
$ rpki-client -vvf repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.mft
File: 780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.mft (raw, json)
Hash identifier: vPAj9hCgNN8oRdTbtjOe+dHSevEYJSScWywMKZRT3Bg=
Subject key identifier: 06:56:45:27:5B:5D:0E:5B:F8:14:8A:D9:0D:0F:D6:85:1F:28:95:5F
Authority key identifier: 78:0A:63:83:78:71:EA:9C:E6:D0:17:41:4F:6F:1C:5A:BA:3E:F7:D9
Certificate issuer: /CN=780A63837871EA9CE6D017414F6F1C5ABA3EF7D9
Certificate serial: 21F14E151B6A702990B166CFD8AD75F510F081FE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.mft
Manifest number: 0121
Signing time: Sun 01 Mar 2026 17:42:02 +0000
Manifest this update: Sun 01 Mar 2026 17:37:02 +0000
Manifest next update: Thu 05 Mar 2026 05:16:02 +0000
Files and hashes: 1: 323030313a6466333a643234303a3a2f34382d3438203d3e20313336303839.roa (hash: M+NRbpCUskaX1vYH/4jaIAMXTEk8snO9JlvCQ9TdRYk=)
2: 780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.crl (hash: 4mAA+UWhn+mGkdNwBr4wQCYbXKuf3qw+OZhOFe7GQHY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.crl
rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 02:17:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:f1:4e:15:1b:6a:70:29:90:b1:66:cf:d8:ad:75:f5:10:f0:81:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=780A63837871EA9CE6D017414F6F1C5ABA3EF7D9
Validity
Not Before: Mar 1 17:37:02 2026 GMT
Not After : Mar 5 05:16:02 2026 GMT
Subject: CN=065645275B5D0E5BF8148AD90D0FD6851F28955F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:bf:85:91:10:c0:86:70:fb:d4:f0:29:91:02:
30:03:c6:79:7b:83:c1:fd:4e:8e:01:49:10:08:e8:
50:94:8a:80:e7:da:f1:7e:f4:96:c1:b7:6c:5e:a4:
b5:06:29:17:63:4d:fa:92:be:3f:f4:36:f5:a5:81:
06:70:de:45:b0:a8:30:af:a0:78:e6:3f:a8:39:02:
9a:62:0e:46:f6:4f:16:96:76:be:01:f4:4f:1a:e6:
3b:c6:96:bd:ae:f5:06:e4:f0:78:b7:eb:9e:ea:3e:
61:4a:70:86:31:16:1e:c7:40:05:8c:f6:ee:e5:81:
73:ee:b4:44:70:45:79:a0:c5:89:e1:f3:bf:1a:ca:
3b:91:65:08:de:9b:f1:80:fb:fd:32:53:d3:95:f1:
eb:dd:90:0d:da:3b:9b:05:84:83:32:57:5b:8c:8f:
e0:18:7c:c2:88:18:15:2a:54:2d:82:f4:da:a6:3f:
a6:ed:c1:e2:98:ef:4b:a0:43:0a:ff:bf:91:5d:f5:
58:06:53:54:69:a6:30:c6:65:8e:b0:36:e2:13:f7:
66:fe:e9:11:6f:57:19:fe:27:3d:84:92:96:c6:92:
a6:10:fe:f2:cf:4b:b4:58:e0:84:24:ef:27:9f:75:
0e:c3:86:94:34:74:00:af:f8:44:b9:f5:e6:26:bc:
46:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:56:45:27:5B:5D:0E:5B:F8:14:8A:D9:0D:0F:D6:85:1F:28:95:5F
X509v3 Authority Key Identifier:
keyid:78:0A:63:83:78:71:EA:9C:E6:D0:17:41:4F:6F:1C:5A:BA:3E:F7:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/1/780A63837871EA9CE6D017414F6F1C5ABA3EF7D9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:8e:b6:8d:f6:e8:bd:20:7b:27:5f:d2:8d:b3:b7:a8:dd:39:
1b:9d:0d:6f:7f:1f:5a:03:02:7a:a2:46:4e:a6:5d:ee:f9:cf:
2b:59:6e:6b:0c:6c:7d:5e:2a:2d:20:57:c4:4b:d4:14:1c:96:
b7:f0:25:16:88:f5:33:3a:7b:6d:c4:70:a1:99:8d:0c:29:d0:
79:a5:61:db:5b:81:fa:8f:e3:28:11:bc:6c:ca:9c:2d:f4:0a:
b9:ec:a7:a3:1d:0b:a2:aa:3e:08:21:5d:21:c2:39:13:ee:fb:
42:5f:2f:e8:85:65:bd:e7:c0:db:24:8a:a5:16:bb:37:98:21:
87:b8:42:0a:0b:49:44:56:8e:ab:f9:ac:45:fa:85:d1:dd:36:
fd:33:59:f2:bb:4a:f1:05:a5:a3:89:15:c4:b5:02:be:21:12:
72:ef:20:08:c4:3e:9c:d7:fc:f8:42:9b:5d:1d:f7:aa:ba:65:
8f:f4:97:e5:83:2e:c9:ea:d3:9a:4c:c4:97:61:5d:9e:ad:a6:
00:a2:43:e0:79:d7:28:bf:87:e4:85:07:09:2f:e6:b5:ed:a9:
f1:b3:9e:30:fe:65:15:0c:00:de:66:3e:15:3f:6f:58:19:85:
06:c7:15:ca:ed:58:42:6d:22:f7:e5:57:b3:22:be:8a:a2:4f:
cd:58:f5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:41:32 2026 by rpki-client