
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fbcd9a7d-de35-47e8-9228-12dfb0b8eac8/0/777F8859548675F259A5672AD63DF1A9F42E8A67.mft
File: 777F8859548675F259A5672AD63DF1A9F42E8A67.mft (raw, json)
Hash identifier: d6LmjJcmepg/0+kt3D6Tpb5uuN1CXsjF5VTCdX3Ykdg=
Subject key identifier: E3:E4:B0:33:F3:40:2A:2E:0A:E2:99:67:54:A5:C1:A4:72:26:4A:65
Authority key identifier: 77:7F:88:59:54:86:75:F2:59:A5:67:2A:D6:3D:F1:A9:F4:2E:8A:67
Certificate issuer: /CN=777F8859548675F259A5672AD63DF1A9F42E8A67
Certificate serial: 02F50ECD523F8E06BE5D4FC00F9BE2D9DDD0B4C7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/777F8859548675F259A5672AD63DF1A9F42E8A67.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/fbcd9a7d-de35-47e8-9228-12dfb0b8eac8/0/777F8859548675F259A5672AD63DF1A9F42E8A67.mft
Manifest number: BA
Signing time: Thu 17 Sep 2026 08:03:34 +0000
Manifest this update: Thu 17 Sep 2026 07:58:34 +0000
Manifest next update: Fri 18 Sep 2026 11:51:34 +0000
Files and hashes: 1: 777F8859548675F259A5672AD63DF1A9F42E8A67.crl (hash: 0LqOi6q4We1R+hj07f++N1QeRKvvW15Dfxprg13W48w=)
2: 3130332e3136392e3138362e302f32332d3234203d3e20313432333532.roa (hash: iHiiX8SijifHyF+URYyoJlMsUbrSgCPm7mjyVuXV+U4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/fbcd9a7d-de35-47e8-9228-12dfb0b8eac8/0/777F8859548675F259A5672AD63DF1A9F42E8A67.crl
rsync://rpki-rsync.idnic.net/repo/fbcd9a7d-de35-47e8-9228-12dfb0b8eac8/0/777F8859548675F259A5672AD63DF1A9F42E8A67.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/777F8859548675F259A5672AD63DF1A9F42E8A67.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 09:57:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:f5:0e:cd:52:3f:8e:06:be:5d:4f:c0:0f:9b:e2:d9:dd:d0:b4:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=777F8859548675F259A5672AD63DF1A9F42E8A67
Validity
Not Before: Sep 17 07:58:34 2026 GMT
Not After : Sep 18 11:51:34 2026 GMT
Subject: CN=E3E4B033F3402A2E0AE2996754A5C1A472264A65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ac:19:ff:83:af:bd:3f:59:8e:15:c6:e2:1c:
f1:98:b8:d4:c1:f2:36:83:19:81:02:12:06:57:2f:
38:12:b1:1e:43:fa:6b:7d:8a:b0:e9:04:01:53:a3:
44:98:73:50:07:58:b2:4f:0c:58:59:23:99:3c:90:
b4:93:c3:a7:1b:c3:4c:62:55:1d:d6:f3:3d:10:9b:
fe:d6:d5:1f:83:84:ef:e5:fb:d4:2d:00:39:d0:2c:
4a:08:94:d0:66:14:87:c8:39:59:eb:8e:71:da:2c:
d8:b5:17:c9:81:1e:fa:ce:24:22:88:1d:bf:b3:a2:
83:2c:31:9f:d7:95:fb:bd:a5:2d:07:21:e6:80:f2:
83:03:1b:4d:a9:c6:a1:6d:7e:fb:ae:51:32:a7:67:
b7:4e:d6:5a:2e:b1:f6:96:55:d9:d4:41:18:26:33:
61:7a:e6:17:d1:64:80:9b:7b:db:20:bd:af:a7:34:
04:31:f2:48:dd:1d:a7:f6:38:3c:33:6c:28:e6:d1:
81:71:79:8b:89:ca:5d:36:19:59:5f:6b:1c:4d:f5:
39:39:e4:fb:e6:5e:38:c7:e6:e8:4f:c7:99:d8:69:
34:dd:c0:88:fb:7a:97:b2:6f:d2:0b:a4:01:6d:cd:
d5:47:18:54:9b:ad:0f:95:09:ed:a8:38:de:e5:ec:
4e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E4:B0:33:F3:40:2A:2E:0A:E2:99:67:54:A5:C1:A4:72:26:4A:65
X509v3 Authority Key Identifier:
keyid:77:7F:88:59:54:86:75:F2:59:A5:67:2A:D6:3D:F1:A9:F4:2E:8A:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/fbcd9a7d-de35-47e8-9228-12dfb0b8eac8/0/777F8859548675F259A5672AD63DF1A9F42E8A67.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/777F8859548675F259A5672AD63DF1A9F42E8A67.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fbcd9a7d-de35-47e8-9228-12dfb0b8eac8/0/777F8859548675F259A5672AD63DF1A9F42E8A67.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:6e:fa:ff:ee:fb:06:62:41:a2:12:9e:b5:17:04:11:fe:25:
87:88:28:35:35:31:92:7d:af:9c:37:1b:a5:a7:4a:20:9a:a9:
8f:21:a0:ee:f6:1e:0d:dd:dc:51:9d:9e:fd:ac:a3:c9:55:70:
c3:47:f7:52:4e:01:cb:cb:cf:9f:30:cc:53:df:58:d4:0a:71:
5a:d1:cd:09:fe:37:3a:6a:9f:65:fe:a4:ed:d3:b4:f5:3b:b2:
3a:8a:15:62:19:92:10:dc:89:81:fb:b4:c0:3e:6b:2e:77:3c:
c6:75:3e:2a:c9:4c:ff:be:09:8f:8f:8c:ca:55:54:e4:35:7d:
98:db:84:9e:29:7d:22:b9:d4:84:30:8b:a2:5c:50:02:5e:f2:
fe:95:7c:f9:a2:7a:ab:06:02:ed:e3:f4:bd:c7:70:6f:7e:75:
3a:90:e8:fe:9b:ae:ac:78:33:b3:19:be:6c:87:23:90:f7:da:
0e:d6:27:4e:0e:a7:e0:1c:0a:eb:85:8c:ac:ae:db:38:7c:7b:
5e:88:1e:6c:04:f2:17:25:18:84:b6:cc:dc:79:0d:2f:1c:a2:
72:7e:4b:cf:bc:16:42:3a:27:4d:ba:49:36:8f:4b:e3:90:47:
bf:8d:5c:81:f4:15:ac:73:cc:eb:b7:45:21:b9:c0:5c:82:bb:
e1:49:bb:ca
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUAvUOzVI/jga+XU/AD5vi2d3QtMcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzc3Rjg4NTk1NDg2NzVGMjU5QTU2NzJBRDYzREYxQTlG
NDJFOEE2NzAeFw0yNjA5MTcwNzU4MzRaFw0yNjA5MTgxMTUxMzRaMDMxMTAvBgNV
BAMTKEUzRTRCMDMzRjM0MDJBMkUwQUUyOTk2NzU0QTVDMUE0NzIyNjRBNjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnrBn/g6+9P1mOFcbiHPGYuNTB
8jaDGYECEgZXLzgSsR5D+mt9irDpBAFTo0SYc1AHWLJPDFhZI5k8kLSTw6cbw0xi
VR3W8z0Qm/7W1R+DhO/l+9QtADnQLEoIlNBmFIfIOVnrjnHaLNi1F8mBHvrOJCKI
Hb+zooMsMZ/Xlfu9pS0HIeaA8oMDG02pxqFtfvuuUTKnZ7dO1lousfaWVdnUQRgm
M2F65hfRZICbe9sgva+nNAQx8kjdHaf2ODwzbCjm0YFxeYuJyl02GVlfaxxN9Tk5
5PvmXjjH5uhPx5nYaTTdwIj7epeyb9ILpAFtzdVHGFSbrQ+VCe2oON7l7E4HAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU4+SwM/NAKi4K4plnVKXBpHImSmUwHwYDVR0j
BBgwFoAUd3+IWVSGdfJZpWcq1j3xqfQuimcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZmJjZDlhN2QtZGUzNS00N2U4LTkyMjgtMTJkZmIwYjhlYWM4LzAvNzc3Rjg4NTk1
NDg2NzVGMjU5QTU2NzJBRDYzREYxQTlGNDJFOEE2Ny5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83NzdGODg1OTU0ODY3NUYyNTlBNTY3MkFENjNERjFBOUY0MkU4
QTY3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmJjZDlhN2QtZGUzNS00N2U4LTky
MjgtMTJkZmIwYjhlYWM4LzAvNzc3Rjg4NTk1NDg2NzVGMjU5QTU2NzJBRDYzREYx
QTlGNDJFOEE2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAABu+v/u+wZiQaISnrUXBBH+JYeIKDU1MZJ9
r5w3G6WnSiCaqY8hoO72Hg3d3FGdnv2so8lVcMNH91JOAcvLz58wzFPfWNQKcVrR
zQn+Nzpqn2X+pO3TtPU7sjqKFWIZkhDciYH7tMA+ay53PMZ1PirJTP++CY+PjMpV
VOQ1fZjbhJ4pfSK51IQwi6JcUAJe8v6VfPmieqsGAu3j9L3HcG9+dTqQ6P6brqx4
M7MZvmyHI5D32g7WJ04Op+AcCuuFjKyu2zh8e16IHmwE8hclGIS2zNx5DS8conJ+
S8+8FkI6J026STaPS+OQR7+NXIH0FaxzzOu3RSG5wFyCu+FJu8o=
-----END CERTIFICATE-----
Generated at Thu Sep 17 12:19:33 2026 by rpki-client