$ rpki-client -vvf rpki-rsync.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.mft File: 77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.mft (raw, json) Hash identifier: bdeDqnpVtKu7VcGCJpIxt/Gj4s1kD4GLnbIjVVs9cSw= Subject key identifier: B8:73:69:E1:7C:3D:5D:06:1F:AC:37:63:2D:3E:28:D7:FE:66:34:73 Authority key identifier: 77:BE:1A:4F:34:7F:A3:1A:5C:FC:46:1F:6A:5D:3C:19:E4:15:8F:86 Certificate issuer: /CN=77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86 Certificate serial: 412FB2E8E8B4C84F4D1240596726E0628A0098B3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.mft Manifest number: 43 Signing time: Sat 20 Jun 2026 06:27:34 +0000 Manifest this update: Sat 20 Jun 2026 06:22:34 +0000 Manifest next update: Sun 21 Jun 2026 09:52:34 +0000 Files and hashes: 1: 3135372e36362e3132382e302f32342d3234203d3e20313336383733.roa (hash: /9AogUvejmnVzcfr/q/VgL8VHV8KOFXHgU8d/ZsRjs4=) 2: 3135372e36362e3132382e302f32332d3234203d3e20313336383733.roa (hash: ABmryXvmIdMzipy18c184WGStC1rvjxbGuTrZ93+HFk=) 3: 3135372e36362e3132392e302f32342d3234203d3e20313336383733.roa (hash: RdSFCq5FmmEFwqUWQWODFaey3Jn4ol8h+jw95vgruqA=) 4: 77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.crl (hash: npMrAFSJa9BLYhuCRP8jMvdBYUqiFvFrjd9D7xTotI0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.crl rsync://rpki-rsync.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 09:52:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:2f:b2:e8:e8:b4:c8:4f:4d:12:40:59:67:26:e0:62:8a:00:98:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86 Validity Not Before: Jun 20 06:22:34 2026 GMT Not After : Jun 21 09:52:34 2026 GMT Subject: CN=B87369E17C3D5D061FAC37632D3E28D7FE663473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:51:ef:a6:7f:b8:08:f1:39:9c:94:6e:ba:6f: 0a:99:40:ea:34:f2:ac:33:64:22:f6:f9:5d:f1:df: ca:7d:ce:5e:70:b7:80:33:d2:9a:b7:3f:bf:64:ef: e2:0a:0e:da:df:7c:4d:b3:ad:73:ed:a3:ee:80:21: f6:37:57:d2:ee:93:25:08:52:1f:01:30:e7:c3:a8: 33:90:12:64:bb:f8:e6:23:01:21:78:b3:21:d6:51: 92:f2:9d:33:86:80:86:dd:fe:f1:73:dc:cf:d6:ce: 8c:ee:06:f1:72:d3:1d:a7:18:ec:5e:95:24:e7:65: fe:e9:b0:6f:0a:d3:c6:90:50:9f:09:42:04:1b:7a: d2:76:a8:dd:65:82:0d:70:0a:7e:c6:c1:a4:45:f9: f5:27:38:7c:fd:e8:4d:88:07:39:64:9a:e0:31:7f: a0:bc:de:65:d3:6e:95:20:65:a9:ad:56:b2:cf:2c: 9c:63:3c:d2:fc:c6:9c:88:a4:8d:59:68:82:7f:eb: 84:04:cc:95:2d:2e:84:1a:95:af:88:b3:38:d4:a4: af:80:45:92:98:9e:90:7f:75:9c:04:be:71:e1:1f: fb:b8:44:f3:e9:5a:8d:fb:61:6f:44:56:63:fb:cd: 22:22:b2:6d:e8:f9:d8:08:a0:94:a6:f0:93:e1:77: 0b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:73:69:E1:7C:3D:5D:06:1F:AC:37:63:2D:3E:28:D7:FE:66:34:73 X509v3 Authority Key Identifier: keyid:77:BE:1A:4F:34:7F:A3:1A:5C:FC:46:1F:6A:5D:3C:19:E4:15:8F:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:1a:86:78:58:bb:46:ce:58:64:3d:60:ac:85:69:e9:dd:d0: 55:48:74:1c:b7:59:55:2b:fa:20:b6:62:24:83:79:9c:1f:d6: b4:26:77:94:59:6d:89:b7:0b:39:39:58:8f:b8:a9:91:b0:e2: 7e:10:f6:ac:fc:ea:5a:19:99:86:d0:95:61:d7:ad:e3:03:ab: 95:74:77:95:00:39:f5:f9:c1:3c:d0:4a:12:81:26:a8:34:db: 53:49:48:6e:62:2a:06:eb:f9:73:23:4a:05:d2:fa:05:85:8a: cd:41:70:27:39:ac:e2:db:8b:4a:f7:1c:98:8c:f2:7f:99:ea: 8b:75:f8:20:99:7a:41:41:cb:7f:ba:5b:79:53:3e:b3:5f:e7: f7:b8:cc:15:95:0f:79:a3:66:35:06:c4:c1:03:6c:aa:91:00: be:33:08:ad:2a:6a:e7:16:1d:4e:61:50:60:d0:66:29:a4:d7: d3:58:e6:26:05:af:f7:cc:7d:82:f6:79:6b:c1:c7:65:ae:d4: 7b:bc:6e:8e:6a:08:f9:54:20:b5:83:22:9f:64:c8:c2:6f:40: c6:83:0d:13:ef:c3:c6:8e:c2:98:d5:09:96:2b:60:23:41:17: 5d:b5:61:c8:61:b3:45:e5:fb:59:e0:99:9e:7b:c4:e1:04:61: d2:64:91:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQS+y6Oi0yE9NEkBZZybgYooAmLMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzdCRTFBNEYzNDdGQTMxQTVDRkM0NjFGNkE1RDNDMTlF NDE1OEY4NjAeFw0yNjA2MjAwNjIyMzRaFw0yNjA2MjEwOTUyMzRaMDMxMTAvBgNV BAMTKEI4NzM2OUUxN0MzRDVEMDYxRkFDMzc2MzJEM0UyOEQ3RkU2NjM0NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Ue+mf7gI8TmclG66bwqZQOo0 8qwzZCL2+V3x38p9zl5wt4Az0pq3P79k7+IKDtrffE2zrXPto+6AIfY3V9LukyUI Uh8BMOfDqDOQEmS7+OYjASF4syHWUZLynTOGgIbd/vFz3M/WzozuBvFy0x2nGOxe lSTnZf7psG8K08aQUJ8JQgQbetJ2qN1lgg1wCn7GwaRF+fUnOHz96E2IBzlkmuAx f6C83mXTbpUgZamtVrLPLJxjPNL8xpyIpI1ZaIJ/64QEzJUtLoQala+IszjUpK+A RZKYnpB/dZwEvnHhH/u4RPPpWo37YW9EVmP7zSIism3o+dgIoJSm8JPhdwu/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuHNp4Xw9XQYfrDdjLT4o1/5mNHMwHwYDVR0j BBgwFoAUd74aTzR/oxpc/EYfal08GeQVj4YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODI0ZDFlYmItYWVlYi00OTQ1LTllZjItMzJhZDliZmRlYjE5LzAvNzdCRTFBNEYz NDdGQTMxQTVDRkM0NjFGNkE1RDNDMTlFNDE1OEY4Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83N0JFMUE0RjM0N0ZBMzFBNUNGQzQ2MUY2QTVEM0MxOUU0MTU4 Rjg2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODI0ZDFlYmItYWVlYi00OTQ1LTll ZjItMzJhZDliZmRlYjE5LzAvNzdCRTFBNEYzNDdGQTMxQTVDRkM0NjFGNkE1RDND MTlFNDE1OEY4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAgahnhYu0bOWGQ9YKyFaend0FVIdBy3WVUr +iC2YiSDeZwf1rQmd5RZbYm3Czk5WI+4qZGw4n4Q9qz86loZmYbQlWHXreMDq5V0 d5UAOfX5wTzQShKBJqg021NJSG5iKgbr+XMjSgXS+gWFis1BcCc5rOLbi0r3HJiM 8n+Z6ot1+CCZekFBy3+6W3lTPrNf5/e4zBWVD3mjZjUGxMEDbKqRAL4zCK0qaucW HU5hUGDQZimk19NY5iYFr/fMfYL2eWvBx2Wu1Hu8bo5qCPlUILWDIp9kyMJvQMaD DRPvw8aOwpjVCZYrYCNBF121Ychhs0Xl+1ngmZ57xOEEYdJkkeA= -----END CERTIFICATE-----Generated at Sat Jun 20 11:42:01 2026 by rpki-client