$ rpki-client -vvf rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.mft File: 2977BC17912D681A78EBCC27EDFF03B1E1A3413D.mft (raw, json) Hash identifier: solrgy73CdG/LbTvScvd3LsisN+Qy5VoJmt68ajKOiQ= Subject key identifier: 4D:73:3C:F4:25:05:BB:1E:65:B4:AA:60:91:00:E6:21:97:0B:E8:F6 Authority key identifier: 29:77:BC:17:91:2D:68:1A:78:EB:CC:27:ED:FF:03:B1:E1:A3:41:3D Certificate issuer: /CN=2977BC17912D681A78EBCC27EDFF03B1E1A3413D Certificate serial: 5A0F5CAAFEC8A2FF08FE9DB0747FDE2EB94F47BE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.mft Manifest number: 10 Signing time: Wed 13 May 2026 09:01:13 +0000 Manifest this update: Wed 13 May 2026 08:56:13 +0000 Manifest next update: Thu 14 May 2026 10:12:13 +0000 Files and hashes: 1: 2977BC17912D681A78EBCC27EDFF03B1E1A3413D.crl (hash: tsJ+gkX6bAeSaXdBRMHC8qCjn3QMQL0K8EKNnTP+j1s=) 2: 3130332e3133372e3138382e302f32332d3233203d3e2039333431.roa (hash: 4eLS0uFtvc6ZLIswt7CJrqR+R0zoO9oGHIp+2JRkWks=) 3: 3130332e3133372e3138392e302f32342d3234203d3e2039333431.roa (hash: lVpCKcFYUqX/2KbNeN3w6yXmYxgP/zijbXI7fWNZ5jk=) 4: 3130332e3133372e3138382e302f32342d3234203d3e2039333431.roa (hash: FFnOk4HB7OKneNdDsrwIq074TXsPeVLMjjjZCukxhr0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.crl rsync://rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:12:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:0f:5c:aa:fe:c8:a2:ff:08:fe:9d:b0:74:7f:de:2e:b9:4f:47:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2977BC17912D681A78EBCC27EDFF03B1E1A3413D Validity Not Before: May 13 08:56:13 2026 GMT Not After : May 14 10:12:13 2026 GMT Subject: CN=4D733CF42505BB1E65B4AA609100E621970BE8F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:24:00:d8:d2:6f:5c:e8:b6:93:16:4d:bb:81: 45:9e:4f:62:e2:d7:34:8c:03:34:5c:a1:1b:19:e9: 5d:69:4c:73:05:27:a8:11:58:93:03:a8:14:09:a3: 94:53:90:0f:67:2f:09:c0:24:bb:fc:f7:48:c7:9d: 27:5e:ad:b7:a8:54:04:53:28:be:27:cc:e1:b8:3d: 4a:bf:ed:24:27:28:f0:7e:c8:5e:c6:02:7a:15:b9: f2:65:ac:cf:2a:d8:01:6b:1e:ee:8e:d5:be:be:3e: a3:47:10:17:39:f8:5d:30:b6:18:e0:f4:95:a8:f3: 5c:4e:fb:20:97:7b:1e:31:8a:60:e5:7b:db:a0:a4: 04:a2:ab:ea:56:1e:45:25:58:75:b3:5b:8c:fe:48: 7b:92:01:8a:e2:d0:13:4f:1a:12:55:fa:72:9d:fa: 3e:63:9d:44:05:4b:f9:f4:e8:1f:5b:49:8f:5b:82: eb:54:e4:d4:a4:21:f6:65:98:96:47:96:b7:0c:97: 75:77:26:87:7a:ea:35:a7:7c:f1:ad:42:0d:4c:78: 9e:12:4f:b2:c0:87:02:1c:fb:db:d9:b5:22:1a:fb: e6:eb:b1:3c:ed:1c:78:5f:28:55:9b:08:bb:00:9d: 46:39:69:3d:bd:0c:df:d4:85:15:76:d5:1b:a9:b2: 6b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:73:3C:F4:25:05:BB:1E:65:B4:AA:60:91:00:E6:21:97:0B:E8:F6 X509v3 Authority Key Identifier: keyid:29:77:BC:17:91:2D:68:1A:78:EB:CC:27:ED:FF:03:B1:E1:A3:41:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:67:75:87:9e:24:df:d9:f8:44:6c:c8:2d:8d:ae:2a:04:04: 77:45:4c:c5:81:0b:c6:b5:da:e4:40:5d:df:74:fb:c9:63:01: 9b:e9:23:15:80:6a:c6:d8:32:96:41:a8:e8:77:3f:16:46:1f: e5:b1:dd:f1:0e:7a:a1:c2:3c:18:ff:a4:c0:be:61:09:f1:eb: d4:a4:4d:5a:b7:20:d7:8b:ff:89:3a:07:02:85:ed:1d:b5:ac: 0d:f7:a3:50:6b:20:91:23:ea:cf:d4:0c:4b:00:46:22:56:7e: 6d:c5:30:b3:ac:b2:de:5e:db:d6:9e:4b:95:fa:d1:3f:4a:c7: 98:a1:b0:02:37:df:8b:cf:fb:bb:a7:63:d0:19:09:17:0a:de: 13:f9:10:7f:4d:27:ad:ac:84:31:ac:86:4c:63:5b:85:19:ed: ba:91:08:81:0c:f6:ea:cc:bb:4a:5d:1b:fc:ab:e6:43:a7:2b: f4:ab:48:01:0d:92:32:0c:0d:ee:e7:57:70:75:54:a3:2c:71: 33:0c:bf:66:b0:a3:3c:36:29:92:8a:33:65:6b:5e:83:af:10: 24:2c:a5:73:df:2d:b7:cd:61:e7:2c:6c:7d:40:35:2f:8b:a7: 27:68:32:d6:26:32:35:3d:a5:8f:85:24:bd:3f:dc:f1:1f:b2: ac:26:e7:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWg9cqv7Iov8I/p2wdH/eLrlPR74wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk3N0JDMTc5MTJENjgxQTc4RUJDQzI3RURGRjAzQjFF MUEzNDEzRDAeFw0yNjA1MTMwODU2MTNaFw0yNjA1MTQxMDEyMTNaMDMxMTAvBgNV BAMTKDRENzMzQ0Y0MjUwNUJCMUU2NUI0QUE2MDkxMDBFNjIxOTcwQkU4RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYJADY0m9c6LaTFk27gUWeT2Li 1zSMAzRcoRsZ6V1pTHMFJ6gRWJMDqBQJo5RTkA9nLwnAJLv890jHnSderbeoVART KL4nzOG4PUq/7SQnKPB+yF7GAnoVufJlrM8q2AFrHu6O1b6+PqNHEBc5+F0wthjg 9JWo81xO+yCXex4ximDle9ugpASiq+pWHkUlWHWzW4z+SHuSAYri0BNPGhJV+nKd +j5jnUQFS/n06B9bSY9bgutU5NSkIfZlmJZHlrcMl3V3Jod66jWnfPGtQg1MeJ4S T7LAhwIc+9vZtSIa++brsTztHHhfKFWbCLsAnUY5aT29DN/UhRV21RupsmuzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTXM89CUFux5ltKpgkQDmIZcL6PYwHwYDVR0j BBgwFoAUKXe8F5EtaBp468wn7f8DseGjQT0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTZjMTI3MDMtZjFmNy00M2M5LWEyMjAtOTJlZGQ4NmVmZTVlLzAvMjk3N0JDMTc5 MTJENjgxQTc4RUJDQzI3RURGRjAzQjFFMUEzNDEzRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yOTc3QkMxNzkxMkQ2ODFBNzhFQkNDMjdFREZGMDNCMUUxQTM0 MTNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTZjMTI3MDMtZjFmNy00M2M5LWEy MjAtOTJlZGQ4NmVmZTVlLzAvMjk3N0JDMTc5MTJENjgxQTc4RUJDQzI3RURGRjAz QjFFMUEzNDEzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAINndYeeJN/Z+ERsyC2NrioEBHdFTMWBC8a1 2uRAXd90+8ljAZvpIxWAasbYMpZBqOh3PxZGH+Wx3fEOeqHCPBj/pMC+YQnx69Sk TVq3INeL/4k6BwKF7R21rA33o1BrIJEj6s/UDEsARiJWfm3FMLOsst5e29aeS5X6 0T9Kx5ihsAI334vP+7unY9AZCRcK3hP5EH9NJ62shDGshkxjW4UZ7bqRCIEM9urM u0pdG/yr5kOnK/SrSAENkjIMDe7nV3B1VKMscTMMv2awozw2KZKKM2VrXoOvECQs pXPfLbfNYecsbH1ANS+LpydoMtYmMjU9pY+FJL0/3PEfsqwm53Q= -----END CERTIFICATE-----Generated at Wed May 13 14:47:40 2026 by rpki-client