
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.mft
File: 778A71BB3C91368C656DEB818E9DB403DBD1E2C4.mft (raw, json)
Hash identifier: 8rrJciWBapozxnibaPjMbnKRP7ct3t6JVo73D9YuEhA=
Subject key identifier: 7B:BA:2D:35:7E:B0:62:9D:17:2A:B8:F4:E9:32:59:BA:47:D0:77:46
Authority key identifier: 77:8A:71:BB:3C:91:36:8C:65:6D:EB:81:8E:9D:B4:03:DB:D1:E2:C4
Certificate issuer: /CN=778A71BB3C91368C656DEB818E9DB403DBD1E2C4
Certificate serial: 1A5D871A4937533012283AA4AAA7F7EB1191C9F9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.mft
Manifest number: 0107
Signing time: Sun 15 Nov 2026 02:22:09 +0000
Manifest this update: Sun 15 Nov 2026 02:17:09 +0000
Manifest next update: Mon 16 Nov 2026 04:41:09 +0000
Files and hashes: 1: 778A71BB3C91368C656DEB818E9DB403DBD1E2C4.crl (hash: xo032aWtqNSi0aLRtFaT5P8lkOmYIIt7V9FhnPcN2UA=)
2: 323030313a6466323a633963303a3a2f34382d3438203d3e20313531353338.roa (hash: YndAlxaqXYkWW68P17cuw0iGsOCiRy+p2CjBviV7Rok=)
3: 3130332e3234382e382e302f32332d3234203d3e20313531353338.roa (hash: ccnKpMhAZ50WINER3EYQ3VYvFkNVbacY8s+OufsENRg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.crl
rsync://rpki-rsync.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Nov 2026 04:41:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:5d:87:1a:49:37:53:30:12:28:3a:a4:aa:a7:f7:eb:11:91:c9:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=778A71BB3C91368C656DEB818E9DB403DBD1E2C4
Validity
Not Before: Nov 15 02:17:09 2026 GMT
Not After : Nov 16 04:41:09 2026 GMT
Subject: CN=7BBA2D357EB0629D172AB8F4E93259BA47D07746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0b:00:fa:a5:89:a2:ec:63:ae:b0:c2:35:57:
93:58:33:68:90:d2:21:b5:71:3e:55:dd:67:12:d9:
7b:74:f6:a5:4c:bd:63:fd:51:c8:70:24:5d:00:0f:
c7:46:77:5d:2f:8d:15:d4:36:7d:f3:0b:fe:cd:cf:
d9:fe:a9:54:d5:26:03:c8:6c:be:f5:fd:47:7a:9e:
21:b7:a1:2f:08:a1:08:c3:e0:df:52:02:01:46:7c:
5c:7a:8b:0b:03:5e:fa:86:07:3d:be:32:9e:b4:12:
ce:7d:36:68:8f:2d:68:01:ab:dc:29:7b:fa:39:04:
7a:30:82:15:b4:b2:80:7c:93:83:c5:be:82:ae:1e:
59:c0:a1:fb:bd:5c:9d:49:ae:1f:62:37:51:92:3c:
d6:cc:cb:32:f9:1f:4b:8f:76:94:91:78:85:3b:46:
e5:af:82:d4:a4:e7:e8:8d:99:7e:81:e1:30:a9:0c:
4b:4d:65:74:c5:7e:cb:40:6a:70:1d:f7:1a:b4:18:
d8:fc:26:b4:98:80:01:6f:a7:10:7c:68:13:df:c9:
7d:fb:91:db:02:f3:29:bf:9d:2b:6d:08:eb:2f:9f:
b7:21:e3:81:39:1f:4e:c9:14:22:e6:ba:b0:ab:ef:
07:53:13:c6:c4:db:d2:55:ae:7f:ad:1c:ef:a1:a4:
f3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:BA:2D:35:7E:B0:62:9D:17:2A:B8:F4:E9:32:59:BA:47:D0:77:46
X509v3 Authority Key Identifier:
keyid:77:8A:71:BB:3C:91:36:8C:65:6D:EB:81:8E:9D:B4:03:DB:D1:E2:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:47:64:46:61:f5:c2:fd:91:ca:db:35:e2:0e:74:42:33:05:
cf:9f:d1:ed:23:5f:16:03:17:92:c2:bc:16:b3:29:2b:e1:38:
9f:90:da:67:d7:18:82:26:28:a2:33:95:f5:3b:c2:09:00:65:
fc:de:1c:46:c7:32:f7:b0:3e:3d:4d:38:22:0c:7e:a5:f1:b2:
e1:2d:ed:b7:88:4f:29:e5:8b:a6:1a:7f:a2:45:6f:7e:82:18:
3b:e7:e3:b8:73:75:77:23:dd:b9:c4:50:21:19:ea:39:9e:e9:
7f:ba:65:33:6e:0f:78:07:9c:fb:88:ff:9a:b0:d7:be:5e:ff:
70:a9:3f:37:12:8e:5d:a9:0c:8f:16:31:08:41:ca:cc:bb:a0:
e4:19:b7:c2:03:d4:d4:25:f9:52:c1:3d:82:de:11:f6:dc:05:
7d:18:f9:a5:34:99:02:bb:4c:2a:9e:a1:8b:42:6d:18:0f:3a:
bd:c2:2d:2d:51:10:36:fb:7d:db:db:c3:15:71:c4:3f:50:56:
29:9f:7b:9c:37:33:36:20:bd:af:88:41:e6:a4:b7:48:ab:93:
92:a0:c4:b0:29:12:d9:91:c5:f5:15:6a:43:2f:94:0f:35:d6:
16:63:6b:eb:55:a3:1f:0f:53:08:25:b5:69:8b:2f:68:10:88:
85:53:2d:5b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUGl2HGkk3UzASKDqkqqf36xGRyfkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzc4QTcxQkIzQzkxMzY4QzY1NkRFQjgxOEU5REI0MDNE
QkQxRTJDNDAeFw0yNjExMTUwMjE3MDlaFw0yNjExMTYwNDQxMDlaMDMxMTAvBgNV
BAMTKDdCQkEyRDM1N0VCMDYyOUQxNzJBQjhGNEU5MzI1OUJBNDdEMDc3NDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJCwD6pYmi7GOusMI1V5NYM2iQ
0iG1cT5V3WcS2Xt09qVMvWP9UchwJF0AD8dGd10vjRXUNn3zC/7Nz9n+qVTVJgPI
bL71/Ud6niG3oS8IoQjD4N9SAgFGfFx6iwsDXvqGBz2+Mp60Es59NmiPLWgBq9wp
e/o5BHowghW0soB8k4PFvoKuHlnAofu9XJ1Jrh9iN1GSPNbMyzL5H0uPdpSReIU7
RuWvgtSk5+iNmX6B4TCpDEtNZXTFfstAanAd9xq0GNj8JrSYgAFvpxB8aBPfyX37
kdsC8ym/nSttCOsvn7ch44E5H07JFCLmurCr7wdTE8bE29JVrn+tHO+hpPPpAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUe7otNX6wYp0XKrj06TJZukfQd0YwHwYDVR0j
BBgwFoAUd4pxuzyRNoxlbeuBjp20A9vR4sQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MjhmNWJhNWUtMWY1Yy00Mjg0LTlhMTYtMDEzNWE5ZmQ0ZTI4LzAvNzc4QTcxQkIz
QzkxMzY4QzY1NkRFQjgxOEU5REI0MDNEQkQxRTJDNC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83NzhBNzFCQjNDOTEzNjhDNjU2REVCODE4RTlEQjQwM0RCRDFF
MkM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjhmNWJhNWUtMWY1Yy00Mjg0LTlh
MTYtMDEzNWE5ZmQ0ZTI4LzAvNzc4QTcxQkIzQzkxMzY4QzY1NkRFQjgxOEU5REI0
MDNEQkQxRTJDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAA5HZEZh9cL9kcrbNeIOdEIzBc+f0e0jXxYD
F5LCvBazKSvhOJ+Q2mfXGIImKKIzlfU7wgkAZfzeHEbHMvewPj1NOCIMfqXxsuEt
7beITynli6Yaf6JFb36CGDvn47hzdXcj3bnEUCEZ6jme6X+6ZTNuD3gHnPuI/5qw
175e/3CpPzcSjl2pDI8WMQhBysy7oOQZt8ID1NQl+VLBPYLeEfbcBX0Y+aU0mQK7
TCqeoYtCbRgPOr3CLS1REDb7fdvbwxVxxD9QVimfe5w3MzYgva+IQeakt0irk5Kg
xLApEtmRxfUVakMvlA811hZja+tVox8PUwgltWmLL2gQiIVTLVs=
-----END CERTIFICATE-----
Generated at Sun Nov 15 13:11:28 2026 by rpki-client