$ rpki-client -vvf repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.mft File: 77776250E47CDCAE9263AB4AF8FA40A1391792EA.mft (raw, json) Hash identifier: bgTOtngxVewIo20nKeCxFgy9Kmd+UEJX3OgqdeEVJr4= Subject key identifier: BC:2A:B8:0E:ED:DE:F6:C0:EC:3E:6D:C6:6D:80:FE:35:EC:DA:52:29 Authority key identifier: 77:77:62:50:E4:7C:DC:AE:92:63:AB:4A:F8:FA:40:A1:39:17:92:EA Certificate issuer: /CN=77776250E47CDCAE9263AB4AF8FA40A1391792EA Certificate serial: 49857993E53D424368C4F97EF221824F5AE6A45B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77776250E47CDCAE9263AB4AF8FA40A1391792EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.mft Manifest number: 0248 Signing time: Wed 25 Mar 2026 18:31:45 +0000 Manifest this update: Wed 25 Mar 2026 18:26:45 +0000 Manifest next update: Sun 29 Mar 2026 03:14:45 +0000 Files and hashes: 1: 77776250E47CDCAE9263AB4AF8FA40A1391792EA.crl (hash: U5lum7NXsrNTHnvaqH49xzw1GmOkaenCO4SsANmA6gc=) 2: 3130332e3136312e3136352e302f32342d3234203d3e20313431363231.roa (hash: VfFxxuazE0SD/9aiBAJNKHpH/m4/DEssj0TquLDvxPg=) 3: 3130332e3136312e3136342e302f32332d3233203d3e20313431363231.roa (hash: mgkxr/SuMyMsRvRjiMcUueP3vdh3ZYSiC7xct6qMuK4=) 4: 323030313a6466303a663534303a3a2f34382d3438203d3e20313431363231.roa (hash: vAIjmbx3dVuW8GpN3/fZq5ol916CeS6StRg+6uf/1t0=) 5: 3130332e3136312e3136342e302f32342d3234203d3e20313431363231.roa (hash: F7Hvn3nr15WKTOMp+UJFZvJVrdndxdoOm2ecLXQTtiA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.crl rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77776250E47CDCAE9263AB4AF8FA40A1391792EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 03:14:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:85:79:93:e5:3d:42:43:68:c4:f9:7e:f2:21:82:4f:5a:e6:a4:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77776250E47CDCAE9263AB4AF8FA40A1391792EA Validity Not Before: Mar 25 18:26:45 2026 GMT Not After : Mar 29 03:14:45 2026 GMT Subject: CN=BC2AB80EEDDEF6C0EC3E6DC66D80FE35ECDA5229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:28:27:21:d5:77:a4:3f:14:83:f5:c3:8b:75: b3:c5:8f:bc:50:f7:bc:1c:a0:b1:a0:65:f8:a1:53: 08:4d:fe:e9:92:83:b5:2c:dc:82:3b:39:60:c1:7d: bb:6d:46:67:5d:23:3a:b5:8c:10:89:e7:1d:c4:3f: de:e2:95:f5:7c:17:5f:ad:47:04:ef:41:fe:8e:64: b1:e9:30:e2:3a:3e:8e:7b:4e:2c:51:ab:7e:c7:0b: 96:44:69:5b:53:ef:08:54:a5:ed:24:13:a1:63:98: 8e:df:84:23:48:55:54:ba:8c:f3:6a:03:7c:34:c9: 9f:bd:79:92:96:9e:93:bc:6b:0e:b6:ce:76:70:57: fd:41:85:fc:80:71:b0:1a:61:e5:c5:37:b8:dd:6f: 96:24:a3:f2:c7:0a:50:fe:cd:ce:f2:bd:39:b1:e8: 75:a0:10:13:71:af:d2:39:78:fc:fa:a4:19:5d:d7: 4e:03:da:d1:c2:56:95:08:04:d8:84:a2:eb:b4:42: c6:34:1a:5b:12:21:b7:82:72:17:d0:4e:d7:6d:39: e9:09:79:37:a3:13:e0:04:15:d9:ad:da:38:2e:6a: f1:2f:c4:b6:5c:49:77:a5:0e:04:c9:a7:f3:0a:ec: 4d:ae:c6:c3:77:8e:bc:f6:cd:c3:4e:f9:b3:b5:bc: 1e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:2A:B8:0E:ED:DE:F6:C0:EC:3E:6D:C6:6D:80:FE:35:EC:DA:52:29 X509v3 Authority Key Identifier: keyid:77:77:62:50:E4:7C:DC:AE:92:63:AB:4A:F8:FA:40:A1:39:17:92:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77776250E47CDCAE9263AB4AF8FA40A1391792EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:87:72:4a:95:85:22:73:a1:06:f2:6b:84:af:2f:70:81:78: c6:df:30:32:a2:ef:26:01:54:8a:7a:66:31:22:08:e0:6e:dd: 61:8c:61:e0:5f:e5:5e:dd:ac:87:b0:71:0d:42:fa:51:9b:5b: ea:ac:59:19:73:c3:99:cb:79:1a:92:01:1a:ff:cf:71:80:df: 4e:fa:7d:10:4f:df:dd:55:b4:f5:5d:bd:cf:40:46:01:ee:79: c2:24:23:ff:8f:43:77:74:69:c3:3e:2d:8f:76:a5:6e:c5:d7: f2:a5:5b:08:65:6a:cc:23:23:d8:5a:4b:e4:da:db:8d:a1:21: 56:cb:6c:46:25:f5:cc:67:5b:67:f2:e1:b6:42:6a:98:e4:c1: d8:fd:15:86:33:1b:f2:13:38:18:40:e9:53:1b:86:7c:9a:fd: 6a:f3:60:6b:97:6a:05:15:a6:11:22:01:6d:32:6f:57:8e:6a: 09:ab:f6:da:0c:2b:0f:33:83:4a:2d:3e:2a:1e:6e:a2:97:8e: 36:d3:03:fc:02:bd:1a:89:8e:77:57:27:31:c3:e5:1a:91:1b: a2:35:e4:89:4d:3a:7e:df:f4:43:5e:36:d9:31:69:dd:bc:1e: 14:08:68:d4:fb:a4:de:a1:29:6d:4b:65:b6:77:ca:53:6b:09: 51:c1:fd:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSYV5k+U9QkNoxPl+8iGCT1rmpFswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzc3NzYyNTBFNDdDRENBRTkyNjNBQjRBRjhGQTQwQTEz OTE3OTJFQTAeFw0yNjAzMjUxODI2NDVaFw0yNjAzMjkwMzE0NDVaMDMxMTAvBgNV BAMTKEJDMkFCODBFRURERUY2QzBFQzNFNkRDNjZEODBGRTM1RUNEQTUyMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDKCch1XekPxSD9cOLdbPFj7xQ 97wcoLGgZfihUwhN/umSg7Us3II7OWDBfbttRmddIzq1jBCJ5x3EP97ilfV8F1+t RwTvQf6OZLHpMOI6Po57TixRq37HC5ZEaVtT7whUpe0kE6FjmI7fhCNIVVS6jPNq A3w0yZ+9eZKWnpO8aw62znZwV/1BhfyAcbAaYeXFN7jdb5Yko/LHClD+zc7yvTmx 6HWgEBNxr9I5ePz6pBld104D2tHCVpUIBNiEouu0QsY0GlsSIbeCchfQTtdtOekJ eTejE+AEFdmt2jguavEvxLZcSXelDgTJp/MK7E2uxsN3jrz2zcNO+bO1vB7vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvCq4Du3e9sDsPm3GbYD+NezaUikwHwYDVR0j BBgwFoAUd3diUOR83K6SY6tK+PpAoTkXkuowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTE3ZmU5OC04ZjU4LTQ5N2YtYmU1Ny04NjY1YTdhMDRiYjAvMC83Nzc3NjI1MEU0 N0NEQ0FFOTI2M0FCNEFGOEZBNDBBMTM5MTc5MkVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzc3NzYyNTBFNDdDRENBRTkyNjNBQjRBRjhGQTQwQTEzOTE3 OTJFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTUxN2ZlOTgtOGY1OC00OTdmLWJl NTctODY2NWE3YTA0YmIwLzAvNzc3NzYyNTBFNDdDRENBRTkyNjNBQjRBRjhGQTQw QTEzOTE3OTJFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGuHckqVhSJzoQbya4SvL3CBeMbfMDKi7yYB VIp6ZjEiCOBu3WGMYeBf5V7drIewcQ1C+lGbW+qsWRlzw5nLeRqSARr/z3GA3076 fRBP391VtPVdvc9ARgHuecIkI/+PQ3d0acM+LY92pW7F1/KlWwhlaswjI9haS+Ta 242hIVbLbEYl9cxnW2fy4bZCapjkwdj9FYYzG/ITOBhA6VMbhnya/WrzYGuXagUV phEiAW0yb1eOagmr9toMKw8zg0otPioebqKXjjbTA/wCvRqJjndXJzHD5RqRG6I1 5IlNOn7f9ENeNtkxad28HhQIaNT7pN6hKW1LZbZ3ylNrCVHB/Zk= -----END CERTIFICATE-----Generated at Thu Mar 26 15:51:23 2026 by rpki-client