$ rpki-client -vvf rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.mft File: 2977BC17912D681A78EBCC27EDFF03B1E1A3413D.mft (raw, json) Hash identifier: kFgLHPIIU0rb2CyNhyFP4vy0Ym5A28fAtT2Mg2iYLKw= Subject key identifier: 9C:27:68:01:D2:86:03:8C:49:D7:24:49:9F:BD:24:1D:30:F8:70:FC Authority key identifier: 29:77:BC:17:91:2D:68:1A:78:EB:CC:27:ED:FF:03:B1:E1:A3:41:3D Certificate issuer: /CN=2977BC17912D681A78EBCC27EDFF03B1E1A3413D Certificate serial: 418A0D5E211C7CC751E168DF48A00EC1D0A89AC6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 10:06:46 +0000 Manifest this update: Fri 24 Jul 2026 10:01:46 +0000 Manifest next update: Sat 25 Jul 2026 11:12:46 +0000 Files and hashes: 1: 3130332e3133372e3138382e302f32332d3233203d3e2039333431.roa (hash: 4eLS0uFtvc6ZLIswt7CJrqR+R0zoO9oGHIp+2JRkWks=) 2: 2977BC17912D681A78EBCC27EDFF03B1E1A3413D.crl (hash: pHWQxWRMvt/Hh3FYjrfV4r7Ovdc2gpcm9/2FJvYIDnY=) 3: 3130332e3133372e3138392e302f32342d3234203d3e2039333431.roa (hash: lVpCKcFYUqX/2KbNeN3w6yXmYxgP/zijbXI7fWNZ5jk=) 4: 3130332e3133372e3138382e302f32342d3234203d3e2039333431.roa (hash: FFnOk4HB7OKneNdDsrwIq074TXsPeVLMjjjZCukxhr0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.crl rsync://rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:8a:0d:5e:21:1c:7c:c7:51:e1:68:df:48:a0:0e:c1:d0:a8:9a:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2977BC17912D681A78EBCC27EDFF03B1E1A3413D Validity Not Before: Jul 24 10:01:46 2026 GMT Not After : Jul 25 11:12:46 2026 GMT Subject: CN=9C276801D286038C49D724499FBD241D30F870FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:8d:9f:6b:c8:d8:e1:e4:30:3b:31:0b:d9:d6: a8:03:17:a2:23:b8:d2:38:5f:d7:18:08:25:eb:40: d2:63:33:97:04:07:fd:7b:a1:17:83:31:d1:db:8c: 30:f5:6d:b3:9b:9c:ff:34:d5:63:26:bd:02:2f:2b: d3:4c:a9:3a:0a:36:ff:29:5b:0e:f0:e2:1c:30:49: e9:cd:4f:4f:b2:4d:61:c7:3c:99:b6:a4:06:5f:b9: 3e:90:b4:f4:fa:8a:48:f8:43:93:13:2b:08:5b:37: f6:90:ac:73:ed:35:c9:74:a4:e9:b5:7e:5c:18:25: af:9f:34:e0:05:fc:28:8c:65:ac:18:41:59:16:8f: 15:21:8d:cd:b2:72:14:e2:e3:9e:62:7c:77:3e:38: fd:a0:11:3d:b0:57:a6:f6:d5:6e:a6:ac:31:b5:62: 8a:d1:59:06:3c:bb:88:59:b9:aa:90:63:cd:68:52: c3:7f:2e:94:c2:45:02:da:49:b8:fe:ea:07:96:14: 72:40:45:8d:b0:51:43:0a:82:00:24:b3:77:67:f1: c8:aa:ce:f3:f4:75:98:2e:b2:8b:ee:23:6f:9d:16: 9e:a6:ac:1d:5a:b4:2e:c3:93:46:69:75:69:74:91: 70:72:24:cd:11:df:6e:0e:97:53:25:45:a7:f5:67: 90:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:27:68:01:D2:86:03:8C:49:D7:24:49:9F:BD:24:1D:30:F8:70:FC X509v3 Authority Key Identifier: keyid:29:77:BC:17:91:2D:68:1A:78:EB:CC:27:ED:FF:03:B1:E1:A3:41:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:2a:c0:19:89:b0:4c:71:65:eb:2c:f9:5b:14:66:eb:38:a7: 20:f0:23:d2:63:db:0a:2b:6b:c4:ef:0e:a5:69:24:a0:74:fe: 85:7b:b7:2a:18:51:88:b3:f3:07:cc:19:df:18:83:a4:d4:fe: 19:92:8d:c7:9a:e6:a8:09:b8:94:ab:da:dc:da:46:ea:38:bf: 74:de:e8:59:89:e8:9a:50:50:37:e4:07:20:af:68:3d:e2:f6: ba:85:cf:be:7a:5f:08:d8:de:2e:1f:b0:05:87:63:42:19:f8: 08:9c:f2:64:74:7f:e2:b4:74:ea:fb:f1:85:d6:47:a5:34:0d: 3f:42:e1:de:83:ad:4d:b8:34:4b:bd:14:78:00:7d:04:a5:78: ed:85:f1:8a:d3:28:f0:21:cf:c7:08:df:ff:a6:b0:78:30:e2: 6f:2b:a5:e9:4c:dd:7b:fb:d7:c3:df:f4:a8:0f:92:e3:a7:55: cc:fa:47:ca:1b:40:2b:0f:c4:b2:d6:eb:c2:37:d9:fc:ec:8f: 43:78:44:1b:10:40:1f:7d:eb:78:2f:21:6e:80:ae:34:51:b4: 70:af:b1:de:d3:3f:a3:ca:f9:51:54:b3:64:33:8e:2a:07:ea: c5:41:ac:6a:64:b1:73:a6:53:e9:b8:a9:a0:16:58:7d:6a:39: b5:42:45:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQYoNXiEcfMdR4WjfSKAOwdComsYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk3N0JDMTc5MTJENjgxQTc4RUJDQzI3RURGRjAzQjFF MUEzNDEzRDAeFw0yNjA3MjQxMDAxNDZaFw0yNjA3MjUxMTEyNDZaMDMxMTAvBgNV BAMTKDlDMjc2ODAxRDI4NjAzOEM0OUQ3MjQ0OTlGQkQyNDFEMzBGODcwRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxjZ9ryNjh5DA7MQvZ1qgDF6Ij uNI4X9cYCCXrQNJjM5cEB/17oReDMdHbjDD1bbObnP801WMmvQIvK9NMqToKNv8p Ww7w4hwwSenNT0+yTWHHPJm2pAZfuT6QtPT6ikj4Q5MTKwhbN/aQrHPtNcl0pOm1 flwYJa+fNOAF/CiMZawYQVkWjxUhjc2ychTi455ifHc+OP2gET2wV6b21W6mrDG1 YorRWQY8u4hZuaqQY81oUsN/LpTCRQLaSbj+6geWFHJARY2wUUMKggAks3dn8ciq zvP0dZgusovuI2+dFp6mrB1atC7Dk0ZpdWl0kXByJM0R324Ol1MlRaf1Z5BzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnCdoAdKGA4xJ1yRJn70kHTD4cPwwHwYDVR0j BBgwFoAUKXe8F5EtaBp468wn7f8DseGjQT0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTZjMTI3MDMtZjFmNy00M2M5LWEyMjAtOTJlZGQ4NmVmZTVlLzAvMjk3N0JDMTc5 MTJENjgxQTc4RUJDQzI3RURGRjAzQjFFMUEzNDEzRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yOTc3QkMxNzkxMkQ2ODFBNzhFQkNDMjdFREZGMDNCMUUxQTM0 MTNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTZjMTI3MDMtZjFmNy00M2M5LWEy MjAtOTJlZGQ4NmVmZTVlLzAvMjk3N0JDMTc5MTJENjgxQTc4RUJDQzI3RURGRjAz QjFFMUEzNDEzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADsqwBmJsExxZess+VsUZus4pyDwI9Jj2wor a8TvDqVpJKB0/oV7tyoYUYiz8wfMGd8Yg6TU/hmSjcea5qgJuJSr2tzaRuo4v3Te 6FmJ6JpQUDfkByCvaD3i9rqFz756XwjY3i4fsAWHY0IZ+Aic8mR0f+K0dOr78YXW R6U0DT9C4d6DrU24NEu9FHgAfQSleO2F8YrTKPAhz8cI3/+msHgw4m8rpelM3Xv7 18Pf9KgPkuOnVcz6R8obQCsPxLLW68I32fzsj0N4RBsQQB9963gvIW6ArjRRtHCv sd7TP6PK+VFUs2QzjioH6sVBrGpksXOmU+m4qaAWWH1qObVCRUU= -----END CERTIFICATE-----Generated at Fri Jul 24 18:48:51 2026 by rpki-client