
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.mft
File: 77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.mft (raw, json)
Hash identifier: 9FRsU91tYIbu0iVxNXNeQIHTjuXuNOjryXxAg7MwgXo=
Subject key identifier: C6:7C:49:B6:4A:11:F8:A3:49:92:F4:1A:AB:4C:7C:1E:A4:A5:E6:11
Authority key identifier: 77:E9:F8:D3:BC:CF:53:E7:16:66:89:FB:2D:3B:26:C5:D0:71:7F:8A
Certificate issuer: /CN=77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A
Certificate serial: 04E704D246B8984B95F174BE8997D87824C14C48
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.mft
Manifest number: C2
Signing time: Thu 24 Sep 2026 17:17:02 +0000
Manifest this update: Thu 24 Sep 2026 17:12:02 +0000
Manifest next update: Fri 25 Sep 2026 19:33:02 +0000
Files and hashes: 1: 77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.crl (hash: oBYsLnrRpwHrzrL1zPrwwInQsUdV1lDZJk9lsKN44aQ=)
2: 3135372e36362e31382e302f32342d3234203d3e20313532343431.roa (hash: f6Zrhs60fdmuFh2G1EwkPj+gm9fOkMTUgMUKbQaslFM=)
3: 3135372e36362e31392e302f32342d3234203d3e20313532343431.roa (hash: SX241Rj6Zaksf/rX06NGGc4gRCAK1fqN8MDWJKF0QyE=)
4: 3135372e36362e31382e302f32332d3233203d3e20313532343431.roa (hash: BNvuGLsPKmHPx7RMDlG5UShlx3gAe1x7TyFct++UUz0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.crl
rsync://rpki-rsync.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 19:33:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:e7:04:d2:46:b8:98:4b:95:f1:74:be:89:97:d8:78:24:c1:4c:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A
Validity
Not Before: Sep 24 17:12:02 2026 GMT
Not After : Sep 25 19:33:02 2026 GMT
Subject: CN=C67C49B64A11F8A34992F41AAB4C7C1EA4A5E611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:38:47:e9:5c:a9:f7:65:eb:08:af:70:3a:6a:
d0:15:e9:36:6e:c2:09:cb:36:98:41:a6:ec:9f:2a:
78:98:98:81:9a:b1:b4:cc:a8:8d:f9:a7:ac:4e:45:
ff:7b:1f:08:7a:f4:7c:6b:99:e7:03:33:4b:49:48:
d1:b6:82:b3:70:e3:40:fb:4b:5d:1b:fd:6b:30:86:
f8:f6:d6:9c:d9:ff:78:4d:c8:e3:76:16:bc:6a:8b:
db:47:21:1b:e6:cd:cd:4e:ce:95:7d:ec:12:1d:a1:
2c:fe:3b:ea:d5:79:c0:ca:54:db:48:aa:e5:2b:73:
fc:ac:6d:79:3d:74:f9:e9:f6:06:86:fe:7c:e1:6b:
66:36:a2:95:f8:c6:54:68:6c:2d:8a:26:da:85:69:
5c:44:7a:ba:17:41:60:94:94:5d:c8:6c:ed:9e:1e:
d1:5a:46:a4:6b:2f:10:b4:d1:5d:71:b3:a8:8a:1e:
8d:9c:f2:d7:e5:e0:11:38:a0:32:f1:d4:f9:2a:b6:
6a:18:71:80:05:38:4f:46:08:7c:0f:e5:b2:0e:70:
99:63:42:e9:d1:45:5c:c9:0a:40:de:41:32:72:4a:
31:33:ce:e0:7f:7e:15:dc:06:eb:06:0c:34:66:8f:
a7:67:10:5e:b2:72:99:ac:41:81:b0:5d:fd:20:25:
51:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:7C:49:B6:4A:11:F8:A3:49:92:F4:1A:AB:4C:7C:1E:A4:A5:E6:11
X509v3 Authority Key Identifier:
keyid:77:E9:F8:D3:BC:CF:53:E7:16:66:89:FB:2D:3B:26:C5:D0:71:7F:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:a7:ca:ca:36:6a:dd:60:14:3d:72:65:89:e1:2a:ee:41:64:
bb:76:a8:f6:5a:c9:4e:93:cd:87:48:f0:73:af:3c:21:6a:ef:
ae:f4:b6:1a:ae:7b:67:e8:b9:d3:11:85:b6:33:c0:88:87:c2:
26:89:1a:75:6d:cd:2f:ea:3b:0f:83:44:f1:9e:7a:45:0e:ec:
51:8b:8b:0e:f7:4a:69:70:57:dd:16:ff:cf:15:e9:c0:69:a6:
bc:ca:95:02:22:42:ef:f0:05:97:5b:49:1b:87:d3:b1:ea:a9:
11:a0:a0:95:1b:78:70:22:55:fa:4b:6d:7a:ab:76:26:41:21:
1b:cd:fd:5a:9b:d2:94:2f:f4:bd:16:45:1c:9a:cd:82:fb:33:
78:94:12:ce:d9:9e:91:9e:75:dc:29:60:21:7b:6a:17:51:c7:
68:29:97:7d:3a:ac:52:0b:86:fc:89:1a:fb:f5:b0:81:46:fc:
d8:1a:11:e6:5f:1b:12:38:ec:98:05:9c:fd:c8:08:58:51:63:
39:cd:6e:b0:b9:2b:27:9c:00:7a:19:a0:31:73:5b:88:24:11:
44:50:0a:a0:26:6b:14:16:f1:86:26:e6:c2:ab:0d:f5:ec:2f:
91:91:93:ce:76:54:d7:de:7e:fa:28:f4:4e:10:df:ea:53:c6:
73:91:9a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:14:30 2026 by rpki-client