$ rpki-client -vvf rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.mft File: 2977BC17912D681A78EBCC27EDFF03B1E1A3413D.mft (raw, json) Hash identifier: UoDd+/CtoBywG2UpbmhLeS4zlbWzFbMNOOmjv6BV3/k= Subject key identifier: C7:59:A0:9E:BC:DE:1D:AA:A0:33:E5:45:A8:E6:AC:8F:64:BC:BB:82 Authority key identifier: 29:77:BC:17:91:2D:68:1A:78:EB:CC:27:ED:FF:03:B1:E1:A3:41:3D Certificate issuer: /CN=2977BC17912D681A78EBCC27EDFF03B1E1A3413D Certificate serial: 472AE71330379270145E20CEB4A3933F8A676387 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.mft Manifest number: 05 Signing time: Tue 05 May 2026 09:53:54 +0000 Manifest this update: Tue 05 May 2026 09:48:54 +0000 Manifest next update: Wed 06 May 2026 10:02:54 +0000 Files and hashes: 1: 3130332e3133372e3138382e302f32342d3234203d3e2039333431.roa (hash: FFnOk4HB7OKneNdDsrwIq074TXsPeVLMjjjZCukxhr0=) 2: 2977BC17912D681A78EBCC27EDFF03B1E1A3413D.crl (hash: LniORflFzYr8lXX52OVPBxxGXBotKkLW90Pb4+UpLcI=) 3: 3130332e3133372e3138392e302f32342d3234203d3e2039333431.roa (hash: lVpCKcFYUqX/2KbNeN3w6yXmYxgP/zijbXI7fWNZ5jk=) 4: 3130332e3133372e3138382e302f32332d3233203d3e2039333431.roa (hash: 4eLS0uFtvc6ZLIswt7CJrqR+R0zoO9oGHIp+2JRkWks=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.crl rsync://rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 10:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:2a:e7:13:30:37:92:70:14:5e:20:ce:b4:a3:93:3f:8a:67:63:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2977BC17912D681A78EBCC27EDFF03B1E1A3413D Validity Not Before: May 5 09:48:54 2026 GMT Not After : May 6 10:02:54 2026 GMT Subject: CN=C759A09EBCDE1DAAA033E545A8E6AC8F64BCBB82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:01:06:d1:b5:0e:aa:a2:72:e9:21:b8:00:f9: 01:63:1b:a6:f3:81:e3:0b:af:45:19:a5:4c:ea:b2: ab:23:e1:2f:6c:2f:e5:5d:27:b6:f8:19:ec:40:2d: a5:85:65:0e:c5:be:6e:4e:3f:49:1b:a9:ea:f2:c6: 19:8c:cf:23:80:79:74:ae:f2:01:33:2b:68:f0:c9: 09:0e:66:09:2e:26:7e:d5:93:4f:55:ea:6e:94:f1: a1:12:a5:19:59:f4:9b:6e:c6:c7:cc:e3:2a:f8:f9: ea:99:31:e3:38:3f:d6:f6:45:09:9c:84:64:26:87: 7e:79:9b:2f:39:e2:e1:a0:49:b1:bb:4c:e0:7f:74: 83:ad:85:8b:a2:8b:57:2b:3e:9a:3a:94:29:87:05: a2:61:a9:61:a0:f7:cc:f5:91:5b:50:ff:f9:64:0a: 36:36:e3:50:28:1b:4e:d5:1f:08:54:39:b4:76:dc: 89:d8:b8:dd:be:5a:ae:9e:00:42:d9:7f:84:ab:25: bd:6a:f3:69:c1:d6:6e:3c:91:89:ff:1c:74:b2:1f: 98:2f:41:0b:7b:3b:0e:f3:6f:be:5d:f7:b8:bf:00: bc:93:e5:ae:17:27:74:96:dd:03:c8:96:1d:10:98: fd:a9:2b:50:c8:ef:86:1b:39:1c:70:5a:9e:04:e0: a4:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:59:A0:9E:BC:DE:1D:AA:A0:33:E5:45:A8:E6:AC:8F:64:BC:BB:82 X509v3 Authority Key Identifier: keyid:29:77:BC:17:91:2D:68:1A:78:EB:CC:27:ED:FF:03:B1:E1:A3:41:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:e0:80:a0:91:fb:f9:35:ea:8b:f9:29:f2:9b:93:f5:35:c9: cc:0c:30:ba:8c:1a:8c:08:44:06:92:01:63:0a:d9:c6:dd:43: 83:5a:98:93:a0:40:f7:3f:a5:fa:5f:77:b6:e9:ec:d0:e7:0e: 15:00:dc:9a:21:db:0c:21:e0:e2:72:c4:4b:c1:06:8d:3c:68: 36:3e:10:af:d8:70:4a:75:8b:3f:5f:4e:29:0d:a2:43:f5:ff: 7b:81:39:d6:9b:fe:0e:48:73:b4:04:46:6e:55:ee:ac:ec:a3: dd:f7:06:2b:3d:3b:8a:be:62:8c:89:e3:fb:70:a5:81:c9:1c: 41:af:69:8f:91:b9:b1:bf:a1:a1:3a:6e:a0:8b:ec:bc:0d:23: 47:3f:c2:38:73:8f:90:d0:44:7f:9f:ca:0d:9c:fd:9b:07:65: a4:72:5a:b7:40:03:eb:7c:39:43:37:99:ec:26:68:0c:79:d5: 48:1b:2f:aa:a5:11:b5:57:69:62:51:14:2e:b6:15:e9:2c:19: 6e:34:78:59:eb:1f:12:13:0f:5a:de:03:51:eb:1f:c0:6e:0b: 30:b4:6e:eb:e9:e1:b0:eb:b5:6f:01:ae:be:c2:bd:74:ff:ae: 43:41:3e:29:03:78:03:0b:cf:e8:4d:e0:fc:84:74:f5:8f:bb: db:fe:c7:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURyrnEzA3knAUXiDOtKOTP4pnY4cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk3N0JDMTc5MTJENjgxQTc4RUJDQzI3RURGRjAzQjFF MUEzNDEzRDAeFw0yNjA1MDUwOTQ4NTRaFw0yNjA1MDYxMDAyNTRaMDMxMTAvBgNV BAMTKEM3NTlBMDlFQkNERTFEQUFBMDMzRTU0NUE4RTZBQzhGNjRCQ0JCODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPAQbRtQ6qonLpIbgA+QFjG6bz geMLr0UZpUzqsqsj4S9sL+VdJ7b4GexALaWFZQ7Fvm5OP0kbqeryxhmMzyOAeXSu 8gEzK2jwyQkOZgkuJn7Vk09V6m6U8aESpRlZ9JtuxsfM4yr4+eqZMeM4P9b2RQmc hGQmh355my854uGgSbG7TOB/dIOthYuii1crPpo6lCmHBaJhqWGg98z1kVtQ//lk CjY241AoG07VHwhUObR23InYuN2+Wq6eAELZf4SrJb1q82nB1m48kYn/HHSyH5gv QQt7Ow7zb75d97i/ALyT5a4XJ3SW3QPIlh0QmP2pK1DI74YbORxwWp4E4KT5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx1mgnrzeHaqgM+VFqOasj2S8u4IwHwYDVR0j BBgwFoAUKXe8F5EtaBp468wn7f8DseGjQT0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTZjMTI3MDMtZjFmNy00M2M5LWEyMjAtOTJlZGQ4NmVmZTVlLzAvMjk3N0JDMTc5 MTJENjgxQTc4RUJDQzI3RURGRjAzQjFFMUEzNDEzRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yOTc3QkMxNzkxMkQ2ODFBNzhFQkNDMjdFREZGMDNCMUUxQTM0 MTNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTZjMTI3MDMtZjFmNy00M2M5LWEy MjAtOTJlZGQ4NmVmZTVlLzAvMjk3N0JDMTc5MTJENjgxQTc4RUJDQzI3RURGRjAz QjFFMUEzNDEzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHHggKCR+/k16ov5KfKbk/U1ycwMMLqMGowI RAaSAWMK2cbdQ4NamJOgQPc/pfpfd7bp7NDnDhUA3Joh2wwh4OJyxEvBBo08aDY+ EK/YcEp1iz9fTikNokP1/3uBOdab/g5Ic7QERm5V7qzso933Bis9O4q+YoyJ4/tw pYHJHEGvaY+RubG/oaE6bqCL7LwNI0c/wjhzj5DQRH+fyg2c/ZsHZaRyWrdAA+t8 OUM3mewmaAx51UgbL6qlEbVXaWJRFC62FeksGW40eFnrHxITD1reA1HrH8BuCzC0 buvp4bDrtW8Brr7CvXT/rkNBPikDeAMLz+hN4PyEdPWPu9v+xzo= -----END CERTIFICATE-----Generated at Tue May 5 14:22:14 2026 by rpki-client