
$ rpki-client -vvf rpki-rsync.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.mft
File: 77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.mft (raw, json)
Hash identifier: Dqr2K/io4DO5pyhbIGjVt0V4gL/URz1Y0c2WnLT8RMQ=
Subject key identifier: 96:CE:47:6E:0E:B8:C1:09:E5:79:75:C8:1B:FD:13:D5:4B:82:38:0E
Authority key identifier: 77:E9:F8:D3:BC:CF:53:E7:16:66:89:FB:2D:3B:26:C5:D0:71:7F:8A
Certificate issuer: /CN=77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A
Certificate serial: 53759E3ED3870A6429BE788D0C1BCC2B98C173B4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 20:11:51 +0000
Manifest this update: Tue 12 May 2026 20:06:51 +0000
Manifest next update: Wed 13 May 2026 21:56:51 +0000
Files and hashes: 1: 3135372e36362e31382e302f32332d3233203d3e20313532343431.roa (hash: BNvuGLsPKmHPx7RMDlG5UShlx3gAe1x7TyFct++UUz0=)
2: 77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.crl (hash: qXu8MSDMdkSa2HgbH+4Mrmx5CRB6wXDL/9PyItKfq2M=)
3: 3135372e36362e31382e302f32342d3234203d3e20313532343431.roa (hash: f6Zrhs60fdmuFh2G1EwkPj+gm9fOkMTUgMUKbQaslFM=)
4: 3135372e36362e31392e302f32342d3234203d3e20313532343431.roa (hash: SX241Rj6Zaksf/rX06NGGc4gRCAK1fqN8MDWJKF0QyE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.crl
rsync://rpki-rsync.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:56:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:75:9e:3e:d3:87:0a:64:29:be:78:8d:0c:1b:cc:2b:98:c1:73:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A
Validity
Not Before: May 12 20:06:51 2026 GMT
Not After : May 13 21:56:51 2026 GMT
Subject: CN=96CE476E0EB8C109E57975C81BFD13D54B82380E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0e:f5:d1:68:5d:7d:de:80:a6:7a:6b:14:84:
8a:00:d8:35:25:73:b4:b8:27:d7:fb:5d:33:9d:fb:
83:fa:62:fc:a5:b2:3e:80:0f:a3:31:f3:20:15:76:
6c:ab:95:11:8a:15:0e:e2:43:bb:63:40:f5:e8:31:
d6:d0:05:8e:44:3c:83:8c:49:70:fc:8a:d7:87:27:
01:bf:86:b9:02:c3:8c:98:70:5c:f4:df:5f:fb:bf:
a1:e6:b6:ef:87:0a:31:fa:6b:f4:16:38:9a:04:9b:
a0:f9:44:b8:41:4d:14:7c:dd:2c:50:c0:ac:1b:f9:
fd:f2:20:d0:11:03:ed:dd:b9:2d:02:e5:8a:08:ae:
24:2e:75:82:78:77:ce:40:f6:f6:d6:fb:57:bf:a8:
10:94:b0:78:8a:16:a1:28:cd:89:47:6b:dd:ad:59:
fb:2a:2c:f9:c6:98:50:3d:37:1e:d9:9a:78:63:81:
c0:8a:c4:67:a0:5e:15:63:dc:94:c5:3a:f4:35:65:
41:d9:3b:be:c4:cc:6c:c8:de:04:44:b2:8f:94:f4:
96:21:67:ed:a4:e0:09:26:b4:85:d5:be:89:b2:c1:
0f:a9:4b:b6:07:7d:d1:f6:e5:70:6e:34:85:08:d9:
6c:21:05:1f:ea:ce:b8:20:db:15:97:83:e5:d0:a9:
e3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:CE:47:6E:0E:B8:C1:09:E5:79:75:C8:1B:FD:13:D5:4B:82:38:0E
X509v3 Authority Key Identifier:
keyid:77:E9:F8:D3:BC:CF:53:E7:16:66:89:FB:2D:3B:26:C5:D0:71:7F:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:69:b3:7d:0a:ab:14:41:32:27:a5:2d:74:90:24:b1:84:11:
cb:cc:00:52:45:cd:00:b9:2b:6c:a1:f4:2d:92:67:1c:00:7f:
cb:a3:de:4d:6d:f1:dd:83:9c:71:cd:5d:87:8b:e7:df:00:12:
a1:68:91:44:bb:31:d4:c3:96:93:72:f3:ba:5c:c7:74:65:df:
12:74:a0:7e:0d:8e:37:03:ce:bf:ec:90:9d:68:47:cb:5d:69:
4a:df:0d:55:33:12:44:2f:5c:70:e4:73:e3:67:7d:b2:cd:b2:
1f:11:41:6c:b0:ef:00:73:2f:20:9f:bf:a7:a1:2d:87:20:dd:
73:68:ed:08:a8:88:ea:55:9f:4e:24:ff:9d:0e:46:6c:fe:c3:
04:12:42:b8:58:b2:9a:56:2d:90:58:44:ae:4b:39:46:92:0f:
86:0c:c9:11:1e:a0:ff:bf:d1:c4:7d:05:16:29:c9:98:ac:a8:
42:43:b5:61:8b:9e:65:8d:7b:c1:fc:ac:15:41:9a:b5:6f:32:
80:71:a9:4f:8c:9b:47:26:eb:e6:2d:37:3d:97:f0:fa:03:81:
7b:8d:d0:b9:6c:92:1d:70:be:2a:39:55:cd:84:91:8b:68:77:
db:59:7a:5a:6a:d5:c2:79:a2:89:a9:5c:90:c7:42:12:2f:b4:
fb:7f:59:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:12:34 2026 by rpki-client