$ rpki-client -vvvf rpki-rsync.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.mft File: 77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.mft (raw, json) Hash identifier: JoJ2m8fxlfY9r/Hc+8fuHw0xWewlBQmLJT2BmlwO+SA= Subject key identifier: A7:B1:A7:96:AF:BB:2E:C3:FC:01:6E:EE:6F:83:42:94:19:D2:62:36 Authority key identifier: 77:E9:F8:D3:BC:CF:53:E7:16:66:89:FB:2D:3B:26:C5:D0:71:7F:8A Certificate issuer: /CN=77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A Certificate serial: 69AF5FF5DFE50495151BBD8710BF1687594F4E57 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.mft Manifest number: BD Signing time: Mon 21 Sep 2026 01:58:53 +0000 Manifest this update: Mon 21 Sep 2026 01:53:53 +0000 Manifest next update: Tue 22 Sep 2026 02:13:53 +0000 Files and hashes: 1: 3135372e36362e31382e302f32332d3233203d3e20313532343431.roa (hash: BNvuGLsPKmHPx7RMDlG5UShlx3gAe1x7TyFct++UUz0=) 2: 3135372e36362e31382e302f32342d3234203d3e20313532343431.roa (hash: f6Zrhs60fdmuFh2G1EwkPj+gm9fOkMTUgMUKbQaslFM=) 3: 3135372e36362e31392e302f32342d3234203d3e20313532343431.roa (hash: SX241Rj6Zaksf/rX06NGGc4gRCAK1fqN8MDWJKF0QyE=) 4: 77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.crl (hash: EuUleFlJEP4CdyeHK2SoSbBWSLlo2rU6wHJrVHD/H3Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.crl rsync://rpki-rsync.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 02:13:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:af:5f:f5:df:e5:04:95:15:1b:bd:87:10:bf:16:87:59:4f:4e:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A Validity Not Before: Sep 21 01:53:53 2026 GMT Not After : Sep 22 02:13:53 2026 GMT Subject: CN=A7B1A796AFBB2EC3FC016EEE6F83429419D26236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:bf:cf:85:63:e1:6d:71:c6:ba:e1:57:b5:3a: 97:22:f8:3d:1a:52:a3:ab:e6:a3:27:18:63:b0:13: ae:53:8d:2d:2c:4d:14:22:99:35:57:dc:58:82:74: 0d:b3:6a:f4:ee:b6:3b:47:3e:97:4b:ff:24:98:f2: 5b:40:19:6b:66:22:f0:c4:ac:48:20:9c:e0:d4:bc: 3b:19:ca:90:a8:a5:a2:f9:7b:14:70:52:40:72:e5: c7:a6:91:2b:e5:7f:c5:cf:a3:4b:d3:f6:6e:7a:f6: 8f:56:c3:03:4c:3b:eb:89:8e:21:25:06:f8:09:9f: 85:d3:c1:49:4c:1a:65:83:94:9d:d6:d1:e0:d2:e7: 9c:a9:44:75:28:f9:f5:bc:b1:22:ab:fe:f7:86:c5: 2c:e3:a7:4d:55:ee:e5:0d:02:ef:51:62:6f:bb:0b: ef:80:90:ab:42:7b:bf:6c:ca:71:4a:e5:39:bd:ec: 4c:a1:4e:0b:04:fb:8d:d3:87:e8:0f:b5:e7:70:63: b9:15:5a:1f:de:72:09:01:86:86:3d:7c:48:8e:6b: 62:67:f6:04:82:95:be:5b:16:5b:4f:27:dc:8d:50: f5:77:8e:96:35:5c:77:36:f1:6b:ea:1e:de:b9:cf: b2:a7:ef:cd:17:9a:dd:7d:7d:41:96:f2:05:a2:72: b3:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:B1:A7:96:AF:BB:2E:C3:FC:01:6E:EE:6F:83:42:94:19:D2:62:36 X509v3 Authority Key Identifier: keyid:77:E9:F8:D3:BC:CF:53:E7:16:66:89:FB:2D:3B:26:C5:D0:71:7F:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/0/77E9F8D3BCCF53E7166689FB2D3B26C5D0717F8A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:38:2a:f7:94:1e:c6:2e:83:d4:8b:99:9b:6c:76:6d:4d:bc: 62:d3:bd:13:14:06:91:f3:88:d0:b9:cf:10:3a:c2:73:09:27: 71:93:1c:84:ee:10:2d:60:8b:b5:0c:d7:44:0b:d2:8e:6a:9f: 5a:e3:4e:e0:84:d9:98:e0:90:7d:78:22:2a:8f:83:40:48:98: b3:e5:05:4c:79:6f:65:65:d8:0d:11:c1:43:d9:c4:45:db:60: 43:08:01:36:22:d1:49:49:d5:13:97:c1:03:e2:9a:e8:66:22: 37:cb:aa:c8:eb:8a:92:2c:29:00:a2:64:74:49:06:7a:a0:91: 93:62:0f:ab:fd:d5:23:66:10:83:5b:2a:b7:62:fa:19:88:5d: df:c2:4c:9e:50:02:2a:ab:a6:51:a2:fd:40:8d:b2:2f:3c:37: fe:27:7c:f2:23:93:a4:ac:6d:25:6e:03:2b:ba:e5:fc:9c:95: 53:7d:35:9c:b1:be:9e:98:9d:7b:b3:c7:e0:1d:09:8d:10:62: bf:20:95:9f:2b:51:e7:50:47:01:94:be:a6:b5:a0:9c:21:6d: fb:7d:ba:2e:60:c7:0c:d2:2a:b1:16:ff:78:c4:18:09:b6:a4: e5:9a:4d:b7:fe:64:e8:26:05:75:30:84:48:63:0d:bb:c2:d9: 8e:9d:b0:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaa9f9d/lBJUVG72HEL8Wh1lPTlcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzdFOUY4RDNCQ0NGNTNFNzE2NjY4OUZCMkQzQjI2QzVE MDcxN0Y4QTAeFw0yNjA5MjEwMTUzNTNaFw0yNjA5MjIwMjEzNTNaMDMxMTAvBgNV BAMTKEE3QjFBNzk2QUZCQjJFQzNGQzAxNkVFRTZGODM0Mjk0MTlEMjYyMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbv8+FY+Ftcca64Ve1Opci+D0a UqOr5qMnGGOwE65TjS0sTRQimTVX3FiCdA2zavTutjtHPpdL/ySY8ltAGWtmIvDE rEggnODUvDsZypCopaL5exRwUkBy5cemkSvlf8XPo0vT9m569o9WwwNMO+uJjiEl BvgJn4XTwUlMGmWDlJ3W0eDS55ypRHUo+fW8sSKr/veGxSzjp01V7uUNAu9RYm+7 C++AkKtCe79synFK5Tm97EyhTgsE+43Th+gPtedwY7kVWh/ecgkBhoY9fEiOa2Jn 9gSClb5bFltPJ9yNUPV3jpY1XHc28WvqHt65z7Kn780Xmt19fUGW8gWicrO5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp7Gnlq+7LsP8AW7ub4NClBnSYjYwHwYDVR0j BBgwFoAUd+n407zPU+cWZon7LTsmxdBxf4owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mzc0NDY1NjMtMDliYy00OTFiLThmYjktZmQzOWYwOTE2NjlkLzAvNzdFOUY4RDNC Q0NGNTNFNzE2NjY4OUZCMkQzQjI2QzVEMDcxN0Y4QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83N0U5RjhEM0JDQ0Y1M0U3MTY2Njg5RkIyRDNCMjZDNUQwNzE3 RjhBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzc0NDY1NjMtMDliYy00OTFiLThm YjktZmQzOWYwOTE2NjlkLzAvNzdFOUY4RDNCQ0NGNTNFNzE2NjY4OUZCMkQzQjI2 QzVEMDcxN0Y4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEM4KveUHsYug9SLmZtsdm1NvGLTvRMUBpHz iNC5zxA6wnMJJ3GTHITuEC1gi7UM10QL0o5qn1rjTuCE2ZjgkH14IiqPg0BImLPl BUx5b2Vl2A0RwUPZxEXbYEMIATYi0UlJ1ROXwQPimuhmIjfLqsjripIsKQCiZHRJ BnqgkZNiD6v91SNmEINbKrdi+hmIXd/CTJ5QAiqrplGi/UCNsi88N/4nfPIjk6Ss bSVuAyu65fyclVN9NZyxvp6YnXuzx+AdCY0QYr8glZ8rUedQRwGUvqa1oJwhbft9 ui5gxwzSKrEW/3jEGAm2pOWaTbf+ZOgmBXUwhEhjDbvC2Y6dsGo= -----END CERTIFICATE-----Generated at Mon Sep 21 09:20:35 2026 by rpki-client