$ rpki-client -vvf rpki-rsync.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.mft File: 77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.mft (raw, json) Hash identifier: 4UnEXTdeBiVWT491xOrl5GQfVv+mQYLWVFXdkMLhyuU= Subject key identifier: 80:8A:EE:BE:31:74:68:67:B0:F4:7A:72:60:48:90:4E:B9:50:15:80 Authority key identifier: 77:BE:1A:4F:34:7F:A3:1A:5C:FC:46:1F:6A:5D:3C:19:E4:15:8F:86 Certificate issuer: /CN=77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86 Certificate serial: 294738222D12F03E1981A837DB80B3F8688EBF24 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.mft Manifest number: 05 Signing time: Tue 05 May 2026 08:08:49 +0000 Manifest this update: Tue 05 May 2026 08:03:49 +0000 Manifest next update: Wed 06 May 2026 08:12:49 +0000 Files and hashes: 1: 3135372e36362e3132392e302f32342d3234203d3e20313336383733.roa (hash: RdSFCq5FmmEFwqUWQWODFaey3Jn4ol8h+jw95vgruqA=) 2: 3135372e36362e3132382e302f32342d3234203d3e20313336383733.roa (hash: /9AogUvejmnVzcfr/q/VgL8VHV8KOFXHgU8d/ZsRjs4=) 3: 77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.crl (hash: y1gCQq6sMUcYY4P6XxrmqQrdqGVXjFY14Xp3d7Awbc4=) 4: 3135372e36362e3132382e302f32332d3234203d3e20313336383733.roa (hash: ABmryXvmIdMzipy18c184WGStC1rvjxbGuTrZ93+HFk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.crl rsync://rpki-rsync.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 08:12:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:47:38:22:2d:12:f0:3e:19:81:a8:37:db:80:b3:f8:68:8e:bf:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86 Validity Not Before: May 5 08:03:49 2026 GMT Not After : May 6 08:12:49 2026 GMT Subject: CN=808AEEBE31746867B0F47A726048904EB9501580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5d:4e:84:b9:9e:e2:78:f4:a9:07:69:aa:cd: cb:2d:89:5d:98:20:43:39:97:42:1c:71:b6:69:f6: f7:42:c4:db:df:78:43:30:00:73:8d:19:6a:fd:71: da:ce:96:c2:bf:2a:da:0c:54:8a:a7:f2:4a:55:80: a9:b8:21:2c:7c:5b:ff:d1:0e:80:98:2f:4c:67:4b: bb:ac:ca:e9:10:53:fb:01:69:26:ff:f8:16:83:29: 21:0b:b0:d6:61:26:27:35:bf:9f:82:fc:fb:48:09: 5e:69:25:25:6d:08:ed:11:0b:52:fe:15:c9:3a:6b: 47:5d:7d:3f:65:ac:04:fa:67:17:13:37:b6:fa:5c: 86:e4:b0:e9:ae:6a:38:8e:d3:85:d4:75:8e:e5:ed: ec:ef:7f:18:49:09:33:6d:43:69:55:33:3f:c2:75: 14:a2:b8:c9:a3:1e:66:e5:69:7f:57:d0:39:44:f9: c8:cf:c3:ab:b3:9f:66:8e:02:09:62:18:e0:0e:4e: 59:73:7b:58:90:f4:b9:f1:3d:61:cc:93:8c:d3:fe: 9a:bd:5c:5a:bd:5d:c2:4f:25:08:7d:a2:48:f4:26: cf:ac:d7:c9:7f:cf:26:1f:3f:dc:7b:d8:cf:70:40: 0f:39:9f:7e:f3:7d:1a:f6:c0:33:ab:c5:48:65:29: ef:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:8A:EE:BE:31:74:68:67:B0:F4:7A:72:60:48:90:4E:B9:50:15:80 X509v3 Authority Key Identifier: keyid:77:BE:1A:4F:34:7F:A3:1A:5C:FC:46:1F:6A:5D:3C:19:E4:15:8F:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:64:27:0d:24:cb:92:23:3b:f0:5e:39:e6:1d:e7:ad:d4:91: 09:50:82:40:75:62:cd:a1:42:ea:e3:f5:da:7c:ea:b7:10:c8: 9d:b7:d7:e1:c7:5c:ac:b7:46:56:02:88:ef:4d:44:ff:24:af: 2c:f2:66:da:eb:53:7f:f1:fb:b3:53:29:25:fa:3f:ed:8a:5d: ee:30:9e:c4:94:2a:a1:3e:fe:44:8c:83:49:93:6a:d4:de:a2: 4e:06:e5:a9:49:c1:ea:21:68:40:e2:95:9d:57:c2:d9:ba:e1: 05:83:a9:fd:2f:aa:f3:c5:f9:56:69:ab:c4:08:c4:e2:83:83: 96:18:05:31:fd:08:13:6c:96:21:9d:9f:17:97:c9:f9:64:ef: 3c:dc:bd:e5:00:5a:7b:c9:ce:28:a7:f2:3d:14:67:03:b3:80: 2b:8b:8c:c8:9d:19:d2:12:e8:10:a2:7b:f5:4a:03:be:0b:8f: ad:c4:7a:ff:37:6b:ba:82:e8:63:cc:8c:f4:d3:4b:e1:03:ab: f7:d4:bd:02:1a:ad:1c:50:5c:a7:4f:ad:53:9e:70:d4:ec:4c: a2:2c:f6:d3:bb:5f:19:48:18:ab:9d:a3:68:b0:3c:f3:27:4a: 5d:df:ac:68:3f:5d:89:50:f2:4c:e2:cd:9c:4a:67:21:1a:d2: a4:aa:51:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKUc4Ii0S8D4Zgag324Cz+GiOvyQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzdCRTFBNEYzNDdGQTMxQTVDRkM0NjFGNkE1RDNDMTlF NDE1OEY4NjAeFw0yNjA1MDUwODAzNDlaFw0yNjA1MDYwODEyNDlaMDMxMTAvBgNV BAMTKDgwOEFFRUJFMzE3NDY4NjdCMEY0N0E3MjYwNDg5MDRFQjk1MDE1ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/XU6EuZ7iePSpB2mqzcstiV2Y IEM5l0IccbZp9vdCxNvfeEMwAHONGWr9cdrOlsK/KtoMVIqn8kpVgKm4ISx8W//R DoCYL0xnS7usyukQU/sBaSb/+BaDKSELsNZhJic1v5+C/PtICV5pJSVtCO0RC1L+ Fck6a0ddfT9lrAT6ZxcTN7b6XIbksOmuajiO04XUdY7l7ezvfxhJCTNtQ2lVMz/C dRSiuMmjHmblaX9X0DlE+cjPw6uzn2aOAgliGOAOTllze1iQ9LnxPWHMk4zT/pq9 XFq9XcJPJQh9okj0Js+s18l/zyYfP9x72M9wQA85n37zfRr2wDOrxUhlKe8zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgIruvjF0aGew9HpyYEiQTrlQFYAwHwYDVR0j BBgwFoAUd74aTzR/oxpc/EYfal08GeQVj4YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODI0ZDFlYmItYWVlYi00OTQ1LTllZjItMzJhZDliZmRlYjE5LzAvNzdCRTFBNEYz NDdGQTMxQTVDRkM0NjFGNkE1RDNDMTlFNDE1OEY4Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83N0JFMUE0RjM0N0ZBMzFBNUNGQzQ2MUY2QTVEM0MxOUU0MTU4 Rjg2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODI0ZDFlYmItYWVlYi00OTQ1LTll ZjItMzJhZDliZmRlYjE5LzAvNzdCRTFBNEYzNDdGQTMxQTVDRkM0NjFGNkE1RDND MTlFNDE1OEY4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJlkJw0ky5IjO/BeOeYd563UkQlQgkB1Ys2h Qurj9dp86rcQyJ231+HHXKy3RlYCiO9NRP8kryzyZtrrU3/x+7NTKSX6P+2KXe4w nsSUKqE+/kSMg0mTatTeok4G5alJweohaEDilZ1Xwtm64QWDqf0vqvPF+VZpq8QI xOKDg5YYBTH9CBNsliGdnxeXyflk7zzcveUAWnvJziin8j0UZwOzgCuLjMidGdIS 6BCie/VKA74Lj63Eev83a7qC6GPMjPTTS+EDq/fUvQIarRxQXKdPrVOecNTsTKIs 9tO7XxlIGKudo2iwPPMnSl3frGg/XYlQ8kzizZxKZyEa0qSqUQo= -----END CERTIFICATE-----Generated at Tue May 5 14:12:10 2026 by rpki-client