
$ rpki-client -vvf repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/78702A768CA1E1867D543013BB6186EDA3C06C16.mft
File: 78702A768CA1E1867D543013BB6186EDA3C06C16.mft (raw, json)
Hash identifier: q2Nz4qJe7KbWFGaOgUhUrCo3UK4PensiJ8hSHDUk7gk=
Subject key identifier: BF:EF:11:6A:7F:F2:44:81:00:67:CD:78:A7:78:6A:14:18:18:DA:04
Authority key identifier: 78:70:2A:76:8C:A1:E1:86:7D:54:30:13:BB:61:86:ED:A3:C0:6C:16
Certificate issuer: /CN=78702A768CA1E1867D543013BB6186EDA3C06C16
Certificate serial: 60295D433D3D6DF57AECFCA7A48EDC7D929D3D72
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78702A768CA1E1867D543013BB6186EDA3C06C16.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/78702A768CA1E1867D543013BB6186EDA3C06C16.mft
Manifest number: ED
Signing time: Thu 26 Mar 2026 14:21:32 +0000
Manifest this update: Thu 26 Mar 2026 14:16:32 +0000
Manifest next update: Sun 29 Mar 2026 15:00:32 +0000
Files and hashes: 1: 3135372e36362e3134302e302f32342d3234203d3e20313532373539.roa (hash: wI2gL+xeUj5R4U7m3JbkXYMiUcHbqqc4tcsVpsPURE0=)
2: 78702A768CA1E1867D543013BB6186EDA3C06C16.crl (hash: FH2AYIDpyP/MzX6TXVDayhZzlmTRE1zUivnCaxU9sbw=)
3: 3135372e36362e3134312e302f32342d3234203d3e20313532373539.roa (hash: movLiT++PBKuPBzz5dXs+l8kqn3e27i1U3F37q5BVns=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/78702A768CA1E1867D543013BB6186EDA3C06C16.crl
rsync://repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/78702A768CA1E1867D543013BB6186EDA3C06C16.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78702A768CA1E1867D543013BB6186EDA3C06C16.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 29 Mar 2026 14:23:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:29:5d:43:3d:3d:6d:f5:7a:ec:fc:a7:a4:8e:dc:7d:92:9d:3d:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78702A768CA1E1867D543013BB6186EDA3C06C16
Validity
Not Before: Mar 26 14:16:32 2026 GMT
Not After : Mar 29 15:00:32 2026 GMT
Subject: CN=BFEF116A7FF244810067CD78A7786A141818DA04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8d:6e:01:bb:ff:02:1e:99:18:2a:66:01:a8:
17:4c:0b:c0:46:ef:2f:36:90:59:cc:35:b9:98:16:
90:9b:4d:e3:05:0b:02:92:6d:24:1e:91:1a:1e:84:
3c:6a:a5:17:67:82:cb:cc:be:ba:a9:8a:7a:e7:c3:
01:33:94:db:b7:7f:b8:54:90:52:58:51:4e:84:af:
db:71:99:2b:45:fb:8d:30:9e:54:58:6d:af:25:49:
7c:6b:1c:bf:21:42:cc:59:70:27:85:64:d6:13:d5:
be:be:cf:cf:5c:d0:29:e9:26:37:92:c5:53:86:7c:
1a:bd:a8:83:9a:d1:d4:77:b7:07:4f:b5:94:9c:91:
66:98:c7:25:57:7f:27:67:54:a4:01:fd:de:8e:e4:
2b:cb:47:6a:ba:53:63:45:43:62:f2:5a:f1:6f:2c:
b7:ec:cb:8c:59:9d:9b:7a:a0:14:ea:4f:a1:4b:d9:
0f:b2:78:9b:ff:ce:37:d5:f3:d3:61:7b:59:dd:60:
d7:aa:07:df:aa:c1:10:ca:bd:1b:4a:a3:5e:34:a0:
b4:d2:ce:7a:7b:56:2a:22:5d:f8:29:c6:31:24:25:
42:53:78:96:4c:37:c6:c1:cf:a0:5b:26:39:dc:b6:
bb:8b:42:d4:a7:74:03:77:86:d9:da:41:a3:23:16:
5a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:EF:11:6A:7F:F2:44:81:00:67:CD:78:A7:78:6A:14:18:18:DA:04
X509v3 Authority Key Identifier:
keyid:78:70:2A:76:8C:A1:E1:86:7D:54:30:13:BB:61:86:ED:A3:C0:6C:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/78702A768CA1E1867D543013BB6186EDA3C06C16.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78702A768CA1E1867D543013BB6186EDA3C06C16.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/78702A768CA1E1867D543013BB6186EDA3C06C16.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:85:dd:40:27:7f:7f:82:dc:29:9a:36:73:7b:01:07:8d:69:
d5:8e:99:ef:c1:bd:6e:d8:66:3e:e7:38:1e:e3:3b:15:46:1c:
47:7c:bd:e5:38:4c:62:8d:a0:fa:67:9a:13:92:97:36:43:af:
8f:88:9d:f2:35:b3:cf:4a:5b:95:7c:a5:bf:18:d7:6b:93:82:
04:03:7f:46:72:c9:4c:5f:d1:fc:26:62:d4:4b:28:e0:d1:ba:
fc:1b:47:39:54:6c:45:72:d0:89:eb:f1:c9:f0:2b:d8:4a:e3:
63:fd:5b:62:15:23:c3:27:16:8c:ba:4c:97:3e:7a:53:1e:97:
50:c9:61:11:aa:5c:03:d8:2d:43:71:4a:bd:df:e3:9d:6a:8e:
81:06:4f:63:19:6c:79:fb:fb:72:08:0a:24:5b:c5:1d:eb:89:
e3:87:f8:6e:24:c2:b3:aa:b0:6a:19:84:67:d8:a6:7e:13:db:
cc:6e:fd:b0:e9:b5:b6:c6:e2:7c:f7:bb:01:6e:31:84:ff:80:
43:92:32:1b:24:1c:21:74:82:23:b7:d5:2d:5a:48:0a:e7:5a:
2f:1c:14:b2:49:a8:0a:97:19:88:33:bf:68:fe:2f:42:e6:6f:
25:9f:b0:af:e4:a9:5c:61:f1:1a:05:af:80:01:4c:b6:26:e3:
43:13:64:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:39:39 2026 by rpki-client