$ rpki-client -vvf rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.mft File: 2977BC17912D681A78EBCC27EDFF03B1E1A3413D.mft (raw, json) Hash identifier: 3DxZntHx5HmotAHVmwP4RL23fh72BYhqEYCeJJtZHb8= Subject key identifier: 09:48:76:56:9D:98:BB:19:A2:23:79:9A:66:E9:9A:29:39:DF:13:0B Authority key identifier: 29:77:BC:17:91:2D:68:1A:78:EB:CC:27:ED:FF:03:B1:E1:A3:41:3D Certificate issuer: /CN=2977BC17912D681A78EBCC27EDFF03B1E1A3413D Certificate serial: 5E395E5EA09D984255A3B5A45C60D24D00F147A5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.mft Manifest number: 93 Signing time: Wed 19 Aug 2026 12:59:29 +0000 Manifest this update: Wed 19 Aug 2026 12:54:29 +0000 Manifest next update: Thu 20 Aug 2026 16:22:29 +0000 Files and hashes: 1: 2977BC17912D681A78EBCC27EDFF03B1E1A3413D.crl (hash: wNM4DjBwBl+x59cPxyZS3XmbP6CTgUPON4unNTSLCMU=) 2: 3130332e3133372e3138382e302f32342d3234203d3e2039333431.roa (hash: FFnOk4HB7OKneNdDsrwIq074TXsPeVLMjjjZCukxhr0=) 3: 3130332e3133372e3138382e302f32332d3233203d3e2039333431.roa (hash: 4eLS0uFtvc6ZLIswt7CJrqR+R0zoO9oGHIp+2JRkWks=) 4: 3130332e3133372e3138392e302f32342d3234203d3e2039333431.roa (hash: lVpCKcFYUqX/2KbNeN3w6yXmYxgP/zijbXI7fWNZ5jk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.crl rsync://rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Aug 2026 16:22:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:39:5e:5e:a0:9d:98:42:55:a3:b5:a4:5c:60:d2:4d:00:f1:47:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2977BC17912D681A78EBCC27EDFF03B1E1A3413D Validity Not Before: Aug 19 12:54:29 2026 GMT Not After : Aug 20 16:22:29 2026 GMT Subject: CN=094876569D98BB19A223799A66E99A2939DF130B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a6:ba:dd:75:e2:4b:f7:de:cd:e3:8e:c2:61: 68:c9:26:ee:ec:6f:cd:d8:da:66:46:89:0d:76:d6: 21:54:07:19:64:23:d5:85:32:fc:ad:47:9d:56:c0: fa:42:0b:69:43:df:a3:0c:2c:5e:df:17:4e:ee:54: 1b:83:dd:ad:3f:85:1a:f8:23:34:02:67:be:c3:6b: 0d:a4:a9:36:2d:c9:74:10:63:0e:af:82:3e:1a:3c: c5:7c:b6:65:d1:35:6e:c1:34:4f:92:ae:63:48:9c: 4d:d3:f2:80:de:08:65:cc:f3:e4:6a:9c:6d:14:9c: be:c3:d1:51:5a:ae:6e:e0:ee:46:e5:ab:02:64:69: bb:c6:a6:76:bc:2d:2f:49:44:51:f3:25:f8:c9:dc: 22:05:88:cf:2b:4e:fb:47:1d:cb:92:6e:7a:63:e1: 5e:27:1a:ad:a6:cc:4d:68:e5:d6:08:73:cd:33:68: f3:65:e4:3d:d3:9d:b1:0f:b6:86:44:f9:48:cf:cd: 03:b5:99:0f:6a:5a:fe:ec:4d:ea:63:54:18:b9:6f: 1b:03:05:78:87:b2:0b:6a:34:b3:9c:25:f9:cb:a6: fe:57:a1:8c:08:e8:48:1b:3d:e8:b3:34:5c:61:67: 3b:3c:9d:ad:2a:c9:92:65:9e:00:e5:59:1a:bc:97: 51:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:48:76:56:9D:98:BB:19:A2:23:79:9A:66:E9:9A:29:39:DF:13:0B X509v3 Authority Key Identifier: keyid:29:77:BC:17:91:2D:68:1A:78:EB:CC:27:ED:FF:03:B1:E1:A3:41:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:18:a1:b3:4d:2d:81:88:02:ca:0a:4f:6a:f8:eb:66:fa:aa: 41:b6:da:28:f8:fe:ef:27:5a:79:5c:98:ba:24:ce:85:65:08: 36:d9:10:63:ff:62:a4:ce:3d:41:f8:97:4c:e7:d5:38:f1:4c: d2:06:72:32:5f:82:7a:9c:52:33:3a:8a:b1:0f:fd:27:de:8d: 19:a0:9c:05:d6:1e:b2:a3:4a:31:26:bf:c6:c0:d6:a4:2d:d5: e3:9d:23:0c:4a:23:9f:5e:b9:41:66:a0:26:e3:23:78:21:ec: 49:05:d6:c2:c1:55:4e:8a:40:f5:11:46:b8:7d:3e:1b:d0:0b: 20:b6:74:06:70:df:f3:e5:cd:c0:82:16:f9:b0:ac:55:08:02: da:48:f6:e9:7d:dd:4b:75:0a:be:17:8e:bf:03:2a:ff:f0:eb: 96:c8:cd:f3:be:e5:4a:c7:4a:7d:23:1b:94:01:81:83:ad:38: a2:22:9e:30:0c:fb:0e:ff:b3:e8:23:41:ce:36:27:10:d5:27: 53:69:e3:cb:c2:cc:7c:d1:40:76:1f:64:d5:f4:1d:a5:56:3b: 76:88:66:fd:cb:2f:79:a2:fe:ce:49:ce:44:7c:09:8e:32:d1: 71:a0:49:be:82:bc:0d:36:0a:0d:9e:64:0e:62:69:68:e7:dc: f3:bd:11:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXjleXqCdmEJVo7WkXGDSTQDxR6UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk3N0JDMTc5MTJENjgxQTc4RUJDQzI3RURGRjAzQjFF MUEzNDEzRDAeFw0yNjA4MTkxMjU0MjlaFw0yNjA4MjAxNjIyMjlaMDMxMTAvBgNV BAMTKDA5NDg3NjU2OUQ5OEJCMTlBMjIzNzk5QTY2RTk5QTI5MzlERjEzMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKprrddeJL997N447CYWjJJu7s b83Y2mZGiQ121iFUBxlkI9WFMvytR51WwPpCC2lD36MMLF7fF07uVBuD3a0/hRr4 IzQCZ77Daw2kqTYtyXQQYw6vgj4aPMV8tmXRNW7BNE+SrmNInE3T8oDeCGXM8+Rq nG0UnL7D0VFarm7g7kblqwJkabvGpna8LS9JRFHzJfjJ3CIFiM8rTvtHHcuSbnpj 4V4nGq2mzE1o5dYIc80zaPNl5D3TnbEPtoZE+UjPzQO1mQ9qWv7sTepjVBi5bxsD BXiHsgtqNLOcJfnLpv5XoYwI6EgbPeizNFxhZzs8na0qyZJlngDlWRq8l1FNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCUh2Vp2YuxmiI3maZumaKTnfEwswHwYDVR0j BBgwFoAUKXe8F5EtaBp468wn7f8DseGjQT0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTZjMTI3MDMtZjFmNy00M2M5LWEyMjAtOTJlZGQ4NmVmZTVlLzAvMjk3N0JDMTc5 MTJENjgxQTc4RUJDQzI3RURGRjAzQjFFMUEzNDEzRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yOTc3QkMxNzkxMkQ2ODFBNzhFQkNDMjdFREZGMDNCMUUxQTM0 MTNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTZjMTI3MDMtZjFmNy00M2M5LWEy MjAtOTJlZGQ4NmVmZTVlLzAvMjk3N0JDMTc5MTJENjgxQTc4RUJDQzI3RURGRjAz QjFFMUEzNDEzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEAYobNNLYGIAsoKT2r462b6qkG22ij4/u8n WnlcmLokzoVlCDbZEGP/YqTOPUH4l0zn1TjxTNIGcjJfgnqcUjM6irEP/SfejRmg nAXWHrKjSjEmv8bA1qQt1eOdIwxKI59euUFmoCbjI3gh7EkF1sLBVU6KQPURRrh9 PhvQCyC2dAZw3/PlzcCCFvmwrFUIAtpI9ul93Ut1Cr4Xjr8DKv/w65bIzfO+5UrH Sn0jG5QBgYOtOKIinjAM+w7/s+gjQc42JxDVJ1Np48vCzHzRQHYfZNX0HaVWO3aI Zv3LL3mi/s5JzkR8CY4y0XGgSb6CvA02Cg2eZA5iaWjn3PO9EaU= -----END CERTIFICATE-----Generated at Thu Aug 20 07:06:13 2026 by rpki-client