$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/77CB9A6395CC778A642E54A422EF7D86D5A20518.mft File: 77CB9A6395CC778A642E54A422EF7D86D5A20518.mft (raw, json) Hash identifier: HP7VA75kjLo00tiZE/Ap6WA7BxQucf9Q4ztc/EBfeZI= Subject key identifier: 91:DA:D4:9B:1D:24:17:AA:97:01:AB:31:54:D4:A8:DD:8F:E7:63:E1 Authority key identifier: 77:CB:9A:63:95:CC:77:8A:64:2E:54:A4:22:EF:7D:86:D5:A2:05:18 Certificate issuer: /CN=77CB9A6395CC778A642E54A422EF7D86D5A20518 Certificate serial: 0B0B9AF6DE3086EB8B4A006B4B5D41398C20936E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/77CB9A6395CC778A642E54A422EF7D86D5A20518.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/77CB9A6395CC778A642E54A422EF7D86D5A20518.mft Manifest number: C0 Signing time: Thu 24 Sep 2026 00:46:37 +0000 Manifest this update: Thu 24 Sep 2026 00:41:37 +0000 Manifest next update: Fri 25 Sep 2026 01:22:37 +0000 Files and hashes: 1: 77CB9A6395CC778A642E54A422EF7D86D5A20518.crl (hash: dyd2Twuvf/4RA2U0aeJ/OBovIdVGDWUvZpGEfVE3a7s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/77CB9A6395CC778A642E54A422EF7D86D5A20518.crl rsync://rpki-rsync.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/77CB9A6395CC778A642E54A422EF7D86D5A20518.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/77CB9A6395CC778A642E54A422EF7D86D5A20518.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 01:22:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:0b:9a:f6:de:30:86:eb:8b:4a:00:6b:4b:5d:41:39:8c:20:93:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77CB9A6395CC778A642E54A422EF7D86D5A20518 Validity Not Before: Sep 24 00:41:37 2026 GMT Not After : Sep 25 01:22:37 2026 GMT Subject: CN=91DAD49B1D2417AA9701AB3154D4A8DD8FE763E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:6d:3b:fe:e4:77:af:e6:22:9a:68:55:2d:f0: 5d:5e:58:ce:c1:ad:af:1b:4a:4d:fa:ca:1f:16:73: ef:37:33:72:35:96:59:29:0d:f3:e5:0d:ea:b4:34: 39:8a:e8:f7:41:bd:7f:55:ce:29:86:cd:c0:a3:63: 89:e2:00:ab:34:59:28:8b:f8:e4:a7:79:ce:c6:7a: 61:58:21:ae:90:87:a6:86:02:d2:e1:32:a0:2f:75: 17:2a:02:f0:97:aa:1d:35:e0:95:fc:0d:ce:58:80: 18:16:4a:5b:4e:c1:50:f5:37:22:b6:e1:31:2d:d8: 53:ea:0a:6b:fb:8d:41:58:c1:63:96:e4:e8:1a:ef: 00:0c:6d:29:f2:4e:f9:22:cd:d9:7a:45:58:ff:4c: 65:42:fa:67:5d:79:f6:7a:e0:7d:be:5e:a7:f8:6a: da:67:00:8e:99:fc:ec:12:56:16:80:9a:cd:dd:8a: 80:e0:99:81:a7:27:c7:14:2a:3b:e4:94:29:c5:09: ff:d3:a2:d6:ed:0f:b8:ca:7e:26:ec:d1:31:98:d2: 56:5e:9e:99:c6:12:8c:99:df:48:6c:43:cf:b2:4f: 1e:c4:c0:e4:af:6b:d5:af:4c:ee:41:32:e4:f8:c9: f1:5f:56:8e:88:c2:0c:5d:21:83:f0:09:ed:b6:8c: bf:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:DA:D4:9B:1D:24:17:AA:97:01:AB:31:54:D4:A8:DD:8F:E7:63:E1 X509v3 Authority Key Identifier: keyid:77:CB:9A:63:95:CC:77:8A:64:2E:54:A4:22:EF:7D:86:D5:A2:05:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/77CB9A6395CC778A642E54A422EF7D86D5A20518.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/77CB9A6395CC778A642E54A422EF7D86D5A20518.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/77CB9A6395CC778A642E54A422EF7D86D5A20518.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:76:28:30:fc:60:bc:c3:66:a8:0e:56:64:47:d9:14:49:8c: 7f:13:6b:29:07:3d:73:87:ed:9f:96:e3:d8:26:ad:ab:cc:94: 0f:e3:a6:cd:ec:42:3c:82:0d:5b:27:b1:56:6a:0b:9a:81:8f: b9:9e:68:f6:46:ea:a1:56:a2:e8:1c:0c:97:fd:fe:59:b2:da: 1b:ca:3d:5b:1f:69:94:10:c0:e4:19:b3:3b:3c:df:a5:68:9d: 54:13:77:38:e7:48:4a:a1:6a:2d:f0:a4:5c:6f:6a:43:3b:fc: ac:0e:ad:99:39:9c:9a:3c:a0:58:1f:12:cb:23:59:17:42:e3: 5d:14:f8:53:a0:36:97:49:24:27:13:0f:89:22:0c:39:e8:b1: 54:09:b5:25:35:c5:93:be:87:43:79:db:31:59:7e:ee:4c:da: ee:5c:c7:e9:9d:d1:b3:85:d7:f5:26:92:8e:c3:f6:ad:80:84: 44:6f:1e:d1:af:50:7e:d6:2f:a0:b3:b3:c6:d4:28:0b:86:6a: 10:d6:bb:bb:59:a5:30:35:e3:2e:7e:fb:ca:93:67:96:ab:2f: ef:31:24:af:50:79:2b:e3:e4:df:de:ac:7d:43:95:72:06:ab: 8e:34:fe:c6:e0:67:7a:69:b4:2c:42:19:a4:0a:c5:60:5b:52: 0a:d6:62:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCwua9t4whuuLSgBrS11BOYwgk24wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzdDQjlBNjM5NUNDNzc4QTY0MkU1NEE0MjJFRjdEODZE NUEyMDUxODAeFw0yNjA5MjQwMDQxMzdaFw0yNjA5MjUwMTIyMzdaMDMxMTAvBgNV BAMTKDkxREFENDlCMUQyNDE3QUE5NzAxQUIzMTU0RDRBOEREOEZFNzYzRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYbTv+5Hev5iKaaFUt8F1eWM7B ra8bSk36yh8Wc+83M3I1llkpDfPlDeq0NDmK6PdBvX9VzimGzcCjY4niAKs0WSiL +OSnec7GemFYIa6Qh6aGAtLhMqAvdRcqAvCXqh014JX8Dc5YgBgWSltOwVD1NyK2 4TEt2FPqCmv7jUFYwWOW5Oga7wAMbSnyTvkizdl6RVj/TGVC+mddefZ64H2+Xqf4 atpnAI6Z/OwSVhaAms3dioDgmYGnJ8cUKjvklCnFCf/TotbtD7jKfibs0TGY0lZe npnGEoyZ30hsQ8+yTx7EwOSva9WvTO5BMuT4yfFfVo6IwgxdIYPwCe22jL9jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkdrUmx0kF6qXAasxVNSo3Y/nY+EwHwYDVR0j BBgwFoAUd8uaY5XMd4pkLlSkIu99htWiBRgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWU4NTVlOGEtM2ZmOC00N2ZmLWFhZWMtNDhkOGIzODBhOTA0LzEvNzdDQjlBNjM5 NUNDNzc4QTY0MkU1NEE0MjJFRjdEODZENUEyMDUxOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83N0NCOUE2Mzk1Q0M3NzhBNjQyRTU0QTQyMkVGN0Q4NkQ1QTIw NTE4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWU4NTVlOGEtM2ZmOC00N2ZmLWFh ZWMtNDhkOGIzODBhOTA0LzEvNzdDQjlBNjM5NUNDNzc4QTY0MkU1NEE0MjJFRjdE ODZENUEyMDUxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIV2KDD8YLzDZqgOVmRH2RRJjH8TaykHPXOH 7Z+W49gmravMlA/jps3sQjyCDVsnsVZqC5qBj7meaPZG6qFWougcDJf9/lmy2hvK PVsfaZQQwOQZszs836VonVQTdzjnSEqhai3wpFxvakM7/KwOrZk5nJo8oFgfEssj WRdC410U+FOgNpdJJCcTD4kiDDnosVQJtSU1xZO+h0N52zFZfu5M2u5cx+md0bOF 1/Umko7D9q2AhERvHtGvUH7WL6Czs8bUKAuGahDWu7tZpTA14y5++8qTZ5arL+8x JK9QeSvj5N/erH1DlXIGq440/sbgZ3pptCxCGaQKxWBbUgrWYio= -----END CERTIFICATE-----Generated at Thu Sep 24 17:52:02 2026 by rpki-client