
$ rpki-client -vvf rpki-rsync.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/78A2C1B7FD05098A611E198E8481B7297F924590.mft
File: 78A2C1B7FD05098A611E198E8481B7297F924590.mft (raw, json)
Hash identifier: ohCLHS5zeZ00k+x9DjPYc28KaSpK++SylzK3pmg3WhM=
Subject key identifier: D7:8D:AC:5C:39:D7:05:37:BE:13:E8:92:7D:BF:68:9F:C1:70:BF:93
Authority key identifier: 78:A2:C1:B7:FD:05:09:8A:61:1E:19:8E:84:81:B7:29:7F:92:45:90
Certificate issuer: /CN=78A2C1B7FD05098A611E198E8481B7297F924590
Certificate serial: 41250339BA7551E7300465F28D62FDE4B4FB6DB0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78A2C1B7FD05098A611E198E8481B7297F924590.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/78A2C1B7FD05098A611E198E8481B7297F924590.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 00:08:08 +0000
Manifest this update: Wed 17 Jun 2026 00:03:08 +0000
Manifest next update: Thu 18 Jun 2026 01:41:08 +0000
Files and hashes: 1: 3131392e3233352e3234382e302f32312d3234203d3e203435313436.roa (hash: I4d4M5kb/PaS52EXblXxmrUeQhD789o5zOZWBGwmGC8=)
2: 78A2C1B7FD05098A611E198E8481B7297F924590.crl (hash: KixBTlWNQsAT9jSIv+kwC4184CMM7n7OhwmFmljobdU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/78A2C1B7FD05098A611E198E8481B7297F924590.crl
rsync://rpki-rsync.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/78A2C1B7FD05098A611E198E8481B7297F924590.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78A2C1B7FD05098A611E198E8481B7297F924590.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 01:41:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:25:03:39:ba:75:51:e7:30:04:65:f2:8d:62:fd:e4:b4:fb:6d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78A2C1B7FD05098A611E198E8481B7297F924590
Validity
Not Before: Jun 17 00:03:08 2026 GMT
Not After : Jun 18 01:41:08 2026 GMT
Subject: CN=D78DAC5C39D70537BE13E8927DBF689FC170BF93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2d:1b:c4:c9:b9:99:08:46:ff:c4:81:d7:d5:
1b:aa:71:31:0e:83:71:22:28:4f:36:9d:e4:3e:d3:
53:43:ce:b5:a1:bd:be:58:cd:f6:78:eb:b3:ef:f5:
59:16:28:11:e4:c1:ed:31:58:2a:a4:44:16:1c:d9:
e2:18:60:98:ed:3e:a5:e9:08:b6:35:8b:0c:c1:bf:
59:75:e1:89:70:a1:62:c8:2c:aa:08:7a:a3:ce:51:
37:9d:70:54:05:52:0a:0a:85:61:5e:80:0f:32:72:
ba:a3:86:1f:d5:52:5d:40:a9:2d:ae:0d:a2:a5:e2:
c9:33:e7:91:0a:34:a7:a9:93:93:72:cf:43:cf:e8:
9b:1b:41:4a:0d:4f:23:f8:ca:52:cc:3c:d5:7a:44:
49:10:84:2e:e9:1a:15:d3:c8:1d:1e:1d:5c:73:32:
48:6d:ba:13:47:e9:70:99:da:20:26:08:55:69:e2:
ce:a5:a0:2a:58:f4:4e:d4:76:26:83:9e:47:be:81:
bb:1d:07:07:02:ed:c1:f7:48:d7:07:f3:cf:d5:14:
e3:d0:13:62:a9:68:8b:d5:0d:10:40:ec:17:9e:48:
70:88:35:fd:96:a1:31:7b:aa:e9:4b:20:8a:30:53:
b3:b3:3a:16:af:6c:01:a6:1f:54:69:1a:97:e8:0b:
8c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:8D:AC:5C:39:D7:05:37:BE:13:E8:92:7D:BF:68:9F:C1:70:BF:93
X509v3 Authority Key Identifier:
keyid:78:A2:C1:B7:FD:05:09:8A:61:1E:19:8E:84:81:B7:29:7F:92:45:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/78A2C1B7FD05098A611E198E8481B7297F924590.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78A2C1B7FD05098A611E198E8481B7297F924590.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/78A2C1B7FD05098A611E198E8481B7297F924590.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:7c:b5:18:13:6f:9e:8d:f5:02:cf:f0:2a:91:0b:54:53:27:
26:e3:73:d1:a9:e2:35:a3:51:2f:0a:33:4b:49:fd:d8:05:bd:
af:2a:30:17:75:a2:dc:9f:1a:59:6a:25:3d:33:3b:df:b1:5e:
82:64:c1:78:6f:77:8a:1f:5b:00:20:23:c8:d9:ba:16:e9:c7:
20:05:46:59:74:6f:30:ce:55:6b:36:4b:37:46:7b:e6:b3:8b:
0e:e7:be:97:86:b5:32:5f:81:ca:4e:88:8b:fb:b2:a8:04:ac:
1e:95:34:12:de:f0:6d:54:34:9c:89:8c:a6:ad:11:b1:66:33:
6a:eb:41:30:c3:06:68:22:f5:dd:69:41:92:18:4a:68:51:93:
a3:42:b1:25:39:ee:b5:d4:1f:bd:8a:97:cf:77:94:4f:87:11:
cd:b5:8e:b3:86:d8:7f:69:a9:61:37:7f:f6:ab:21:49:11:44:
31:2b:f9:39:3f:07:cd:16:db:7b:f4:72:a6:48:c5:04:93:30:
39:84:2e:e4:14:0d:cc:95:16:12:0a:c9:15:a1:02:1b:86:aa:
c2:e7:d7:5c:90:25:53:a0:7f:a2:68:d1:31:cc:aa:c8:ef:af:
9e:1f:0e:5e:d8:44:73:8b:1a:70:13:da:6f:26:ec:2e:e3:9f:
a9:24:36:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:33:30 2026 by rpki-client