
$ rpki-client -vvf repo-rpki.idnic.net/repo/f884c935-3e33-4456-aca7-24f33a17a1a4/0/779E25B9DB276068183F9078FE6306678EBE79BE.mft
File: 779E25B9DB276068183F9078FE6306678EBE79BE.mft (raw, json)
Hash identifier: HLjwMcMT6qrIt3I/sS4a9ajZIS0fsO91+6nNJwiGQO4=
Subject key identifier: 97:27:AD:80:08:A5:19:F2:D0:7F:36:37:CE:06:98:F5:C0:87:49:E5
Authority key identifier: 77:9E:25:B9:DB:27:60:68:18:3F:90:78:FE:63:06:67:8E:BE:79:BE
Certificate issuer: /CN=779E25B9DB276068183F9078FE6306678EBE79BE
Certificate serial: 5E346761A0376BCC1BDF366A9CC531C25E57E00B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/779E25B9DB276068183F9078FE6306678EBE79BE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f884c935-3e33-4456-aca7-24f33a17a1a4/0/779E25B9DB276068183F9078FE6306678EBE79BE.mft
Manifest number: 42
Signing time: Fri 17 Apr 2026 03:22:19 +0000
Manifest this update: Fri 17 Apr 2026 03:17:19 +0000
Manifest next update: Mon 20 Apr 2026 05:40:19 +0000
Files and hashes: 1: 779E25B9DB276068183F9078FE6306678EBE79BE.crl (hash: aC80j14tL87fhPeveR+e3/UFZhen/939ZVrsn2k7j28=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f884c935-3e33-4456-aca7-24f33a17a1a4/0/779E25B9DB276068183F9078FE6306678EBE79BE.crl
rsync://repo-rpki.idnic.net/repo/f884c935-3e33-4456-aca7-24f33a17a1a4/0/779E25B9DB276068183F9078FE6306678EBE79BE.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/779E25B9DB276068183F9078FE6306678EBE79BE.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 05:40:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:34:67:61:a0:37:6b:cc:1b:df:36:6a:9c:c5:31:c2:5e:57:e0:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779E25B9DB276068183F9078FE6306678EBE79BE
Validity
Not Before: Apr 17 03:17:19 2026 GMT
Not After : Apr 20 05:40:19 2026 GMT
Subject: CN=9727AD8008A519F2D07F3637CE0698F5C08749E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:24:50:96:51:8b:b2:72:c9:05:a3:e2:55:91:
68:e1:e9:91:23:91:63:1f:cf:ad:03:a9:b2:54:20:
12:8f:25:ab:33:87:74:ce:86:73:a0:f3:55:20:40:
a2:87:8e:3c:a5:b8:a1:d7:e5:33:6e:a8:e8:17:ee:
76:cf:1d:f8:71:a5:0f:e0:db:5f:e5:56:ea:dd:3a:
30:31:79:90:86:0e:80:f6:05:aa:9b:44:ee:77:60:
7a:f4:87:32:d9:6b:3d:5c:cc:54:45:ba:ea:6b:a8:
ee:8e:6b:b7:31:9b:36:91:38:c2:ee:f6:57:84:56:
22:07:c1:54:74:fd:b5:d8:15:9c:38:23:bc:14:14:
19:89:09:27:a2:a9:15:0e:a8:26:0d:9e:d0:06:88:
37:88:12:6c:1b:9b:d7:6a:ca:8a:18:01:67:6d:7b:
17:b3:2b:0f:c9:7f:60:ea:71:17:5b:cb:af:23:ae:
a5:29:13:d0:11:33:ad:7c:76:7a:ee:16:c5:b0:ea:
97:27:24:67:ea:ca:a0:96:a4:57:23:3d:45:a5:8a:
48:8a:a1:d0:20:7a:ef:ed:a4:ce:13:76:6e:8e:6c:
a1:df:83:82:e1:4f:37:94:d5:de:de:70:40:bf:6f:
22:a4:89:e1:fb:d4:4a:00:75:49:43:be:a8:53:b3:
4a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:27:AD:80:08:A5:19:F2:D0:7F:36:37:CE:06:98:F5:C0:87:49:E5
X509v3 Authority Key Identifier:
keyid:77:9E:25:B9:DB:27:60:68:18:3F:90:78:FE:63:06:67:8E:BE:79:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f884c935-3e33-4456-aca7-24f33a17a1a4/0/779E25B9DB276068183F9078FE6306678EBE79BE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/779E25B9DB276068183F9078FE6306678EBE79BE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f884c935-3e33-4456-aca7-24f33a17a1a4/0/779E25B9DB276068183F9078FE6306678EBE79BE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:3f:8f:00:5c:a9:56:e6:65:6c:2c:86:71:9a:58:ba:cc:50:
e1:1c:fa:49:14:e0:f8:f6:5c:e7:96:88:4e:ed:55:97:df:f2:
31:ec:bd:8f:25:9e:66:55:32:65:f0:98:53:7b:72:cf:fe:0d:
d3:80:3b:e8:80:98:de:6c:17:5e:3e:e3:a6:85:a0:f9:f3:4c:
17:69:e8:2d:f9:b3:94:bc:00:60:57:9c:6d:ef:d6:af:b8:39:
c4:65:68:55:5e:78:d8:89:1b:c8:be:c5:cd:56:c8:d6:cb:95:
8e:49:85:79:54:4f:d5:e2:02:af:dd:b3:a1:06:07:ab:07:7f:
a9:25:51:7f:2a:75:ed:10:6e:e8:f6:65:74:47:b7:1b:92:a9:
da:21:57:33:80:93:0e:56:ab:61:f2:b5:a3:73:02:8f:49:fe:
a7:11:2b:ed:5e:52:8e:81:64:33:8f:a7:49:43:5f:8f:a0:49:
d1:fb:36:21:a7:ee:2e:05:4b:79:e9:0b:56:a4:a2:d6:b6:1d:
07:2b:e8:2d:35:d1:5d:b0:a1:b9:7f:1e:5b:3b:90:8f:ff:79:
36:01:d2:9f:dd:61:c0:06:a7:d7:a1:30:74:67:eb:53:c6:63:
a9:82:f4:37:50:c7:40:c0:0c:5a:44:56:1a:cd:bc:5e:56:21:
07:de:4c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:31:10 2026 by rpki-client