
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/78E6D392CED2116E3E5167D5206B5FC375EA9F35.mft
File: 78E6D392CED2116E3E5167D5206B5FC375EA9F35.mft (raw, json)
Hash identifier: 5XrVZ1S4uN1EdfU3ZOxIWIgbMGTxaTzqXM0VB/zZVC4=
Subject key identifier: F8:02:3F:CE:F4:9F:F5:D3:58:68:5D:79:A2:AE:06:A2:CA:FE:F6:CF
Authority key identifier: 78:E6:D3:92:CE:D2:11:6E:3E:51:67:D5:20:6B:5F:C3:75:EA:9F:35
Certificate issuer: /CN=78E6D392CED2116E3E5167D5206B5FC375EA9F35
Certificate serial: 094801EAEE42A8DC8B897D2CFEAEFAD08965A680
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78E6D392CED2116E3E5167D5206B5FC375EA9F35.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/78E6D392CED2116E3E5167D5206B5FC375EA9F35.mft
Manifest number: C0
Signing time: Tue 22 Sep 2026 16:52:17 +0000
Manifest this update: Tue 22 Sep 2026 16:47:17 +0000
Manifest next update: Wed 23 Sep 2026 20:19:17 +0000
Files and hashes: 1: 78E6D392CED2116E3E5167D5206B5FC375EA9F35.crl (hash: nf41DccRMEwibnNd0cS2QUMonRNz9GlPQqnLFm9jds0=)
2: 3130332e3231342e3131322e302f32332d3234203d3e20313336303532.roa (hash: 3Berm5Gapt1UeoI40U+e3+MMW9FgSwdKP2f8X5GE7qo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/78E6D392CED2116E3E5167D5206B5FC375EA9F35.crl
rsync://rpki-rsync.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/78E6D392CED2116E3E5167D5206B5FC375EA9F35.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78E6D392CED2116E3E5167D5206B5FC375EA9F35.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 20:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:48:01:ea:ee:42:a8:dc:8b:89:7d:2c:fe:ae:fa:d0:89:65:a6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78E6D392CED2116E3E5167D5206B5FC375EA9F35
Validity
Not Before: Sep 22 16:47:17 2026 GMT
Not After : Sep 23 20:19:17 2026 GMT
Subject: CN=F8023FCEF49FF5D358685D79A2AE06A2CAFEF6CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a0:9f:81:2c:fd:85:8e:c1:3d:de:02:43:24:
35:97:00:cb:6e:05:31:8f:1c:b1:45:e0:85:8d:64:
ac:ae:01:46:46:69:62:33:ce:8a:d2:84:ba:82:f9:
2b:22:43:0e:f0:13:33:91:c4:e0:b3:c9:ca:31:c8:
de:e2:c7:48:43:0f:8a:0d:d6:86:06:b2:a4:c7:a3:
98:c0:75:c9:0f:db:37:6f:77:13:fd:41:be:d9:42:
d7:48:65:b0:e5:c8:0f:16:30:df:35:52:60:29:b0:
d3:f5:f7:c8:94:24:a8:29:ab:54:1f:98:73:47:97:
f1:3a:9d:d2:56:3d:0a:ae:31:0e:e7:94:14:cd:53:
18:b1:b2:6c:c2:88:d8:6e:95:75:69:3f:eb:1f:ff:
1e:94:23:1e:57:9a:11:01:cb:e1:b0:59:09:3d:6a:
65:56:26:8c:da:2a:e7:8d:84:2b:72:7b:57:43:99:
3a:83:4b:e8:6f:79:c3:27:94:ea:59:59:24:82:84:
28:76:4a:2a:d3:e8:2c:62:32:1c:eb:cc:85:51:da:
3e:80:e5:32:1d:a6:90:bc:f4:4a:87:66:2b:79:b8:
40:bc:f1:0d:fd:f2:32:9a:8d:32:db:4f:e0:6a:5c:
4b:5a:3d:e5:60:b2:50:89:77:1a:b5:78:e4:92:5e:
43:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:02:3F:CE:F4:9F:F5:D3:58:68:5D:79:A2:AE:06:A2:CA:FE:F6:CF
X509v3 Authority Key Identifier:
keyid:78:E6:D3:92:CE:D2:11:6E:3E:51:67:D5:20:6B:5F:C3:75:EA:9F:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/78E6D392CED2116E3E5167D5206B5FC375EA9F35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78E6D392CED2116E3E5167D5206B5FC375EA9F35.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/78E6D392CED2116E3E5167D5206B5FC375EA9F35.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:70:a8:8f:4f:b1:30:84:35:5d:d0:8b:b5:80:a1:1d:08:9d:
0a:d9:aa:19:d7:b8:33:8a:3d:65:52:24:2d:72:04:20:9f:df:
33:82:c6:06:fb:4b:b5:59:3d:8a:fc:07:76:c9:b1:96:e0:1d:
91:1f:a5:d2:5c:a7:c7:cc:3f:f8:78:c1:4c:ac:92:39:e3:49:
91:de:78:02:33:60:31:8b:a8:69:47:26:f8:37:b1:39:69:70:
96:7c:aa:7c:75:3f:2a:1c:87:0e:8f:05:b4:96:bb:a0:0d:6b:
78:69:b6:fd:b4:24:29:53:eb:5d:8f:3a:e0:6a:03:d6:d1:ae:
c1:20:2f:2c:d7:ea:37:8f:8d:03:f0:2f:da:27:93:b4:ce:d8:
0c:9e:6a:24:4f:5e:69:ca:a3:34:f6:f2:eb:78:e9:1c:1f:dd:
0d:67:9a:d3:71:b1:87:7b:b6:7b:c0:85:75:cd:44:da:40:0f:
5b:b6:73:ff:6b:b6:43:af:7a:51:cc:fa:69:e8:26:6a:0b:24:
49:b9:e4:f7:34:e7:9b:61:22:ea:e9:49:99:b0:61:5e:37:02:
37:77:fa:d8:76:ae:3b:4e:bb:fa:e3:11:78:b7:db:34:46:b1:
d7:5e:fc:da:45:e0:81:a9:00:a7:cd:ee:50:ec:f6:9c:05:19:
29:55:f3:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:07:17 2026 by rpki-client