
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.mft
File: 77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.mft (raw, json)
Hash identifier: 3dzIEsCs3Mue9TGrRypSope/csMBaW/Q2lfLo2+fT/8=
Subject key identifier: A5:B7:D2:4D:E8:99:2F:20:9A:E4:48:67:2C:EF:72:03:1C:41:18:C2
Authority key identifier: 77:BE:1A:4F:34:7F:A3:1A:5C:FC:46:1F:6A:5D:3C:19:E4:15:8F:86
Certificate issuer: /CN=77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86
Certificate serial: 4358B36046F7F73031F57153016361298D8CEB5F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.mft
Manifest number: C2
Signing time: Wed 23 Sep 2026 07:15:00 +0000
Manifest this update: Wed 23 Sep 2026 07:10:00 +0000
Manifest next update: Thu 24 Sep 2026 09:54:00 +0000
Files and hashes: 1: 3135372e36362e3132382e302f32332d3234203d3e20313336383733.roa (hash: ABmryXvmIdMzipy18c184WGStC1rvjxbGuTrZ93+HFk=)
2: 3135372e36362e3132392e302f32342d3234203d3e20313336383733.roa (hash: RdSFCq5FmmEFwqUWQWODFaey3Jn4ol8h+jw95vgruqA=)
3: 77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.crl (hash: YkweTvqu/OixYqOwB3JbPnOlzoQez399/+ei/W8+Dy8=)
4: 3135372e36362e3132382e302f32342d3234203d3e20313336383733.roa (hash: /9AogUvejmnVzcfr/q/VgL8VHV8KOFXHgU8d/ZsRjs4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.crl
rsync://rpki-rsync.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 09:54:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:58:b3:60:46:f7:f7:30:31:f5:71:53:01:63:61:29:8d:8c:eb:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86
Validity
Not Before: Sep 23 07:10:00 2026 GMT
Not After : Sep 24 09:54:00 2026 GMT
Subject: CN=A5B7D24DE8992F209AE448672CEF72031C4118C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:51:aa:c6:2b:21:99:95:1b:63:74:ce:17:4a:
e3:41:37:1e:dd:f5:b1:17:02:be:fb:3f:ea:e3:3f:
23:9f:78:58:09:3d:03:60:7f:d9:0b:08:de:35:b6:
d3:77:97:8a:3b:cc:07:da:56:20:83:89:81:17:f2:
5d:90:c1:09:7f:a6:c6:3b:b3:93:7b:b9:2d:99:89:
5e:c3:40:18:66:d8:f6:06:5b:87:c9:d3:66:25:b8:
60:73:6c:de:05:7b:e6:31:6c:e8:a5:13:9b:d3:fd:
99:11:b0:c2:f9:4f:16:f6:d0:f4:6c:7a:ba:14:98:
63:8d:98:4f:a4:7c:b5:b4:dd:03:de:f3:6a:65:a8:
dd:2e:8e:20:94:96:46:8d:54:84:77:51:1a:66:b8:
fa:b3:99:51:7c:82:3f:7d:bf:51:6d:66:e8:45:dd:
e9:c1:86:88:dd:42:1d:a9:3f:ac:20:f0:51:46:0f:
6d:6c:63:05:3e:06:13:58:1f:fa:29:e3:0b:f3:8a:
e4:c7:88:bd:b5:1b:81:e4:de:c4:d6:9a:07:45:e5:
7f:b4:7b:6a:80:97:04:fa:35:49:8b:3f:e1:30:43:
1b:d8:62:b8:c2:4a:8d:9d:7b:c3:33:57:3b:f4:0d:
04:25:d8:8e:8d:82:20:b1:4d:cd:17:91:27:8e:ae:
6a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:B7:D2:4D:E8:99:2F:20:9A:E4:48:67:2C:EF:72:03:1C:41:18:C2
X509v3 Authority Key Identifier:
keyid:77:BE:1A:4F:34:7F:A3:1A:5C:FC:46:1F:6A:5D:3C:19:E4:15:8F:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:b0:13:87:88:42:cc:19:54:76:33:a5:22:80:d6:e5:06:d7:
06:c5:89:1e:89:56:f4:e1:84:33:fd:ce:73:f9:84:ba:52:26:
82:27:bf:fe:4f:da:4e:a8:f5:48:20:95:50:58:2e:b8:ca:36:
25:55:62:8b:9c:af:59:78:03:ae:da:51:63:0e:3b:83:47:b1:
94:2c:18:18:e3:59:e1:8d:3c:d5:eb:e9:ab:33:b1:ba:72:c2:
6e:ec:fb:1a:74:da:39:1e:74:9e:ba:d3:2f:29:5a:1b:f0:4d:
9e:10:43:81:97:b4:25:38:e6:50:c0:55:cb:66:a9:1e:28:4c:
9b:36:89:96:86:bb:84:34:10:20:1f:5b:7c:c1:8e:ff:39:21:
90:d2:5a:8b:72:02:98:af:11:f4:10:1b:21:a4:11:5f:d3:b9:
3d:88:ef:60:c9:af:eb:fc:49:4d:a8:df:31:ba:c9:fa:1f:cb:
3c:09:ae:59:cc:f5:56:a0:55:57:83:c6:f0:ad:6f:52:0a:26:
71:4a:32:9b:95:64:df:a5:1c:f2:8b:fb:24:f5:48:82:34:9a:
c9:c8:70:59:06:5c:85:ff:0e:58:19:30:65:e8:6a:9d:5d:90:
27:43:0b:ff:ee:90:c9:8d:1f:04:21:8d:ca:ea:64:b3:b0:91:
bf:79:89:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:18:18 2026 by rpki-client