
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/787B7E1048C16AB0BE85DAB0BB116B1706F3056E.mft
File: 787B7E1048C16AB0BE85DAB0BB116B1706F3056E.mft (raw, json)
Hash identifier: T8Jg54r53+8uw0Ow/BN27wb0DNJYy3Jz6jkBU0msc0A=
Subject key identifier: 21:45:F1:91:E4:0D:50:4A:51:8A:BE:C1:F2:97:EA:E3:4F:76:4F:C5
Authority key identifier: 78:7B:7E:10:48:C1:6A:B0:BE:85:DA:B0:BB:11:6B:17:06:F3:05:6E
Certificate issuer: /CN=787B7E1048C16AB0BE85DAB0BB116B1706F3056E
Certificate serial: 6C347C7567469246B587C95DD6B007DEE5A8C7A4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/787B7E1048C16AB0BE85DAB0BB116B1706F3056E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/787B7E1048C16AB0BE85DAB0BB116B1706F3056E.mft
Manifest number: C6
Signing time: Sat 26 Sep 2026 22:32:54 +0000
Manifest this update: Sat 26 Sep 2026 22:27:54 +0000
Manifest next update: Mon 28 Sep 2026 02:31:54 +0000
Files and hashes: 1: 787B7E1048C16AB0BE85DAB0BB116B1706F3056E.crl (hash: bpX7Bd9cP8ZWNSxn7VEmJWsxh+ZfZP/FvBj2OXXeyLs=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/787B7E1048C16AB0BE85DAB0BB116B1706F3056E.crl
rsync://rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/787B7E1048C16AB0BE85DAB0BB116B1706F3056E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/787B7E1048C16AB0BE85DAB0BB116B1706F3056E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 02:31:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:34:7c:75:67:46:92:46:b5:87:c9:5d:d6:b0:07:de:e5:a8:c7:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=787B7E1048C16AB0BE85DAB0BB116B1706F3056E
Validity
Not Before: Sep 26 22:27:54 2026 GMT
Not After : Sep 28 02:31:54 2026 GMT
Subject: CN=2145F191E40D504A518ABEC1F297EAE34F764FC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f2:f7:32:8a:c6:0e:46:20:f3:7f:6c:fb:98:
62:19:86:a1:2e:d3:41:18:70:cc:b1:eb:58:6f:7f:
f9:8b:39:93:94:c9:cc:4a:da:01:48:83:40:1f:6e:
91:32:22:02:98:a3:fd:30:e9:84:db:e4:ce:7f:db:
4b:35:18:db:88:64:a3:cb:09:2d:c8:74:9f:07:b2:
d1:cd:d0:07:32:a2:cb:5d:86:5e:b5:54:95:b3:5d:
d7:38:7b:a5:69:13:98:1f:a2:a0:d4:f2:a5:5d:86:
24:74:b7:01:c5:c6:5a:bd:65:6e:01:92:ea:b4:f9:
53:a0:ca:dc:d1:03:b8:4f:b5:8e:94:87:cd:43:4e:
8b:11:74:31:2d:80:87:f5:e1:44:97:f4:cb:c5:4c:
5a:96:58:26:c3:92:b1:bd:c4:c4:88:68:ea:dd:23:
c0:76:fd:0c:35:87:4d:07:88:b7:48:fa:22:0a:02:
02:52:5b:60:8b:68:bf:15:33:e8:7e:7d:a4:76:d4:
32:5c:de:de:72:3e:94:49:cb:8c:6e:15:a7:36:e5:
e7:47:d5:df:d8:7e:90:00:be:9e:f5:a2:03:2c:fe:
e0:a0:c5:1d:2b:77:58:d1:d8:5e:b0:06:fb:d7:a0:
a0:db:e3:85:c5:e1:37:34:8e:54:85:47:c0:cd:20:
c8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:45:F1:91:E4:0D:50:4A:51:8A:BE:C1:F2:97:EA:E3:4F:76:4F:C5
X509v3 Authority Key Identifier:
keyid:78:7B:7E:10:48:C1:6A:B0:BE:85:DA:B0:BB:11:6B:17:06:F3:05:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/787B7E1048C16AB0BE85DAB0BB116B1706F3056E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/787B7E1048C16AB0BE85DAB0BB116B1706F3056E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/787B7E1048C16AB0BE85DAB0BB116B1706F3056E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ea:20:43:e2:cb:90:40:42:86:8d:c3:a0:61:18:85:29:c8:
d8:ff:89:b2:78:a8:07:6b:bb:13:8b:b3:35:d8:f6:05:9b:90:
a7:45:c7:db:3a:ec:d7:e1:9c:61:89:ef:3d:cf:dd:05:84:dd:
9d:41:67:54:ea:00:f5:ab:ac:b9:4a:0d:7c:32:f9:f6:c0:f7:
e5:79:e2:16:06:5a:1e:11:0a:0d:a6:a9:49:8f:aa:58:f9:8f:
53:39:91:f1:52:61:bd:5f:f0:c3:d6:91:d5:9d:97:08:33:07:
d8:4c:45:f4:f3:ad:7b:84:ad:8c:c6:9c:d4:5c:57:41:7d:b8:
ac:27:f5:4d:44:b8:05:63:9e:c9:75:ae:2d:1b:78:72:ec:dc:
18:81:db:73:73:80:09:16:b8:34:ec:43:00:33:43:ef:65:48:
93:d6:b0:c2:87:0e:79:f0:6f:d9:18:51:53:59:fb:12:5c:08:
d4:90:e3:05:60:ef:45:ba:1d:67:b3:91:00:e5:50:1c:79:11:
2c:0c:cf:1a:35:78:de:73:42:ba:be:c3:e0:42:dd:7a:80:65:
b1:17:eb:82:5b:92:fc:a7:b3:53:99:f8:b4:c7:72:c8:10:86:
19:68:f5:1b:ce:5e:1c:f4:90:2a:b6:e7:70:e4:c0:34:8e:37:
b3:a3:00:19
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUbDR8dWdGkka1h8ld1rAH3uWox6QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzg3QjdFMTA0OEMxNkFCMEJFODVEQUIwQkIxMTZCMTcw
NkYzMDU2RTAeFw0yNjA5MjYyMjI3NTRaFw0yNjA5MjgwMjMxNTRaMDMxMTAvBgNV
BAMTKDIxNDVGMTkxRTQwRDUwNEE1MThBQkVDMUYyOTdFQUUzNEY3NjRGQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU8vcyisYORiDzf2z7mGIZhqEu
00EYcMyx61hvf/mLOZOUycxK2gFIg0AfbpEyIgKYo/0w6YTb5M5/20s1GNuIZKPL
CS3IdJ8HstHN0Acyostdhl61VJWzXdc4e6VpE5gfoqDU8qVdhiR0twHFxlq9ZW4B
kuq0+VOgytzRA7hPtY6Uh81DTosRdDEtgIf14USX9MvFTFqWWCbDkrG9xMSIaOrd
I8B2/Qw1h00HiLdI+iIKAgJSW2CLaL8VM+h+faR21DJc3t5yPpRJy4xuFac25edH
1d/YfpAAvp71ogMs/uCgxR0rd1jR2F6wBvvXoKDb44XF4Tc0jlSFR8DNIMh1AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUIUXxkeQNUEpRir7B8pfq4092T8UwHwYDVR0j
BBgwFoAUeHt+EEjBarC+hdqwuxFrFwbzBW4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NWQ4ZWYxMTktN2RkZi00NWU1LTg2MzQtMzhiNzcyNThjYmNjLzEvNzg3QjdFMTA0
OEMxNkFCMEJFODVEQUIwQkIxMTZCMTcwNkYzMDU2RS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83ODdCN0UxMDQ4QzE2QUIwQkU4NURBQjBCQjExNkIxNzA2RjMw
NTZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWQ4ZWYxMTktN2RkZi00NWU1LTg2
MzQtMzhiNzcyNThjYmNjLzEvNzg3QjdFMTA0OEMxNkFCMEJFODVEQUIwQkIxMTZC
MTcwNkYzMDU2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADrqIEPiy5BAQoaNw6BhGIUpyNj/ibJ4qAdr
uxOLszXY9gWbkKdFx9s67NfhnGGJ7z3P3QWE3Z1BZ1TqAPWrrLlKDXwy+fbA9+V5
4hYGWh4RCg2mqUmPqlj5j1M5kfFSYb1f8MPWkdWdlwgzB9hMRfTzrXuErYzGnNRc
V0F9uKwn9U1EuAVjnsl1ri0beHLs3BiB23NzgAkWuDTsQwAzQ+9lSJPWsMKHDnnw
b9kYUVNZ+xJcCNSQ4wVg70W6HWezkQDlUBx5ESwMzxo1eN5zQrq+w+BC3XqAZbEX
64Jbkvyns1OZ+LTHcsgQhhlo9RvOXhz0kCq253DkwDSON7OjABk=
-----END CERTIFICATE-----
Generated at Sun Sep 27 11:53:55 2026 by rpki-client