
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.mft
File: 77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.mft (raw, json)
Hash identifier: Ax3tzCsCboaM/hA7Dbz9pbF3iefSs17lFkuYS8XnhAU=
Subject key identifier: E5:F4:89:13:B5:58:41:D3:D0:D5:D9:B9:3C:51:98:AB:AB:83:DA:75
Authority key identifier: 77:BE:1A:4F:34:7F:A3:1A:5C:FC:46:1F:6A:5D:3C:19:E4:15:8F:86
Certificate issuer: /CN=77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86
Certificate serial: 77B19C5D707F8DCAF6A8DA618D5269A59879A2CE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.mft
Manifest number: 0107
Signing time: Sat 14 Nov 2026 15:03:14 +0000
Manifest this update: Sat 14 Nov 2026 14:58:14 +0000
Manifest next update: Sun 15 Nov 2026 15:08:14 +0000
Files and hashes: 1: 3135372e36362e3132382e302f32342d3234203d3e20313336383733.roa (hash: /9AogUvejmnVzcfr/q/VgL8VHV8KOFXHgU8d/ZsRjs4=)
2: 77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.crl (hash: nxzfOfgszLv/dR8Tl8aqdeoizg7+rEWo+T+8ONpnq3w=)
3: 3135372e36362e3132392e302f32342d3234203d3e20313336383733.roa (hash: RdSFCq5FmmEFwqUWQWODFaey3Jn4ol8h+jw95vgruqA=)
4: 3135372e36362e3132382e302f32332d3234203d3e20313336383733.roa (hash: ABmryXvmIdMzipy18c184WGStC1rvjxbGuTrZ93+HFk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.crl
rsync://rpki-rsync.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Nov 2026 15:08:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:b1:9c:5d:70:7f:8d:ca:f6:a8:da:61:8d:52:69:a5:98:79:a2:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86
Validity
Not Before: Nov 14 14:58:14 2026 GMT
Not After : Nov 15 15:08:14 2026 GMT
Subject: CN=E5F48913B55841D3D0D5D9B93C5198ABAB83DA75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ba:39:bb:c3:e2:4a:63:3b:23:79:ac:a2:f8:
1e:e3:d7:8c:3c:85:a4:56:51:88:88:e2:7f:10:63:
a3:9a:0b:85:cf:69:b2:81:9c:0e:1e:59:93:2d:bd:
05:8e:dd:b1:c8:44:bc:58:ef:94:85:28:77:85:9c:
ef:9f:26:08:c0:0e:5a:8e:e6:01:10:64:0f:b0:8a:
8f:e8:de:b5:b6:ae:dc:9c:df:91:a4:d3:fc:c1:70:
b6:f2:8c:ea:f7:e2:83:f7:82:45:01:be:33:96:70:
39:46:a6:09:45:cf:fd:49:c8:d9:f0:35:86:61:38:
b4:53:b1:17:ec:a7:e9:94:ad:d5:22:ec:5f:99:5f:
c8:72:ab:3a:6a:84:1d:06:8d:29:7a:b9:63:b7:68:
90:a0:17:73:f6:03:56:dc:f1:36:74:12:ab:99:bf:
05:a4:f3:93:4e:a6:f5:a4:9a:59:1d:63:24:04:2a:
f0:76:ae:1b:67:0c:16:50:ce:be:63:93:48:2b:fc:
16:45:0b:f8:e1:54:53:12:f6:b6:85:54:7e:a6:4c:
55:57:f3:37:2d:32:19:70:d9:77:71:44:7c:7b:0c:
7c:ec:61:52:4e:38:1a:05:1e:da:14:e5:ac:bb:76:
91:70:8c:c3:8c:4c:d9:4f:8d:8b:08:3a:f8:37:7b:
c8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:F4:89:13:B5:58:41:D3:D0:D5:D9:B9:3C:51:98:AB:AB:83:DA:75
X509v3 Authority Key Identifier:
keyid:77:BE:1A:4F:34:7F:A3:1A:5C:FC:46:1F:6A:5D:3C:19:E4:15:8F:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:24:2f:f6:da:db:aa:00:a5:6e:b3:7e:7f:45:f2:3f:0e:b3:
60:9f:67:fc:2f:21:99:e5:d6:f6:f1:9e:d4:7f:d6:dc:eb:99:
09:38:ab:11:56:b5:bf:b5:cf:10:26:27:07:12:0e:18:b8:99:
f1:6c:7b:ff:b4:c9:36:8e:60:49:35:ea:49:5d:0a:07:00:0d:
d5:7e:a0:72:d7:40:87:b8:f0:3a:a2:8b:be:98:f7:d0:bf:d1:
4b:ab:3e:10:53:69:2c:9a:22:cc:68:c9:d4:98:55:76:e0:eb:
d0:1e:8e:d4:92:56:a4:0c:fa:a9:c2:3b:51:df:35:72:25:ed:
76:29:02:55:3b:68:c2:6d:bd:76:72:9c:47:6e:a0:87:c0:fb:
50:05:30:a7:d0:b0:5c:3e:5f:76:27:cc:5b:36:4c:e8:25:14:
93:26:6c:14:c1:30:12:ad:4b:21:4d:9e:d9:68:f6:db:42:f0:
6e:64:44:82:3e:3d:67:29:8b:07:36:66:dd:91:4a:aa:de:f4:
f0:67:e5:e7:46:df:f1:fd:62:f8:5d:39:ca:3e:a6:a7:a7:31:
73:f8:79:fa:08:eb:35:44:e1:be:45:f6:4a:80:ed:de:7d:76:
0c:51:83:92:77:eb:34:5a:38:51:07:b7:16:7b:8a:23:5e:5d:
8c:bf:14:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:22:44 2026 by rpki-client