$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.mft File: 2977BC17912D681A78EBCC27EDFF03B1E1A3413D.mft (raw, json) Hash identifier: /kn6DDqv1kIHORvD8TuJOB4eu48EKCu0Fmmec+gMZuo= Subject key identifier: A3:EF:3E:0F:1F:D3:82:CD:A3:F9:8D:4E:93:D7:09:3C:D9:FD:31:CF Authority key identifier: 29:77:BC:17:91:2D:68:1A:78:EB:CC:27:ED:FF:03:B1:E1:A3:41:3D Certificate issuer: /CN=2977BC17912D681A78EBCC27EDFF03B1E1A3413D Certificate serial: 14B6C8C0559ED5EF72A6BC47ABB88AFF32EA8E81 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.mft Manifest number: D9 Signing time: Sun 11 Oct 2026 01:38:17 +0000 Manifest this update: Sun 11 Oct 2026 01:33:17 +0000 Manifest next update: Mon 12 Oct 2026 02:45:17 +0000 Files and hashes: 1: 3130332e3133372e3138382e302f32342d3234203d3e2039333431.roa (hash: FFnOk4HB7OKneNdDsrwIq074TXsPeVLMjjjZCukxhr0=) 2: 3130332e3133372e3138392e302f32342d3234203d3e2039333431.roa (hash: lVpCKcFYUqX/2KbNeN3w6yXmYxgP/zijbXI7fWNZ5jk=) 3: 2977BC17912D681A78EBCC27EDFF03B1E1A3413D.crl (hash: YVqs+xPOxIdMKbvrVns4OdI6iDSJ4wSHVoOBd7bJ6vA=) 4: 3130332e3133372e3138382e302f32332d3233203d3e2039333431.roa (hash: 4eLS0uFtvc6ZLIswt7CJrqR+R0zoO9oGHIp+2JRkWks=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.crl rsync://rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 02:45:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:b6:c8:c0:55:9e:d5:ef:72:a6:bc:47:ab:b8:8a:ff:32:ea:8e:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2977BC17912D681A78EBCC27EDFF03B1E1A3413D Validity Not Before: Oct 11 01:33:17 2026 GMT Not After : Oct 12 02:45:17 2026 GMT Subject: CN=A3EF3E0F1FD382CDA3F98D4E93D7093CD9FD31CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:9b:e8:ae:19:58:77:6f:68:62:f7:15:ca:5b: c2:2d:4b:39:63:36:28:09:31:cd:9a:dd:97:c4:47: 85:6d:80:72:72:50:ce:45:80:4b:35:18:e3:c3:7f: 3a:ca:06:1c:9f:09:fb:c3:20:d3:4f:4f:d5:ea:63: 65:74:9d:8c:28:aa:2f:19:a3:b7:14:a4:04:4e:8d: 66:96:7e:6f:67:73:a6:7d:21:07:f8:c3:15:da:03: 4c:9a:d0:0a:67:41:50:65:20:6a:76:79:76:e8:52: 12:c5:6d:2d:53:e9:f0:39:73:e7:c9:0c:f2:8f:a1: a7:31:7c:88:35:15:a4:d6:b4:c7:28:af:a5:6c:a6: 58:90:de:cd:75:48:02:a9:e7:81:73:b9:b3:12:78: 6c:18:91:71:37:16:f8:b9:e1:55:a1:68:69:4a:3e: 50:c1:f3:07:6b:bf:95:30:3a:a9:cf:1f:87:d4:cb: 69:f0:04:0c:f6:30:ad:03:37:4e:03:4d:24:05:71: ef:cd:54:65:70:d2:5a:43:6d:a9:63:e5:f2:7c:8a: 2b:a2:0d:87:aa:b0:72:df:1a:c6:d1:0c:21:a2:82: 5b:a9:d8:8b:b5:c3:89:19:cb:26:c9:91:51:47:75: 98:63:3b:65:48:61:3c:ca:75:fc:e0:5e:d2:38:3d: 2b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:EF:3E:0F:1F:D3:82:CD:A3:F9:8D:4E:93:D7:09:3C:D9:FD:31:CF X509v3 Authority Key Identifier: keyid:29:77:BC:17:91:2D:68:1A:78:EB:CC:27:ED:FF:03:B1:E1:A3:41:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:87:1c:bf:af:56:b3:61:fb:2c:8b:55:08:cb:16:7c:5e:0b: 8d:79:ad:1e:0b:37:6f:74:e2:26:94:89:f1:1a:1c:de:03:9b: bd:96:59:61:ba:19:8d:23:c1:00:e2:e9:b6:a5:5a:b6:a3:d7: 60:b5:8f:b7:fb:c9:05:8a:04:4b:df:3f:39:9d:c7:2c:21:56: e1:9a:b0:92:4a:c8:cf:a7:3b:42:58:cb:0a:1d:40:a2:08:23: de:c1:f4:af:b7:04:ae:98:f8:8a:c3:31:c2:3b:97:3a:06:65: c2:a5:89:24:f8:c1:49:e3:cc:5e:61:29:d1:44:8b:dd:53:ea: 5e:98:28:dc:73:5c:ce:e1:3d:bf:ac:12:29:71:c1:30:4c:75: f6:3b:55:f3:67:4e:e2:5c:2a:be:11:5a:91:98:f1:3d:a7:9f: 10:c8:e0:45:2a:b3:49:52:63:3b:39:16:be:ec:80:30:b6:b9: e2:4e:d3:33:ac:e8:ab:16:55:80:86:83:77:0f:a5:f9:88:5b: 63:b5:68:6c:49:b5:09:36:36:10:01:a3:62:92:3a:88:34:c8: d4:8e:f6:c6:84:f8:f8:86:1a:ad:15:9d:39:16:80:d4:6b:9a: 2a:ed:6f:e5:64:34:f5:43:87:e2:1d:7d:93:27:a8:5b:40:fd: 31:e0:88:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFLbIwFWe1e9yprxHq7iK/zLqjoEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk3N0JDMTc5MTJENjgxQTc4RUJDQzI3RURGRjAzQjFF MUEzNDEzRDAeFw0yNjEwMTEwMTMzMTdaFw0yNjEwMTIwMjQ1MTdaMDMxMTAvBgNV BAMTKEEzRUYzRTBGMUZEMzgyQ0RBM0Y5OEQ0RTkzRDcwOTNDRDlGRDMxQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSm+iuGVh3b2hi9xXKW8ItSzlj NigJMc2a3ZfER4VtgHJyUM5FgEs1GOPDfzrKBhyfCfvDINNPT9XqY2V0nYwoqi8Z o7cUpAROjWaWfm9nc6Z9IQf4wxXaA0ya0ApnQVBlIGp2eXboUhLFbS1T6fA5c+fJ DPKPoacxfIg1FaTWtMcor6VspliQ3s11SAKp54FzubMSeGwYkXE3Fvi54VWhaGlK PlDB8wdrv5UwOqnPH4fUy2nwBAz2MK0DN04DTSQFce/NVGVw0lpDbalj5fJ8iiui DYeqsHLfGsbRDCGiglup2Iu1w4kZyybJkVFHdZhjO2VIYTzKdfzgXtI4PSulAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo+8+Dx/Tgs2j+Y1Ok9cJPNn9Mc8wHwYDVR0j BBgwFoAUKXe8F5EtaBp468wn7f8DseGjQT0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTZjMTI3MDMtZjFmNy00M2M5LWEyMjAtOTJlZGQ4NmVmZTVlLzAvMjk3N0JDMTc5 MTJENjgxQTc4RUJDQzI3RURGRjAzQjFFMUEzNDEzRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yOTc3QkMxNzkxMkQ2ODFBNzhFQkNDMjdFREZGMDNCMUUxQTM0 MTNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTZjMTI3MDMtZjFmNy00M2M5LWEy MjAtOTJlZGQ4NmVmZTVlLzAvMjk3N0JDMTc5MTJENjgxQTc4RUJDQzI3RURGRjAz QjFFMUEzNDEzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHyHHL+vVrNh+yyLVQjLFnxeC415rR4LN290 4iaUifEaHN4Dm72WWWG6GY0jwQDi6balWraj12C1j7f7yQWKBEvfPzmdxywhVuGa sJJKyM+nO0JYywodQKIII97B9K+3BK6Y+IrDMcI7lzoGZcKliST4wUnjzF5hKdFE i91T6l6YKNxzXM7hPb+sEilxwTBMdfY7VfNnTuJcKr4RWpGY8T2nnxDI4EUqs0lS Yzs5Fr7sgDC2ueJO0zOs6KsWVYCGg3cPpfmIW2O1aGxJtQk2NhABo2KSOog0yNSO 9saE+PiGGq0VnTkWgNRrmirtb+VkNPVDh+IdfZMnqFtA/THgiGU= -----END CERTIFICATE-----Generated at Sun Oct 11 16:24:07 2026 by rpki-client