$ rpki-client -vvf rpki-rsync.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.mft File: 77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.mft (raw, json) Hash identifier: gQu6LpgUKOiMxlV09rOdOlpCN0oVmVwrpekmNkS96WQ= Subject key identifier: A0:33:35:03:94:78:41:50:C9:58:77:7D:4F:22:D8:AF:06:8A:C9:CD Authority key identifier: 77:BE:1A:4F:34:7F:A3:1A:5C:FC:46:1F:6A:5D:3C:19:E4:15:8F:86 Certificate issuer: /CN=77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86 Certificate serial: 23470F26B72D3D286C5E4CA511A928684C64F421 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 01:05:23 +0000 Manifest this update: Fri 24 Jul 2026 01:00:23 +0000 Manifest next update: Sat 25 Jul 2026 01:38:23 +0000 Files and hashes: 1: 3135372e36362e3132382e302f32342d3234203d3e20313336383733.roa (hash: /9AogUvejmnVzcfr/q/VgL8VHV8KOFXHgU8d/ZsRjs4=) 2: 3135372e36362e3132382e302f32332d3234203d3e20313336383733.roa (hash: ABmryXvmIdMzipy18c184WGStC1rvjxbGuTrZ93+HFk=) 3: 77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.crl (hash: OFQkVh3PcAtWQcUDz9EoBGJv641Rmomh+u2J3IkdGvo=) 4: 3135372e36362e3132392e302f32342d3234203d3e20313336383733.roa (hash: RdSFCq5FmmEFwqUWQWODFaey3Jn4ol8h+jw95vgruqA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.crl rsync://rpki-rsync.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 01:38:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:47:0f:26:b7:2d:3d:28:6c:5e:4c:a5:11:a9:28:68:4c:64:f4:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86 Validity Not Before: Jul 24 01:00:23 2026 GMT Not After : Jul 25 01:38:23 2026 GMT Subject: CN=A033350394784150C958777D4F22D8AF068AC9CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:09:84:ab:89:fc:e4:6a:0c:b2:7f:c9:53:9d: b9:8c:37:93:81:cd:8f:0b:4f:6b:e2:c8:9b:d5:7a: d3:f7:f7:c6:47:ec:4a:94:d0:fe:0b:f4:65:d5:95: 63:ca:40:f4:20:f2:d0:21:21:bd:2e:9e:66:83:55: 12:bd:8f:ca:f2:4c:f5:77:2c:80:7e:61:d4:5c:85: be:26:a9:c3:38:69:90:0f:7f:50:89:8c:26:7f:7c: f7:49:4f:dd:51:43:e8:c7:5c:3d:b6:9e:7f:02:c4: c9:ff:d8:64:5f:e1:a9:ad:d8:ec:9b:5f:2e:9f:9f: af:cc:8d:e5:61:68:1c:fd:39:b8:e9:96:59:b2:66: de:4b:82:cd:35:ce:ba:a0:eb:6e:24:3e:7f:09:4e: e8:ef:a8:b2:e5:aa:12:d8:69:f5:60:a5:a5:e5:fa: 93:d7:ed:93:bb:34:52:5c:db:dc:d3:34:9a:4e:80: 6e:8a:33:75:24:a4:b1:57:c2:28:c3:0c:7e:9e:47: c1:a7:2a:a6:e9:cc:7a:48:91:e9:9e:17:f3:07:86: ec:be:03:e8:a2:d0:9d:9c:da:fe:35:14:15:79:6b: 28:9a:72:6f:2d:32:59:56:ad:ef:17:3b:5d:f7:5c: c8:5b:44:48:af:81:d1:e9:54:94:93:d6:e2:7f:e5: f2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:33:35:03:94:78:41:50:C9:58:77:7D:4F:22:D8:AF:06:8A:C9:CD X509v3 Authority Key Identifier: keyid:77:BE:1A:4F:34:7F:A3:1A:5C:FC:46:1F:6A:5D:3C:19:E4:15:8F:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:0f:9d:28:40:c4:5e:8d:ab:c7:49:52:87:a7:63:8f:bf:ee: 5e:93:a4:bc:c1:2c:62:d8:48:94:98:f7:24:28:5f:d4:66:39: 85:de:30:15:8d:9f:91:f7:86:de:9a:8c:e6:82:c4:ea:d6:34: 03:2f:d7:6a:db:86:fb:35:0f:90:09:b7:62:14:1f:9a:87:85: d7:5a:ab:33:bb:26:8b:3e:a7:9c:cd:4b:fe:8d:1c:07:94:44: 1e:5c:b9:a0:3b:ff:16:ba:a7:57:33:16:c9:21:49:f9:85:ef: b9:8a:b9:04:79:f4:fe:70:c4:d3:57:ee:d9:55:12:f8:b2:aa: 86:39:06:65:dc:78:80:29:2d:a1:e6:1d:73:21:b7:85:c8:89: e5:07:96:48:c9:23:61:5a:88:8a:cd:05:59:aa:d6:61:71:73: e9:9f:90:e1:7f:a6:a5:7e:b8:7e:c4:a6:fc:28:3d:54:99:4f: 56:ae:1f:5f:29:4a:ca:45:f6:49:2f:08:15:eb:61:32:43:d9: 8f:89:e2:93:69:79:7c:06:dc:e7:61:3a:65:23:0b:89:05:31: 76:51:e8:0c:77:12:78:b2:c0:45:d4:6a:d1:1f:80:d5:59:f8: bb:f3:ac:ce:72:bf:60:62:18:bd:a2:ea:b8:8c:cd:76:48:13: 37:7f:99:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI0cPJrctPShsXkylEakoaExk9CEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzdCRTFBNEYzNDdGQTMxQTVDRkM0NjFGNkE1RDNDMTlF NDE1OEY4NjAeFw0yNjA3MjQwMTAwMjNaFw0yNjA3MjUwMTM4MjNaMDMxMTAvBgNV BAMTKEEwMzMzNTAzOTQ3ODQxNTBDOTU4Nzc3RDRGMjJEOEFGMDY4QUM5Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLCYSrifzkagyyf8lTnbmMN5OB zY8LT2viyJvVetP398ZH7EqU0P4L9GXVlWPKQPQg8tAhIb0unmaDVRK9j8ryTPV3 LIB+YdRchb4mqcM4aZAPf1CJjCZ/fPdJT91RQ+jHXD22nn8CxMn/2GRf4amt2Oyb Xy6fn6/MjeVhaBz9ObjpllmyZt5Lgs01zrqg624kPn8JTujvqLLlqhLYafVgpaXl +pPX7ZO7NFJc29zTNJpOgG6KM3UkpLFXwijDDH6eR8GnKqbpzHpIkemeF/MHhuy+ A+ii0J2c2v41FBV5ayiacm8tMllWre8XO133XMhbREivgdHpVJST1uJ/5fLHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoDM1A5R4QVDJWHd9TyLYrwaKyc0wHwYDVR0j BBgwFoAUd74aTzR/oxpc/EYfal08GeQVj4YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODI0ZDFlYmItYWVlYi00OTQ1LTllZjItMzJhZDliZmRlYjE5LzAvNzdCRTFBNEYz NDdGQTMxQTVDRkM0NjFGNkE1RDNDMTlFNDE1OEY4Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83N0JFMUE0RjM0N0ZBMzFBNUNGQzQ2MUY2QTVEM0MxOUU0MTU4 Rjg2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODI0ZDFlYmItYWVlYi00OTQ1LTll ZjItMzJhZDliZmRlYjE5LzAvNzdCRTFBNEYzNDdGQTMxQTVDRkM0NjFGNkE1RDND MTlFNDE1OEY4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC0PnShAxF6Nq8dJUoenY4+/7l6TpLzBLGLY SJSY9yQoX9RmOYXeMBWNn5H3ht6ajOaCxOrWNAMv12rbhvs1D5AJt2IUH5qHhdda qzO7Jos+p5zNS/6NHAeURB5cuaA7/xa6p1czFskhSfmF77mKuQR59P5wxNNX7tlV EviyqoY5BmXceIApLaHmHXMht4XIieUHlkjJI2FaiIrNBVmq1mFxc+mfkOF/pqV+ uH7EpvwoPVSZT1auH18pSspF9kkvCBXrYTJD2Y+J4pNpeXwG3OdhOmUjC4kFMXZR 6Ax3EniywEXUatEfgNVZ+LvzrM5yv2BiGL2i6riMzXZIEzd/mXQ= -----END CERTIFICATE-----Generated at Fri Jul 24 03:53:17 2026 by rpki-client