$ rpki-client -vvf rpki-rsync.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/77CB9A6395CC778A642E54A422EF7D86D5A20518.mft File: 77CB9A6395CC778A642E54A422EF7D86D5A20518.mft (raw, json) Hash identifier: McsETIq6Jd/2d1Uxp8Kz54U49uvlXTTkVToUbxm1vu0= Subject key identifier: 9A:42:40:99:6E:90:01:A4:F3:7D:D3:D3:91:DF:01:E1:07:4C:B7:5D Authority key identifier: 77:CB:9A:63:95:CC:77:8A:64:2E:54:A4:22:EF:7D:86:D5:A2:05:18 Certificate issuer: /CN=77CB9A6395CC778A642E54A422EF7D86D5A20518 Certificate serial: 1E6422C94B53166DCA729B2B5DE2DFB3BEDA664C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/77CB9A6395CC778A642E54A422EF7D86D5A20518.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/77CB9A6395CC778A642E54A422EF7D86D5A20518.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 22:17:53 +0000 Manifest this update: Fri 19 Jun 2026 22:12:53 +0000 Manifest next update: Sat 20 Jun 2026 23:03:53 +0000 Files and hashes: 1: 77CB9A6395CC778A642E54A422EF7D86D5A20518.crl (hash: NAxTd3GnoNmq2WwMCaLqHBngsZchzjJbqHAbD2XR7nc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/77CB9A6395CC778A642E54A422EF7D86D5A20518.crl rsync://rpki-rsync.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/77CB9A6395CC778A642E54A422EF7D86D5A20518.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/77CB9A6395CC778A642E54A422EF7D86D5A20518.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 23:03:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:64:22:c9:4b:53:16:6d:ca:72:9b:2b:5d:e2:df:b3:be:da:66:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77CB9A6395CC778A642E54A422EF7D86D5A20518 Validity Not Before: Jun 19 22:12:53 2026 GMT Not After : Jun 20 23:03:53 2026 GMT Subject: CN=9A4240996E9001A4F37DD3D391DF01E1074CB75D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7f:83:8a:d4:91:cc:37:2f:9f:de:f0:56:7f: 96:fb:ad:8a:bf:0f:46:7f:2f:8b:68:d9:4f:26:6a: 7e:cc:3c:82:4f:ce:ee:cc:04:dd:cd:98:b0:dd:84: 4a:49:db:d4:bd:88:60:e0:78:d8:4b:85:ec:91:cf: 99:a8:69:1a:c2:46:96:59:ae:98:c8:8a:ed:fa:54: 12:8a:04:7d:5e:e4:ae:69:d7:8e:9d:25:5e:e3:3f: 93:34:86:18:8e:e6:9b:fa:87:2c:f8:8e:5d:5b:25: 0b:57:da:5c:19:3c:c1:3e:f8:36:4e:7b:45:20:c5: 46:1e:1c:05:85:16:43:91:b0:11:c7:46:93:13:1d: ce:63:33:43:e6:db:ff:40:36:35:a2:bc:b7:d9:f8: eb:70:08:ba:49:b6:a0:14:16:44:bd:92:2b:97:e7: 53:6d:77:5e:7a:32:47:fd:c6:6a:14:6a:d9:5f:3b: 47:d2:a5:ca:98:15:b1:eb:ab:26:bc:1d:10:64:80: 7c:4d:88:fc:c3:67:80:c9:76:11:c3:17:d6:fe:44: 8f:e6:2a:27:f7:ee:74:6b:b2:e2:c0:a0:8b:b7:90: 87:99:5c:4c:44:72:bd:71:60:d8:6f:27:78:d2:a6: 91:b1:c6:f0:25:8e:4c:95:18:7a:cf:27:10:a8:2e: 54:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:42:40:99:6E:90:01:A4:F3:7D:D3:D3:91:DF:01:E1:07:4C:B7:5D X509v3 Authority Key Identifier: keyid:77:CB:9A:63:95:CC:77:8A:64:2E:54:A4:22:EF:7D:86:D5:A2:05:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/77CB9A6395CC778A642E54A422EF7D86D5A20518.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/77CB9A6395CC778A642E54A422EF7D86D5A20518.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/77CB9A6395CC778A642E54A422EF7D86D5A20518.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:f0:32:b6:b2:d4:fe:6d:8e:85:c4:76:c4:f7:25:b9:89:f5: d9:5b:b9:a5:88:45:a0:34:5d:ed:d0:4a:1e:dc:8a:46:f7:67: 01:6d:ac:ca:c8:ed:4e:46:0c:06:79:af:ae:c0:94:52:49:14: 8d:c4:00:27:4d:f0:56:18:83:40:2d:8a:d5:92:c0:1c:9b:02: 4d:e4:26:2c:d6:f1:6f:36:d2:fd:78:48:62:da:be:da:cc:2c: ee:6c:83:0b:33:9e:fa:7b:c7:c4:6d:02:47:4e:0b:62:42:0f: 01:fb:28:4c:9b:6d:68:ad:6c:7f:6b:e5:e0:12:1a:fd:08:1e: 37:9e:98:19:13:94:3d:1c:1a:6e:2b:20:20:7b:d1:da:c3:cc: 18:f5:04:0e:ff:d8:4d:24:c7:2f:d8:fa:df:22:a7:c7:2f:8a: c4:39:ec:5c:b8:3e:58:16:d3:1b:50:36:e5:bc:22:f1:51:c1: cd:ec:c1:cb:c6:64:13:d6:a0:27:06:99:f8:38:4d:ea:97:39: ec:47:55:dd:7c:a1:19:5d:ab:08:56:8f:be:43:48:e2:80:39: e9:e0:a5:52:26:06:b1:b1:7d:e1:81:42:45:8f:bb:ab:03:9a: 5c:68:c4:b0:43:39:51:d3:a4:2b:7d:3f:22:70:b0:d6:fa:3e: 67:10:ba:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHmQiyUtTFm3KcpsrXeLfs77aZkwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzdDQjlBNjM5NUNDNzc4QTY0MkU1NEE0MjJFRjdEODZE NUEyMDUxODAeFw0yNjA2MTkyMjEyNTNaFw0yNjA2MjAyMzAzNTNaMDMxMTAvBgNV BAMTKDlBNDI0MDk5NkU5MDAxQTRGMzdERDNEMzkxREYwMUUxMDc0Q0I3NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvf4OK1JHMNy+f3vBWf5b7rYq/ D0Z/L4to2U8man7MPIJPzu7MBN3NmLDdhEpJ29S9iGDgeNhLheyRz5moaRrCRpZZ rpjIiu36VBKKBH1e5K5p146dJV7jP5M0hhiO5pv6hyz4jl1bJQtX2lwZPME++DZO e0UgxUYeHAWFFkORsBHHRpMTHc5jM0Pm2/9ANjWivLfZ+OtwCLpJtqAUFkS9kiuX 51Ntd156Mkf9xmoUatlfO0fSpcqYFbHrqya8HRBkgHxNiPzDZ4DJdhHDF9b+RI/m Kif37nRrsuLAoIu3kIeZXExEcr1xYNhvJ3jSppGxxvAljkyVGHrPJxCoLlQLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmkJAmW6QAaTzfdPTkd8B4QdMt10wHwYDVR0j BBgwFoAUd8uaY5XMd4pkLlSkIu99htWiBRgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWU4NTVlOGEtM2ZmOC00N2ZmLWFhZWMtNDhkOGIzODBhOTA0LzEvNzdDQjlBNjM5 NUNDNzc4QTY0MkU1NEE0MjJFRjdEODZENUEyMDUxOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83N0NCOUE2Mzk1Q0M3NzhBNjQyRTU0QTQyMkVGN0Q4NkQ1QTIw NTE4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWU4NTVlOGEtM2ZmOC00N2ZmLWFh ZWMtNDhkOGIzODBhOTA0LzEvNzdDQjlBNjM5NUNDNzc4QTY0MkU1NEE0MjJFRjdE ODZENUEyMDUxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHXwMray1P5tjoXEdsT3JbmJ9dlbuaWIRaA0 Xe3QSh7cikb3ZwFtrMrI7U5GDAZ5r67AlFJJFI3EACdN8FYYg0AtitWSwBybAk3k JizW8W820v14SGLavtrMLO5sgwsznvp7x8RtAkdOC2JCDwH7KEybbWitbH9r5eAS Gv0IHjeemBkTlD0cGm4rICB70drDzBj1BA7/2E0kxy/Y+t8ip8cvisQ57Fy4PlgW 0xtQNuW8IvFRwc3swcvGZBPWoCcGmfg4TeqXOexHVd18oRldqwhWj75DSOKAOeng pVImBrGxfeGBQkWPu6sDmlxoxLBDOVHTpCt9PyJwsNb6PmcQul4= -----END CERTIFICATE-----Generated at Sat Jun 20 09:20:15 2026 by rpki-client