
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.mft
File: 77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.mft (raw, json)
Hash identifier: x9v0MAA10sDixIwrY48ySr7BYBGarIxQEDwOLoUjIW4=
Subject key identifier: A9:06:6B:A1:38:FD:7D:81:F7:7F:69:A8:8C:6D:1F:DD:AC:0F:62:28
Authority key identifier: 77:BE:1A:4F:34:7F:A3:1A:5C:FC:46:1F:6A:5D:3C:19:E4:15:8F:86
Certificate issuer: /CN=77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86
Certificate serial: 45FFB04C11D066F3553942B966EA746854BFA50B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.mft
Manifest number: BF
Signing time: Mon 21 Sep 2026 01:33:23 +0000
Manifest this update: Mon 21 Sep 2026 01:28:23 +0000
Manifest next update: Tue 22 Sep 2026 05:07:23 +0000
Files and hashes: 1: 3135372e36362e3132382e302f32332d3234203d3e20313336383733.roa (hash: ABmryXvmIdMzipy18c184WGStC1rvjxbGuTrZ93+HFk=)
2: 3135372e36362e3132382e302f32342d3234203d3e20313336383733.roa (hash: /9AogUvejmnVzcfr/q/VgL8VHV8KOFXHgU8d/ZsRjs4=)
3: 77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.crl (hash: 3OVsYl8j0K1Dg9QD5nbozsg8v5flHQObLpUIkXXyx2E=)
4: 3135372e36362e3132392e302f32342d3234203d3e20313336383733.roa (hash: RdSFCq5FmmEFwqUWQWODFaey3Jn4ol8h+jw95vgruqA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.crl
rsync://rpki-rsync.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 05:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:ff:b0:4c:11:d0:66:f3:55:39:42:b9:66:ea:74:68:54:bf:a5:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86
Validity
Not Before: Sep 21 01:28:23 2026 GMT
Not After : Sep 22 05:07:23 2026 GMT
Subject: CN=A9066BA138FD7D81F77F69A88C6D1FDDAC0F6228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d4:2e:c7:7c:ad:66:26:b1:ec:20:d3:4b:85:
c2:fd:7c:69:cc:4a:14:b9:8c:c5:23:90:b2:0a:57:
4e:d2:85:3f:df:f2:d6:8c:bb:af:24:63:5c:4e:ff:
66:34:e1:07:e8:51:a6:0a:eb:59:27:f8:6f:04:18:
c3:cd:1c:1a:9c:9d:11:b3:15:4a:cf:97:ee:fe:7b:
9f:b3:dd:e4:00:ab:16:19:c7:cf:90:b8:f5:da:63:
88:5b:c2:f3:bc:ca:fd:40:0c:b7:04:79:29:a9:b8:
d2:3a:9c:b5:d2:47:67:de:ab:27:01:67:8c:30:7e:
b6:18:9d:1d:d7:e5:bc:ae:dd:6a:4a:9d:2f:61:72:
90:e4:74:77:32:2e:9e:fb:c9:3a:43:94:ed:42:66:
b4:e8:20:fa:57:f3:a2:76:68:e8:62:b3:1e:2f:04:
f3:3c:4d:ff:de:63:87:41:d4:18:a4:94:3e:c6:60:
d4:21:84:43:bd:34:a6:0b:64:7a:f0:f8:55:c2:53:
27:79:33:7a:41:59:75:24:91:7d:70:2b:72:27:b6:
e1:f4:39:e8:2f:e7:36:b2:83:e6:43:cd:ee:1e:15:
93:1c:6c:b8:ae:5f:60:25:83:8b:99:c8:6a:fe:6b:
b9:70:21:b7:52:ca:96:1e:4e:3b:da:e6:91:48:64:
ae:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:06:6B:A1:38:FD:7D:81:F7:7F:69:A8:8C:6D:1F:DD:AC:0F:62:28
X509v3 Authority Key Identifier:
keyid:77:BE:1A:4F:34:7F:A3:1A:5C:FC:46:1F:6A:5D:3C:19:E4:15:8F:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:20:e0:7e:fe:98:3a:b5:02:75:9e:c1:ac:0a:91:2a:a4:05:
2b:a4:8a:b7:5b:cf:d1:d3:37:02:2e:cb:48:16:05:d8:99:00:
0e:33:16:21:d4:1b:80:2e:e2:2a:f1:8e:8e:6b:2f:7d:04:8f:
c4:2f:df:df:f9:4a:cf:6e:2c:a5:fb:f2:94:d2:38:68:4b:64:
73:67:37:79:01:89:83:e9:f5:9b:d1:79:16:41:1f:3a:fa:cd:
62:15:7c:45:74:72:52:d0:ad:50:23:81:5e:ee:37:e2:73:7d:
d6:30:5a:2c:f4:b8:5f:28:3f:60:99:5d:a2:92:8a:22:33:68:
25:d1:28:45:39:6f:12:c7:2d:84:3a:0f:21:ab:65:02:65:0a:
c1:ae:f6:56:cf:68:e4:23:f6:c1:e5:52:9e:f7:4f:47:d3:3c:
c8:d5:98:a1:22:69:28:c1:89:e1:48:e5:1a:7b:f8:d9:ee:f1:
f7:22:b9:b7:8d:4b:73:d3:3b:b8:ac:9c:7e:0b:c5:e7:aa:91:
ea:40:1f:7a:62:0d:e2:04:84:74:99:6c:be:50:d1:d9:60:99:
19:22:b6:c7:3a:b7:46:7c:4c:fd:40:83:8f:b0:ae:31:e9:5e:
42:6f:00:ab:6d:18:11:82:cf:48:20:9e:4f:da:b9:24:6c:3b:
99:61:ff:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:40:52 2026 by rpki-client