
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/1/378A3CDFC885FF682AB4268D41AC4081FB774095.mft
File: 378A3CDFC885FF682AB4268D41AC4081FB774095.mft (raw, json)
Hash identifier: UdmxLzkCF1JsgtPNJoL0junnHifOETRcPQJ8u5hfvsI=
Subject key identifier: 6B:F2:2A:5C:03:23:96:64:4C:5A:2D:F4:2E:C8:2D:5A:B9:05:5D:02
Authority key identifier: 37:8A:3C:DF:C8:85:FF:68:2A:B4:26:8D:41:AC:40:81:FB:77:40:95
Certificate issuer: /CN=378A3CDFC885FF682AB4268D41AC4081FB774095
Certificate serial: 61852DE01F6F9E3BF662A7EB9E2AEA42F017A11C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/378A3CDFC885FF682AB4268D41AC4081FB774095.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/1/378A3CDFC885FF682AB4268D41AC4081FB774095.mft
Manifest number: BF
Signing time: Mon 21 Sep 2026 20:37:04 +0000
Manifest this update: Mon 21 Sep 2026 20:32:04 +0000
Manifest next update: Tue 22 Sep 2026 21:08:04 +0000
Files and hashes: 1: 378A3CDFC885FF682AB4268D41AC4081FB774095.crl (hash: H51Oov44jjf9FvoWN0VzrI3BsHAEjaD/pHjfXjd2lpQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/1/378A3CDFC885FF682AB4268D41AC4081FB774095.crl
rsync://rpki-rsync.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/1/378A3CDFC885FF682AB4268D41AC4081FB774095.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/378A3CDFC885FF682AB4268D41AC4081FB774095.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 21:08:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:85:2d:e0:1f:6f:9e:3b:f6:62:a7:eb:9e:2a:ea:42:f0:17:a1:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=378A3CDFC885FF682AB4268D41AC4081FB774095
Validity
Not Before: Sep 21 20:32:04 2026 GMT
Not After : Sep 22 21:08:04 2026 GMT
Subject: CN=6BF22A5C032396644C5A2DF42EC82D5AB9055D02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4c:49:f2:86:e6:92:3e:d9:94:e7:59:56:03:
c8:ae:6c:ba:20:e7:b2:f3:f5:17:5e:35:fe:96:ce:
7b:a0:80:c4:29:e2:28:b8:e1:72:1e:c1:e4:2e:2a:
e8:b4:23:02:b4:00:80:04:06:15:1d:55:7f:dd:25:
72:72:f5:2e:0f:91:17:16:30:5e:43:9b:44:c7:e7:
9a:0c:8e:9d:49:52:5a:be:4a:00:a4:55:15:fd:4e:
87:c4:a2:32:bd:43:fe:8b:0a:3b:7c:9c:59:5b:8e:
2d:30:a7:90:00:ab:3d:92:45:c4:8d:2d:83:41:49:
e7:b3:1f:e7:09:ef:3b:55:9b:85:6c:7a:36:33:ee:
e1:7a:99:03:36:b8:55:ca:ca:e2:62:98:f7:8a:95:
f7:91:c3:e7:d6:51:9c:fe:33:09:1c:81:3e:61:dc:
34:ed:d7:72:70:20:6e:4c:7a:54:11:c8:01:6d:de:
36:3f:bd:c8:5d:b8:a5:66:8b:36:f9:23:91:dc:c3:
3c:0c:04:2e:b7:4a:05:68:f3:4e:75:13:c1:79:c4:
66:20:ac:e0:fe:27:c0:42:5c:d5:af:5a:f1:be:8c:
eb:30:ba:61:ef:e0:25:91:83:9d:8e:d6:08:b9:b0:
bc:54:ee:4f:3c:3d:17:bb:ca:12:0d:fb:79:80:96:
b6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F2:2A:5C:03:23:96:64:4C:5A:2D:F4:2E:C8:2D:5A:B9:05:5D:02
X509v3 Authority Key Identifier:
keyid:37:8A:3C:DF:C8:85:FF:68:2A:B4:26:8D:41:AC:40:81:FB:77:40:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/1/378A3CDFC885FF682AB4268D41AC4081FB774095.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/378A3CDFC885FF682AB4268D41AC4081FB774095.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/1/378A3CDFC885FF682AB4268D41AC4081FB774095.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:c1:33:e1:81:b0:89:84:ed:1d:42:99:f5:ec:8c:d2:84:6c:
42:8b:1f:db:3f:bb:b6:17:ad:51:cf:96:4f:f4:a7:a3:ac:f2:
b1:48:0a:6d:66:67:72:c0:ae:ef:7f:aa:2a:d2:e2:9e:56:b9:
ff:5e:ea:73:4b:0d:f2:73:22:54:8b:46:bc:20:6f:91:b1:d0:
8d:2f:54:78:b5:d0:24:f2:49:90:32:9d:6d:bf:29:a8:2e:8e:
57:72:5a:11:86:96:bc:f2:b5:24:80:1f:52:f0:b1:c0:2f:5b:
88:0d:10:02:20:35:4a:c3:f5:86:e9:ef:a1:36:db:ed:4a:10:
42:88:0b:5c:59:5f:97:c8:42:32:d3:73:65:e7:a3:89:96:9c:
7e:9c:14:2e:45:ed:18:74:80:78:a2:56:73:62:b2:66:2a:6e:
fd:cd:1e:6a:c6:22:90:48:5e:ed:e8:90:5a:9a:8d:3c:cc:d3:
5b:8d:b1:42:95:87:57:28:69:b6:3e:34:cb:a9:01:5f:6c:ee:
be:74:05:57:ba:21:b4:d2:f8:ce:f2:1d:7d:7e:56:bf:6c:9a:
c7:37:a8:3d:34:e6:52:b9:2d:7a:b0:52:0b:cd:4a:09:5c:f5:
f2:f0:89:34:5f:78:10:73:fc:32:d8:33:28:8a:ba:4c:60:43:
6b:1e:94:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:55:26 2026 by rpki-client