
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/B78CE4D8A632D181FCC23251B7CF41141DBE1467.mft
File: B78CE4D8A632D181FCC23251B7CF41141DBE1467.mft (raw, json)
Hash identifier: B/QJ1fxaKRSmTeGiDrZivCiYhW1JEVVwxglozH3+3eY=
Subject key identifier: 25:28:64:76:87:82:B6:69:BE:62:33:C4:FD:65:BB:8A:87:6E:45:1A
Authority key identifier: B7:8C:E4:D8:A6:32:D1:81:FC:C2:32:51:B7:CF:41:14:1D:BE:14:67
Certificate issuer: /CN=B78CE4D8A632D181FCC23251B7CF41141DBE1467
Certificate serial: 61A54ACC521F4464BFFBE02BC80C17CE7081EDB3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B78CE4D8A632D181FCC23251B7CF41141DBE1467.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/B78CE4D8A632D181FCC23251B7CF41141DBE1467.mft
Manifest number: B8
Signing time: Thu 17 Sep 2026 04:13:43 +0000
Manifest this update: Thu 17 Sep 2026 04:08:43 +0000
Manifest next update: Fri 18 Sep 2026 04:15:43 +0000
Files and hashes: 1: B78CE4D8A632D181FCC23251B7CF41141DBE1467.crl (hash: HZcFjGqT9wnhTBxWo/4fSzJEUDS/TaZmP59hIiKKRYI=)
2: 3136302e32352e3131382e302f32342d3234203d3e20313533303936.roa (hash: mNJEKMh3hSl5NgjooxF7vf8ObGAkdCHs4KVMgWm6mRg=)
3: 3136302e32352e3131382e302f32332d3234203d3e20313533303936.roa (hash: 1OPKoVTIZ4FhDqdn69u56tbHHs8Rhg6o9IgAaKOf1j4=)
4: 3136302e32352e3131392e302f32342d3234203d3e20313533303936.roa (hash: 6gZoekKimbXzQFwezQ08dgpfsSYtH0N4xMrqLiWGu2w=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/B78CE4D8A632D181FCC23251B7CF41141DBE1467.crl
rsync://rpki-rsync.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/B78CE4D8A632D181FCC23251B7CF41141DBE1467.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B78CE4D8A632D181FCC23251B7CF41141DBE1467.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 04:15:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:a5:4a:cc:52:1f:44:64:bf:fb:e0:2b:c8:0c:17:ce:70:81:ed:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B78CE4D8A632D181FCC23251B7CF41141DBE1467
Validity
Not Before: Sep 17 04:08:43 2026 GMT
Not After : Sep 18 04:15:43 2026 GMT
Subject: CN=252864768782B669BE6233C4FD65BB8A876E451A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8c:f2:b1:01:c7:3b:83:e4:df:dc:41:b0:11:
59:8c:9b:c5:9f:4d:ed:29:cc:23:67:37:58:13:18:
58:9f:0b:2f:6f:ea:cb:5d:6b:de:80:c4:d8:02:23:
a0:5f:c4:2b:af:49:1a:ee:f7:71:f1:da:5b:1d:4c:
06:ce:68:4d:c8:c7:8a:af:29:bb:14:55:87:78:c1:
62:de:c8:f1:80:77:fb:4f:e4:f8:c4:06:e1:ba:5b:
db:9f:4e:2e:10:14:06:1c:26:a6:c5:22:8f:72:7f:
8c:4e:9b:7d:de:d4:bf:e8:b3:dd:f4:b9:60:ad:d1:
d7:ac:ac:ff:c0:77:05:24:66:1e:d5:44:78:d5:c7:
3e:a1:c6:39:bb:50:15:59:6f:b6:3e:75:59:a1:12:
82:ba:d0:76:98:3d:92:11:ac:14:f8:e4:27:dd:40:
d9:fc:42:d4:7b:9b:db:4a:c5:bb:96:a9:e6:92:24:
d6:66:24:a5:bf:c0:6c:c1:c3:51:0b:6a:65:5f:57:
5d:f7:d2:02:67:7d:1d:e4:92:b9:33:b3:8d:4f:6d:
ed:5f:df:0f:f1:8c:dc:0c:e2:bd:10:9d:82:7e:19:
1e:19:0c:b5:1b:5b:95:e6:c7:23:23:52:62:0e:fa:
15:ec:cf:ec:34:fa:86:0b:89:b7:2a:41:f9:8c:8a:
39:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:28:64:76:87:82:B6:69:BE:62:33:C4:FD:65:BB:8A:87:6E:45:1A
X509v3 Authority Key Identifier:
keyid:B7:8C:E4:D8:A6:32:D1:81:FC:C2:32:51:B7:CF:41:14:1D:BE:14:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/B78CE4D8A632D181FCC23251B7CF41141DBE1467.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B78CE4D8A632D181FCC23251B7CF41141DBE1467.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/B78CE4D8A632D181FCC23251B7CF41141DBE1467.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:8e:4c:fb:31:a9:33:15:5c:8f:11:b7:30:65:7a:37:03:f9:
56:07:cf:d3:98:1f:f1:d7:c0:cc:40:e7:de:de:e9:b5:70:47:
e0:30:3b:3d:f3:75:28:f2:75:a2:39:0d:6c:24:79:09:a0:92:
c4:d7:46:7e:d3:ec:6c:17:7c:04:fb:68:39:84:80:25:c6:32:
ca:09:40:e6:b5:f3:b9:d5:bc:d7:5a:74:e4:9f:47:fa:47:64:
39:a3:c4:49:5e:f3:f6:94:47:43:1e:45:fb:65:44:12:0f:8a:
cb:e1:6d:47:ff:10:eb:48:36:f2:f3:5b:86:1c:7b:77:bd:3e:
bb:22:65:c5:31:57:a0:06:85:10:5f:01:92:be:92:a5:84:05:
95:cd:7b:29:f0:72:eb:03:ab:de:ac:48:ae:de:42:a8:75:fc:
56:fd:c7:4e:35:3d:11:92:d1:88:75:9f:90:f3:a3:1b:0e:16:
4b:4d:1e:60:5e:b3:ce:39:56:83:f6:c3:f3:6c:bb:8a:e5:72:
5c:02:05:41:ab:e8:02:a3:f0:46:74:fe:6c:10:d8:5a:70:b8:
b6:92:15:fc:a0:e7:67:6f:96:1a:f6:24:b9:99:c0:3d:a1:c6:
cd:17:93:bd:e3:ec:96:78:dc:52:44:d2:99:70:c0:d2:e3:58:
ca:58:25:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 12:19:12 2026 by rpki-client