$ rpki-client -vvf rpki-rsync.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.mft File: 77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.mft (raw, json) Hash identifier: DNvPGrkofC384xDE+BewsNcnL84zz2YQKL+ba7UvMkE= Subject key identifier: 76:7E:7F:83:0B:FA:4C:01:CE:AA:3E:AC:EE:68:4E:42:80:69:C5:24 Authority key identifier: 77:BE:1A:4F:34:7F:A3:1A:5C:FC:46:1F:6A:5D:3C:19:E4:15:8F:86 Certificate issuer: /CN=77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86 Certificate serial: 2766582DECADD1DBE4D342DE1C101120437C437D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.mft Manifest number: 0F Signing time: Tue 12 May 2026 16:15:50 +0000 Manifest this update: Tue 12 May 2026 16:10:50 +0000 Manifest next update: Wed 13 May 2026 17:05:50 +0000 Files and hashes: 1: 3135372e36362e3132382e302f32332d3234203d3e20313336383733.roa (hash: ABmryXvmIdMzipy18c184WGStC1rvjxbGuTrZ93+HFk=) 2: 3135372e36362e3132382e302f32342d3234203d3e20313336383733.roa (hash: /9AogUvejmnVzcfr/q/VgL8VHV8KOFXHgU8d/ZsRjs4=) 3: 3135372e36362e3132392e302f32342d3234203d3e20313336383733.roa (hash: RdSFCq5FmmEFwqUWQWODFaey3Jn4ol8h+jw95vgruqA=) 4: 77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.crl (hash: OPBKp0ans++b0vKJI1n6XZossXTw/O9pg7VXPgNqyx8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.crl rsync://rpki-rsync.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:66:58:2d:ec:ad:d1:db:e4:d3:42:de:1c:10:11:20:43:7c:43:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86 Validity Not Before: May 12 16:10:50 2026 GMT Not After : May 13 17:05:50 2026 GMT Subject: CN=767E7F830BFA4C01CEAA3EACEE684E428069C524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:67:7e:7e:47:51:49:e3:9e:34:7b:4f:12:16: b6:48:ae:01:bc:7a:a9:8b:75:32:1b:fb:bd:8c:cc: 23:d5:2e:a8:dc:fd:0d:15:6c:aa:10:50:16:b0:99: e4:eb:24:e9:9c:25:43:a4:eb:fb:97:fc:cc:6c:18: 7a:e4:81:84:d1:fc:f2:89:9f:2c:c0:bc:2c:e5:db: 72:68:21:d1:9d:f4:3d:01:a5:b4:e5:d3:f0:20:c3: 1c:d5:36:1a:3c:71:29:15:e0:bc:b6:ff:da:b2:52: 39:42:2a:07:75:cc:6f:fa:ae:71:c1:2e:b7:6a:51: f7:fb:92:ad:59:fe:5d:d6:f3:2d:32:88:18:ac:8a: 64:d1:8d:2d:7c:90:ea:91:55:17:d5:d2:97:6f:e7: 30:83:08:c7:23:a5:26:14:0c:f1:55:fd:9e:6d:02: fc:fe:c1:e4:9f:b1:b5:fe:ca:bb:ce:1c:1a:1c:3b: 19:ee:94:f0:66:96:ee:a2:34:13:33:a7:25:2b:ce: 2b:6d:e7:cd:bc:c0:db:d7:9a:94:51:dc:0f:e5:3d: 6c:5e:37:73:39:3b:59:dd:6b:bf:16:c1:de:53:11: 45:be:3d:62:6d:d9:3f:ed:fe:41:a2:c5:60:b2:28: 28:39:da:40:fb:53:fe:f1:30:8d:46:4c:b5:f1:4f: 94:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:7E:7F:83:0B:FA:4C:01:CE:AA:3E:AC:EE:68:4E:42:80:69:C5:24 X509v3 Authority Key Identifier: keyid:77:BE:1A:4F:34:7F:A3:1A:5C:FC:46:1F:6A:5D:3C:19:E4:15:8F:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:17:ac:82:bb:fd:e6:1e:a1:26:55:d8:6d:0f:ac:5c:45:bc: 5e:fb:ba:7c:0b:8d:e1:6f:12:94:06:61:97:cd:37:35:af:0e: 1c:c4:fe:dc:8f:a4:4d:56:52:2e:9d:04:36:48:1e:a2:a2:be: 18:73:51:cb:fc:e0:93:f3:d3:31:65:3d:95:0e:08:b6:66:cb: 01:98:00:0c:5b:05:c1:b8:0a:be:80:a6:94:69:dc:0c:db:be: 2a:1a:44:56:57:b9:35:4f:6b:7b:64:65:e7:d9:d2:92:17:66: d9:a0:58:19:9d:46:f1:bc:48:c2:9a:66:4d:99:2b:95:22:22: b9:0c:33:c3:b5:9a:e2:71:db:a4:cf:1a:5d:ad:26:d0:d6:70: 05:18:51:22:d6:4d:fe:ac:fa:d6:a7:b4:01:6f:e4:5a:de:5f: 76:d5:78:1a:a0:49:11:b8:3f:6e:4f:81:81:ce:10:45:b9:38: 8e:f7:66:40:7d:1d:0f:d8:88:99:04:ee:9f:5e:ce:f0:8d:32: e8:10:55:f0:47:7f:d6:e5:29:e4:8f:12:b8:14:55:d6:41:0c: 1c:67:13:ef:6b:e6:31:4b:b5:7c:28:a7:25:4d:70:c2:7a:a8: e8:34:f4:f6:ae:06:32:77:ca:40:0d:6c:ba:91:82:3d:ec:18: fc:dc:43:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ2ZYLeyt0dvk00LeHBARIEN8Q30wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzdCRTFBNEYzNDdGQTMxQTVDRkM0NjFGNkE1RDNDMTlF NDE1OEY4NjAeFw0yNjA1MTIxNjEwNTBaFw0yNjA1MTMxNzA1NTBaMDMxMTAvBgNV BAMTKDc2N0U3RjgzMEJGQTRDMDFDRUFBM0VBQ0VFNjg0RTQyODA2OUM1MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmZ35+R1FJ4540e08SFrZIrgG8 eqmLdTIb+72MzCPVLqjc/Q0VbKoQUBawmeTrJOmcJUOk6/uX/MxsGHrkgYTR/PKJ nyzAvCzl23JoIdGd9D0BpbTl0/AgwxzVNho8cSkV4Ly2/9qyUjlCKgd1zG/6rnHB LrdqUff7kq1Z/l3W8y0yiBisimTRjS18kOqRVRfV0pdv5zCDCMcjpSYUDPFV/Z5t Avz+weSfsbX+yrvOHBocOxnulPBmlu6iNBMzpyUrzitt5828wNvXmpRR3A/lPWxe N3M5O1nda78Wwd5TEUW+PWJt2T/t/kGixWCyKCg52kD7U/7xMI1GTLXxT5QpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdn5/gwv6TAHOqj6s7mhOQoBpxSQwHwYDVR0j BBgwFoAUd74aTzR/oxpc/EYfal08GeQVj4YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODI0ZDFlYmItYWVlYi00OTQ1LTllZjItMzJhZDliZmRlYjE5LzAvNzdCRTFBNEYz NDdGQTMxQTVDRkM0NjFGNkE1RDNDMTlFNDE1OEY4Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83N0JFMUE0RjM0N0ZBMzFBNUNGQzQ2MUY2QTVEM0MxOUU0MTU4 Rjg2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODI0ZDFlYmItYWVlYi00OTQ1LTll ZjItMzJhZDliZmRlYjE5LzAvNzdCRTFBNEYzNDdGQTMxQTVDRkM0NjFGNkE1RDND MTlFNDE1OEY4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACAXrIK7/eYeoSZV2G0PrFxFvF77unwLjeFv EpQGYZfNNzWvDhzE/tyPpE1WUi6dBDZIHqKivhhzUcv84JPz0zFlPZUOCLZmywGY AAxbBcG4Cr6AppRp3AzbvioaRFZXuTVPa3tkZefZ0pIXZtmgWBmdRvG8SMKaZk2Z K5UiIrkMM8O1muJx26TPGl2tJtDWcAUYUSLWTf6s+tantAFv5FreX3bVeBqgSRG4 P25PgYHOEEW5OI73ZkB9HQ/YiJkE7p9ezvCNMugQVfBHf9blKeSPErgUVdZBDBxn E+9r5jFLtXwopyVNcMJ6qOg09PauBjJ3ykANbLqRgj3sGPzcQzc= -----END CERTIFICATE-----Generated at Tue May 12 22:47:25 2026 by rpki-client