
$ rpki-client -vvf repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/78702A768CA1E1867D543013BB6186EDA3C06C16.mft
File: 78702A768CA1E1867D543013BB6186EDA3C06C16.mft (raw, json)
Hash identifier: yS9deSngKTbaxzXR/BORN4pqrt+rm07jxfVcwrV6rrs=
Subject key identifier: 93:7F:2C:93:BB:86:5C:D8:7F:A6:5D:AB:8D:50:05:03:69:C1:77:0E
Authority key identifier: 78:70:2A:76:8C:A1:E1:86:7D:54:30:13:BB:61:86:ED:A3:C0:6C:16
Certificate issuer: /CN=78702A768CA1E1867D543013BB6186EDA3C06C16
Certificate serial: 7A64DF16DE0FCB1C734BC64A3152CEB0DF3A8CD0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78702A768CA1E1867D543013BB6186EDA3C06C16.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/78702A768CA1E1867D543013BB6186EDA3C06C16.mft
Manifest number: AD
Signing time: Mon 03 Nov 2025 08:21:19 +0000
Manifest this update: Mon 03 Nov 2025 08:16:19 +0000
Manifest next update: Thu 06 Nov 2025 16:08:19 +0000
Files and hashes: 1: 78702A768CA1E1867D543013BB6186EDA3C06C16.crl (hash: IYCAoBXc7SM8CmL4EjxMdYdzrmn9LeY9MurY12WdbNk=)
2: 3135372e36362e3134312e302f32342d3234203d3e20313532373539.roa (hash: movLiT++PBKuPBzz5dXs+l8kqn3e27i1U3F37q5BVns=)
3: 3135372e36362e3134302e302f32342d3234203d3e20313532373539.roa (hash: wI2gL+xeUj5R4U7m3JbkXYMiUcHbqqc4tcsVpsPURE0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/78702A768CA1E1867D543013BB6186EDA3C06C16.crl
rsync://repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/78702A768CA1E1867D543013BB6186EDA3C06C16.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78702A768CA1E1867D543013BB6186EDA3C06C16.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 06 Nov 2025 16:08:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:64:df:16:de:0f:cb:1c:73:4b:c6:4a:31:52:ce:b0:df:3a:8c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78702A768CA1E1867D543013BB6186EDA3C06C16
Validity
Not Before: Nov 3 08:16:19 2025 GMT
Not After : Nov 6 16:08:19 2025 GMT
Subject: CN=937F2C93BB865CD87FA65DAB8D50050369C1770E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8d:25:d2:47:8e:56:e9:cd:2f:21:9f:7d:84:
96:6b:4b:e1:51:ba:84:86:07:71:e9:a2:11:ae:51:
7e:f4:17:03:60:85:5a:53:04:b1:6a:54:5c:e6:d4:
a7:25:c0:5d:fd:2d:e7:81:23:ad:2e:de:2c:d1:be:
39:9f:e3:94:f3:38:a5:d2:43:db:2a:48:d3:1e:62:
b1:62:00:db:23:9d:27:80:d1:25:6e:96:d5:9b:26:
41:84:81:eb:c8:59:27:04:22:da:5c:f6:0b:65:48:
af:cb:bb:b6:3d:47:70:a6:21:e2:aa:c0:8d:30:c7:
11:35:a4:bf:aa:bd:97:58:97:72:dd:0b:af:ca:6b:
06:a5:dd:b1:1c:65:78:13:65:b9:4c:ae:dc:65:3b:
54:25:50:8e:88:ca:13:d0:a0:97:21:eb:43:fb:7a:
3b:e7:f1:f3:9b:16:b4:84:ef:82:84:02:c0:5b:53:
1f:9f:a3:86:e7:bb:4a:ed:f1:b8:91:1c:04:9c:00:
0f:f3:cf:d2:8b:cb:06:e2:92:dd:ab:e3:23:e0:10:
30:f8:78:e6:0c:a8:ae:99:c8:71:61:54:dc:cf:30:
01:5e:f2:0e:8c:87:eb:06:38:0b:28:05:43:ef:cd:
4a:bd:e2:3a:37:d1:07:c5:58:46:e3:df:86:87:3e:
95:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:7F:2C:93:BB:86:5C:D8:7F:A6:5D:AB:8D:50:05:03:69:C1:77:0E
X509v3 Authority Key Identifier:
keyid:78:70:2A:76:8C:A1:E1:86:7D:54:30:13:BB:61:86:ED:A3:C0:6C:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/78702A768CA1E1867D543013BB6186EDA3C06C16.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78702A768CA1E1867D543013BB6186EDA3C06C16.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/78702A768CA1E1867D543013BB6186EDA3C06C16.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:9c:19:96:61:26:67:7d:8d:a4:42:7f:6a:ef:c0:44:dc:fb:
4a:47:7a:93:1b:08:49:ae:c9:ad:f5:d2:4b:95:43:6d:06:07:
77:d0:cf:18:ea:69:3e:88:a0:ec:6c:0b:c2:98:f9:46:9e:c0:
8f:f6:b3:9c:76:92:a5:48:9f:07:de:8d:e4:97:2e:58:e5:3e:
69:0f:ec:eb:6d:38:d2:8e:dd:11:4a:73:91:ca:2b:14:37:84:
12:c2:7e:ab:4a:ef:f3:16:ce:cc:94:85:e1:23:43:38:32:28:
27:0b:a5:08:1b:d9:25:0b:a6:d3:16:32:4c:a2:dd:94:f2:c9:
e3:cc:ce:44:72:82:fe:f5:03:eb:b7:14:ef:d7:9f:ec:af:10:
77:df:81:28:75:a1:72:1e:50:ed:b2:64:e6:8f:ad:1a:55:78:
b8:b0:af:99:98:e8:da:03:e8:bc:4c:86:e3:e7:46:2b:62:09:
17:c6:70:29:3a:5a:6e:bc:f2:0a:ad:90:21:2f:04:cc:b4:26:
cc:47:c2:cc:b9:c7:05:7a:00:9d:90:96:53:63:4f:a3:6c:29:
08:28:56:9a:ea:53:53:ef:69:88:ee:ed:e3:ce:7d:62:a2:03:
2f:59:dd:49:91:0d:3a:5c:c0:8f:2b:87:40:93:65:54:56:cf:
2b:ab:80:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:16:00 2025 by rpki-client