$ rpki-client -vvf rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.mft File: 2977BC17912D681A78EBCC27EDFF03B1E1A3413D.mft (raw, json) Hash identifier: 4qx2V37ZRUMLDKwJnuPOor4ayhe+dnRAZRmQiWSctrw= Subject key identifier: 8D:DD:85:FF:1A:7D:63:65:FD:33:F1:2F:2D:EC:E8:92:FA:F2:DE:7D Authority key identifier: 29:77:BC:17:91:2D:68:1A:78:EB:CC:27:ED:FF:03:B1:E1:A3:41:3D Certificate issuer: /CN=2977BC17912D681A78EBCC27EDFF03B1E1A3413D Certificate serial: 64F16367635445D12D818A41998FD3A9B503082E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.mft Manifest number: 42 Signing time: Fri 19 Jun 2026 19:34:34 +0000 Manifest this update: Fri 19 Jun 2026 19:29:34 +0000 Manifest next update: Sat 20 Jun 2026 20:33:34 +0000 Files and hashes: 1: 3130332e3133372e3138382e302f32342d3234203d3e2039333431.roa (hash: FFnOk4HB7OKneNdDsrwIq074TXsPeVLMjjjZCukxhr0=) 2: 2977BC17912D681A78EBCC27EDFF03B1E1A3413D.crl (hash: p+oKHbqIiaIpfLuV+/VHsgYwjE4AemDjgYlMx+k7Uh0=) 3: 3130332e3133372e3138392e302f32342d3234203d3e2039333431.roa (hash: lVpCKcFYUqX/2KbNeN3w6yXmYxgP/zijbXI7fWNZ5jk=) 4: 3130332e3133372e3138382e302f32332d3233203d3e2039333431.roa (hash: 4eLS0uFtvc6ZLIswt7CJrqR+R0zoO9oGHIp+2JRkWks=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.crl rsync://rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 20:33:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:f1:63:67:63:54:45:d1:2d:81:8a:41:99:8f:d3:a9:b5:03:08:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2977BC17912D681A78EBCC27EDFF03B1E1A3413D Validity Not Before: Jun 19 19:29:34 2026 GMT Not After : Jun 20 20:33:34 2026 GMT Subject: CN=8DDD85FF1A7D6365FD33F12F2DECE892FAF2DE7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a0:8c:09:f6:cb:5c:f8:17:e9:ad:d8:66:b3: 21:34:d0:dc:4e:e4:36:cc:25:c7:ed:4d:ed:3f:1c: be:72:0c:83:48:bd:4f:34:95:2f:6a:0e:6e:37:d7: 67:45:bc:a2:09:1e:bc:c8:58:75:9a:35:13:00:74: 4a:87:70:1a:b1:1e:9f:7f:eb:d6:11:70:d8:bb:95: 4c:92:c0:15:98:3a:b6:7a:2f:dd:a2:b2:14:1c:68: 29:e3:e8:b6:25:d9:7d:0c:87:62:09:f2:c0:56:46: 14:e2:c1:54:51:9c:74:37:ee:e9:e5:a4:9e:f0:6a: bb:5c:32:4b:aa:84:d1:4a:9a:79:f0:52:cf:32:1c: 01:75:83:d6:00:35:9e:cd:af:85:f9:c1:2f:04:91: af:d2:1e:c0:09:b5:93:b6:73:98:f6:78:9f:49:4a: 26:d9:66:9c:ab:08:fa:81:b6:16:a4:32:77:09:84: 69:93:64:aa:fe:10:60:2b:f7:84:0b:2f:00:93:2b: 29:9f:31:39:d2:45:6c:94:4e:21:06:37:1a:eb:22: 08:c1:c2:78:6f:f0:a3:62:16:3c:50:0b:65:95:b9: 7f:d4:5f:aa:43:0e:39:3d:56:3d:1c:e8:3b:b7:3f: 60:17:b5:5a:96:e0:de:fa:4f:46:db:96:14:f0:b6: 44:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:DD:85:FF:1A:7D:63:65:FD:33:F1:2F:2D:EC:E8:92:FA:F2:DE:7D X509v3 Authority Key Identifier: keyid:29:77:BC:17:91:2D:68:1A:78:EB:CC:27:ED:FF:03:B1:E1:A3:41:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:8d:a3:c2:12:05:a0:cb:eb:71:4a:b5:42:d2:c5:50:46:4b: a1:43:03:14:a3:c8:42:b9:bc:29:c7:92:28:c8:f9:0d:dd:b8: e5:f7:98:95:0c:5f:7b:b5:1e:f7:c2:db:be:0c:66:4b:a0:c6: 49:b3:ac:9e:6c:92:c8:af:d8:71:f4:eb:71:4d:91:7c:d2:69: 64:db:99:91:d2:54:33:35:e4:4a:bf:f9:4d:45:e7:4b:20:85: 26:49:41:82:d4:9f:3a:7e:f4:96:ac:ef:e6:8e:84:96:73:32: 05:c1:a9:b0:1a:06:56:8b:f3:9e:5a:5a:cc:6a:4a:e4:e8:c0: 35:f2:dc:aa:f0:9d:f1:c4:71:d0:09:95:79:35:e8:ea:91:16: c7:97:3b:67:4b:31:c3:10:05:a1:db:8b:75:79:7e:76:bd:37: ee:5c:f8:31:57:1e:aa:03:13:69:f7:68:4d:46:60:a9:b8:04: 62:ed:e8:c2:58:9d:1e:ea:2c:aa:92:52:ff:e8:67:27:72:c4: 37:bb:90:bd:14:ad:cf:c0:62:88:ca:16:04:1b:27:9d:49:1c: 34:7c:4f:c0:a9:11:60:94:97:b7:9d:6a:0f:8a:58:20:f5:ce: 3a:02:0b:b2:29:4b:64:b9:d2:86:bc:dd:87:72:74:f7:e3:6e: 7f:2b:a9:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZPFjZ2NURdEtgYpBmY/TqbUDCC4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk3N0JDMTc5MTJENjgxQTc4RUJDQzI3RURGRjAzQjFF MUEzNDEzRDAeFw0yNjA2MTkxOTI5MzRaFw0yNjA2MjAyMDMzMzRaMDMxMTAvBgNV BAMTKDhEREQ4NUZGMUE3RDYzNjVGRDMzRjEyRjJERUNFODkyRkFGMkRFN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAoIwJ9stc+BfprdhmsyE00NxO 5DbMJcftTe0/HL5yDINIvU80lS9qDm4312dFvKIJHrzIWHWaNRMAdEqHcBqxHp9/ 69YRcNi7lUySwBWYOrZ6L92ishQcaCnj6LYl2X0Mh2IJ8sBWRhTiwVRRnHQ37unl pJ7wartcMkuqhNFKmnnwUs8yHAF1g9YANZ7Nr4X5wS8Eka/SHsAJtZO2c5j2eJ9J SibZZpyrCPqBthakMncJhGmTZKr+EGAr94QLLwCTKymfMTnSRWyUTiEGNxrrIgjB wnhv8KNiFjxQC2WVuX/UX6pDDjk9Vj0c6Du3P2AXtVqW4N76T0bblhTwtkRxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjd2F/xp9Y2X9M/EvLezokvry3n0wHwYDVR0j BBgwFoAUKXe8F5EtaBp468wn7f8DseGjQT0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTZjMTI3MDMtZjFmNy00M2M5LWEyMjAtOTJlZGQ4NmVmZTVlLzAvMjk3N0JDMTc5 MTJENjgxQTc4RUJDQzI3RURGRjAzQjFFMUEzNDEzRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yOTc3QkMxNzkxMkQ2ODFBNzhFQkNDMjdFREZGMDNCMUUxQTM0 MTNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTZjMTI3MDMtZjFmNy00M2M5LWEy MjAtOTJlZGQ4NmVmZTVlLzAvMjk3N0JDMTc5MTJENjgxQTc4RUJDQzI3RURGRjAz QjFFMUEzNDEzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJmNo8ISBaDL63FKtULSxVBGS6FDAxSjyEK5 vCnHkijI+Q3duOX3mJUMX3u1HvfC274MZkugxkmzrJ5sksiv2HH063FNkXzSaWTb mZHSVDM15Eq/+U1F50sghSZJQYLUnzp+9Jas7+aOhJZzMgXBqbAaBlaL855aWsxq SuTowDXy3KrwnfHEcdAJlXk16OqRFseXO2dLMcMQBaHbi3V5fna9N+5c+DFXHqoD E2n3aE1GYKm4BGLt6MJYnR7qLKqSUv/oZydyxDe7kL0Urc/AYojKFgQbJ51JHDR8 T8CpEWCUl7edag+KWCD1zjoCC7IpS2S50oa83YdydPfjbn8rqe0= -----END CERTIFICATE-----Generated at Sat Jun 20 11:43:02 2026 by rpki-client