
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/78E0160248ABDDA316B054457CAC9C2878172E3F.mft
File: 78E0160248ABDDA316B054457CAC9C2878172E3F.mft (raw, json)
Hash identifier: DzDvniaD61pzenewwIkAVNG6kv/vJXQ+gnqR6C2oG2U=
Subject key identifier: 9E:F5:23:92:3C:45:35:DA:45:B5:64:38:A0:38:17:A9:73:10:A8:B8
Authority key identifier: 78:E0:16:02:48:AB:DD:A3:16:B0:54:45:7C:AC:9C:28:78:17:2E:3F
Certificate issuer: /CN=78E0160248ABDDA316B054457CAC9C2878172E3F
Certificate serial: 161E2D9DBB511AD0940550D1B6259B586840794A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78E0160248ABDDA316B054457CAC9C2878172E3F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/78E0160248ABDDA316B054457CAC9C2878172E3F.mft
Manifest number: BF
Signing time: Mon 21 Sep 2026 09:17:58 +0000
Manifest this update: Mon 21 Sep 2026 09:12:58 +0000
Manifest next update: Tue 22 Sep 2026 10:26:58 +0000
Files and hashes: 1: 3130332e3135322e3233382e302f32332d3234203d3e20313430343438.roa (hash: VA9x1JUvw0UogZupkAioG4JuD1sEwt/f57IrckxZ3dI=)
2: 323430363a333834303a3a2f33322d3438203d3e20313430343438.roa (hash: 2+XchGapSoCutP6h9YZdHEQH9u3BfkhAjpO15GhIZ5w=)
3: 78E0160248ABDDA316B054457CAC9C2878172E3F.crl (hash: rtiolZ8dg3bIz9ENskg0BAywzteFJFBCoA2K5v7af9o=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/78E0160248ABDDA316B054457CAC9C2878172E3F.crl
rsync://rpki-rsync.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/78E0160248ABDDA316B054457CAC9C2878172E3F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78E0160248ABDDA316B054457CAC9C2878172E3F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 05:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:1e:2d:9d:bb:51:1a:d0:94:05:50:d1:b6:25:9b:58:68:40:79:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78E0160248ABDDA316B054457CAC9C2878172E3F
Validity
Not Before: Sep 21 09:12:58 2026 GMT
Not After : Sep 22 10:26:58 2026 GMT
Subject: CN=9EF523923C4535DA45B56438A03817A97310A8B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d3:3d:84:b5:c0:ce:3d:5a:92:34:66:ac:69:
d4:c1:a9:eb:20:33:8a:b5:d8:1f:89:fd:86:cd:bc:
ad:c6:ff:7d:4d:5c:48:e3:0f:ca:4b:ad:2a:32:07:
6e:55:97:1f:14:ed:fd:7f:67:70:e8:24:17:6a:bf:
95:45:f7:f1:24:cc:3e:2d:3b:86:ce:8f:2d:77:d7:
01:7e:01:85:f3:78:d0:58:d9:3a:1e:91:de:90:05:
ce:c6:e1:c2:96:1b:07:52:b3:a8:ef:88:55:8a:ab:
61:51:3a:26:68:a4:bd:21:75:d2:bc:e9:17:12:f7:
1b:03:8f:f6:0d:31:d9:27:bd:1b:0b:ca:88:28:96:
ee:3b:f8:ce:d8:fd:55:ee:3e:91:5f:cf:00:04:28:
12:b9:f8:bc:05:f4:62:74:a5:87:28:7b:f5:96:b6:
62:7d:9a:f5:d8:d0:94:e3:66:17:22:2d:26:f5:9f:
c5:36:19:c2:1c:0a:53:e1:d3:95:4b:7c:36:e7:b1:
37:38:d4:db:e1:9f:4d:58:34:da:b9:26:6b:0b:01:
3c:de:71:35:66:45:4e:01:e3:94:ed:35:77:00:f6:
fb:e3:89:06:3f:4b:5b:23:1d:f5:91:47:01:c7:ab:
df:e5:27:b5:5e:4a:42:c7:b1:7d:87:3d:a8:2a:97:
0e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F5:23:92:3C:45:35:DA:45:B5:64:38:A0:38:17:A9:73:10:A8:B8
X509v3 Authority Key Identifier:
keyid:78:E0:16:02:48:AB:DD:A3:16:B0:54:45:7C:AC:9C:28:78:17:2E:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/78E0160248ABDDA316B054457CAC9C2878172E3F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78E0160248ABDDA316B054457CAC9C2878172E3F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/78E0160248ABDDA316B054457CAC9C2878172E3F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:7e:fb:3e:ff:ab:e0:06:91:38:20:8b:af:ad:14:a3:7c:77:
c6:b5:c0:0a:7b:9d:fa:d4:7d:d6:ff:e8:b1:a4:87:94:53:cc:
70:aa:44:3d:29:db:ff:c5:c9:2f:fa:d1:db:14:f2:db:7d:3f:
a0:42:d8:f1:e6:1a:e6:5f:8d:5e:f9:d1:79:9e:13:a9:70:fb:
4a:b5:6e:bd:2d:59:bd:2c:68:d9:65:b0:69:02:ce:4b:84:7e:
b8:89:ce:ab:f1:5b:12:9f:40:0d:7c:8d:a9:71:b7:f1:1d:0f:
14:e9:51:b8:b8:28:38:bb:88:bb:db:69:ca:28:b9:c4:a2:9f:
fc:fd:77:a3:82:1e:44:7a:12:57:76:ec:9f:1e:fe:a1:f9:09:
5c:00:90:fa:b3:0e:e7:40:0e:e3:25:30:39:18:2e:3b:c7:4b:
5b:f6:3b:7f:44:34:18:77:9a:1f:71:39:c7:66:a8:cf:7d:f5:
8b:16:28:e3:a3:56:0e:43:09:08:74:1c:dd:2a:62:dd:c3:8d:
e2:68:21:49:da:1e:e8:5d:7f:81:a1:1a:bc:c1:07:2c:72:73:
a3:35:2e:b6:29:45:3c:8d:68:a7:8d:d1:8a:6a:8f:61:25:29:
d0:c9:26:84:b9:34:3b:7a:39:31:7c:a3:45:1f:7d:97:90:8f:
a7:50:80:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:36:43 2026 by rpki-client