
$ rpki-client -vvf rpki-rsync.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.mft
File: 2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.mft (raw, json)
Hash identifier: 1WlL4Zeik3unouIzvLbH0tV1uruC8QVXBmFCzqxm+fM=
Subject key identifier: 89:57:EC:CB:CE:4E:51:9A:9C:C1:57:20:A3:D9:98:FE:A3:90:DC:BB
Authority key identifier: 2F:78:79:4E:C0:75:FE:95:E7:83:1D:F0:B1:4E:74:B8:8E:0E:3F:DF
Certificate issuer: /CN=2F78794EC075FE95E7831DF0B14E74B88E0E3FDF
Certificate serial: 3FC5F3D790D6AC0D3010C801597C1A0D87EC43ED
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.mft
Manifest number: 3D
Signing time: Tue 16 Jun 2026 12:49:53 +0000
Manifest this update: Tue 16 Jun 2026 12:44:53 +0000
Manifest next update: Wed 17 Jun 2026 16:21:53 +0000
Files and hashes: 1: 3130332e38362e3132382e302f32332d3234203d3e2034383030.roa (hash: 60R7X56SozCA5mIN8nGG4Hjmryhwz60xWHs0HKmGlWc=)
2: 2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.crl (hash: gTjzdG2aiVqIZMP5wBJ0p9JYUfdnMa2hjoIF8gz/UVM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.crl
rsync://rpki-rsync.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 16:21:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:c5:f3:d7:90:d6:ac:0d:30:10:c8:01:59:7c:1a:0d:87:ec:43:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F78794EC075FE95E7831DF0B14E74B88E0E3FDF
Validity
Not Before: Jun 16 12:44:53 2026 GMT
Not After : Jun 17 16:21:53 2026 GMT
Subject: CN=8957ECCBCE4E519A9CC15720A3D998FEA390DCBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:db:99:5f:04:eb:62:03:03:a0:a5:46:52:d0:
b0:22:7c:98:ae:68:8a:75:55:7f:5e:65:e9:80:59:
fb:d6:d7:d3:60:f2:a9:2b:0d:65:62:66:b5:83:2e:
62:cc:ab:75:cb:d2:cb:7a:3a:aa:b6:16:4e:01:3b:
1b:08:7b:9f:f9:40:72:5f:c3:5e:e6:ff:87:c5:90:
28:e7:31:58:aa:cc:42:d4:49:2f:8f:80:9b:00:a6:
ed:e7:8a:10:c6:f5:73:34:37:fa:09:08:b2:5c:a6:
d9:e5:8d:da:e6:65:92:5e:6d:5d:d0:81:a3:17:ff:
60:8a:1b:a3:7c:6d:12:72:40:38:9e:b3:73:06:b1:
3e:88:07:e0:62:51:17:e0:9a:ae:03:7f:88:07:d7:
b3:18:bd:a8:f1:b5:16:76:97:b2:a2:88:ec:3e:e1:
96:df:c4:f7:2a:58:0f:73:02:d2:43:a8:39:83:6a:
b6:85:e6:1d:61:c8:7d:65:6c:b8:3c:b4:c7:db:a3:
5b:2a:10:81:40:31:56:3a:8c:3e:08:28:bc:8d:9f:
7f:f9:04:ef:54:d5:e3:e8:c4:f6:b2:53:6a:af:0e:
64:48:5b:c2:47:1f:ab:a0:82:37:06:eb:21:b4:da:
ac:fc:d8:4f:8a:93:2a:99:6a:94:6e:1b:6a:43:2d:
db:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:57:EC:CB:CE:4E:51:9A:9C:C1:57:20:A3:D9:98:FE:A3:90:DC:BB
X509v3 Authority Key Identifier:
keyid:2F:78:79:4E:C0:75:FE:95:E7:83:1D:F0:B1:4E:74:B8:8E:0E:3F:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:8b:cd:02:33:e7:24:0f:50:3b:ae:14:25:6b:8e:f2:7d:a0:
e1:d3:98:41:af:9c:7e:43:52:2e:28:1f:06:df:db:aa:33:10:
e5:a6:01:2e:6d:6f:22:c6:79:e6:61:e4:fc:e6:c8:93:09:34:
e5:e7:5c:02:09:7d:db:81:b8:2c:e6:af:52:48:27:ce:bb:16:
78:13:d4:dd:f2:9c:2b:ab:d4:6a:3c:92:9f:af:c7:df:ab:da:
7a:39:37:db:62:cf:0c:7f:dd:71:30:42:1a:7c:af:4b:42:ca:
58:e2:9d:7a:e1:71:71:26:99:fc:34:d7:b2:fb:bd:44:8b:85:
aa:d3:a4:6a:c4:fc:32:f3:9d:a0:27:28:01:33:fa:04:d2:b1:
c3:9b:f0:98:c1:10:e9:09:15:5a:dc:b8:aa:1c:07:7b:7d:6c:
64:f9:ac:93:a7:3c:d5:93:58:21:3a:85:1d:a4:c5:62:a4:c0:
40:2d:f9:af:8c:43:08:bb:86:86:ef:bf:53:d5:f0:15:5a:5c:
b8:1f:b0:20:94:b2:3f:95:1c:df:74:dc:cc:6a:10:4d:59:cf:
5e:50:87:92:2f:a0:b6:ff:d1:04:50:8e:bf:62:23:ca:4c:64:
5b:f3:1b:0d:7c:a3:c0:2b:2e:e6:ed:14:8a:24:60:1d:7c:3c:
98:ce:5a:f1
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUP8Xz15DWrA0wEMgBWXwaDYfsQ+0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkY3ODc5NEVDMDc1RkU5NUU3ODMxREYwQjE0RTc0Qjg4
RTBFM0ZERjAeFw0yNjA2MTYxMjQ0NTNaFw0yNjA2MTcxNjIxNTNaMDMxMTAvBgNV
BAMTKDg5NTdFQ0NCQ0U0RTUxOUE5Q0MxNTcyMEEzRDk5OEZFQTM5MERDQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH25lfBOtiAwOgpUZS0LAifJiu
aIp1VX9eZemAWfvW19Ng8qkrDWViZrWDLmLMq3XL0st6Oqq2Fk4BOxsIe5/5QHJf
w17m/4fFkCjnMViqzELUSS+PgJsApu3nihDG9XM0N/oJCLJcptnljdrmZZJebV3Q
gaMX/2CKG6N8bRJyQDies3MGsT6IB+BiURfgmq4Df4gH17MYvajxtRZ2l7KiiOw+
4ZbfxPcqWA9zAtJDqDmDaraF5h1hyH1lbLg8tMfbo1sqEIFAMVY6jD4IKLyNn3/5
BO9U1ePoxPayU2qvDmRIW8JHH6uggjcG6yG02qz82E+KkyqZapRuG2pDLds3AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUiVfsy85OUZqcwVcgo9mY/qOQ3LswHwYDVR0j
BBgwFoAUL3h5TsB1/pXngx3wsU50uI4OP98wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OThhN2YzNTUtZjIyNS00OGYzLTg3ZjgtMGJmYjBjOGU1OGYwLzAvMkY3ODc5NEVD
MDc1RkU5NUU3ODMxREYwQjE0RTc0Qjg4RTBFM0ZERi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8yRjc4Nzk0RUMwNzVGRTk1RTc4MzFERjBCMTRFNzRCODhFMEUz
RkRGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOThhN2YzNTUtZjIyNS00OGYzLTg3
ZjgtMGJmYjBjOGU1OGYwLzAvMkY3ODc5NEVDMDc1RkU5NUU3ODMxREYwQjE0RTc0
Qjg4RTBFM0ZERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHGLzQIz5yQPUDuuFCVrjvJ9oOHTmEGvnH5D
Ui4oHwbf26ozEOWmAS5tbyLGeeZh5PzmyJMJNOXnXAIJfduBuCzmr1JIJ867FngT
1N3ynCur1Go8kp+vx9+r2no5N9tizwx/3XEwQhp8r0tCyljinXrhcXEmmfw017L7
vUSLharTpGrE/DLznaAnKAEz+gTSscOb8JjBEOkJFVrcuKocB3t9bGT5rJOnPNWT
WCE6hR2kxWKkwEAt+a+MQwi7hobvv1PV8BVaXLgfsCCUsj+VHN903MxqEE1Zz15Q
h5IvoLb/0QRQjr9iI8pMZFvzGw18o8ArLubtFIokYB18PJjOWvE=
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:43:52 2026 by rpki-client