
$ rpki-client -vvf repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.mft
File: 78578588503A7F091F1D7CD7B16BDC9E55055889.mft (raw, json)
Hash identifier: tDre/C97FmiUoavdnmC3mIS7H7NMB8cZNMTZYeQzCyM=
Subject key identifier: DB:36:F5:F1:FE:5A:95:BF:D7:65:77:34:ED:FF:77:7A:BB:F9:58:2A
Authority key identifier: 78:57:85:88:50:3A:7F:09:1F:1D:7C:D7:B1:6B:DC:9E:55:05:58:89
Certificate issuer: /CN=78578588503A7F091F1D7CD7B16BDC9E55055889
Certificate serial: 7634DB66856AE50F60347115C767C92990682071
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/78578588503A7F091F1D7CD7B16BDC9E55055889.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.mft
Manifest number: 017E
Signing time: Tue 24 Mar 2026 12:11:45 +0000
Manifest this update: Tue 24 Mar 2026 12:06:45 +0000
Manifest next update: Fri 27 Mar 2026 20:52:45 +0000
Files and hashes: 1: 323030313a6466353a333930303a3a2f34382d3438203d3e203138333531.roa (hash: EBR+p3PkcTAiMYCAgv6PbSayq0bFAGHJD99zgOmEdFk=)
2: 78578588503A7F091F1D7CD7B16BDC9E55055889.crl (hash: h4mJ+UHwO64xmc3DLGyKWfV91h5PW5965AkkFgQzPpU=)
3: 3130332e3131352e3232382e302f32322d3234203d3e203138333531.roa (hash: nvXxgMVYVQTfNR+4bpW+Ps8HHDED8r4qVZcdX5Y3BiM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.crl
rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/78578588503A7F091F1D7CD7B16BDC9E55055889.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 20:52:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:34:db:66:85:6a:e5:0f:60:34:71:15:c7:67:c9:29:90:68:20:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78578588503A7F091F1D7CD7B16BDC9E55055889
Validity
Not Before: Mar 24 12:06:45 2026 GMT
Not After : Mar 27 20:52:45 2026 GMT
Subject: CN=DB36F5F1FE5A95BFD7657734EDFF777ABBF9582A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:12:da:74:cd:5e:57:b1:d1:2f:ef:f8:71:30:
a0:4d:59:6f:00:71:3f:09:78:28:38:2d:38:af:d3:
f6:52:1e:ca:e5:1b:2a:cc:a2:e5:51:2d:b8:58:53:
76:b9:e2:44:4c:4b:d6:bf:e0:02:56:49:75:3e:fe:
63:84:85:d3:dc:e7:76:c2:56:5f:c2:0b:9b:aa:39:
a9:72:97:84:91:4d:30:a2:1b:30:7b:5e:c9:e6:6f:
2b:87:26:f1:e4:de:3a:9e:6b:bd:66:9c:18:f9:ef:
b7:72:c2:9a:66:9e:9a:de:b1:76:05:74:e4:09:59:
85:ff:76:77:bd:23:b4:0d:52:e1:0f:ff:15:39:7a:
bf:4a:31:fe:41:a0:8f:62:d1:a3:ab:45:70:05:3b:
9d:ec:e1:1b:bd:92:b9:e6:e5:aa:6f:6f:f4:f7:56:
3e:c6:41:73:fb:cb:a2:f8:5b:2a:69:d9:5f:fc:83:
78:e6:70:ee:51:ad:3a:39:0f:06:1b:a6:b6:2f:22:
a5:0e:a7:80:1e:d3:cb:85:72:95:bb:3e:ca:32:5c:
1d:77:05:c9:eb:25:23:27:c5:c9:12:20:06:4a:3b:
eb:7e:55:08:39:a4:92:25:75:b3:03:54:01:df:8e:
fc:71:3f:06:be:79:cd:83:80:48:16:de:79:3a:a6:
0e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:36:F5:F1:FE:5A:95:BF:D7:65:77:34:ED:FF:77:7A:BB:F9:58:2A
X509v3 Authority Key Identifier:
keyid:78:57:85:88:50:3A:7F:09:1F:1D:7C:D7:B1:6B:DC:9E:55:05:58:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/78578588503A7F091F1D7CD7B16BDC9E55055889.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:bf:d5:32:ee:fa:8d:21:00:c7:96:45:5d:63:31:ec:44:cc:
64:1c:c3:ca:3d:06:d4:0b:81:76:b7:cb:f6:d5:d5:6e:b8:79:
0b:df:c1:d5:20:41:22:1d:da:7b:ab:43:c0:75:d8:c6:44:9d:
49:c9:3a:fa:2c:7a:83:35:c7:e3:f2:b4:d0:4a:8a:63:d3:0e:
95:36:98:9b:95:47:cf:41:c2:fc:de:7e:10:f8:c7:aa:e8:bb:
a4:c8:ab:08:d5:56:c8:36:ae:32:5e:c9:50:49:27:88:3b:ad:
eb:9d:32:d3:41:5b:19:da:79:f4:61:5c:3e:47:12:55:61:0c:
96:d3:0a:69:73:9c:fe:56:db:14:4c:7d:b5:59:29:a3:0c:17:
1f:fb:90:e4:8c:02:6c:6b:e7:1e:7f:2e:5d:25:32:15:77:08:
2d:7c:35:bf:bf:61:3c:f1:13:3d:ba:5d:7b:2a:0c:0d:77:23:
04:32:2a:af:ad:44:ae:db:0b:e0:59:30:9d:8f:9c:16:6a:49:
a7:09:e6:7d:df:20:c6:3b:f3:48:2c:a6:51:bf:3c:7c:6f:56:
6e:d3:c6:7a:97:38:d9:80:76:74:cd:c8:14:8f:d8:4d:c6:20:
95:a5:3c:0d:be:24:25:32:dc:06:26:c3:d2:52:05:d6:d3:70:
0e:04:41:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:06:56 2026 by rpki-client