
$ rpki-client -vvf rpki-rsync.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.mft
File: 77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.mft (raw, json)
Hash identifier: rtQI4mKNs0zN4iCr3FJYrk0GXZGBrJTHy3oR4ISZ5VI=
Subject key identifier: 98:FA:A3:A4:EE:32:11:B9:6F:21:18:3D:DE:DD:FC:F9:BD:91:0A:B3
Authority key identifier: 77:BE:1A:4F:34:7F:A3:1A:5C:FC:46:1F:6A:5D:3C:19:E4:15:8F:86
Certificate issuer: /CN=77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86
Certificate serial: 3AD35785C5D3CB3B0D5F5D5472EC09B21A5D3AFF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.mft
Manifest number: 94
Signing time: Wed 19 Aug 2026 23:06:53 +0000
Manifest this update: Wed 19 Aug 2026 23:01:53 +0000
Manifest next update: Fri 21 Aug 2026 01:02:53 +0000
Files and hashes: 1: 77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.crl (hash: Q7wxNJ24XXTtETRxFQDKnoV04WN7TL8p+CR3xWSsb8k=)
2: 3135372e36362e3132382e302f32332d3234203d3e20313336383733.roa (hash: ABmryXvmIdMzipy18c184WGStC1rvjxbGuTrZ93+HFk=)
3: 3135372e36362e3132382e302f32342d3234203d3e20313336383733.roa (hash: /9AogUvejmnVzcfr/q/VgL8VHV8KOFXHgU8d/ZsRjs4=)
4: 3135372e36362e3132392e302f32342d3234203d3e20313336383733.roa (hash: RdSFCq5FmmEFwqUWQWODFaey3Jn4ol8h+jw95vgruqA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.crl
rsync://rpki-rsync.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Aug 2026 01:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:d3:57:85:c5:d3:cb:3b:0d:5f:5d:54:72:ec:09:b2:1a:5d:3a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86
Validity
Not Before: Aug 19 23:01:53 2026 GMT
Not After : Aug 21 01:02:53 2026 GMT
Subject: CN=98FAA3A4EE3211B96F21183DDEDDFCF9BD910AB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:50:f7:3d:b2:38:2a:27:4d:a2:9c:d3:a5:6b:
e8:41:ae:99:fd:93:82:3d:39:35:fa:f9:80:d5:bf:
d3:25:cf:9f:0a:a3:95:21:c6:a6:e8:e7:2a:44:e0:
58:30:f0:95:11:85:0a:03:d0:a4:9e:3b:c3:47:af:
af:0d:26:ad:52:50:20:98:97:7a:04:be:f7:b3:cd:
c5:b1:7f:bd:3b:b3:ed:9c:f5:c5:76:85:a0:b0:95:
25:2d:c2:2f:2e:80:c9:20:eb:9b:09:07:13:6b:f6:
50:a8:cb:0b:7f:7a:86:a6:0e:28:f9:22:f9:19:67:
e8:03:9f:c9:70:ba:2f:d3:ab:c0:2b:b0:ea:4a:0e:
b4:55:0e:68:cd:f6:4a:67:68:fb:c3:b7:f1:e4:d1:
89:f4:12:3d:72:37:0a:33:91:07:fc:97:bd:6e:39:
7c:28:23:97:d5:44:49:b7:b2:0b:94:ee:5e:a4:ee:
39:dd:c8:50:c5:0d:95:e6:6d:e2:f2:ec:b8:cb:af:
60:f4:2c:1e:20:1c:8e:46:64:ff:1f:7a:98:a9:d3:
28:7c:f2:8b:0c:bb:ca:d1:3e:8c:f0:b0:f1:46:99:
e8:a1:f6:65:11:cc:77:1a:25:c8:0a:ae:a9:1d:d4:
59:42:a7:ce:f5:8f:e5:a3:ae:51:f7:27:b2:62:75:
74:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:FA:A3:A4:EE:32:11:B9:6F:21:18:3D:DE:DD:FC:F9:BD:91:0A:B3
X509v3 Authority Key Identifier:
keyid:77:BE:1A:4F:34:7F:A3:1A:5C:FC:46:1F:6A:5D:3C:19:E4:15:8F:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:f1:1f:ef:1a:d4:30:b0:f5:c5:b2:d5:ff:3a:c9:96:80:b1:
48:25:d2:39:88:59:64:1e:c6:e6:39:55:30:58:54:07:9e:51:
e0:50:34:ea:d8:dc:71:f2:29:1e:9c:5c:c5:8c:47:0b:db:aa:
75:82:6e:1a:e1:93:77:0d:09:d6:7d:7d:63:c9:8e:cc:b9:44:
25:40:73:8b:08:49:01:0a:8f:80:01:c3:44:5c:7a:3f:cd:d5:
cc:63:49:aa:7d:f2:c1:87:65:c4:d0:23:c9:11:8c:38:1b:16:
71:51:0d:6f:2d:7a:2c:9f:b6:18:f8:69:55:7f:90:41:b4:f7:
de:8e:e0:d6:d4:13:1f:2f:56:2f:e4:db:4e:b6:13:e7:66:40:
62:54:6d:e9:40:c7:29:ab:36:fc:34:92:d9:ae:41:a2:b0:7c:
89:2b:16:2b:0e:83:29:de:d3:db:63:c3:d5:33:1a:ff:c3:d0:
86:c0:ab:c7:f8:6e:f5:a3:3f:19:86:fc:3d:f2:68:57:cc:6d:
d3:ad:1b:9c:ce:29:d7:c5:bb:6f:15:a4:ed:c4:49:bf:3a:5b:
b3:94:6c:fb:56:28:1d:fb:e2:4a:3d:3d:01:e4:c6:c6:da:d3:
54:16:46:53:7a:62:3c:fb:fe:16:e8:68:4b:ac:d2:34:b7:36:
ff:1d:e8:ae
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUOtNXhcXTyzsNX11UcuwJshpdOv8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzdCRTFBNEYzNDdGQTMxQTVDRkM0NjFGNkE1RDNDMTlF
NDE1OEY4NjAeFw0yNjA4MTkyMzAxNTNaFw0yNjA4MjEwMTAyNTNaMDMxMTAvBgNV
BAMTKDk4RkFBM0E0RUUzMjExQjk2RjIxMTgzRERFRERGQ0Y5QkQ5MTBBQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClUPc9sjgqJ02inNOla+hBrpn9
k4I9OTX6+YDVv9Mlz58Ko5Uhxqbo5ypE4Fgw8JURhQoD0KSeO8NHr68NJq1SUCCY
l3oEvvezzcWxf707s+2c9cV2haCwlSUtwi8ugMkg65sJBxNr9lCoywt/eoamDij5
IvkZZ+gDn8lwui/Tq8ArsOpKDrRVDmjN9kpnaPvDt/Hk0Yn0Ej1yNwozkQf8l71u
OXwoI5fVREm3sguU7l6k7jndyFDFDZXmbeLy7LjLr2D0LB4gHI5GZP8fepip0yh8
8osMu8rRPozwsPFGmeih9mURzHcaJcgKrqkd1FlCp871j+WjrlH3J7JidXT7AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUmPqjpO4yEblvIRg93t38+b2RCrMwHwYDVR0j
BBgwFoAUd74aTzR/oxpc/EYfal08GeQVj4YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ODI0ZDFlYmItYWVlYi00OTQ1LTllZjItMzJhZDliZmRlYjE5LzAvNzdCRTFBNEYz
NDdGQTMxQTVDRkM0NjFGNkE1RDNDMTlFNDE1OEY4Ni5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC83N0JFMUE0RjM0N0ZBMzFBNUNGQzQ2MUY2QTVEM0MxOUU0MTU4
Rjg2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODI0ZDFlYmItYWVlYi00OTQ1LTll
ZjItMzJhZDliZmRlYjE5LzAvNzdCRTFBNEYzNDdGQTMxQTVDRkM0NjFGNkE1RDND
MTlFNDE1OEY4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABPxH+8a1DCw9cWy1f86yZaAsUgl0jmIWWQe
xuY5VTBYVAeeUeBQNOrY3HHyKR6cXMWMRwvbqnWCbhrhk3cNCdZ9fWPJjsy5RCVA
c4sISQEKj4ABw0Rcej/N1cxjSap98sGHZcTQI8kRjDgbFnFRDW8teiyfthj4aVV/
kEG0996O4NbUEx8vVi/k2062E+dmQGJUbelAxymrNvw0ktmuQaKwfIkrFisOgyne
09tjw9UzGv/D0IbAq8f4bvWjPxmG/D3yaFfMbdOtG5zOKdfFu28VpO3ESb86W7OU
bPtWKB374ko9PQHkxsba01QWRlN6Yjz7/hboaEus0jS3Nv8d6K4=
-----END CERTIFICATE-----
Generated at Thu Aug 20 10:22:35 2026 by rpki-client