
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fbcd9a7d-de35-47e8-9228-12dfb0b8eac8/0/777F8859548675F259A5672AD63DF1A9F42E8A67.mft
File: 777F8859548675F259A5672AD63DF1A9F42E8A67.mft (raw, json)
Hash identifier: y3WFaZI2gg1JgwYiQTWOIwLieWha3JXJtbmX7/Ax990=
Subject key identifier: 4D:E3:F6:0F:88:80:88:94:34:47:82:FE:4B:11:04:7F:D8:F5:21:30
Authority key identifier: 77:7F:88:59:54:86:75:F2:59:A5:67:2A:D6:3D:F1:A9:F4:2E:8A:67
Certificate issuer: /CN=777F8859548675F259A5672AD63DF1A9F42E8A67
Certificate serial: 09409DF09BF767DC6A704B9A1FC8C6790FE03101
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/777F8859548675F259A5672AD63DF1A9F42E8A67.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/fbcd9a7d-de35-47e8-9228-12dfb0b8eac8/0/777F8859548675F259A5672AD63DF1A9F42E8A67.mft
Manifest number: C3
Signing time: Thu 24 Sep 2026 06:54:21 +0000
Manifest this update: Thu 24 Sep 2026 06:49:21 +0000
Manifest next update: Fri 25 Sep 2026 08:45:21 +0000
Files and hashes: 1: 777F8859548675F259A5672AD63DF1A9F42E8A67.crl (hash: HtkUMqKMeXQLUtXssXdBC27gb1m8xzU05LUhn+esopg=)
2: 3130332e3136392e3138362e302f32332d3234203d3e20313432333532.roa (hash: iHiiX8SijifHyF+URYyoJlMsUbrSgCPm7mjyVuXV+U4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/fbcd9a7d-de35-47e8-9228-12dfb0b8eac8/0/777F8859548675F259A5672AD63DF1A9F42E8A67.crl
rsync://rpki-rsync.idnic.net/repo/fbcd9a7d-de35-47e8-9228-12dfb0b8eac8/0/777F8859548675F259A5672AD63DF1A9F42E8A67.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/777F8859548675F259A5672AD63DF1A9F42E8A67.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 08:45:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:40:9d:f0:9b:f7:67:dc:6a:70:4b:9a:1f:c8:c6:79:0f:e0:31:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=777F8859548675F259A5672AD63DF1A9F42E8A67
Validity
Not Before: Sep 24 06:49:21 2026 GMT
Not After : Sep 25 08:45:21 2026 GMT
Subject: CN=4DE3F60F88808894344782FE4B11047FD8F52130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:97:6c:9b:62:6d:9e:39:40:4c:ed:50:0f:29:
be:cb:29:37:69:04:3d:a6:55:b5:97:ad:08:c6:30:
57:e7:8f:7f:b6:0e:86:ca:67:22:a0:6d:b8:c9:36:
d3:a3:ec:79:a8:37:16:df:20:1f:4b:74:22:21:09:
63:be:f4:ff:c6:37:87:3e:f7:00:77:cb:50:ad:5f:
5b:88:2a:75:7c:e5:67:9c:ad:15:26:98:89:fa:a9:
12:f5:97:21:a3:ac:01:ee:a5:38:84:64:ec:65:a2:
e0:7d:29:2a:86:ca:be:3e:8a:71:03:17:1b:75:26:
f2:ae:c1:8d:d5:2c:b6:9f:ff:65:ad:49:27:48:f7:
97:6f:a6:e5:73:43:0d:7f:1c:5d:fe:10:90:6a:c2:
c5:97:a6:f0:7c:67:63:c9:62:60:fa:42:9c:87:52:
50:f4:c3:c1:09:27:e1:36:52:10:76:2c:7d:1d:ef:
ee:bc:d5:83:f9:9c:9c:b7:09:5d:67:cb:33:68:90:
1c:12:cc:6f:13:5e:aa:4a:58:f7:5a:94:5d:fd:34:
98:30:f5:67:74:fc:29:7a:6d:d4:d7:04:14:da:eb:
66:4a:fc:3e:db:1f:75:81:3f:b8:59:be:ff:01:73:
53:69:2f:af:db:51:e1:a4:75:9d:e8:2b:c1:9f:66:
c8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E3:F6:0F:88:80:88:94:34:47:82:FE:4B:11:04:7F:D8:F5:21:30
X509v3 Authority Key Identifier:
keyid:77:7F:88:59:54:86:75:F2:59:A5:67:2A:D6:3D:F1:A9:F4:2E:8A:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/fbcd9a7d-de35-47e8-9228-12dfb0b8eac8/0/777F8859548675F259A5672AD63DF1A9F42E8A67.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/777F8859548675F259A5672AD63DF1A9F42E8A67.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fbcd9a7d-de35-47e8-9228-12dfb0b8eac8/0/777F8859548675F259A5672AD63DF1A9F42E8A67.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:eb:fb:5a:f9:e7:ec:46:c2:71:61:12:75:bf:89:a8:a9:fd:
2b:09:69:53:e6:16:d6:78:2b:35:fb:6e:9c:a9:ed:3c:4c:32:
3d:89:b2:35:05:17:a0:9b:4a:18:02:c5:e7:b1:b6:9b:e7:2c:
cb:d5:41:c8:60:21:f3:e3:86:66:18:86:32:43:ea:de:a2:4c:
48:21:ff:df:c2:f3:62:66:92:e4:ba:ee:5f:e9:49:fc:db:ab:
66:a4:bf:a7:2f:d7:2a:01:3a:4e:47:59:25:5e:93:1f:d9:d2:
a1:89:5f:04:31:ff:76:ff:40:3e:6c:28:57:c5:f8:0d:5e:30:
c6:d8:cb:d3:82:26:59:89:e2:ab:01:f2:36:12:59:ce:5d:4f:
eb:46:82:06:54:7e:ea:0e:4f:b6:0f:d2:d8:c9:8d:60:79:74:
bc:f6:74:d1:13:22:d6:f5:a6:09:64:ad:2f:95:c8:42:16:f2:
4f:09:a7:5f:2f:c6:fc:08:79:ac:ba:30:3c:79:57:48:ed:f6:
7c:5b:ed:9a:d2:9a:43:30:36:2a:c5:1a:21:bb:c6:7a:61:c3:
7a:a0:e8:f5:a8:11:da:6d:18:fd:d8:53:e1:8a:7f:f5:b0:92:
ee:74:ef:d1:98:93:db:3d:b8:a0:f4:ff:88:4d:a7:24:8b:fc:
79:cb:33:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:52:05 2026 by rpki-client