$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.mft File: 2977BC17912D681A78EBCC27EDFF03B1E1A3413D.mft (raw, json) Hash identifier: 7kiiAVd2op2QT4WXiJrMaOXKuAuWzgCROYDv4JASPF0= Subject key identifier: FB:BD:37:45:FE:9C:1F:14:39:53:05:38:B0:34:EE:CA:78:41:8E:BB Authority key identifier: 29:77:BC:17:91:2D:68:1A:78:EB:CC:27:ED:FF:03:B1:E1:A3:41:3D Certificate issuer: /CN=2977BC17912D681A78EBCC27EDFF03B1E1A3413D Certificate serial: 5463F1FFDD45704EA03D726F6B294234F1F60FB6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.mft Manifest number: D0 Signing time: Sun 04 Oct 2026 07:14:06 +0000 Manifest this update: Sun 04 Oct 2026 07:09:06 +0000 Manifest next update: Mon 05 Oct 2026 10:42:06 +0000 Files and hashes: 1: 3130332e3133372e3138382e302f32332d3233203d3e2039333431.roa (hash: 4eLS0uFtvc6ZLIswt7CJrqR+R0zoO9oGHIp+2JRkWks=) 2: 2977BC17912D681A78EBCC27EDFF03B1E1A3413D.crl (hash: Fm6/ssA2onZ8VbZNcWBhWICom5UCrGgsvfFn5xodqeI=) 3: 3130332e3133372e3138382e302f32342d3234203d3e2039333431.roa (hash: FFnOk4HB7OKneNdDsrwIq074TXsPeVLMjjjZCukxhr0=) 4: 3130332e3133372e3138392e302f32342d3234203d3e2039333431.roa (hash: lVpCKcFYUqX/2KbNeN3w6yXmYxgP/zijbXI7fWNZ5jk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.crl rsync://rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 02:40:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:63:f1:ff:dd:45:70:4e:a0:3d:72:6f:6b:29:42:34:f1:f6:0f:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2977BC17912D681A78EBCC27EDFF03B1E1A3413D Validity Not Before: Oct 4 07:09:06 2026 GMT Not After : Oct 5 10:42:06 2026 GMT Subject: CN=FBBD3745FE9C1F1439530538B034EECA78418EBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:87:03:d1:3a:33:3b:ac:0a:20:1f:45:c4:5e: f6:50:e5:0d:fe:85:66:c6:3f:19:56:1a:84:b3:de: 4f:78:9e:df:8f:83:60:fd:c9:77:64:4a:4c:6e:68: 9f:6e:98:2b:81:c3:9d:17:ac:f6:af:37:7c:00:93: d8:d1:74:a3:89:b2:05:ba:7e:fc:54:a3:77:d2:bc: 68:fb:ba:f6:19:0f:70:f6:0f:f9:f2:f2:51:1d:89: 90:ac:8d:7c:1d:86:6e:c3:f5:65:51:91:8d:d0:70: 65:a4:b2:66:8e:81:80:f1:9b:4f:9b:29:b8:52:b6: 93:e0:84:97:95:c7:9c:e6:5d:91:c8:6e:21:d6:9b: 4c:94:31:a9:5d:5f:c8:d7:39:71:20:aa:7c:7c:98: 26:63:fe:fb:e4:fb:91:67:bc:d9:14:bf:24:20:99: a9:e3:a8:10:f9:ee:6f:5d:d4:7e:88:e5:40:cc:fd: 98:76:68:b7:f2:36:7c:65:ab:c1:6e:17:2e:a1:bd: b4:cc:66:01:dd:95:49:df:6e:2a:4f:b3:ca:4a:0b: 35:c9:2c:2f:96:4b:bf:7a:46:27:49:5c:28:18:e4: 5d:19:e5:28:74:4e:0b:96:8c:1e:46:69:c0:2b:24: 06:65:97:27:dd:3f:14:33:78:11:47:07:b9:23:5c: 40:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:BD:37:45:FE:9C:1F:14:39:53:05:38:B0:34:EE:CA:78:41:8E:BB X509v3 Authority Key Identifier: keyid:29:77:BC:17:91:2D:68:1A:78:EB:CC:27:ED:FF:03:B1:E1:A3:41:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:5d:45:e4:cd:a9:c7:49:d8:27:d7:a4:86:30:e3:ff:aa:60: 48:8a:bc:d7:c5:c3:0e:1e:7b:5d:ee:87:db:ab:f3:80:db:f9: 68:91:41:e8:f7:5b:ca:6d:d2:ae:7e:bd:57:76:4c:53:b9:2a: d4:c1:92:1d:59:63:64:67:7e:b8:8d:b5:6a:f9:3c:54:3f:9c: d0:43:90:fd:80:2d:84:7e:cf:f7:e2:a3:cb:41:8e:b1:7c:f4: c6:01:a4:84:1e:23:b8:b7:9a:a6:9f:8b:c3:f5:f3:3f:c8:90: ac:24:76:cd:8d:fa:97:1d:4e:5e:fc:e1:6a:ce:e7:d9:17:08: ad:8a:c7:06:50:26:08:42:1d:04:5c:db:22:9f:60:d2:f0:af: 65:c5:84:bf:b7:6d:e8:c8:80:f4:8a:6d:56:b5:fe:f9:1d:1b: b7:6b:01:4a:dd:f5:ea:14:46:61:9b:ae:05:f5:55:b5:e4:40: 97:40:e6:98:5a:cc:d8:00:8e:f1:bb:fb:c0:34:2e:03:94:eb: ae:de:76:b0:a6:4b:2b:18:75:86:dc:09:7a:1a:f0:fb:b3:00: 5d:44:8c:5e:1c:ac:66:3d:4b:15:51:58:20:f6:43:a5:41:cc: c8:7d:db:ca:bb:54:d9:a7:54:65:08:e7:56:75:86:08:49:e5: 63:c8:c0:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVGPx/91FcE6gPXJvaylCNPH2D7YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk3N0JDMTc5MTJENjgxQTc4RUJDQzI3RURGRjAzQjFF MUEzNDEzRDAeFw0yNjEwMDQwNzA5MDZaFw0yNjEwMDUxMDQyMDZaMDMxMTAvBgNV BAMTKEZCQkQzNzQ1RkU5QzFGMTQzOTUzMDUzOEIwMzRFRUNBNzg0MThFQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWhwPROjM7rAogH0XEXvZQ5Q3+ hWbGPxlWGoSz3k94nt+Pg2D9yXdkSkxuaJ9umCuBw50XrPavN3wAk9jRdKOJsgW6 fvxUo3fSvGj7uvYZD3D2D/ny8lEdiZCsjXwdhm7D9WVRkY3QcGWksmaOgYDxm0+b KbhStpPghJeVx5zmXZHIbiHWm0yUMaldX8jXOXEgqnx8mCZj/vvk+5FnvNkUvyQg manjqBD57m9d1H6I5UDM/Zh2aLfyNnxlq8FuFy6hvbTMZgHdlUnfbipPs8pKCzXJ LC+WS796RidJXCgY5F0Z5Sh0TguWjB5GacArJAZllyfdPxQzeBFHB7kjXEDFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+703Rf6cHxQ5UwU4sDTuynhBjrswHwYDVR0j BBgwFoAUKXe8F5EtaBp468wn7f8DseGjQT0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTZjMTI3MDMtZjFmNy00M2M5LWEyMjAtOTJlZGQ4NmVmZTVlLzAvMjk3N0JDMTc5 MTJENjgxQTc4RUJDQzI3RURGRjAzQjFFMUEzNDEzRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yOTc3QkMxNzkxMkQ2ODFBNzhFQkNDMjdFREZGMDNCMUUxQTM0 MTNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTZjMTI3MDMtZjFmNy00M2M5LWEy MjAtOTJlZGQ4NmVmZTVlLzAvMjk3N0JDMTc5MTJENjgxQTc4RUJDQzI3RURGRjAz QjFFMUEzNDEzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABJdReTNqcdJ2CfXpIYw4/+qYEiKvNfFww4e e13uh9ur84Db+WiRQej3W8pt0q5+vVd2TFO5KtTBkh1ZY2RnfriNtWr5PFQ/nNBD kP2ALYR+z/fio8tBjrF89MYBpIQeI7i3mqafi8P18z/IkKwkds2N+pcdTl784WrO 59kXCK2KxwZQJghCHQRc2yKfYNLwr2XFhL+3bejIgPSKbVa1/vkdG7drAUrd9eoU RmGbrgX1VbXkQJdA5phazNgAjvG7+8A0LgOU667edrCmSysYdYbcCXoa8PuzAF1E jF4crGY9SxVRWCD2Q6VBzMh928q7VNmnVGUI51Z1hghJ5WPIwHA= -----END CERTIFICATE-----Generated at Sun Oct 4 18:23:18 2026 by rpki-client