
$ rpki-client -vvf rpki-rsync.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.mft
File: 2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.mft (raw, json)
Hash identifier: uM3kiPPx/J7cG/4oct/h30P+MqBhuGEzmkuYoWBNA4s=
Subject key identifier: 70:63:AE:78:B8:53:5E:61:18:86:29:08:C0:58:47:B1:19:EA:E3:1A
Authority key identifier: 2F:78:79:4E:C0:75:FE:95:E7:83:1D:F0:B1:4E:74:B8:8E:0E:3F:DF
Certificate issuer: /CN=2F78794EC075FE95E7831DF0B14E74B88E0E3FDF
Certificate serial: 63B34F656EADB6460CC5F909DD78247EF8F774C8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.mft
Manifest number: 13
Signing time: Sat 16 May 2026 04:36:26 +0000
Manifest this update: Sat 16 May 2026 04:31:26 +0000
Manifest next update: Sun 17 May 2026 04:39:26 +0000
Files and hashes: 1: 3130332e38362e3132382e302f32332d3234203d3e2034383030.roa (hash: 60R7X56SozCA5mIN8nGG4Hjmryhwz60xWHs0HKmGlWc=)
2: 2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.crl (hash: zKJbKq8i+PcbvJzlD1hgulJvz1htGDFBYGUdkshtIc8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.crl
rsync://rpki-rsync.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 17 May 2026 04:39:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:b3:4f:65:6e:ad:b6:46:0c:c5:f9:09:dd:78:24:7e:f8:f7:74:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F78794EC075FE95E7831DF0B14E74B88E0E3FDF
Validity
Not Before: May 16 04:31:26 2026 GMT
Not After : May 17 04:39:26 2026 GMT
Subject: CN=7063AE78B8535E6118862908C05847B119EAE31A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3d:25:4b:c2:aa:e5:d2:b1:fc:2d:e2:f5:d9:
7e:ec:c0:07:82:59:42:ed:ad:82:cc:21:34:b0:ad:
d1:db:ac:e6:24:fa:bf:23:b0:8e:3d:7f:7a:54:2f:
ff:e1:e8:0f:4c:d1:59:f0:cd:27:a8:4d:40:18:96:
fc:3e:e5:72:7d:ae:fb:aa:62:47:f3:b8:59:c2:66:
0d:1c:d5:d3:41:01:b1:28:da:63:83:a0:bd:0e:9a:
2e:48:fd:a2:11:22:c3:d2:87:91:00:c4:03:f0:b9:
d0:84:42:94:de:96:06:94:50:77:a8:bc:91:88:dd:
8d:8c:92:f5:fc:c8:e1:3a:49:b8:f2:3b:6c:e7:10:
51:87:3d:96:c5:bc:df:1f:1e:dc:48:cc:48:c1:10:
1d:99:f6:7d:4f:e2:e3:28:81:54:11:7b:7e:d7:33:
b4:6a:22:2b:a6:be:28:f3:4a:77:97:5f:2a:cf:12:
9a:ed:85:6b:50:da:f2:b1:3b:b5:b2:9d:41:1b:6b:
ac:d2:c1:ab:e1:e6:fb:da:66:28:68:2d:ee:24:6c:
bc:3a:99:ab:eb:e7:ee:2c:ac:54:cc:0f:16:f0:9a:
cb:61:63:a9:58:6d:75:21:0c:2c:68:42:46:74:2c:
e8:51:6e:ad:1c:0f:54:e0:9f:96:e0:7b:d3:9d:9d:
1d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:63:AE:78:B8:53:5E:61:18:86:29:08:C0:58:47:B1:19:EA:E3:1A
X509v3 Authority Key Identifier:
keyid:2F:78:79:4E:C0:75:FE:95:E7:83:1D:F0:B1:4E:74:B8:8E:0E:3F:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/2F78794EC075FE95E7831DF0B14E74B88E0E3FDF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:52:48:a3:d5:2b:fc:0b:24:d3:01:3e:db:7c:2a:e1:41:9d:
27:f6:0a:d7:43:c7:1d:37:d3:63:dd:47:7c:b4:a8:54:be:ee:
61:ce:74:13:4a:9f:ce:bb:e6:3c:bc:c8:18:2b:1a:ad:5c:05:
e1:2f:2d:2f:a7:05:16:70:2c:c8:61:e2:ce:64:d2:08:4c:3f:
f8:46:bb:d3:8a:7d:e8:e1:25:9e:60:55:54:f6:25:d0:d6:24:
03:5a:8d:c1:1b:19:1f:fa:60:6e:37:7b:0c:47:67:fe:94:a3:
4d:8c:94:40:3a:67:06:7d:ad:5f:e6:f1:4b:1c:8d:58:82:7a:
78:fc:2f:1b:73:cb:94:d1:69:5d:0b:20:4f:ba:ea:b6:d5:e9:
00:04:ed:c4:8f:43:fa:71:9c:bf:92:da:92:99:1b:9f:77:7e:
19:8b:9b:61:1e:e6:79:37:c4:07:e3:26:f8:7d:8a:2f:88:fd:
6b:7f:d8:6e:c2:3b:18:c2:e2:2d:d5:23:ff:fb:88:15:38:df:
59:24:a5:3f:57:94:23:e6:38:21:e3:ad:6d:be:a4:1b:a0:1a:
b1:12:69:4d:f5:7f:d6:c3:4e:e6:f9:fd:5e:13:0f:bd:e7:45:
85:f6:64:de:14:92:6b:8a:7a:15:78:f1:b1:5e:29:e9:bb:bf:
ad:e7:66:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:40:55 2026 by rpki-client