$ rpki-client -vvf rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.mft File: 2977BC17912D681A78EBCC27EDFF03B1E1A3413D.mft (raw, json) Hash identifier: J642uxfNuq9WxWmvtnKcfFItCsNWviWhthPjl3y8KcM= Subject key identifier: EE:C7:D8:62:7C:80:22:D0:30:EC:86:DA:9A:3D:9C:BF:BE:BA:B7:D3 Authority key identifier: 29:77:BC:17:91:2D:68:1A:78:EB:CC:27:ED:FF:03:B1:E1:A3:41:3D Certificate issuer: /CN=2977BC17912D681A78EBCC27EDFF03B1E1A3413D Certificate serial: 0F8668C866CE0FBFE8A96E890944D52282E3C895 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.mft Manifest number: 3A Signing time: Sat 13 Jun 2026 22:05:56 +0000 Manifest this update: Sat 13 Jun 2026 22:00:56 +0000 Manifest next update: Sun 14 Jun 2026 22:44:56 +0000 Files and hashes: 1: 2977BC17912D681A78EBCC27EDFF03B1E1A3413D.crl (hash: h3yA7hk41255cNHIy7S86qiFVlO9aOwvs0NVZSPdtF8=) 2: 3130332e3133372e3138382e302f32332d3233203d3e2039333431.roa (hash: 4eLS0uFtvc6ZLIswt7CJrqR+R0zoO9oGHIp+2JRkWks=) 3: 3130332e3133372e3138382e302f32342d3234203d3e2039333431.roa (hash: FFnOk4HB7OKneNdDsrwIq074TXsPeVLMjjjZCukxhr0=) 4: 3130332e3133372e3138392e302f32342d3234203d3e2039333431.roa (hash: lVpCKcFYUqX/2KbNeN3w6yXmYxgP/zijbXI7fWNZ5jk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.crl rsync://rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:86:68:c8:66:ce:0f:bf:e8:a9:6e:89:09:44:d5:22:82:e3:c8:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2977BC17912D681A78EBCC27EDFF03B1E1A3413D Validity Not Before: Jun 13 22:00:56 2026 GMT Not After : Jun 14 22:44:56 2026 GMT Subject: CN=EEC7D8627C8022D030EC86DA9A3D9CBFBEBAB7D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:44:97:cf:07:eb:77:cb:16:a6:5a:d0:5e:92: f5:21:9a:11:e6:be:c9:bd:0c:5b:c1:bc:58:da:2d: 26:cf:13:40:1a:fa:ce:22:05:e0:84:fa:2e:91:02: 21:01:ce:18:de:5a:51:06:9d:6c:72:98:86:02:d3: fb:4b:d8:c0:d6:c5:1e:e0:5c:b3:84:5b:78:dd:34: 2d:5c:60:9b:a0:4d:ce:79:83:5b:b9:09:7d:56:19: 11:ab:bc:7c:43:35:e5:6a:ff:89:12:7a:08:35:c9: ba:a7:da:7a:b5:bd:ae:34:1a:05:cd:7d:e4:94:fb: 91:30:09:cb:a4:cc:73:86:34:21:95:40:a3:fc:de: 64:9a:29:a2:ee:a9:55:d7:e5:e9:4b:37:f4:c5:22: 3d:f1:97:23:7a:ec:d3:9f:fe:78:19:90:5c:fc:5c: d8:29:2e:49:fb:24:5c:0e:d8:ef:dd:d4:49:0d:a5: d8:b2:37:5b:2c:0c:27:16:2b:53:d2:94:2c:d6:a0: 89:de:0e:cb:8c:32:6e:fc:c0:48:e4:c8:b4:b8:d5: 9e:fd:77:d5:5f:1d:89:27:af:d6:63:f4:d8:9f:31: d2:1d:89:e4:b6:5f:5d:51:9a:6b:7c:6f:80:1a:4f: 43:02:18:7b:c6:bd:3a:56:88:54:c4:0a:33:50:9a: e5:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:C7:D8:62:7C:80:22:D0:30:EC:86:DA:9A:3D:9C:BF:BE:BA:B7:D3 X509v3 Authority Key Identifier: keyid:29:77:BC:17:91:2D:68:1A:78:EB:CC:27:ED:FF:03:B1:E1:A3:41:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:49:88:0b:ff:04:06:1d:87:d4:9e:cc:d9:22:9f:85:cf:3d: 0f:00:96:48:69:c8:3f:16:ff:1b:ee:ae:e6:2a:81:b9:31:04: 50:d7:61:84:7c:6c:44:09:c7:13:ad:62:d7:5c:d9:fc:a5:e3: e2:18:82:2e:f1:c9:ea:ba:09:65:60:47:7e:ec:db:5e:b6:30: 4b:3d:05:42:ca:96:af:cf:93:d1:df:d6:0f:38:a8:3f:0c:ef: c4:85:28:22:53:10:83:f5:c8:70:61:81:9b:d3:4f:0d:c5:29: cb:54:ea:14:47:78:ed:20:f6:a4:29:71:a2:80:86:f3:36:6c: 53:ad:8a:52:55:1e:b3:2a:cb:fe:a9:af:70:40:6e:69:55:3a: 1a:9e:30:2a:9e:ef:20:82:7a:95:80:62:8f:15:34:ac:22:7b: 7e:13:32:e6:25:7b:27:de:15:54:66:85:fd:6d:f1:21:c1:29: 1a:0d:b5:bc:88:30:8a:43:57:70:c1:36:78:42:3d:c2:7b:d8: 81:6d:99:57:87:b1:4a:1c:0c:95:26:c6:77:d4:50:1b:91:3a: 02:25:6c:d5:86:a3:c3:47:21:72:25:8b:b9:92:6e:be:db:1e: a1:8d:5d:d5:c0:2e:b2:0c:20:a2:36:00:81:30:b9:56:4f:90: fc:93:12:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD4ZoyGbOD7/oqW6JCUTVIoLjyJUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk3N0JDMTc5MTJENjgxQTc4RUJDQzI3RURGRjAzQjFF MUEzNDEzRDAeFw0yNjA2MTMyMjAwNTZaFw0yNjA2MTQyMjQ0NTZaMDMxMTAvBgNV BAMTKEVFQzdEODYyN0M4MDIyRDAzMEVDODZEQTlBM0Q5Q0JGQkVCQUI3RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0RJfPB+t3yxamWtBekvUhmhHm vsm9DFvBvFjaLSbPE0Aa+s4iBeCE+i6RAiEBzhjeWlEGnWxymIYC0/tL2MDWxR7g XLOEW3jdNC1cYJugTc55g1u5CX1WGRGrvHxDNeVq/4kSegg1ybqn2nq1va40GgXN feSU+5EwCcukzHOGNCGVQKP83mSaKaLuqVXX5elLN/TFIj3xlyN67NOf/ngZkFz8 XNgpLkn7JFwO2O/d1EkNpdiyN1ssDCcWK1PSlCzWoIneDsuMMm78wEjkyLS41Z79 d9VfHYknr9Zj9NifMdIdieS2X11Rmmt8b4AaT0MCGHvGvTpWiFTECjNQmuV7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7sfYYnyAItAw7Ibamj2cv766t9MwHwYDVR0j BBgwFoAUKXe8F5EtaBp468wn7f8DseGjQT0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTZjMTI3MDMtZjFmNy00M2M5LWEyMjAtOTJlZGQ4NmVmZTVlLzAvMjk3N0JDMTc5 MTJENjgxQTc4RUJDQzI3RURGRjAzQjFFMUEzNDEzRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yOTc3QkMxNzkxMkQ2ODFBNzhFQkNDMjdFREZGMDNCMUUxQTM0 MTNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTZjMTI3MDMtZjFmNy00M2M5LWEy MjAtOTJlZGQ4NmVmZTVlLzAvMjk3N0JDMTc5MTJENjgxQTc4RUJDQzI3RURGRjAz QjFFMUEzNDEzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAlJiAv/BAYdh9SezNkin4XPPQ8AlkhpyD8W /xvuruYqgbkxBFDXYYR8bEQJxxOtYtdc2fyl4+IYgi7xyeq6CWVgR37s2162MEs9 BULKlq/Pk9Hf1g84qD8M78SFKCJTEIP1yHBhgZvTTw3FKctU6hRHeO0g9qQpcaKA hvM2bFOtilJVHrMqy/6pr3BAbmlVOhqeMCqe7yCCepWAYo8VNKwie34TMuYleyfe FVRmhf1t8SHBKRoNtbyIMIpDV3DBNnhCPcJ72IFtmVeHsUocDJUmxnfUUBuROgIl bNWGo8NHIXIli7mSbr7bHqGNXdXALrIMIKI2AIEwuVZPkPyTEgs= -----END CERTIFICATE-----Generated at Sun Jun 14 01:23:30 2026 by rpki-client