
$ rpki-client -vvf rpki-rsync.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/78E0160248ABDDA316B054457CAC9C2878172E3F.mft
File: 78E0160248ABDDA316B054457CAC9C2878172E3F.mft (raw, json)
Hash identifier: zUR6CUBf9lCkKG5nrhLj5JqWLYQPSoxhbYWdEJgt93c=
Subject key identifier: 00:86:45:70:D1:91:CD:F6:10:E0:F8:91:1B:95:5A:A3:2B:96:82:09
Authority key identifier: 78:E0:16:02:48:AB:DD:A3:16:B0:54:45:7C:AC:9C:28:78:17:2E:3F
Certificate issuer: /CN=78E0160248ABDDA316B054457CAC9C2878172E3F
Certificate serial: 5A0A43963B0612D48F0526E201C359B0478A798C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78E0160248ABDDA316B054457CAC9C2878172E3F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/78E0160248ABDDA316B054457CAC9C2878172E3F.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 07:08:19 +0000
Manifest this update: Tue 12 May 2026 07:03:19 +0000
Manifest next update: Wed 13 May 2026 07:43:19 +0000
Files and hashes: 1: 323430363a333834303a3a2f33322d3438203d3e20313430343438.roa (hash: 2+XchGapSoCutP6h9YZdHEQH9u3BfkhAjpO15GhIZ5w=)
2: 78E0160248ABDDA316B054457CAC9C2878172E3F.crl (hash: Kl78jLtIH1X4qcuX176qQqpGvTPOBzkri01EpI0FKiQ=)
3: 3130332e3135322e3233382e302f32332d3234203d3e20313430343438.roa (hash: VA9x1JUvw0UogZupkAioG4JuD1sEwt/f57IrckxZ3dI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/78E0160248ABDDA316B054457CAC9C2878172E3F.crl
rsync://rpki-rsync.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/78E0160248ABDDA316B054457CAC9C2878172E3F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78E0160248ABDDA316B054457CAC9C2878172E3F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 07:43:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:0a:43:96:3b:06:12:d4:8f:05:26:e2:01:c3:59:b0:47:8a:79:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78E0160248ABDDA316B054457CAC9C2878172E3F
Validity
Not Before: May 12 07:03:19 2026 GMT
Not After : May 13 07:43:19 2026 GMT
Subject: CN=00864570D191CDF610E0F8911B955AA32B968209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:29:1e:1a:e3:9f:6d:c4:e7:e6:ff:b7:b1:d5:
aa:69:3c:a3:49:76:ac:0e:57:12:2d:ee:d4:d8:b2:
77:9f:7d:31:5b:ed:d1:5b:ae:fb:2a:df:ed:41:d4:
8c:2f:42:4e:63:24:aa:54:56:cf:61:7c:82:7a:cd:
09:e2:82:55:12:33:27:cb:7a:da:25:be:e3:76:38:
86:58:ba:7b:73:49:e6:24:82:2d:31:62:d3:1c:ff:
b4:5f:8a:8b:ae:c3:18:6c:61:0a:ef:37:a4:94:f1:
56:fe:72:51:df:f7:2a:7d:86:53:08:b0:47:08:82:
34:27:4a:96:46:88:df:94:4a:c6:00:30:52:88:31:
58:f2:e8:19:a9:6d:65:c8:8d:76:a0:5e:d2:09:90:
29:14:3c:17:64:b1:cc:75:e1:62:8a:06:be:45:ae:
7b:cd:2f:40:f7:da:71:d3:d5:48:5b:d6:a6:3a:83:
88:d7:2a:47:99:24:59:70:08:df:44:2f:b4:1b:92:
4d:c7:51:f9:70:dd:f9:2e:ba:9a:ae:d5:c0:ba:4b:
9f:3c:c8:42:bb:a7:47:d2:c8:cf:8a:bb:17:c3:3d:
b0:da:7a:fb:c2:c7:a8:fe:df:03:e4:1b:ed:82:1c:
60:4b:0c:8d:38:9b:4b:08:75:37:58:9f:17:c5:7f:
ef:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:86:45:70:D1:91:CD:F6:10:E0:F8:91:1B:95:5A:A3:2B:96:82:09
X509v3 Authority Key Identifier:
keyid:78:E0:16:02:48:AB:DD:A3:16:B0:54:45:7C:AC:9C:28:78:17:2E:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/78E0160248ABDDA316B054457CAC9C2878172E3F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78E0160248ABDDA316B054457CAC9C2878172E3F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/78E0160248ABDDA316B054457CAC9C2878172E3F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:09:60:c6:65:21:01:12:1e:b3:69:b5:96:59:45:08:17:70:
de:63:32:f8:23:2c:36:3a:fb:d8:68:8e:0b:d9:5d:6f:31:c0:
7c:44:eb:76:43:ce:8a:2f:d6:0f:4a:d6:ff:9a:17:b3:58:9d:
db:0f:aa:ad:3b:6c:b4:5c:50:dc:9b:76:49:48:cc:25:e0:2e:
f2:21:b3:d9:1b:d3:64:d4:7c:0f:3f:92:1c:3f:63:08:67:62:
3a:5c:a1:50:dc:df:ad:33:d9:ba:00:db:f8:d1:c1:be:d1:42:
a5:1b:ae:cd:d2:47:22:bf:6c:b4:a7:75:69:df:e4:e6:b8:8c:
89:e9:ca:d8:09:4f:46:a6:28:80:39:76:64:d2:49:1b:38:54:
5e:7c:11:50:fc:cf:2d:dc:a8:b2:fc:ca:0a:ee:37:4b:89:0c:
e7:6c:d2:6c:db:a4:ee:44:3c:44:b4:9b:e1:be:6a:26:45:bd:
c4:34:52:d9:d6:09:e6:fb:57:e4:14:cd:4d:26:f0:ac:2f:26:
8e:d1:70:98:f7:8d:07:d4:4e:fc:aa:d4:68:77:85:31:de:2b:
27:84:4a:37:0c:e6:ef:59:94:8e:e4:7f:43:8b:b1:2d:14:99:
fb:5b:87:0e:76:19:16:65:8a:fd:6c:0c:be:1f:0d:aa:d2:58:
3d:10:6f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:13:26 2026 by rpki-client