
$ rpki-client -vvf repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.mft
File: 78578588503A7F091F1D7CD7B16BDC9E55055889.mft (raw, json)
Hash identifier: u6p5VMxs7gf4n7JCrTDBnEJua6abjjbYo46I88F9e0o=
Subject key identifier: FF:00:31:20:13:F3:0A:FE:15:EB:3A:9D:85:8B:7A:E9:4A:F5:B1:31
Authority key identifier: 78:57:85:88:50:3A:7F:09:1F:1D:7C:D7:B1:6B:DC:9E:55:05:58:89
Certificate issuer: /CN=78578588503A7F091F1D7CD7B16BDC9E55055889
Certificate serial: 14161E49CEA07D1A8B132C2ECCADBE9DD3AEFAA2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/78578588503A7F091F1D7CD7B16BDC9E55055889.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.mft
Manifest number: 0140
Signing time: Tue 04 Nov 2025 15:41:37 +0000
Manifest this update: Tue 04 Nov 2025 15:36:37 +0000
Manifest next update: Fri 07 Nov 2025 21:05:37 +0000
Files and hashes: 1: 78578588503A7F091F1D7CD7B16BDC9E55055889.crl (hash: bvEqyKLob23g0smY0egOMuU9bh9t6av1PYOZrE9SyVE=)
2: 323030313a6466353a333930303a3a2f34382d3438203d3e203138333531.roa (hash: EBR+p3PkcTAiMYCAgv6PbSayq0bFAGHJD99zgOmEdFk=)
3: 3130332e3131352e3232382e302f32322d3234203d3e203138333531.roa (hash: nvXxgMVYVQTfNR+4bpW+Ps8HHDED8r4qVZcdX5Y3BiM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.crl
rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/78578588503A7F091F1D7CD7B16BDC9E55055889.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Nov 2025 21:05:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:16:1e:49:ce:a0:7d:1a:8b:13:2c:2e:cc:ad:be:9d:d3:ae:fa:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78578588503A7F091F1D7CD7B16BDC9E55055889
Validity
Not Before: Nov 4 15:36:37 2025 GMT
Not After : Nov 7 21:05:37 2025 GMT
Subject: CN=FF00312013F30AFE15EB3A9D858B7AE94AF5B131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c4:c6:6a:a8:f9:4a:66:1b:a4:b2:02:eb:1e:
d3:bb:90:64:f6:a7:f7:9f:39:5c:e3:9d:0b:70:80:
fc:7d:06:4d:c0:c5:32:c8:f3:74:18:0c:ce:c9:25:
95:33:90:76:71:9e:ea:95:e3:97:b3:13:3b:28:40:
4c:e3:ab:73:1b:78:0d:7d:a9:3a:37:e4:3a:d2:c3:
18:29:bc:24:65:b4:a3:ee:ac:93:e3:c6:25:ab:fc:
11:40:c0:a3:3e:81:2f:fd:90:08:71:60:7e:44:35:
f6:21:7b:3b:2b:e8:99:05:2e:7a:c8:97:b2:f7:b2:
0b:d9:45:fa:a1:7e:a8:d8:d8:93:60:a9:ab:7f:29:
d9:86:c0:78:56:33:2f:c8:dc:00:80:55:0f:d5:29:
38:04:e2:82:48:05:cd:b6:b2:c5:2b:b5:c1:ff:ae:
f7:5b:b5:51:88:a4:57:72:70:15:1c:ed:d5:1d:61:
cf:ea:aa:60:b0:54:a0:a5:df:d6:c7:76:49:13:1f:
a5:06:22:25:44:87:72:2c:46:da:b8:4c:32:1d:24:
ad:03:ac:9a:e7:fd:62:2a:c9:d1:1c:74:ff:64:25:
c5:bc:4b:a1:2e:93:4e:c1:08:0e:e0:5c:fd:89:4e:
ac:d1:8a:67:02:db:21:90:80:90:bb:d1:5a:83:28:
01:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:00:31:20:13:F3:0A:FE:15:EB:3A:9D:85:8B:7A:E9:4A:F5:B1:31
X509v3 Authority Key Identifier:
keyid:78:57:85:88:50:3A:7F:09:1F:1D:7C:D7:B1:6B:DC:9E:55:05:58:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/78578588503A7F091F1D7CD7B16BDC9E55055889.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:a2:2b:8e:0a:5c:e5:c5:57:0b:c4:d1:0c:9d:53:fe:61:04:
5f:d9:85:29:5f:6e:ca:13:a4:76:9f:54:1d:5c:00:66:ec:ab:
27:b6:47:cd:f3:ac:12:33:d1:0e:96:43:c3:a7:fc:8f:49:9f:
e6:3e:32:7e:8e:08:9d:5c:9c:59:b4:34:80:39:62:3b:a2:67:
7c:14:1f:d4:96:04:0e:71:c1:92:8f:f9:8b:b3:af:48:09:93:
c7:d0:63:5a:83:6b:36:51:b8:70:f2:e1:8b:24:6c:27:8c:c5:
71:49:35:b4:b7:e3:7c:c0:33:f2:c4:b8:0f:17:9a:57:50:93:
b9:be:37:59:02:e4:87:0e:fb:79:9f:e6:9c:f9:cb:7c:dd:39:
ba:ef:43:7b:6b:50:79:d4:b6:5a:b6:d2:43:ad:d0:68:38:cc:
4c:28:53:66:6e:1b:56:2e:96:b8:83:71:11:14:c2:4d:a3:6e:
fa:0a:03:46:31:5b:8a:f6:dd:19:39:fb:d7:bd:13:00:1a:b1:
05:f4:73:af:3a:de:6e:73:57:30:31:66:af:6c:73:48:3c:a7:
9d:ca:94:e7:bd:c0:04:7f:bc:86:12:2a:3f:37:b5:1b:94:a6:
af:51:28:70:35:0b:c2:da:de:c3:da:3d:b9:40:05:9a:73:77:
89:bb:30:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 02:13:21 2025 by rpki-client