
$ rpki-client -vvf rpki-rsync.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/781BE026701DAFA391758F44794F58BDFF3C7E68.mft
File: 781BE026701DAFA391758F44794F58BDFF3C7E68.mft (raw, json)
Hash identifier: eOi39ZXhVgKahVbvnXeWEW5BFwW9aMYSvaekKhZR6w0=
Subject key identifier: 2F:CB:A3:82:11:F3:39:81:B4:18:4E:F4:7E:F1:78:74:E3:B1:65:AF
Authority key identifier: 78:1B:E0:26:70:1D:AF:A3:91:75:8F:44:79:4F:58:BD:FF:3C:7E:68
Certificate issuer: /CN=781BE026701DAFA391758F44794F58BDFF3C7E68
Certificate serial: 306B94D21D75944DA28CF7E095427511B18C065C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/781BE026701DAFA391758F44794F58BDFF3C7E68.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/781BE026701DAFA391758F44794F58BDFF3C7E68.mft
Manifest number: 6C
Signing time: Tue 21 Jul 2026 02:33:54 +0000
Manifest this update: Tue 21 Jul 2026 02:28:54 +0000
Manifest next update: Wed 22 Jul 2026 05:23:54 +0000
Files and hashes: 1: 323430303a386238303a3a2f33322d3332203d3e20313331373637.roa (hash: a7s2l3O6pvc7GKZk3g5ud7YbwEz/lUPAccNQa0TiOHo=)
2: 3137352e3130362e31362e302f32322d3234203d3e20313331373637.roa (hash: F7awc14DauajZvya1JB+aFN9Ei7NArKg1X2ILMaeIB8=)
3: 781BE026701DAFA391758F44794F58BDFF3C7E68.crl (hash: /dKCdRdMFxaarpGH7ELs4Su+2LJk0zn0i4wyvyoEhUk=)
4: 3130332e39302e3139362e302f32322d3234203d3e20313331373637.roa (hash: e3eyP3Gqi2CIxa8B3ThMqpYr4Fy5iLHYeg/SLihyWJY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/781BE026701DAFA391758F44794F58BDFF3C7E68.crl
rsync://rpki-rsync.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/781BE026701DAFA391758F44794F58BDFF3C7E68.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/781BE026701DAFA391758F44794F58BDFF3C7E68.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 02:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:6b:94:d2:1d:75:94:4d:a2:8c:f7:e0:95:42:75:11:b1:8c:06:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=781BE026701DAFA391758F44794F58BDFF3C7E68
Validity
Not Before: Jul 21 02:28:54 2026 GMT
Not After : Jul 22 05:23:54 2026 GMT
Subject: CN=2FCBA38211F33981B4184EF47EF17874E3B165AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6b:ac:63:fa:96:e7:4c:05:63:29:fa:6f:9b:
33:2a:ad:58:f0:66:df:97:30:3f:15:b5:58:ee:51:
cc:3c:47:7f:3c:1e:eb:fd:54:a2:1b:d4:03:15:6b:
2d:5d:14:07:8d:f7:d8:1a:90:20:7f:0a:25:11:b4:
c1:ec:42:e5:5e:01:80:20:ec:48:f7:66:df:a3:f7:
b4:98:5c:89:f0:78:09:fa:3d:05:79:2f:5d:ab:88:
da:a1:b0:1c:8c:5c:8d:22:34:a6:3c:c0:8d:4e:60:
7d:c7:11:c5:70:1a:5e:05:1b:b9:e6:f4:98:c5:11:
97:75:97:0f:7a:32:2b:f7:a0:9b:73:f7:b9:5a:b8:
13:9d:3e:36:0f:b3:eb:da:34:ad:79:76:4f:1a:a2:
c8:fc:28:63:ed:a7:1c:50:57:92:32:0a:96:7c:cc:
32:90:f4:97:80:d6:8a:ff:c7:a0:70:90:a9:1c:20:
5f:90:29:f9:bc:2d:b1:b4:ff:cc:da:78:5e:4a:24:
3b:7b:a5:22:1a:60:20:63:4a:01:f7:16:76:1d:91:
bd:75:09:b0:64:b5:43:db:01:83:70:cb:4c:15:fa:
e0:0a:75:23:a9:17:a1:80:df:81:f7:5f:cd:3c:31:
ed:27:7c:02:5a:f7:44:a0:bd:e8:0e:c5:96:d9:60:
8d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:CB:A3:82:11:F3:39:81:B4:18:4E:F4:7E:F1:78:74:E3:B1:65:AF
X509v3 Authority Key Identifier:
keyid:78:1B:E0:26:70:1D:AF:A3:91:75:8F:44:79:4F:58:BD:FF:3C:7E:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/781BE026701DAFA391758F44794F58BDFF3C7E68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/781BE026701DAFA391758F44794F58BDFF3C7E68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/781BE026701DAFA391758F44794F58BDFF3C7E68.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ba:e4:6c:42:68:47:ba:ef:6d:6e:7f:bd:1f:3a:b9:1a:74:
68:d5:f3:8e:25:b7:e6:0a:54:63:d8:43:81:97:a2:b2:e6:4b:
5f:a3:f3:ca:8a:29:9f:aa:4b:65:52:8e:1e:82:b7:d4:e9:81:
72:34:a6:c1:65:0c:f2:87:fb:97:cc:64:38:73:3e:8f:95:aa:
01:c9:b7:fd:23:f6:1f:ff:3c:7e:27:fe:26:fd:6b:d6:38:ca:
77:a9:2c:db:9d:e7:f9:ef:90:72:da:f3:82:4d:90:e0:65:67:
81:ca:99:08:37:6c:cd:d6:c8:d9:72:5e:78:73:71:bb:f9:6e:
62:b8:3b:71:dd:dc:cb:34:c4:64:1b:af:fd:6f:9a:dc:58:1e:
bc:80:1e:51:ec:01:41:f6:5d:55:70:56:26:14:df:68:65:b5:
eb:dd:0a:21:47:f9:fc:29:33:42:93:75:37:94:f3:0e:0a:d6:
dc:f7:dd:f8:62:a2:cd:ab:6e:19:99:70:7f:ec:7d:46:23:37:
62:20:5d:da:7a:ed:20:12:1f:fc:ac:5e:f3:f2:4b:dc:0f:05:
87:5a:27:43:9c:c4:65:fb:ce:a6:1c:fd:60:e4:a4:f0:7f:c7:
05:cf:23:f1:8b:76:54:16:54:04:fb:e0:e2:ad:fa:a0:fd:c1:
fc:a4:df:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 07:06:12 2026 by rpki-client