
$ rpki-client -vvf rpki-rsync.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/781BE026701DAFA391758F44794F58BDFF3C7E68.mft
File: 781BE026701DAFA391758F44794F58BDFF3C7E68.mft (raw, json)
Hash identifier: DD4Bm1Gb52BBKTm/4r0TKH4wqXqCpDs1fKpWiR5Clec=
Subject key identifier: 93:B2:BE:40:42:9A:9D:E7:C6:53:23:AB:A6:EA:51:BF:E9:3B:71:D2
Authority key identifier: 78:1B:E0:26:70:1D:AF:A3:91:75:8F:44:79:4F:58:BD:FF:3C:7E:68
Certificate issuer: /CN=781BE026701DAFA391758F44794F58BDFF3C7E68
Certificate serial: 2E251C1244E71A34B291A1B0D828E5F33988E73E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/781BE026701DAFA391758F44794F58BDFF3C7E68.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/781BE026701DAFA391758F44794F58BDFF3C7E68.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 23:44:35 +0000
Manifest this update: Tue 02 Jun 2026 23:39:35 +0000
Manifest next update: Thu 04 Jun 2026 03:30:35 +0000
Files and hashes: 1: 3137352e3130362e31362e302f32322d3234203d3e20313331373637.roa (hash: F7awc14DauajZvya1JB+aFN9Ei7NArKg1X2ILMaeIB8=)
2: 781BE026701DAFA391758F44794F58BDFF3C7E68.crl (hash: tCjgDOjpVTanWIlW85uq0Ei0uZou6/J8OFVGInsCJ6k=)
3: 3130332e39302e3139362e302f32322d3234203d3e20313331373637.roa (hash: e3eyP3Gqi2CIxa8B3ThMqpYr4Fy5iLHYeg/SLihyWJY=)
4: 323430303a386238303a3a2f33322d3332203d3e20313331373637.roa (hash: a7s2l3O6pvc7GKZk3g5ud7YbwEz/lUPAccNQa0TiOHo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/781BE026701DAFA391758F44794F58BDFF3C7E68.crl
rsync://rpki-rsync.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/781BE026701DAFA391758F44794F58BDFF3C7E68.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/781BE026701DAFA391758F44794F58BDFF3C7E68.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 04 Jun 2026 03:30:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:25:1c:12:44:e7:1a:34:b2:91:a1:b0:d8:28:e5:f3:39:88:e7:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=781BE026701DAFA391758F44794F58BDFF3C7E68
Validity
Not Before: Jun 2 23:39:35 2026 GMT
Not After : Jun 4 03:30:35 2026 GMT
Subject: CN=93B2BE40429A9DE7C65323ABA6EA51BFE93B71D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ec:ff:db:57:09:17:02:da:81:cb:25:01:f6:
82:8b:07:e1:db:3a:3b:c5:8d:10:2f:7f:93:ac:71:
72:e3:34:b8:5e:8a:0c:11:13:bd:37:8b:ff:5e:c6:
25:df:32:e4:d5:75:9d:55:73:99:11:0b:aa:1a:db:
2d:c5:3a:6f:1f:e8:f1:1e:82:47:a3:ec:3b:7d:a1:
27:45:5b:fd:2a:ea:ac:8e:20:aa:e3:26:03:9f:cf:
75:bf:0c:6e:31:77:d2:6e:67:1e:7e:fc:19:94:41:
6a:c5:c3:a4:0e:58:34:8d:28:db:e0:db:2f:f9:fb:
48:7c:39:5c:50:f3:98:65:6c:df:3e:d3:a1:64:e9:
93:32:33:ff:27:11:79:f7:10:a5:40:ae:2f:c7:00:
91:c8:34:62:47:19:e1:bf:00:6f:77:08:48:34:a9:
84:b9:37:73:a9:b3:8f:e6:1f:74:d0:7c:af:6e:3e:
a7:8e:d4:04:60:a8:75:63:32:78:92:80:8d:83:57:
ca:a2:71:17:c7:be:c6:ea:bf:17:31:3f:28:5c:6b:
04:6b:18:3b:3b:65:d8:54:01:8b:44:dc:9e:12:e9:
03:c0:11:ee:f5:93:5f:03:d7:27:6b:1c:99:b9:6f:
a8:1e:5e:8d:5e:58:72:61:5a:e2:db:7a:e1:52:60:
51:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B2:BE:40:42:9A:9D:E7:C6:53:23:AB:A6:EA:51:BF:E9:3B:71:D2
X509v3 Authority Key Identifier:
keyid:78:1B:E0:26:70:1D:AF:A3:91:75:8F:44:79:4F:58:BD:FF:3C:7E:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/781BE026701DAFA391758F44794F58BDFF3C7E68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/781BE026701DAFA391758F44794F58BDFF3C7E68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/781BE026701DAFA391758F44794F58BDFF3C7E68.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:7e:83:07:08:6f:25:56:9a:05:0d:96:e3:99:7b:e5:71:85:
ca:e2:18:8c:11:22:58:3b:bd:6b:13:bd:b9:1a:d3:0e:32:36:
0e:df:db:bf:ad:10:40:c7:d5:c4:d3:da:5f:46:db:d1:ee:f0:
90:5d:92:de:6d:78:03:33:a5:22:c3:ab:71:74:b2:c1:95:1b:
f2:3e:37:ce:03:1a:ce:61:ad:ed:c9:01:15:75:0e:a5:3c:c6:
82:f9:e7:62:03:77:d4:52:2e:1f:72:54:51:2f:04:4d:8f:43:
53:91:b6:ad:99:70:f1:3c:fc:67:05:42:96:ee:0f:1a:59:b5:
21:10:93:70:01:d7:87:07:d1:fd:93:9a:a3:9a:ce:a3:64:17:
84:01:b5:04:62:ae:10:22:5f:0a:96:69:4c:27:b3:86:a1:03:
3b:0d:a5:05:df:84:fa:0a:95:64:d0:2a:1e:c2:04:ba:c5:9d:
a3:ae:7e:d8:30:c7:4f:da:e5:67:d7:94:ba:a3:c8:07:68:f7:
ed:d1:e6:a4:15:1b:ae:82:ee:08:3d:6c:03:90:e8:ed:38:8d:
51:1d:71:da:fc:e7:7a:c1:09:f7:b0:31:76:29:4d:00:b2:9b:
c3:84:24:e3:84:fb:76:37:41:10:0c:da:ad:f2:e9:0e:49:77:
a6:ec:69:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:08:44 2026 by rpki-client