
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/781BE026701DAFA391758F44794F58BDFF3C7E68.mft
File: 781BE026701DAFA391758F44794F58BDFF3C7E68.mft (raw, json)
Hash identifier: 6AkiDMi6Cev+ctw9XAMLo9PJXdEg8bPe7g0XqcghxwA=
Subject key identifier: AE:C0:7E:1C:DD:B5:2C:DF:58:D9:7F:CD:20:B2:8A:69:F1:50:45:C7
Authority key identifier: 78:1B:E0:26:70:1D:AF:A3:91:75:8F:44:79:4F:58:BD:FF:3C:7E:68
Certificate issuer: /CN=781BE026701DAFA391758F44794F58BDFF3C7E68
Certificate serial: 641EF45C40EF5C728D65930C86F483AC3580783A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/781BE026701DAFA391758F44794F58BDFF3C7E68.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/781BE026701DAFA391758F44794F58BDFF3C7E68.mft
Manifest number: BA
Signing time: Thu 17 Sep 2026 07:58:20 +0000
Manifest this update: Thu 17 Sep 2026 07:53:20 +0000
Manifest next update: Fri 18 Sep 2026 08:47:20 +0000
Files and hashes: 1: 781BE026701DAFA391758F44794F58BDFF3C7E68.crl (hash: 7J5AJnXmeQ2E+dd2nHVk6xBOoEQVPFNoLTD3xSTzdTM=)
2: 323430303a386238303a3a2f33322d3332203d3e20313331373637.roa (hash: a7s2l3O6pvc7GKZk3g5ud7YbwEz/lUPAccNQa0TiOHo=)
3: 3137352e3130362e31362e302f32322d3234203d3e20313331373637.roa (hash: F7awc14DauajZvya1JB+aFN9Ei7NArKg1X2ILMaeIB8=)
4: 3130332e39302e3139362e302f32322d3234203d3e20313331373637.roa (hash: e3eyP3Gqi2CIxa8B3ThMqpYr4Fy5iLHYeg/SLihyWJY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/781BE026701DAFA391758F44794F58BDFF3C7E68.crl
rsync://rpki-rsync.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/781BE026701DAFA391758F44794F58BDFF3C7E68.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/781BE026701DAFA391758F44794F58BDFF3C7E68.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 08:47:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:1e:f4:5c:40:ef:5c:72:8d:65:93:0c:86:f4:83:ac:35:80:78:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=781BE026701DAFA391758F44794F58BDFF3C7E68
Validity
Not Before: Sep 17 07:53:20 2026 GMT
Not After : Sep 18 08:47:20 2026 GMT
Subject: CN=AEC07E1CDDB52CDF58D97FCD20B28A69F15045C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:52:2b:83:47:34:7f:c1:fa:f9:b7:40:2a:53:
20:56:6c:cf:f7:ab:f1:98:9f:64:80:86:92:19:fd:
65:70:0c:f9:2a:2a:de:df:3f:48:de:23:9f:41:cb:
5b:fa:8d:7e:f5:ba:39:76:f9:e6:49:7e:a1:bd:d7:
2b:4d:b3:39:81:5b:1a:59:8f:2b:85:0c:cc:e9:7d:
36:8d:62:8f:f4:aa:4d:0c:a6:93:7d:1c:10:3a:f6:
be:9c:1f:76:d5:f7:de:94:b7:fd:35:ca:77:8a:18:
da:9c:63:aa:ea:c1:ec:78:cc:36:dc:75:f5:02:52:
ac:12:ef:7f:82:9c:75:a3:b0:4b:a8:b6:da:21:8d:
36:49:82:33:37:ea:b1:df:ce:09:1f:4a:3a:8f:10:
dc:67:b7:20:c7:d6:e5:f9:5a:c6:35:e7:21:2c:dd:
3b:17:d0:5c:fb:e5:24:90:2d:5a:aa:30:2e:14:43:
18:15:14:12:f9:54:2d:a9:f1:3c:e6:80:bf:ac:1c:
49:24:41:22:8f:eb:51:94:99:b3:03:1c:dd:42:57:
7e:94:2d:03:c7:5e:26:e0:e6:a5:8a:e4:43:da:03:
ac:e9:86:1a:04:15:31:66:d4:f0:cc:3d:a0:e0:94:
ce:92:74:78:41:20:da:bf:e9:2d:b7:6f:43:f8:35:
32:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C0:7E:1C:DD:B5:2C:DF:58:D9:7F:CD:20:B2:8A:69:F1:50:45:C7
X509v3 Authority Key Identifier:
keyid:78:1B:E0:26:70:1D:AF:A3:91:75:8F:44:79:4F:58:BD:FF:3C:7E:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/781BE026701DAFA391758F44794F58BDFF3C7E68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/781BE026701DAFA391758F44794F58BDFF3C7E68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/781BE026701DAFA391758F44794F58BDFF3C7E68.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:ed:e8:50:a7:a4:4f:20:df:aa:18:a0:1f:d4:1d:58:80:94:
2b:e8:88:a0:8d:bd:b0:f9:f6:42:c9:93:60:88:85:e8:33:1e:
a9:41:01:b9:89:cf:01:11:a4:a2:55:8a:50:7d:d9:64:d4:54:
4a:3c:d3:04:b2:6c:b7:46:15:14:99:dd:ca:20:e7:63:cd:31:
06:be:40:aa:43:69:a8:bc:94:13:20:5e:2e:e7:e8:23:11:d1:
eb:3d:ed:1e:7d:3a:fb:62:38:f7:21:85:2c:d8:a2:63:45:37:
e1:59:14:a5:0c:8c:1d:d9:52:ec:95:e4:2e:22:08:85:eb:40:
06:c7:79:d6:98:cb:89:b8:2b:99:f3:b4:38:29:b6:72:95:70:
4c:57:9b:d3:4a:88:fa:91:fb:cd:11:a3:36:f9:80:78:a2:49:
88:0f:59:bc:0f:98:33:b3:a4:c8:32:f0:25:e2:58:b2:50:40:
28:31:b6:d1:39:a8:ff:2b:a5:51:e9:1a:fb:57:78:78:c1:c8:
7e:3c:49:a9:51:67:4b:d3:e3:01:2c:9c:20:1b:7f:ee:5d:25:
e4:7f:a2:76:1f:03:8e:2c:27:6f:54:01:5e:ff:1d:81:59:88:
ce:cf:09:df:53:67:f1:a1:58:76:06:dc:3e:cd:48:73:07:5b:
cb:06:26:00
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUZB70XEDvXHKNZZMMhvSDrDWAeDowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzgxQkUwMjY3MDFEQUZBMzkxNzU4RjQ0Nzk0RjU4QkRG
RjNDN0U2ODAeFw0yNjA5MTcwNzUzMjBaFw0yNjA5MTgwODQ3MjBaMDMxMTAvBgNV
BAMTKEFFQzA3RTFDRERCNTJDREY1OEQ5N0ZDRDIwQjI4QTY5RjE1MDQ1QzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoUiuDRzR/wfr5t0AqUyBWbM/3
q/GYn2SAhpIZ/WVwDPkqKt7fP0jeI59By1v6jX71ujl2+eZJfqG91ytNszmBWxpZ
jyuFDMzpfTaNYo/0qk0MppN9HBA69r6cH3bV996Ut/01yneKGNqcY6rqwex4zDbc
dfUCUqwS73+CnHWjsEuottohjTZJgjM36rHfzgkfSjqPENxntyDH1uX5WsY15yEs
3TsX0Fz75SSQLVqqMC4UQxgVFBL5VC2p8TzmgL+sHEkkQSKP61GUmbMDHN1CV36U
LQPHXibg5qWK5EPaA6zphhoEFTFm1PDMPaDglM6SdHhBINq/6S23b0P4NTJXAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUrsB+HN21LN9Y2X/NILKKafFQRccwHwYDVR0j
BBgwFoAUeBvgJnAdr6ORdY9EeU9Yvf88fmgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MjRkMTA4ZjctMDhiMi00MDlmLThhNzAtYTljNjdhZTVlZDIyLzAvNzgxQkUwMjY3
MDFEQUZBMzkxNzU4RjQ0Nzk0RjU4QkRGRjNDN0U2OC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83ODFCRTAyNjcwMURBRkEzOTE3NThGNDQ3OTRGNThCREZGM0M3
RTY4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjRkMTA4ZjctMDhiMi00MDlmLThh
NzAtYTljNjdhZTVlZDIyLzAvNzgxQkUwMjY3MDFEQUZBMzkxNzU4RjQ0Nzk0RjU4
QkRGRjNDN0U2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBALjt6FCnpE8g36oYoB/UHViAlCvoiKCNvbD5
9kLJk2CIhegzHqlBAbmJzwERpKJVilB92WTUVEo80wSybLdGFRSZ3cog52PNMQa+
QKpDaai8lBMgXi7n6CMR0es97R59OvtiOPchhSzYomNFN+FZFKUMjB3ZUuyV5C4i
CIXrQAbHedaYy4m4K5nztDgptnKVcExXm9NKiPqR+80Rozb5gHiiSYgPWbwPmDOz
pMgy8CXiWLJQQCgxttE5qP8rpVHpGvtXeHjByH48SalRZ0vT4wEsnCAbf+5dJeR/
onYfA44sJ29UAV7/HYFZiM7PCd9TZ/GhWHYG3D7NSHMHW8sGJgA=
-----END CERTIFICATE-----
Generated at Thu Sep 17 12:20:37 2026 by rpki-client