
$ rpki-client -vvf repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.mft
File: 77776250E47CDCAE9263AB4AF8FA40A1391792EA.mft (raw, json)
Hash identifier: 4ayo6GtgQ15nVBIcN+QVb9wDk+6Ua/l5ZXJHBImdSaw=
Subject key identifier: E0:E8:7E:E6:FE:33:72:34:9B:F9:B5:02:22:46:EA:F7:EE:D1:53:0C
Authority key identifier: 77:77:62:50:E4:7C:DC:AE:92:63:AB:4A:F8:FA:40:A1:39:17:92:EA
Certificate issuer: /CN=77776250E47CDCAE9263AB4AF8FA40A1391792EA
Certificate serial: 7185C6A8EF045DDADE67AF345AB5F112194E9A86
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77776250E47CDCAE9263AB4AF8FA40A1391792EA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.mft
Manifest number: 023D
Signing time: Sun 01 Mar 2026 09:31:46 +0000
Manifest this update: Sun 01 Mar 2026 09:26:46 +0000
Manifest next update: Wed 04 Mar 2026 11:01:46 +0000
Files and hashes: 1: 77776250E47CDCAE9263AB4AF8FA40A1391792EA.crl (hash: F6yA8kV3GcZR29upGmJs2k38nNQSqeg99w7KSJcRT0w=)
2: 323030313a6466303a663534303a3a2f34382d3438203d3e20313431363231.roa (hash: vAIjmbx3dVuW8GpN3/fZq5ol916CeS6StRg+6uf/1t0=)
3: 3130332e3136312e3136342e302f32342d3234203d3e20313431363231.roa (hash: F7Hvn3nr15WKTOMp+UJFZvJVrdndxdoOm2ecLXQTtiA=)
4: 3130332e3136312e3136352e302f32342d3234203d3e20313431363231.roa (hash: VfFxxuazE0SD/9aiBAJNKHpH/m4/DEssj0TquLDvxPg=)
5: 3130332e3136312e3136342e302f32332d3233203d3e20313431363231.roa (hash: mgkxr/SuMyMsRvRjiMcUueP3vdh3ZYSiC7xct6qMuK4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.crl
rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77776250E47CDCAE9263AB4AF8FA40A1391792EA.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 11:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:85:c6:a8:ef:04:5d:da:de:67:af:34:5a:b5:f1:12:19:4e:9a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77776250E47CDCAE9263AB4AF8FA40A1391792EA
Validity
Not Before: Mar 1 09:26:46 2026 GMT
Not After : Mar 4 11:01:46 2026 GMT
Subject: CN=E0E87EE6FE3372349BF9B5022246EAF7EED1530C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5b:43:5d:ad:2b:9d:f6:c2:d5:c5:0a:3c:a3:
3b:c0:10:88:fe:51:48:93:b3:a8:41:70:7d:db:60:
2a:d1:b9:b5:fc:d0:68:76:24:f7:cb:0f:95:b5:74:
71:3b:68:84:63:8b:ee:6e:cc:86:5f:05:8e:1a:a2:
94:98:7c:42:7b:7d:56:69:86:db:2a:c6:1a:48:26:
f0:ef:73:e4:2e:50:d3:01:38:e6:0e:f1:22:c0:dd:
16:4a:bd:bc:54:a3:74:bb:8a:59:c7:c7:e1:fb:eb:
5f:1d:3c:a0:54:5d:52:70:25:6a:a8:fa:e8:87:99:
42:c3:b7:da:8e:82:ab:e6:34:d9:b1:2e:08:68:ae:
f8:ac:2e:48:45:b6:cd:39:f3:a7:eb:b3:f7:c9:b3:
68:65:e0:d5:e7:bf:20:dd:bc:41:cf:7b:92:02:f6:
d0:8a:0e:73:5e:48:20:8b:90:d8:1e:5c:1d:69:d4:
66:a0:9e:ac:d9:e3:3f:f0:3b:e3:e3:71:6c:fc:3c:
db:6b:70:41:7e:18:28:67:03:39:47:6e:4d:11:68:
10:f7:44:41:4d:ae:bc:d8:54:68:4a:8b:1c:b1:cf:
f5:8a:52:2f:1e:02:1f:b7:01:b3:0f:62:8e:61:9b:
31:9f:bb:c2:fc:95:11:65:86:08:c7:b9:dd:48:f3:
97:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E8:7E:E6:FE:33:72:34:9B:F9:B5:02:22:46:EA:F7:EE:D1:53:0C
X509v3 Authority Key Identifier:
keyid:77:77:62:50:E4:7C:DC:AE:92:63:AB:4A:F8:FA:40:A1:39:17:92:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77776250E47CDCAE9263AB4AF8FA40A1391792EA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:8f:94:8a:e2:de:72:bd:25:99:91:b2:5d:d5:8e:c9:13:c4:
1f:72:45:02:b6:cc:cc:a8:e0:22:7d:ef:c0:56:e5:81:95:a0:
23:5f:cc:88:ce:02:ff:00:78:a5:68:9f:25:bf:77:20:8d:4e:
27:01:b2:cd:b2:27:8b:28:b1:41:81:6d:81:c2:09:45:0f:36:
1f:73:ee:8d:48:a9:6b:a1:7b:53:0e:b4:a8:d2:b5:86:d4:20:
65:a0:77:f5:78:5f:74:eb:6f:c8:8e:2e:49:24:34:2b:27:38:
93:ca:04:fb:97:f2:cc:1e:bf:04:a6:f1:7f:4a:f9:46:46:c7:
1f:8d:26:d2:f9:6b:20:f3:11:22:d7:bd:ba:ee:34:56:de:9d:
07:57:ed:4f:f0:16:88:16:c8:2d:38:60:6a:ab:72:02:dc:7f:
f8:a7:65:1f:94:40:66:be:56:ae:62:71:42:b8:f9:f3:67:ee:
50:1b:1d:09:7b:7f:dc:3c:07:fa:96:ca:da:e8:d6:c3:f8:f8:
b2:bb:e6:69:81:1c:f5:cd:61:f2:ef:20:5f:bf:8e:34:c1:e3:
42:5e:40:b2:48:ac:f8:fb:58:2d:a6:b2:5e:17:0a:c5:14:b7:
b7:c5:df:dc:7c:d0:b6:3e:47:79:8b:29:38:e2:d2:80:55:ce:
9e:bd:4d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:23:58 2026 by rpki-client