
$ rpki-client -vvf repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.mft
File: 78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.mft (raw, json)
Hash identifier: HDnPtP9Bcl1NbHbyseqsnk+ys4o4cyO/QkmZHW+sX/U=
Subject key identifier: 11:ED:1A:AA:93:57:46:AB:3C:31:A2:99:3F:01:E9:8C:CB:9F:04:83
Authority key identifier: 78:B7:FA:A2:88:1A:BF:BC:11:7C:0F:83:EC:DC:9D:55:4D:F4:14:14
Certificate issuer: /CN=78B7FAA2881ABFBC117C0F83ECDC9D554DF41414
Certificate serial: 0E15FA65CDDCA121CCE95880F4E595F663ED5DC3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.mft
Manifest number: CD
Signing time: Fri 06 Mar 2026 04:21:28 +0000
Manifest this update: Fri 06 Mar 2026 04:16:28 +0000
Manifest next update: Mon 09 Mar 2026 15:58:28 +0000
Files and hashes: 1: 78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.crl (hash: bo5jdJjYkkenYbXm3ptQ1KkhTGiJDeUTHhQ3iGJ7YkU=)
2: 3136302e3139312e3139382e302f32342d3234203d3e20313533313537.roa (hash: pcrYcQfetv/rc/0VTi5Yuk7X3ubcBjWkKo4wzgdZiSs=)
3: 3136302e3139312e3139392e302f32342d3234203d3e20313533313537.roa (hash: PB5sEIidful8Aq2vYl2cOVwqgMl/aNUVGYhSLpss8uA=)
4: 3136302e3139312e3139382e302f32332d3233203d3e20313533313537.roa (hash: BKOeIpPmZ/JlEup668j4Ru9S2UzMSJK/Lz9NsYvcvj4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.crl
rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 08:48:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:15:fa:65:cd:dc:a1:21:cc:e9:58:80:f4:e5:95:f6:63:ed:5d:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78B7FAA2881ABFBC117C0F83ECDC9D554DF41414
Validity
Not Before: Mar 6 04:16:28 2026 GMT
Not After : Mar 9 15:58:28 2026 GMT
Subject: CN=11ED1AAA935746AB3C31A2993F01E98CCB9F0483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4a:64:58:89:28:02:2a:10:7a:75:7d:61:1c:
17:e4:bb:63:13:d9:a0:e6:43:48:8b:9a:5a:26:7d:
2e:39:31:02:0d:72:ae:d6:33:09:ef:53:34:cc:35:
3c:41:db:41:43:b3:11:70:f7:96:09:9e:63:ab:41:
5e:07:68:80:cc:e7:eb:39:a1:fd:f8:a1:f7:22:d5:
4a:66:e9:cd:ab:3d:1a:72:70:ef:61:4a:04:41:1f:
22:24:ff:ef:08:4d:17:e7:04:ef:af:5b:55:ea:cc:
3f:95:28:9e:c8:b0:b0:1f:f6:61:81:36:3e:61:c5:
62:de:04:b5:38:6e:ce:23:d4:f4:78:f4:d7:b2:48:
0f:7e:5a:bd:51:82:80:1d:51:1f:24:48:c3:69:9b:
b4:02:61:82:34:3c:24:0f:4b:23:2c:1e:f5:5b:49:
ca:61:b4:04:91:a9:26:fa:84:58:71:2f:8d:fc:33:
18:60:70:32:66:f2:72:88:31:31:54:31:bf:c0:ca:
e6:66:c1:23:32:e1:1a:fb:d4:90:3c:5f:a3:9e:3b:
be:69:84:d8:a2:b8:fb:3d:d5:cc:ef:c1:47:4d:11:
af:c7:23:3c:a5:ad:20:c4:7b:a9:87:ae:37:3e:94:
81:44:31:1c:a7:eb:4c:0f:35:04:7c:50:c9:84:56:
28:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:ED:1A:AA:93:57:46:AB:3C:31:A2:99:3F:01:E9:8C:CB:9F:04:83
X509v3 Authority Key Identifier:
keyid:78:B7:FA:A2:88:1A:BF:BC:11:7C:0F:83:EC:DC:9D:55:4D:F4:14:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:12:4f:70:79:af:68:93:c5:9e:c4:87:f5:60:87:9a:9d:0d:
72:b8:6c:bb:cd:0c:3b:61:14:a7:c6:7a:2f:4b:05:62:ce:7c:
32:5d:0f:66:56:92:17:ff:e7:ba:87:fd:a7:84:56:1c:3b:9f:
ae:40:28:29:6f:4c:cb:c8:cc:47:94:99:1f:1a:06:e5:46:06:
91:c3:e7:85:38:b1:e9:6e:e7:47:82:0c:09:c4:53:8b:25:3b:
aa:78:21:73:79:74:49:b7:23:fc:04:a5:e6:9b:73:a7:5c:2c:
bf:75:5f:d9:c1:f1:b7:b2:09:29:a6:7e:5e:1e:91:c7:32:d5:
e9:32:d3:9d:2c:05:76:50:03:4d:d9:ab:d7:ae:54:e5:17:47:
3d:82:42:28:72:f0:00:37:3c:52:54:6d:38:79:99:9f:04:f8:
f8:23:7b:1c:ba:d3:24:04:37:9e:12:97:b4:4f:f4:76:8e:00:
4b:1c:fa:c0:e1:76:c3:7d:ae:b3:fc:13:7c:f1:0b:83:b3:19:
1a:7a:f9:a0:2f:fe:66:1d:98:23:78:4f:29:5b:5a:fe:9e:fe:
3d:93:f2:38:3e:95:b2:81:ac:ec:ff:1b:11:f6:73:ac:40:f5:
ed:2b:0b:aa:39:77:0a:f4:a0:ca:41:28:3d:6b:63:b2:8f:7b:
86:15:91:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 17:49:19 2026 by rpki-client