
$ rpki-client -vvf rpki-rsync.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/785F7CBF4EB06406C2D14CD2C9639B540E3A72C4.mft
File: 785F7CBF4EB06406C2D14CD2C9639B540E3A72C4.mft (raw, json)
Hash identifier: VZiAqs5z+SUq2RnB2rbkTz9EuVzMJIzIur1FV0xvpNU=
Subject key identifier: EB:C8:9A:6C:A1:D9:41:76:B4:D4:3B:13:C4:12:5B:02:A9:3E:7B:13
Authority key identifier: 78:5F:7C:BF:4E:B0:64:06:C2:D1:4C:D2:C9:63:9B:54:0E:3A:72:C4
Certificate issuer: /CN=785F7CBF4EB06406C2D14CD2C9639B540E3A72C4
Certificate serial: 110D52B2364B331878C843DEFD499C4979335AAB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/785F7CBF4EB06406C2D14CD2C9639B540E3A72C4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/785F7CBF4EB06406C2D14CD2C9639B540E3A72C4.mft
Manifest number: 3F
Signing time: Thu 18 Jun 2026 02:35:01 +0000
Manifest this update: Thu 18 Jun 2026 02:30:01 +0000
Manifest next update: Fri 19 Jun 2026 02:50:01 +0000
Files and hashes: 1: 3130332e3138362e302e302f32332d3234203d3e20313336303532.roa (hash: 00ZDaa7Z2C6m48TydaMQ4xEe3fZwxmMIcQ+y8CkGNMY=)
2: 785F7CBF4EB06406C2D14CD2C9639B540E3A72C4.crl (hash: fCWqM2L7sPUOESVOaWOm98c8xeKPgoG65RgLoTNgTeg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/785F7CBF4EB06406C2D14CD2C9639B540E3A72C4.crl
rsync://rpki-rsync.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/785F7CBF4EB06406C2D14CD2C9639B540E3A72C4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/785F7CBF4EB06406C2D14CD2C9639B540E3A72C4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 02:50:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:0d:52:b2:36:4b:33:18:78:c8:43:de:fd:49:9c:49:79:33:5a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=785F7CBF4EB06406C2D14CD2C9639B540E3A72C4
Validity
Not Before: Jun 18 02:30:01 2026 GMT
Not After : Jun 19 02:50:01 2026 GMT
Subject: CN=EBC89A6CA1D94176B4D43B13C4125B02A93E7B13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a8:cf:f9:cb:54:1b:a1:58:7c:6f:db:15:43:
4c:9d:d1:49:e1:01:58:80:f1:19:0a:73:c6:52:05:
b8:fa:5b:0e:e9:b0:49:7f:de:0e:69:35:2c:24:03:
a1:6e:a5:07:62:93:72:b9:0b:13:e7:06:e2:fd:37:
08:d2:8e:b4:66:bf:a0:5e:f7:10:b9:b9:5c:10:e2:
67:4d:0c:2e:d6:40:75:ec:a7:74:69:77:79:0e:b3:
e6:e5:01:51:7e:5f:77:b8:f6:13:78:41:88:f8:b0:
70:c1:b1:99:a4:bf:7e:4b:a6:08:4a:a6:53:4b:20:
ab:8f:10:67:13:da:8a:1d:84:df:9e:de:21:36:a8:
54:9a:7c:5e:cf:b6:cb:22:24:06:56:2c:a7:17:39:
82:82:0e:4c:ae:09:0c:57:86:b2:f2:83:8d:9f:6e:
7b:86:b1:fd:46:5d:86:74:ea:5f:07:d8:58:7a:b0:
40:7b:78:e8:b4:78:f6:dd:b1:4c:ef:8a:f7:85:a7:
71:12:ca:a5:6a:31:c1:b9:fd:21:a7:54:43:57:58:
72:5a:dc:e6:ac:f3:6c:74:de:1e:bc:b5:55:d1:bc:
57:04:3a:47:15:ac:06:8d:11:84:32:8b:b8:44:bd:
40:0f:5b:a3:77:88:79:c3:ce:8e:ed:25:4b:27:89:
65:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C8:9A:6C:A1:D9:41:76:B4:D4:3B:13:C4:12:5B:02:A9:3E:7B:13
X509v3 Authority Key Identifier:
keyid:78:5F:7C:BF:4E:B0:64:06:C2:D1:4C:D2:C9:63:9B:54:0E:3A:72:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/785F7CBF4EB06406C2D14CD2C9639B540E3A72C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/785F7CBF4EB06406C2D14CD2C9639B540E3A72C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/785F7CBF4EB06406C2D14CD2C9639B540E3A72C4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:f2:e1:b8:99:be:43:48:19:3f:f4:d8:c1:59:41:53:2f:6a:
99:fc:4a:e6:a7:d7:c7:4c:45:bf:25:0b:54:9e:ed:1b:12:67:
b3:cb:7f:0f:c6:3a:4b:3d:b6:e8:19:45:5d:31:8e:94:7a:7d:
bc:8d:49:56:5e:2f:b1:6b:63:18:f7:da:27:40:c1:61:3a:c9:
e2:06:1d:32:fa:b0:e8:f2:65:6e:b3:a4:76:42:4e:80:dc:40:
24:55:f0:c3:51:47:9a:f7:ef:e0:02:9a:05:76:3b:c2:08:c5:
ef:e3:06:39:e9:4d:13:33:c3:7f:a2:5c:d2:2a:07:95:37:24:
6e:fe:84:33:ad:a0:1c:fe:a9:36:fc:bb:a3:7f:d2:69:17:5a:
af:be:96:aa:71:aa:12:e1:b7:a4:c5:97:02:19:28:cd:7c:fc:
93:97:7b:b4:10:53:4a:cc:66:d6:dc:d9:fe:0c:fb:1b:fe:f9:
43:de:77:57:ba:cd:a3:2a:fd:55:cd:4b:96:f6:dc:e7:0d:9b:
3c:71:3d:1b:d1:b1:4a:1c:13:5d:0b:85:d5:44:a6:7b:47:6b:
9a:03:81:ed:3f:62:dd:28:d5:d1:c7:a9:2e:5e:5d:54:48:f9:
6f:84:92:4f:b8:4a:5a:86:8c:6c:7b:cd:66:36:4a:c3:cb:0b:
e9:ba:f1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 19:09:18 2026 by rpki-client