$ rpki-client -vvf repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/77ACF18F5317E7A202E583C3C59C223234FA2D8B.mft File: 77ACF18F5317E7A202E583C3C59C223234FA2D8B.mft (raw, json) Hash identifier: ZEeoKyeAeRUyqfBkOyVR08xwkyY57wM6Wnr68jXK9B0= Subject key identifier: 65:D5:5C:8C:68:0A:38:15:38:BC:4F:77:16:CA:04:EB:7F:7C:49:91 Authority key identifier: 77:AC:F1:8F:53:17:E7:A2:02:E5:83:C3:C5:9C:22:32:34:FA:2D:8B Certificate issuer: /CN=77ACF18F5317E7A202E583C3C59C223234FA2D8B Certificate serial: 37D3DA8565855AD7020766347EC5209AFD151F2F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/77ACF18F5317E7A202E583C3C59C223234FA2D8B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/77ACF18F5317E7A202E583C3C59C223234FA2D8B.mft Manifest number: 0141 Signing time: Tue 24 Mar 2026 16:11:52 +0000 Manifest this update: Tue 24 Mar 2026 16:06:52 +0000 Manifest next update: Fri 27 Mar 2026 22:54:52 +0000 Files and hashes: 1: 3135372e32302e3230342e302f32332d3234203d3e20313532343139.roa (hash: sRqaXQTTqwZ0Sl52wT2hj8cdENXDNpu+PJ+NuR920js=) 2: 77ACF18F5317E7A202E583C3C59C223234FA2D8B.crl (hash: jeLIuABcnuu97ndGkvSudYnNDACmwBmrtYKY80tszUg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/77ACF18F5317E7A202E583C3C59C223234FA2D8B.crl rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/77ACF18F5317E7A202E583C3C59C223234FA2D8B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/77ACF18F5317E7A202E583C3C59C223234FA2D8B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 22:54:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:d3:da:85:65:85:5a:d7:02:07:66:34:7e:c5:20:9a:fd:15:1f:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77ACF18F5317E7A202E583C3C59C223234FA2D8B Validity Not Before: Mar 24 16:06:52 2026 GMT Not After : Mar 27 22:54:52 2026 GMT Subject: CN=65D55C8C680A381538BC4F7716CA04EB7F7C4991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:92:ce:4f:b7:e5:75:fa:4b:c1:ff:f9:f6:cd: a0:eb:27:94:da:20:d2:ad:10:8d:5d:67:40:80:e2: 70:1a:ea:c6:86:db:b8:04:98:51:57:56:bd:92:9b: 70:43:a7:9f:6e:91:15:65:43:7e:66:3e:e6:0f:e5: ac:de:4b:3d:f5:0f:6c:3f:48:2c:27:9e:7a:92:31: 67:05:40:62:87:ee:82:9c:66:ff:0b:62:01:e2:17: 68:9d:f2:e9:6d:0a:14:ab:43:88:74:2a:03:5a:63: 6f:42:66:82:5b:e0:71:3d:23:58:dc:e3:cb:86:3a: 95:0e:3b:80:10:56:87:86:ca:07:9e:ca:76:c4:40: 05:96:e0:e1:3b:56:56:58:b8:23:d2:7d:e8:04:c7: a1:5b:12:5f:cd:75:22:24:d4:72:f9:1a:80:88:fb: d9:ff:a3:5c:c4:b9:46:66:0d:99:72:47:c6:8c:25: 14:80:d1:91:25:c1:c8:a5:c6:39:52:03:1e:df:14: c3:49:cb:4a:e7:cb:fd:3e:cf:a1:53:2a:9e:3a:ff: 33:87:4d:75:e0:fa:12:93:f2:ce:87:8e:df:07:fb: 6e:a8:7a:3d:9c:c5:34:27:2a:27:58:0d:c0:4e:5b: af:30:d9:8a:e9:24:8a:75:cf:4c:09:97:8f:47:d1: 82:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:D5:5C:8C:68:0A:38:15:38:BC:4F:77:16:CA:04:EB:7F:7C:49:91 X509v3 Authority Key Identifier: keyid:77:AC:F1:8F:53:17:E7:A2:02:E5:83:C3:C5:9C:22:32:34:FA:2D:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/77ACF18F5317E7A202E583C3C59C223234FA2D8B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/77ACF18F5317E7A202E583C3C59C223234FA2D8B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/77ACF18F5317E7A202E583C3C59C223234FA2D8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:e6:f5:23:ea:98:a8:2d:d3:00:2c:8a:3e:2e:50:cb:4f:16: 85:f4:e3:38:ff:ff:26:e0:26:d3:02:1c:03:b5:90:5a:af:e5: 4d:bc:07:b6:1d:71:9b:fa:db:73:66:57:05:54:aa:44:00:95: b4:20:ec:e9:31:67:d0:ba:79:ca:99:90:d5:54:86:f3:84:09: 13:d7:a3:ae:b9:e6:ce:b0:bf:1b:b1:38:19:ea:46:2c:70:48: d2:92:e5:4a:c1:cc:8e:06:eb:4a:53:5d:64:d1:09:8e:69:54: 3d:a0:26:dc:b5:a1:fd:54:bc:33:1b:b0:3e:6b:ab:b9:18:a0: 57:f9:7b:eb:61:2f:b0:86:2e:e0:b5:ff:60:80:78:ad:c8:5f: 6d:d2:84:23:c1:47:d6:62:6a:22:6a:d6:a1:ae:a9:98:06:df: 3e:02:49:ec:8b:58:4f:51:c2:6a:39:a7:d0:ad:9e:00:72:b7: 41:f2:26:d9:ea:b3:f1:b9:b6:45:15:b8:41:dc:c4:31:37:8e: 5d:78:4a:f5:c4:48:29:ce:a2:2d:f9:77:53:c7:02:da:c7:79: 39:f3:9b:ef:2b:65:c7:7f:f1:16:a3:ad:73:da:64:48:72:fc: ad:34:b5:4b:56:3e:de:5e:52:e2:bf:55:25:f6:8f:49:cd:76: 20:2a:13:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN9PahWWFWtcCB2Y0fsUgmv0VHy8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzdBQ0YxOEY1MzE3RTdBMjAyRTU4M0MzQzU5QzIyMzIz NEZBMkQ4QjAeFw0yNjAzMjQxNjA2NTJaFw0yNjAzMjcyMjU0NTJaMDMxMTAvBgNV BAMTKDY1RDU1QzhDNjgwQTM4MTUzOEJDNEY3NzE2Q0EwNEVCN0Y3QzQ5OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJks5Pt+V1+kvB//n2zaDrJ5Ta INKtEI1dZ0CA4nAa6saG27gEmFFXVr2Sm3BDp59ukRVlQ35mPuYP5azeSz31D2w/ SCwnnnqSMWcFQGKH7oKcZv8LYgHiF2id8ultChSrQ4h0KgNaY29CZoJb4HE9I1jc 48uGOpUOO4AQVoeGygeeynbEQAWW4OE7VlZYuCPSfegEx6FbEl/NdSIk1HL5GoCI +9n/o1zEuUZmDZlyR8aMJRSA0ZElwcilxjlSAx7fFMNJy0rny/0+z6FTKp46/zOH TXXg+hKT8s6Hjt8H+26oej2cxTQnKidYDcBOW68w2YrpJIp1z0wJl49H0YJ1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZdVcjGgKOBU4vE93FsoE6398SZEwHwYDVR0j BBgwFoAUd6zxj1MX56IC5YPDxZwiMjT6LYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDgyM2JiMy01YTAxLTQ2NTgtYTc4My1mOGU4OWZhZGNmNDUvMC83N0FDRjE4RjUz MTdFN0EyMDJFNTgzQzNDNTlDMjIzMjM0RkEyRDhCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzdBQ0YxOEY1MzE3RTdBMjAyRTU4M0MzQzU5QzIyMzIzNEZB MkQ4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ4MjNiYjMtNWEwMS00NjU4LWE3 ODMtZjhlODlmYWRjZjQ1LzAvNzdBQ0YxOEY1MzE3RTdBMjAyRTU4M0MzQzU5QzIy MzIzNEZBMkQ4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIjm9SPqmKgt0wAsij4uUMtPFoX04zj//ybg JtMCHAO1kFqv5U28B7YdcZv623NmVwVUqkQAlbQg7OkxZ9C6ecqZkNVUhvOECRPX o6655s6wvxuxOBnqRixwSNKS5UrBzI4G60pTXWTRCY5pVD2gJty1of1UvDMbsD5r q7kYoFf5e+thL7CGLuC1/2CAeK3IX23ShCPBR9ZiaiJq1qGuqZgG3z4CSeyLWE9R wmo5p9CtngByt0HyJtnqs/G5tkUVuEHcxDE3jl14SvXESCnOoi35d1PHAtrHeTnz m+8rZcd/8RajrXPaZEhy/K00tUtWPt5eUuK/VSX2j0nNdiAqEzA= -----END CERTIFICATE-----Generated at Thu Mar 26 17:36:11 2026 by rpki-client