$ rpki-client -vvvf rpki-rsync.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.mft File: 77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.mft (raw, json) Hash identifier: cyLPV1/WpC41sD0PC14gHN6kTo6LbwhU7bh9KZsAOp0= Subject key identifier: 58:6B:E7:7A:EE:C8:30:3D:E2:93:11:CE:80:45:58:D1:BC:FF:4C:3C Authority key identifier: 77:E9:F8:D3:BC:CF:53:E7:16:66:89:FB:2D:3B:26:C5:D0:71:7F:8A Certificate issuer: /CN=77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A Certificate serial: 04ED86C8378771EE97E7C632B6BA92975FBD54E6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.mft Manifest number: F8 Signing time: Wed 04 Nov 2026 09:35:07 +0000 Manifest this update: Wed 04 Nov 2026 09:30:07 +0000 Manifest next update: Thu 05 Nov 2026 12:55:07 +0000 Files and hashes: 1: 3135372e36362e31382e302f32342d3234203d3e20313532343431.roa (hash: f6Zrhs60fdmuFh2G1EwkPj+gm9fOkMTUgMUKbQaslFM=) 2: 3135372e36362e31392e302f32342d3234203d3e20313532343431.roa (hash: SX241Rj6Zaksf/rX06NGGc4gRCAK1fqN8MDWJKF0QyE=) 3: 77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.crl (hash: 8jqYIqWvFgeKpOgco/XeGEKTDGFHWk5H4I09QUmP/74=) 4: 3135372e36362e31382e302f32332d3233203d3e20313532343431.roa (hash: BNvuGLsPKmHPx7RMDlG5UShlx3gAe1x7TyFct++UUz0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.crl rsync://rpki-rsync.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 12:13:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:ed:86:c8:37:87:71:ee:97:e7:c6:32:b6:ba:92:97:5f:bd:54:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A Validity Not Before: Nov 4 09:30:07 2026 GMT Not After : Nov 5 12:55:07 2026 GMT Subject: CN=586BE77AEEC8303DE29311CE804558D1BCFF4C3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:60:fb:d2:af:43:ea:ff:53:37:24:ad:8c:bc: 86:af:30:39:d5:b7:1d:c8:2c:95:56:1e:25:56:f2: ac:34:ee:bd:fa:26:5d:1c:2e:88:6b:37:94:ce:dd: 5e:63:d5:36:36:5a:15:34:bf:be:4a:e2:fb:fa:56: 26:62:6f:b8:6f:49:67:c6:4d:b4:f2:6e:9f:ea:dd: 94:3e:85:07:0f:5b:61:8f:b9:da:02:e9:68:93:98: 1c:5c:3d:f3:7c:31:76:32:f5:6e:67:0d:06:d5:c5: 4f:88:d9:a2:83:6b:53:ce:17:96:cf:35:90:ae:79: 93:57:55:37:f8:c3:83:89:66:fe:48:5b:66:2c:4c: 8c:14:ef:67:af:45:83:36:24:09:e3:9c:cf:1e:46: b3:95:90:b0:f4:b5:e3:98:47:52:3e:8e:08:10:13: 3e:ae:f6:c5:f2:c1:c7:2a:e8:3c:7d:07:37:8a:5e: 5f:3c:63:68:6c:d8:3f:5b:a2:31:51:0b:b0:3b:57: a2:b7:16:c6:11:aa:68:81:ce:4f:aa:04:32:f4:2e: cf:a5:e4:6a:ee:e5:a0:12:62:77:93:49:29:d6:83: ee:0c:00:9f:eb:84:f0:03:19:f9:40:da:63:16:a4: ea:f2:6f:84:2f:be:ce:0c:a6:38:e6:4d:20:21:d7: ff:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:6B:E7:7A:EE:C8:30:3D:E2:93:11:CE:80:45:58:D1:BC:FF:4C:3C X509v3 Authority Key Identifier: keyid:77:E9:F8:D3:BC:CF:53:E7:16:66:89:FB:2D:3B:26:C5:D0:71:7F:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:f4:42:c3:63:0d:df:ef:70:ec:30:26:9d:e1:3a:77:90:4a: a5:46:77:08:87:8e:11:d3:56:b2:b9:fb:a4:a1:23:49:c9:13: d2:f0:87:95:bb:16:f3:44:8a:bf:58:48:e4:8c:34:49:5e:39: 70:10:ca:96:f1:2b:b1:c7:6f:2d:10:03:b4:3e:82:dc:e3:6c: ff:23:ca:a3:d3:af:e3:94:44:b8:d7:17:ca:7e:53:d7:44:0d: 9f:98:b6:58:b4:91:3d:6a:b1:f6:de:74:5b:93:9d:03:b7:56: 1f:d2:12:d3:bc:42:7f:f0:a3:3d:3d:49:2e:43:69:04:5e:5a: 60:3c:60:83:9d:b6:a5:81:5f:74:be:57:60:7b:54:d4:98:5f: a4:56:8c:f6:44:65:58:5e:f1:75:20:d6:10:da:7f:36:81:c2: 72:7a:c9:38:95:e3:54:1b:40:89:c8:d0:8f:d2:4d:87:43:29: cc:42:ab:fc:14:85:d8:43:e3:bd:ef:0e:36:ec:11:54:06:bb: 3d:e9:cc:b8:1c:70:c9:71:45:01:54:19:67:7f:a7:e6:a6:05: 0e:90:9f:6a:51:05:c7:be:2f:56:54:0d:cd:d9:48:5d:2b:25: bb:ea:a0:97:f9:c1:96:c5:6c:2b:d9:14:9b:fe:7f:47:ca:5d: c2:16:30:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBO2GyDeHce6X58YytrqSl1+9VOYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzdFOUY4RDNCQ0NGNTNFNzE2NjY4OUZCMkQzQjI2QzVE MDcxN0Y4QTAeFw0yNjExMDQwOTMwMDdaFw0yNjExMDUxMjU1MDdaMDMxMTAvBgNV BAMTKDU4NkJFNzdBRUVDODMwM0RFMjkzMTFDRTgwNDU1OEQxQkNGRjRDM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4YPvSr0Pq/1M3JK2MvIavMDnV tx3ILJVWHiVW8qw07r36Jl0cLohrN5TO3V5j1TY2WhU0v75K4vv6ViZib7hvSWfG TbTybp/q3ZQ+hQcPW2GPudoC6WiTmBxcPfN8MXYy9W5nDQbVxU+I2aKDa1POF5bP NZCueZNXVTf4w4OJZv5IW2YsTIwU72evRYM2JAnjnM8eRrOVkLD0teOYR1I+jggQ Ez6u9sXywccq6Dx9BzeKXl88Y2hs2D9bojFRC7A7V6K3FsYRqmiBzk+qBDL0Ls+l 5Gru5aASYneTSSnWg+4MAJ/rhPADGflA2mMWpOryb4Qvvs4MpjjmTSAh1//lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWGvneu7IMD3ikxHOgEVY0bz/TDwwHwYDVR0j BBgwFoAUd+n407zPU+cWZon7LTsmxdBxf4owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzc0NDY1NjMtMDliYy00OTFiLThmYjktZmQzOWYwOTE2NjlkLzAvNzdFOUY4RDNC Q0NGNTNFNzE2NjY4OUZCMkQzQjI2QzVEMDcxN0Y4QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83N0U5RjhEM0JDQ0Y1M0U3MTY2Njg5RkIyRDNCMjZDNUQwNzE3 RjhBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzc0NDY1NjMtMDliYy00OTFiLThm YjktZmQzOWYwOTE2NjlkLzAvNzdFOUY4RDNCQ0NGNTNFNzE2NjY4OUZCMkQzQjI2 QzVEMDcxN0Y4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABb0QsNjDd/vcOwwJp3hOneQSqVGdwiHjhHT VrK5+6ShI0nJE9Lwh5W7FvNEir9YSOSMNEleOXAQypbxK7HHby0QA7Q+gtzjbP8j yqPTr+OURLjXF8p+U9dEDZ+Ytli0kT1qsfbedFuTnQO3Vh/SEtO8Qn/woz09SS5D aQReWmA8YIOdtqWBX3S+V2B7VNSYX6RWjPZEZVhe8XUg1hDafzaBwnJ6yTiV41Qb QInI0I/STYdDKcxCq/wUhdhD473vDjbsEVQGuz3pzLgccMlxRQFUGWd/p+amBQ6Q n2pRBce+L1ZUDc3ZSF0rJbvqoJf5wZbFbCvZFJv+f0fKXcIWMBU= -----END CERTIFICATE-----Generated at Wed Nov 4 17:08:27 2026 by rpki-client