$ rpki-client -vvf repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.mft File: 77776250E47CDCAE9263AB4AF8FA40A1391792EA.mft (raw, json) Hash identifier: RLMDsmWPCgcJv1eUHm4GpHsTspAYCAou+ChkiW4RpBE= Subject key identifier: B6:0A:43:41:CB:85:E9:F2:0D:F1:49:F9:AF:46:52:8D:98:CC:BA:C2 Authority key identifier: 77:77:62:50:E4:7C:DC:AE:92:63:AB:4A:F8:FA:40:A1:39:17:92:EA Certificate issuer: /CN=77776250E47CDCAE9263AB4AF8FA40A1391792EA Certificate serial: 6BEBA027CB7FD90B252373C0A9C2211BD96DFFC4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77776250E47CDCAE9263AB4AF8FA40A1391792EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.mft Manifest number: 0252 Signing time: Fri 17 Apr 2026 12:21:47 +0000 Manifest this update: Fri 17 Apr 2026 12:16:47 +0000 Manifest next update: Mon 20 Apr 2026 20:09:47 +0000 Files and hashes: 1: 323030313a6466303a663534303a3a2f34382d3438203d3e20313431363231.roa (hash: vAIjmbx3dVuW8GpN3/fZq5ol916CeS6StRg+6uf/1t0=) 2: 3130332e3136312e3136352e302f32342d3234203d3e20313431363231.roa (hash: VfFxxuazE0SD/9aiBAJNKHpH/m4/DEssj0TquLDvxPg=) 3: 3130332e3136312e3136342e302f32332d3233203d3e20313431363231.roa (hash: mgkxr/SuMyMsRvRjiMcUueP3vdh3ZYSiC7xct6qMuK4=) 4: 77776250E47CDCAE9263AB4AF8FA40A1391792EA.crl (hash: CAif+FpIe/E1EwsR1WbmPL8wW4iBUWPW0gq5esQQyfU=) 5: 3130332e3136312e3136342e302f32342d3234203d3e20313431363231.roa (hash: F7Hvn3nr15WKTOMp+UJFZvJVrdndxdoOm2ecLXQTtiA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.crl rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77776250E47CDCAE9263AB4AF8FA40A1391792EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 20:07:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:eb:a0:27:cb:7f:d9:0b:25:23:73:c0:a9:c2:21:1b:d9:6d:ff:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77776250E47CDCAE9263AB4AF8FA40A1391792EA Validity Not Before: Apr 17 12:16:47 2026 GMT Not After : Apr 20 20:09:47 2026 GMT Subject: CN=B60A4341CB85E9F20DF149F9AF46528D98CCBAC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:26:95:36:fc:36:aa:d4:03:6d:46:65:94:27: 5b:7d:10:45:93:b4:3b:be:26:be:3d:da:3a:e3:92: 0a:43:b4:0d:e0:24:79:2d:0f:b7:d5:17:b8:85:80: 7e:e4:25:0e:a4:16:2a:71:a7:fe:15:d2:75:8b:db: 6c:85:97:a8:87:e7:f1:8c:70:b0:ea:f8:e6:08:1f: 4c:1f:8d:7c:49:b2:e2:41:fd:d8:8b:aa:44:ee:dd: f8:db:3e:9b:2c:ab:fb:51:53:06:eb:13:b3:6f:a9: 06:6f:93:a8:8b:f3:b2:d2:12:e1:64:0d:34:ad:8f: 4f:49:72:97:b0:44:15:f7:d4:54:17:9e:61:c2:bc: 6c:d1:11:e3:24:92:e4:58:40:f7:0f:23:21:2b:44: c7:31:a3:4d:73:a4:10:fd:b7:39:5c:ed:31:a7:92: fd:04:92:ae:66:3e:5d:1b:db:de:bf:35:23:4e:0f: a2:a9:bd:5d:d7:94:85:45:51:70:b9:53:6c:0b:52: 11:07:ab:ff:27:6d:68:af:a5:52:33:6a:ad:61:6b: ba:c1:fd:dc:9a:a4:97:8c:a5:15:dc:62:08:26:83: 40:99:3d:99:99:cc:43:b1:8e:69:aa:db:2f:d3:d5: 2e:10:3f:43:c3:2e:7a:f2:db:a0:86:6d:0a:7e:0e: ce:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:0A:43:41:CB:85:E9:F2:0D:F1:49:F9:AF:46:52:8D:98:CC:BA:C2 X509v3 Authority Key Identifier: keyid:77:77:62:50:E4:7C:DC:AE:92:63:AB:4A:F8:FA:40:A1:39:17:92:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77776250E47CDCAE9263AB4AF8FA40A1391792EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:60:73:e6:3e:4e:2f:7e:ac:0c:d9:52:a0:12:6f:9d:bf:86: db:50:66:b1:2c:ca:07:64:3a:c5:5b:96:94:ab:6e:07:3f:27: 4a:e4:e5:0d:7e:ef:74:da:fe:30:77:57:0c:f9:5f:60:6e:64: da:7e:68:f7:1e:3d:74:ce:69:8c:06:b0:12:b0:29:47:b6:32: 23:79:a9:ca:dd:7d:be:53:02:3f:90:d5:cc:c0:27:72:ae:d0: d4:06:58:87:ad:68:b3:73:52:d7:b1:49:7a:27:34:1f:52:65: 9c:9d:a2:3c:eb:25:1b:41:81:e9:bf:86:66:a7:b8:91:0f:ec: 62:59:33:c4:63:d2:b5:ed:d4:5f:9f:74:69:66:13:6d:03:c6: 14:85:c9:d6:7a:3e:30:56:b6:d8:b4:e4:ea:2e:d1:3e:f6:79: 89:5d:d5:4d:8b:b0:3d:9e:ef:c8:cb:62:ea:b7:04:84:db:f4: 3f:4d:d9:01:57:46:0c:12:ea:d2:11:fb:d5:28:31:1f:60:1c: ae:db:85:f6:9a:36:f9:89:d0:0b:0c:14:aa:27:9b:fd:19:cf: 37:6e:0a:fe:73:0a:a7:c3:e0:be:e2:a5:e7:91:a1:f3:b4:22: f8:9d:c6:66:42:c0:d2:02:94:17:04:64:04:0b:07:0c:de:d6: 39:aa:05:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa+ugJ8t/2QslI3PAqcIhG9lt/8QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzc3NzYyNTBFNDdDRENBRTkyNjNBQjRBRjhGQTQwQTEz OTE3OTJFQTAeFw0yNjA0MTcxMjE2NDdaFw0yNjA0MjAyMDA5NDdaMDMxMTAvBgNV BAMTKEI2MEE0MzQxQ0I4NUU5RjIwREYxNDlGOUFGNDY1MjhEOThDQ0JBQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/JpU2/Daq1ANtRmWUJ1t9EEWT tDu+Jr492jrjkgpDtA3gJHktD7fVF7iFgH7kJQ6kFipxp/4V0nWL22yFl6iH5/GM cLDq+OYIH0wfjXxJsuJB/diLqkTu3fjbPpssq/tRUwbrE7NvqQZvk6iL87LSEuFk DTStj09JcpewRBX31FQXnmHCvGzREeMkkuRYQPcPIyErRMcxo01zpBD9tzlc7TGn kv0Ekq5mPl0b296/NSNOD6KpvV3XlIVFUXC5U2wLUhEHq/8nbWivpVIzaq1ha7rB /dyapJeMpRXcYggmg0CZPZmZzEOxjmmq2y/T1S4QP0PDLnry26CGbQp+Ds7XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtgpDQcuF6fIN8Un5r0ZSjZjMusIwHwYDVR0j BBgwFoAUd3diUOR83K6SY6tK+PpAoTkXkuowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTE3ZmU5OC04ZjU4LTQ5N2YtYmU1Ny04NjY1YTdhMDRiYjAvMC83Nzc3NjI1MEU0 N0NEQ0FFOTI2M0FCNEFGOEZBNDBBMTM5MTc5MkVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzc3NzYyNTBFNDdDRENBRTkyNjNBQjRBRjhGQTQwQTEzOTE3 OTJFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTUxN2ZlOTgtOGY1OC00OTdmLWJl NTctODY2NWE3YTA0YmIwLzAvNzc3NzYyNTBFNDdDRENBRTkyNjNBQjRBRjhGQTQw QTEzOTE3OTJFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFxgc+Y+Ti9+rAzZUqASb52/httQZrEsygdk OsVblpSrbgc/J0rk5Q1+73Ta/jB3Vwz5X2BuZNp+aPcePXTOaYwGsBKwKUe2MiN5 qcrdfb5TAj+Q1czAJ3Ku0NQGWIetaLNzUtexSXonNB9SZZydojzrJRtBgem/hman uJEP7GJZM8Rj0rXt1F+fdGlmE20DxhSFydZ6PjBWtti05Oou0T72eYld1U2LsD2e 78jLYuq3BITb9D9N2QFXRgwS6tIR+9UoMR9gHK7bhfaaNvmJ0AsMFKonm/0Zzzdu Cv5zCqfD4L7ipeeRofO0IvidxmZCwNIClBcEZAQLBwze1jmqBfo= -----END CERTIFICATE-----Generated at Fri Apr 17 21:28:34 2026 by rpki-client