
$ rpki-client -vvf repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.mft
File: 78578588503A7F091F1D7CD7B16BDC9E55055889.mft (raw, json)
Hash identifier: FjyiMGBSPI1tftg/B0xL5zURDlTQmkm8BhQ36FnvDYI=
Subject key identifier: 08:C9:D1:45:57:D7:CF:92:56:5E:E9:7D:91:B5:C3:BC:B1:7E:E7:1F
Authority key identifier: 78:57:85:88:50:3A:7F:09:1F:1D:7C:D7:B1:6B:DC:9E:55:05:58:89
Certificate issuer: /CN=78578588503A7F091F1D7CD7B16BDC9E55055889
Certificate serial: 328673C490D4CF7ECBDF15A185F55158CEBA12BA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/78578588503A7F091F1D7CD7B16BDC9E55055889.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.mft
Manifest number: 0174
Signing time: Sun 01 Mar 2026 18:01:46 +0000
Manifest this update: Sun 01 Mar 2026 17:56:46 +0000
Manifest next update: Thu 05 Mar 2026 02:43:46 +0000
Files and hashes: 1: 323030313a6466353a333930303a3a2f34382d3438203d3e203138333531.roa (hash: EBR+p3PkcTAiMYCAgv6PbSayq0bFAGHJD99zgOmEdFk=)
2: 3130332e3131352e3232382e302f32322d3234203d3e203138333531.roa (hash: nvXxgMVYVQTfNR+4bpW+Ps8HHDED8r4qVZcdX5Y3BiM=)
3: 78578588503A7F091F1D7CD7B16BDC9E55055889.crl (hash: JTUx/3ye0ldLqATI+UB2dMbLu1M2GPiENniaqgGnOZY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.crl
rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/78578588503A7F091F1D7CD7B16BDC9E55055889.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 02:43:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:86:73:c4:90:d4:cf:7e:cb:df:15:a1:85:f5:51:58:ce:ba:12:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78578588503A7F091F1D7CD7B16BDC9E55055889
Validity
Not Before: Mar 1 17:56:46 2026 GMT
Not After : Mar 5 02:43:46 2026 GMT
Subject: CN=08C9D14557D7CF92565EE97D91B5C3BCB17EE71F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c7:60:79:47:c1:28:58:fd:13:a5:4b:81:c0:
a8:ad:61:79:42:a1:af:4b:a7:dd:b2:5f:ca:14:f2:
cc:2f:4c:17:2e:32:c3:f1:5c:16:c5:ab:f7:d8:f9:
d5:ce:df:fa:78:21:e9:d8:e0:c5:3d:76:ef:1c:be:
c9:aa:d9:ad:d4:85:b0:93:fb:c8:74:ea:9c:fa:6b:
2f:7f:6c:b4:b6:4e:c4:d1:68:88:0f:24:50:f5:1d:
89:db:55:9a:5e:ff:bf:3d:50:d9:56:41:2d:e1:dd:
2e:a5:d9:01:93:fb:ea:ee:c6:4a:9e:f2:f0:41:1c:
c1:22:10:07:e4:44:99:8b:83:0a:b6:bd:2f:06:d8:
3e:f3:09:39:d7:23:86:ab:71:63:8a:a9:64:76:8e:
cb:4f:19:56:52:bc:fc:e9:fa:4b:a2:99:4a:53:3f:
fe:fc:c6:29:1a:74:fb:95:86:37:73:b9:15:41:e0:
bd:03:01:cc:c3:b3:bb:7f:b0:3e:47:b3:9e:15:2d:
84:52:12:01:9e:da:c6:c9:00:30:4e:7a:21:1f:c7:
58:fe:dc:af:67:12:79:57:81:1b:cf:54:3b:f6:e8:
30:67:e3:1a:da:fb:7e:8d:02:c2:8a:d2:49:8c:1f:
8c:e3:85:8d:ab:4f:e7:97:49:b3:00:ab:75:2a:8c:
89:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C9:D1:45:57:D7:CF:92:56:5E:E9:7D:91:B5:C3:BC:B1:7E:E7:1F
X509v3 Authority Key Identifier:
keyid:78:57:85:88:50:3A:7F:09:1F:1D:7C:D7:B1:6B:DC:9E:55:05:58:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/78578588503A7F091F1D7CD7B16BDC9E55055889.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:19:ea:ac:ec:12:ea:83:0b:f3:8e:d0:a6:fc:2b:60:15:b2:
e7:ac:eb:00:b9:68:f8:c8:fc:a4:d5:fa:8b:2f:37:f0:6e:ff:
74:6d:7a:15:fb:6d:65:0e:c1:de:79:b3:13:9d:d9:8f:a5:e8:
6f:5f:7a:97:1c:51:7d:02:49:13:b9:06:3b:50:bd:45:6b:92:
ab:1f:72:2a:4b:0e:a1:61:a0:55:f0:9d:fb:47:01:ab:ce:2c:
bd:49:5b:20:a2:5a:07:a0:25:12:3c:b9:fc:2d:23:4a:98:4b:
e0:a8:89:ae:7a:02:c8:fb:02:7d:06:55:8f:21:cc:62:24:f2:
db:ba:74:9b:8a:33:70:e4:85:e7:de:da:88:88:fc:d6:ae:2c:
91:cf:b1:47:49:68:af:a8:2f:ae:bc:f0:4b:33:dc:7d:3b:32:
7b:3a:4a:5d:a8:99:a8:95:b3:6f:1a:e5:fd:ba:b9:72:b5:73:
a6:c4:4e:57:98:63:f0:1c:4d:9e:87:65:08:6d:d6:8a:c6:79:
02:4d:cb:6e:41:ad:2c:df:d5:17:ac:8a:a6:3f:13:63:af:a0:
3d:3c:20:0b:ae:65:64:72:ca:62:85:b1:50:00:0d:a1:8e:f3:
92:bd:ee:5c:11:1f:3d:77:cd:d1:82:0c:3e:aa:1a:28:1d:9f:
6b:50:ab:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:10:19 2026 by rpki-client