEwMTUxOTI0MzJaMDMxMTAvBgNV BAMTKDA3OTJGMjZGNEE1QjYzNTM0QzA2OTQ1QkFCRTdBOEZBRUI0QUJDMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4jfmpWkipLClL4ErxX6XxhBDc +e0INmq7TxheRusS/jIVvkfszAUDLxq9vDKPru8o4R21sC66RJujc9iGRHqNazld 4zzM1azoHTZ1g/R1t6oK8uIUIOrfmrJQ8pipAwa+QuGe7eMKcLH91FR47YOxlsRq y4juStOF+e5kr70g4vY4SFDT0i28jF7ML4xFU54Tah7wKzsQZLEr3xxOBNF6YQ72 jmoOGENhlzcHdczP4XaGhvRrnNl/q1RURkBV5g4gtue5rgYdoxkUKuUA8slkwjmG gmfQ/b/W0nBAVKmdcsqr0pudYpSeGT+0wAU9l23FMfsGt/e8iVJaLJvSRhrTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB5Lyb0pbY1NMBpRbq+eo+utKvDAwHwYDVR0j BBgwFoAUKXe8F5EtaBp468wn7f8DseGjQT0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTZjMTI3MDMtZjFmNy00M2M5LWEyMjAtOTJlZGQ4NmVmZTVlLzAvMjk3N0JDMTc5 MTJENjgxQTc4RUJDQzI3RURGRjAzQjFFMUEzNDEzRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yOTc3QkMxNzkxMkQ2ODFBNzhFQkNDMjdFREZGMDNCMUUxQTM0 MTNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTZjMTI3MDMtZjFmNy00M2M5LWEy MjAtOTJlZGQ4NmVmZTVlLzAvMjk3N0JDMTc5MTJENjgxQTc4RUJDQzI3RURGRjAz QjFFMUEzNDEzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEHWLkqjZTRrdAT3OG2m/xo44oJ/UwwS50Qt FJftQIrBSQ27ZnYAeAfJruLicOmHoybve9TNeekvsswqmZUYhBOdemrsgH1svAtI JWV0v62VjM+fMy+tj4AZdMqJb76UOm7+n4w+h9YcWYU8QJo3ZwsAuFTHQ8Y5NfTK fHoXGH18/PmaMG2PVZkGTEwpbRXiqG+pLWMGjgk20TJPo1TT2WQEoFqSZWzJZVHm OwB3LyU5ft7NeybmRtWUuUgaXqe8R5x4WIuyq+Cgluqd/we4lHw8FDHaLJqRoZYd oIQWbLd87HIOaiLCXiitzyH1+QZemwXZ/cWzUpbSFRZpLEaLGGg= -----END CERTIFICATE-----Generated at Thu Oct 15 05:13:56 2026 by rpki-client