$ rpki-client -vvf rpki-rsync.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.mft File: 77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.mft (raw, json) Hash identifier: kXa+xzYOLdv/nelBOAEJ8zTHFLeaQ3m4RueeC/O7o2c= Subject key identifier: 93:21:8A:7A:6F:20:45:8F:8B:9A:5D:CF:17:A7:FD:33:55:37:91:DA Authority key identifier: 77:E9:F8:D3:BC:CF:53:E7:16:66:89:FB:2D:3B:26:C5:D0:71:7F:8A Certificate issuer: /CN=77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A Certificate serial: 56B1A5214A37A3A19C5BD71BBF3B87968AB91322 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.mft Manifest number: 40 Signing time: Thu 18 Jun 2026 09:38:53 +0000 Manifest this update: Thu 18 Jun 2026 09:33:53 +0000 Manifest next update: Fri 19 Jun 2026 13:04:53 +0000 Files and hashes: 1: 3135372e36362e31392e302f32342d3234203d3e20313532343431.roa (hash: SX241Rj6Zaksf/rX06NGGc4gRCAK1fqN8MDWJKF0QyE=) 2: 3135372e36362e31382e302f32342d3234203d3e20313532343431.roa (hash: f6Zrhs60fdmuFh2G1EwkPj+gm9fOkMTUgMUKbQaslFM=) 3: 3135372e36362e31382e302f32332d3233203d3e20313532343431.roa (hash: BNvuGLsPKmHPx7RMDlG5UShlx3gAe1x7TyFct++UUz0=) 4: 77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.crl (hash: Fhp+1PUkSJKBhNgwQUpY5v2Z1kqTmLVWnKSvzNsaFHk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.crl rsync://rpki-rsync.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 08:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:b1:a5:21:4a:37:a3:a1:9c:5b:d7:1b:bf:3b:87:96:8a:b9:13:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A Validity Not Before: Jun 18 09:33:53 2026 GMT Not After : Jun 19 13:04:53 2026 GMT Subject: CN=93218A7A6F20458F8B9A5DCF17A7FD33553791DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:87:03:4b:95:36:b8:ce:5e:3a:91:58:7a:3b: 77:6d:46:79:5d:94:92:c9:f4:74:7e:13:b1:dd:be: e5:13:e1:86:a1:d9:df:0a:f5:76:bf:8c:88:06:69: 28:b6:a0:ce:06:76:2c:eb:71:40:08:56:ff:f8:a4: c1:b6:d0:05:2e:14:10:71:a0:6b:73:ae:c6:4c:15: b7:12:2f:a0:14:68:a0:32:87:bf:70:06:e6:81:f0: 7f:62:63:75:dc:86:eb:88:0a:82:5a:70:11:1a:cb: 08:f0:57:b8:3a:46:d8:a7:8e:44:67:9a:59:c5:95: f4:12:3d:dd:fe:af:a8:2d:5d:da:9e:b6:ee:f9:30: 6d:05:60:c8:46:c8:66:2c:c1:2a:48:bb:71:e1:27: cd:21:f3:e5:b3:33:43:78:78:39:77:e6:28:b4:f9: f3:0b:21:85:72:15:4d:bf:86:99:44:02:18:73:b5: 2d:c2:4b:1d:bb:74:b8:97:01:8b:a5:15:d7:2b:8b: 2c:16:6b:a2:cf:f3:45:4d:9e:d7:08:fc:d8:6a:37: 01:a8:2c:d8:af:9e:2a:06:52:50:8f:e0:40:3f:44: a4:87:ff:5c:14:10:02:0b:45:ed:6d:42:75:0b:45: 63:d4:a8:ab:56:9e:f7:d4:9a:5c:aa:77:e3:6d:e7: 97:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:21:8A:7A:6F:20:45:8F:8B:9A:5D:CF:17:A7:FD:33:55:37:91:DA X509v3 Authority Key Identifier: keyid:77:E9:F8:D3:BC:CF:53:E7:16:66:89:FB:2D:3B:26:C5:D0:71:7F:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:54:5e:58:0a:79:fc:2e:be:23:5c:bd:9d:d5:c2:0a:38:f2: a6:c3:e1:7e:1d:d4:54:83:02:b7:aa:2e:15:bc:0d:36:97:36: 3a:c0:9e:f7:8f:4a:09:5e:8f:9f:d1:d3:83:3f:34:57:86:f5: 35:af:7b:03:30:e9:19:79:41:d9:c4:18:c7:bd:07:3f:80:80: dc:0c:e1:a0:c9:c2:0a:20:1d:dc:dc:37:ca:e9:01:81:87:d1: 2b:9f:fd:80:cc:8d:02:ff:b8:e4:52:16:77:ea:8b:7b:12:f0: 4d:1b:40:d8:7e:b7:c1:d5:56:d1:50:62:56:2f:97:0a:42:9a: d5:4d:3a:03:66:1b:9e:ef:03:47:d3:79:fd:c9:3c:a0:1d:c2: 3c:f3:4d:dc:4c:8f:ea:60:99:95:b0:26:e7:f8:10:fd:1d:1f: d6:b0:97:0d:c8:dc:dd:38:8e:b5:f1:ad:ce:80:db:61:3d:3e: 8d:33:da:f7:a4:ab:08:d3:ef:1d:21:3c:c8:f3:99:0e:38:22: 71:65:a5:c3:1d:75:76:1d:a8:5b:0f:27:49:50:7f:13:c6:19: 3b:b2:c2:46:1a:76:aa:98:31:6b:c3:1f:c7:ad:f5:31:c2:38: f2:89:07:d6:be:22:4e:30:c5:b6:4a:c6:f5:96:53:8b:e8:08: 96:49:7e:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVrGlIUo3o6GcW9cbvzuHloq5EyIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzdFOUY4RDNCQ0NGNTNFNzE2NjY4OUZCMkQzQjI2QzVE MDcxN0Y4QTAeFw0yNjA2MTgwOTMzNTNaFw0yNjA2MTkxMzA0NTNaMDMxMTAvBgNV BAMTKDkzMjE4QTdBNkYyMDQ1OEY4QjlBNURDRjE3QTdGRDMzNTUzNzkxREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvhwNLlTa4zl46kVh6O3dtRnld lJLJ9HR+E7HdvuUT4Yah2d8K9Xa/jIgGaSi2oM4GdizrcUAIVv/4pMG20AUuFBBx oGtzrsZMFbcSL6AUaKAyh79wBuaB8H9iY3XchuuICoJacBEaywjwV7g6RtinjkRn mlnFlfQSPd3+r6gtXdqetu75MG0FYMhGyGYswSpIu3HhJ80h8+WzM0N4eDl35ii0 +fMLIYVyFU2/hplEAhhztS3CSx27dLiXAYulFdcriywWa6LP80VNntcI/NhqNwGo LNivnioGUlCP4EA/RKSH/1wUEAILRe1tQnULRWPUqKtWnvfUmlyqd+Nt55dBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkyGKem8gRY+Lml3PF6f9M1U3kdowHwYDVR0j BBgwFoAUd+n407zPU+cWZon7LTsmxdBxf4owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzc0NDY1NjMtMDliYy00OTFiLThmYjktZmQzOWYwOTE2NjlkLzAvNzdFOUY4RDNC Q0NGNTNFNzE2NjY4OUZCMkQzQjI2QzVEMDcxN0Y4QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83N0U5RjhEM0JDQ0Y1M0U3MTY2Njg5RkIyRDNCMjZDNUQwNzE3 RjhBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzc0NDY1NjMtMDliYy00OTFiLThm YjktZmQzOWYwOTE2NjlkLzAvNzdFOUY4RDNCQ0NGNTNFNzE2NjY4OUZCMkQzQjI2 QzVEMDcxN0Y4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF1UXlgKefwuviNcvZ3Vwgo48qbD4X4d1FSD AreqLhW8DTaXNjrAnvePSglej5/R04M/NFeG9TWvewMw6Rl5QdnEGMe9Bz+AgNwM 4aDJwgogHdzcN8rpAYGH0Suf/YDMjQL/uORSFnfqi3sS8E0bQNh+t8HVVtFQYlYv lwpCmtVNOgNmG57vA0fTef3JPKAdwjzzTdxMj+pgmZWwJuf4EP0dH9awlw3I3N04 jrXxrc6A22E9Po0z2vekqwjT7x0hPMjzmQ44InFlpcMddXYdqFsPJ0lQfxPGGTuy wkYadqqYMWvDH8et9THCOPKJB9a+Ik4wxbZKxvWWU4voCJZJfjA= -----END CERTIFICATE-----Generated at Thu Jun 18 17:14:09 2026 by rpki-client