$ rpki-client -vvf rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.mft File: 2977BC17912D681A78EBCC27EDFF03B1E1A3413D.mft (raw, json) Hash identifier: OF7I9/3nvubPAcQL8HVQNlp+VR4dy5AYpR7t4k30Sp4= Subject key identifier: 88:E5:6A:A4:5A:59:34:55:5C:3D:44:30:9C:AA:66:9F:2D:2A:BD:58 Authority key identifier: 29:77:BC:17:91:2D:68:1A:78:EB:CC:27:ED:FF:03:B1:E1:A3:41:3D Certificate issuer: /CN=2977BC17912D681A78EBCC27EDFF03B1E1A3413D Certificate serial: 0AAC4CE0DB71056C8D3C7DF9B4D72F619F5499E6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.mft Manifest number: 76 Signing time: Tue 28 Jul 2026 21:22:56 +0000 Manifest this update: Tue 28 Jul 2026 21:17:56 +0000 Manifest next update: Wed 29 Jul 2026 21:29:56 +0000 Files and hashes: 1: 3130332e3133372e3138382e302f32342d3234203d3e2039333431.roa (hash: FFnOk4HB7OKneNdDsrwIq074TXsPeVLMjjjZCukxhr0=) 2: 2977BC17912D681A78EBCC27EDFF03B1E1A3413D.crl (hash: ZQG67pyiqndef1xlihMuCwDU8ceFaxRz5lSxm4y3kVs=) 3: 3130332e3133372e3138392e302f32342d3234203d3e2039333431.roa (hash: lVpCKcFYUqX/2KbNeN3w6yXmYxgP/zijbXI7fWNZ5jk=) 4: 3130332e3133372e3138382e302f32332d3233203d3e2039333431.roa (hash: 4eLS0uFtvc6ZLIswt7CJrqR+R0zoO9oGHIp+2JRkWks=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.crl rsync://rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 21:29:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:ac:4c:e0:db:71:05:6c:8d:3c:7d:f9:b4:d7:2f:61:9f:54:99:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2977BC17912D681A78EBCC27EDFF03B1E1A3413D Validity Not Before: Jul 28 21:17:56 2026 GMT Not After : Jul 29 21:29:56 2026 GMT Subject: CN=88E56AA45A5934555C3D44309CAA669F2D2ABD58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:83:72:56:cf:45:c8:d2:36:a9:cf:64:a0:e0: 7f:71:b4:a4:61:bf:7e:59:0c:c5:65:e0:41:34:d2: ab:a0:61:79:7f:b8:43:37:0f:2a:02:25:8d:08:41: 63:cc:b3:1c:d8:eb:7e:62:53:61:ea:44:80:1b:91: 4e:6f:b4:6d:20:63:7b:91:1d:68:5e:b5:6d:63:c6: e3:77:5a:57:a0:98:35:1c:47:78:2c:80:71:19:74: 8a:b5:75:03:01:30:bd:54:6c:96:da:03:cf:6c:29: 44:f5:80:c8:98:3d:64:58:76:f2:f6:9d:8e:26:5e: 55:1e:0e:78:26:af:b2:4b:e1:b1:52:96:69:bc:0a: 66:43:e9:bc:ba:15:66:c8:d0:3d:60:26:8e:dc:b3: b6:9a:a9:59:66:11:50:a2:da:50:2a:f1:8c:8c:7b: e7:66:88:56:dc:31:7f:ff:55:1c:88:bf:a5:81:fd: 60:36:b9:c1:b5:7a:dd:1c:44:95:41:cc:f2:c6:9a: 45:be:07:9a:29:9f:76:4c:3d:fb:a5:8b:e7:3c:c3: 1d:11:36:d7:83:c2:13:80:6a:fb:f1:5f:a1:2f:8a: 07:9f:2f:66:4e:90:ec:93:8e:56:c2:58:ce:67:ba: d5:1b:fd:ea:3c:98:43:30:bb:0a:22:cb:cc:09:52: 43:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:E5:6A:A4:5A:59:34:55:5C:3D:44:30:9C:AA:66:9F:2D:2A:BD:58 X509v3 Authority Key Identifier: keyid:29:77:BC:17:91:2D:68:1A:78:EB:CC:27:ED:FF:03:B1:E1:A3:41:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/2977BC17912D681A78EBCC27EDFF03B1E1A3413D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:e3:c4:f6:ad:4e:f9:e8:16:d3:a3:4c:bc:49:e5:bd:f1:bc: d1:25:ce:c1:9b:e3:45:69:7d:ab:14:1e:17:05:35:e0:36:6c: 12:af:84:39:a8:1e:18:0d:62:01:2e:14:e8:83:3a:16:d0:aa: 0a:d6:84:fe:46:05:fa:8d:cf:b7:d9:76:7d:e5:67:74:e7:fb: 64:6b:97:1d:0a:20:ba:96:6d:17:80:fd:6d:de:29:66:9a:84: bb:53:90:dc:a8:47:ec:42:b5:44:c9:45:95:13:9a:4f:74:ac: 20:62:95:a2:4d:21:8a:60:c2:d7:07:6b:14:6f:55:1b:e9:aa: 5e:0a:ea:1c:56:f1:9c:9d:48:c9:4a:95:72:bc:80:e4:10:73: 62:c6:8a:cb:86:19:47:05:0a:50:4a:4d:4c:e1:55:bc:53:a0: b2:ec:d1:e8:4f:a2:6f:de:e6:e9:51:70:9e:b8:71:77:99:c9: bf:a7:96:f8:f0:ff:51:a8:d4:ed:73:90:68:9e:ec:1f:55:3d: 14:84:6f:52:82:f3:15:16:3d:bb:9f:01:a8:e5:39:a7:44:25: d8:59:b4:b1:76:64:1b:c4:8a:65:7d:52:9e:aa:8f:0b:b2:5b: 58:57:02:b5:1f:39:13:aa:bb:dc:56:40:aa:f7:2f:dc:ae:ed: f2:fc:72:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCqxM4NtxBWyNPH35tNcvYZ9UmeYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk3N0JDMTc5MTJENjgxQTc4RUJDQzI3RURGRjAzQjFF MUEzNDEzRDAeFw0yNjA3MjgyMTE3NTZaFw0yNjA3MjkyMTI5NTZaMDMxMTAvBgNV BAMTKDg4RTU2QUE0NUE1OTM0NTU1QzNENDQzMDlDQUE2NjlGMkQyQUJENTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1g3JWz0XI0japz2Sg4H9xtKRh v35ZDMVl4EE00qugYXl/uEM3DyoCJY0IQWPMsxzY635iU2HqRIAbkU5vtG0gY3uR HWhetW1jxuN3WlegmDUcR3gsgHEZdIq1dQMBML1UbJbaA89sKUT1gMiYPWRYdvL2 nY4mXlUeDngmr7JL4bFSlmm8CmZD6by6FWbI0D1gJo7cs7aaqVlmEVCi2lAq8YyM e+dmiFbcMX//VRyIv6WB/WA2ucG1et0cRJVBzPLGmkW+B5opn3ZMPfuli+c8wx0R NteDwhOAavvxX6EvigefL2ZOkOyTjlbCWM5nutUb/eo8mEMwuwoiy8wJUkMHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiOVqpFpZNFVcPUQwnKpmny0qvVgwHwYDVR0j BBgwFoAUKXe8F5EtaBp468wn7f8DseGjQT0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTZjMTI3MDMtZjFmNy00M2M5LWEyMjAtOTJlZGQ4NmVmZTVlLzAvMjk3N0JDMTc5 MTJENjgxQTc4RUJDQzI3RURGRjAzQjFFMUEzNDEzRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yOTc3QkMxNzkxMkQ2ODFBNzhFQkNDMjdFREZGMDNCMUUxQTM0 MTNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTZjMTI3MDMtZjFmNy00M2M5LWEy MjAtOTJlZGQ4NmVmZTVlLzAvMjk3N0JDMTc5MTJENjgxQTc4RUJDQzI3RURGRjAz QjFFMUEzNDEzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAfjxPatTvnoFtOjTLxJ5b3xvNElzsGb40Vp fasUHhcFNeA2bBKvhDmoHhgNYgEuFOiDOhbQqgrWhP5GBfqNz7fZdn3lZ3Tn+2Rr lx0KILqWbReA/W3eKWaahLtTkNyoR+xCtUTJRZUTmk90rCBilaJNIYpgwtcHaxRv VRvpql4K6hxW8ZydSMlKlXK8gOQQc2LGisuGGUcFClBKTUzhVbxToLLs0ehPom/e 5ulRcJ64cXeZyb+nlvjw/1Go1O1zkGie7B9VPRSEb1KC8xUWPbufAajlOadEJdhZ tLF2ZBvEimV9Up6qjwuyW1hXArUfOROqu9xWQKr3L9yu7fL8ci0= -----END CERTIFICATE-----Generated at Wed Jul 29 12:07:33 2026 by rpki-client