
$ rpki-client -vvf rpki-rsync.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/781BE026701DAFA391758F44794F58BDFF3C7E68.mft
File: 781BE026701DAFA391758F44794F58BDFF3C7E68.mft (raw, json)
Hash identifier: XOOl8WQXGZnyWT24xzNUbTeUurr4vTSYXi9yVljxMVc=
Subject key identifier: FE:7C:E1:70:D2:91:3B:55:CB:F1:AA:C8:DF:10:E9:9A:BA:5A:A0:CE
Authority key identifier: 78:1B:E0:26:70:1D:AF:A3:91:75:8F:44:79:4F:58:BD:FF:3C:7E:68
Certificate issuer: /CN=781BE026701DAFA391758F44794F58BDFF3C7E68
Certificate serial: 44BABF60B36AB5DB757B579D6FCB7BC1CBD9F787
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/781BE026701DAFA391758F44794F58BDFF3C7E68.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/781BE026701DAFA391758F44794F58BDFF3C7E68.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 07:11:36 +0000
Manifest this update: Wed 17 Jun 2026 07:06:36 +0000
Manifest next update: Thu 18 Jun 2026 07:23:36 +0000
Files and hashes: 1: 323430303a386238303a3a2f33322d3332203d3e20313331373637.roa (hash: a7s2l3O6pvc7GKZk3g5ud7YbwEz/lUPAccNQa0TiOHo=)
2: 3130332e39302e3139362e302f32322d3234203d3e20313331373637.roa (hash: e3eyP3Gqi2CIxa8B3ThMqpYr4Fy5iLHYeg/SLihyWJY=)
3: 781BE026701DAFA391758F44794F58BDFF3C7E68.crl (hash: 1wFur/2N3Gryoyilp2o3WfFjRVOO1POFVw2dIfxA+wE=)
4: 3137352e3130362e31362e302f32322d3234203d3e20313331373637.roa (hash: F7awc14DauajZvya1JB+aFN9Ei7NArKg1X2ILMaeIB8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/781BE026701DAFA391758F44794F58BDFF3C7E68.crl
rsync://rpki-rsync.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/781BE026701DAFA391758F44794F58BDFF3C7E68.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/781BE026701DAFA391758F44794F58BDFF3C7E68.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:ba:bf:60:b3:6a:b5:db:75:7b:57:9d:6f:cb:7b:c1:cb:d9:f7:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=781BE026701DAFA391758F44794F58BDFF3C7E68
Validity
Not Before: Jun 17 07:06:36 2026 GMT
Not After : Jun 18 07:23:36 2026 GMT
Subject: CN=FE7CE170D2913B55CBF1AAC8DF10E99ABA5AA0CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:be:f6:ae:1a:5e:69:c2:e9:a6:7d:63:a1:76:
2b:dd:52:e9:27:3c:70:54:06:ad:fa:29:f1:cd:56:
ee:50:db:3e:27:51:9a:8f:34:8d:c1:08:28:cf:54:
68:04:e4:9d:cf:c7:27:58:46:72:09:e5:30:06:f7:
4c:5e:c7:06:5d:b4:12:6c:96:c7:0d:77:93:e1:53:
71:24:ca:9f:65:07:c9:1e:d2:60:27:10:c0:c9:08:
35:f7:21:0e:8c:0e:c4:de:e8:35:a0:07:97:bd:bb:
75:57:7d:ed:db:3a:6b:cf:da:f4:40:52:3c:22:78:
e5:03:f8:65:2a:56:7c:f0:88:cf:01:e9:05:03:58:
8f:f0:47:af:2a:43:7c:6f:fe:fc:2a:28:6b:00:c8:
1c:e6:22:43:90:bd:e5:a9:5c:23:cf:c9:dc:07:63:
65:42:2d:f5:7b:7d:73:c8:87:61:ad:55:66:98:46:
d4:92:ce:dd:5b:7e:08:e4:1c:12:0c:f7:07:8c:7a:
c5:ca:38:3b:f0:d6:7c:fc:c8:4f:ba:51:2f:31:60:
27:90:69:97:fa:0d:96:a5:33:87:75:18:9b:65:6f:
99:7f:be:3e:fc:bc:88:5e:48:5e:e0:f9:7e:38:7c:
b1:ed:29:15:70:5d:31:5a:3a:96:26:64:ea:2d:8e:
f7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:7C:E1:70:D2:91:3B:55:CB:F1:AA:C8:DF:10:E9:9A:BA:5A:A0:CE
X509v3 Authority Key Identifier:
keyid:78:1B:E0:26:70:1D:AF:A3:91:75:8F:44:79:4F:58:BD:FF:3C:7E:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/781BE026701DAFA391758F44794F58BDFF3C7E68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/781BE026701DAFA391758F44794F58BDFF3C7E68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/781BE026701DAFA391758F44794F58BDFF3C7E68.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:f6:75:da:01:3a:fd:16:05:6c:31:77:cf:f3:34:09:97:c5:
3b:87:9a:69:35:cb:52:45:e8:7d:10:07:e9:56:03:ed:3e:d5:
ef:2a:30:e3:c3:97:a9:99:98:43:f4:9f:75:73:df:ef:c5:f4:
b7:55:02:94:67:5b:4c:00:3c:3b:2e:c4:dd:70:a8:a7:0e:fe:
9f:1e:e1:9b:e2:8d:34:30:07:d7:20:61:06:04:b3:a6:a8:c0:
6a:83:c9:e3:31:98:91:1b:49:59:e6:6e:f5:5b:83:bb:a3:ee:
26:1f:d2:90:4c:8b:09:58:c6:19:d2:93:d7:82:95:25:e7:11:
ac:ab:72:43:75:19:b1:2e:8b:12:ad:ee:c3:ef:40:80:c5:47:
69:e3:1f:83:fc:2c:a1:26:0c:82:2b:57:94:28:e7:43:e9:4c:
fd:73:ef:27:f7:a4:e8:3b:42:68:b8:8b:38:4e:54:5e:36:fb:
43:9b:42:a1:0f:f8:cb:12:d4:40:55:be:e4:64:6c:cf:f5:9f:
2b:f0:19:b7:53:ee:13:33:8a:67:07:59:41:28:43:2b:6c:13:
53:a5:74:86:bc:82:f8:69:e0:72:dd:fe:ae:84:e7:a8:0b:e9:
cb:4b:88:61:60:19:2b:3a:02:e3:54:e6:35:ef:c5:51:61:51:
a8:5c:01:7e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIURLq/YLNqtdt1e1edb8t7wcvZ94cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzgxQkUwMjY3MDFEQUZBMzkxNzU4RjQ0Nzk0RjU4QkRG
RjNDN0U2ODAeFw0yNjA2MTcwNzA2MzZaFw0yNjA2MTgwNzIzMzZaMDMxMTAvBgNV
BAMTKEZFN0NFMTcwRDI5MTNCNTVDQkYxQUFDOERGMTBFOTlBQkE1QUEwQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDevvauGl5pwummfWOhdivdUukn
PHBUBq36KfHNVu5Q2z4nUZqPNI3BCCjPVGgE5J3PxydYRnIJ5TAG90xexwZdtBJs
lscNd5PhU3Ekyp9lB8ke0mAnEMDJCDX3IQ6MDsTe6DWgB5e9u3VXfe3bOmvP2vRA
UjwieOUD+GUqVnzwiM8B6QUDWI/wR68qQ3xv/vwqKGsAyBzmIkOQveWpXCPPydwH
Y2VCLfV7fXPIh2GtVWaYRtSSzt1bfgjkHBIM9weMesXKODvw1nz8yE+6US8xYCeQ
aZf6DZalM4d1GJtlb5l/vj78vIheSF7g+X44fLHtKRVwXTFaOpYmZOotjvfHAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU/nzhcNKRO1XL8arI3xDpmrpaoM4wHwYDVR0j
BBgwFoAUeBvgJnAdr6ORdY9EeU9Yvf88fmgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MjRkMTA4ZjctMDhiMi00MDlmLThhNzAtYTljNjdhZTVlZDIyLzAvNzgxQkUwMjY3
MDFEQUZBMzkxNzU4RjQ0Nzk0RjU4QkRGRjNDN0U2OC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83ODFCRTAyNjcwMURBRkEzOTE3NThGNDQ3OTRGNThCREZGM0M3
RTY4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjRkMTA4ZjctMDhiMi00MDlmLThh
NzAtYTljNjdhZTVlZDIyLzAvNzgxQkUwMjY3MDFEQUZBMzkxNzU4RjQ0Nzk0RjU4
QkRGRjNDN0U2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADb2ddoBOv0WBWwxd8/zNAmXxTuHmmk1y1JF
6H0QB+lWA+0+1e8qMOPDl6mZmEP0n3Vz3+/F9LdVApRnW0wAPDsuxN1wqKcO/p8e
4ZvijTQwB9cgYQYEs6aowGqDyeMxmJEbSVnmbvVbg7uj7iYf0pBMiwlYxhnSk9eC
lSXnEayrckN1GbEuixKt7sPvQIDFR2njH4P8LKEmDIIrV5Qo50PpTP1z7yf3pOg7
Qmi4izhOVF42+0ObQqEP+MsS1EBVvuRkbM/1nyvwGbdT7hMzimcHWUEoQytsE1Ol
dIa8gvhp4HLd/q6E56gL6ctLiGFgGSs6AuNU5jXvxVFhUahcAX4=
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:02:23 2026 by rpki-client