
$ rpki-client -vvf rpki-rsync.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/781BE026701DAFA391758F44794F58BDFF3C7E68.mft
File: 781BE026701DAFA391758F44794F58BDFF3C7E68.mft (raw, json)
Hash identifier: kwGsgWk56eVxGM3NLvRDmr6Fv1jYX7ERAPk8sR3wvyo=
Subject key identifier: 01:BC:BC:22:5F:46:4F:DE:2B:D2:92:D2:49:50:F3:0E:61:9A:7B:1B
Authority key identifier: 78:1B:E0:26:70:1D:AF:A3:91:75:8F:44:79:4F:58:BD:FF:3C:7E:68
Certificate issuer: /CN=781BE026701DAFA391758F44794F58BDFF3C7E68
Certificate serial: 3906165A97D685C6CDCBC1C0A83D701ADB68B2FF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/781BE026701DAFA391758F44794F58BDFF3C7E68.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/781BE026701DAFA391758F44794F58BDFF3C7E68.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 19:30:33 +0000
Manifest this update: Tue 12 May 2026 19:25:33 +0000
Manifest next update: Wed 13 May 2026 22:00:33 +0000
Files and hashes: 1: 3137352e3130362e31362e302f32322d3234203d3e20313331373637.roa (hash: F7awc14DauajZvya1JB+aFN9Ei7NArKg1X2ILMaeIB8=)
2: 781BE026701DAFA391758F44794F58BDFF3C7E68.crl (hash: PHz/1Hky2FeYAC+5lsh1C0F97I8TQIfhRgjZ3OrGUMM=)
3: 3130332e39302e3139362e302f32322d3234203d3e20313331373637.roa (hash: e3eyP3Gqi2CIxa8B3ThMqpYr4Fy5iLHYeg/SLihyWJY=)
4: 323430303a386238303a3a2f33322d3332203d3e20313331373637.roa (hash: a7s2l3O6pvc7GKZk3g5ud7YbwEz/lUPAccNQa0TiOHo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/781BE026701DAFA391758F44794F58BDFF3C7E68.crl
rsync://rpki-rsync.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/781BE026701DAFA391758F44794F58BDFF3C7E68.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/781BE026701DAFA391758F44794F58BDFF3C7E68.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:06:16:5a:97:d6:85:c6:cd:cb:c1:c0:a8:3d:70:1a:db:68:b2:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=781BE026701DAFA391758F44794F58BDFF3C7E68
Validity
Not Before: May 12 19:25:33 2026 GMT
Not After : May 13 22:00:33 2026 GMT
Subject: CN=01BCBC225F464FDE2BD292D24950F30E619A7B1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:df:47:81:49:71:4d:d9:a5:19:58:13:47:8d:
98:99:ad:67:e7:c6:ee:48:e7:b3:9e:69:c7:07:20:
0f:37:91:17:78:5d:78:8c:87:12:6e:cb:58:6b:13:
1d:9c:d4:ea:34:e2:98:c5:e6:11:29:ba:06:66:e9:
58:39:f1:19:73:ba:5b:d2:31:d3:bd:c5:ab:0d:81:
14:c1:97:f1:db:da:bb:04:43:36:ee:d2:f9:3d:de:
e5:37:73:8a:1c:76:cd:b8:f9:f7:88:92:8f:4b:94:
98:7c:e5:98:6b:a4:db:b8:eb:74:e4:ac:d6:ef:6b:
de:35:0d:1b:fb:33:d9:47:79:c9:a4:bf:5a:2e:e5:
86:ce:1c:c3:0f:91:a0:74:87:42:96:ff:26:c8:92:
99:d9:f5:94:0a:19:08:11:98:1f:9f:45:c1:0f:e3:
e5:bc:04:47:6c:ab:53:89:61:c6:2f:b9:1d:9c:be:
b2:88:5b:ca:dc:f4:b8:79:21:76:24:ca:d7:80:9e:
93:4b:fe:6d:f9:fe:02:67:3c:24:16:dc:71:b5:02:
e8:a4:4a:47:f1:f0:a5:10:24:a0:c7:26:a9:76:64:
fb:61:e1:c1:cf:47:fc:70:f8:69:74:1e:00:eb:8b:
eb:e5:4e:e3:a8:79:54:1b:e7:44:2c:a7:c8:ca:6f:
2c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:BC:BC:22:5F:46:4F:DE:2B:D2:92:D2:49:50:F3:0E:61:9A:7B:1B
X509v3 Authority Key Identifier:
keyid:78:1B:E0:26:70:1D:AF:A3:91:75:8F:44:79:4F:58:BD:FF:3C:7E:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/781BE026701DAFA391758F44794F58BDFF3C7E68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/781BE026701DAFA391758F44794F58BDFF3C7E68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/781BE026701DAFA391758F44794F58BDFF3C7E68.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:29:3d:8f:d5:8c:39:6b:0b:bb:e6:bd:6e:fe:5c:4c:8b:94:
43:7f:60:85:86:15:a4:94:1e:aa:87:d0:4c:a1:84:dd:6a:6e:
d4:89:27:85:f4:e3:90:36:b7:54:ed:bc:88:22:ab:21:f0:34:
dd:25:1d:b4:e9:e2:af:a1:ef:a2:5d:df:a8:4f:67:97:48:d0:
f9:45:35:18:0f:99:27:96:7d:96:09:b9:5c:61:df:63:5e:77:
2e:0e:03:f4:a2:f8:43:2c:9d:29:6a:03:f7:5d:c7:46:35:8f:
d3:fc:1b:d3:ad:6b:2f:b2:32:af:d3:b3:4f:8a:55:8e:2b:3c:
80:d2:d0:f2:b0:a8:d6:ac:a9:7f:77:4a:73:3d:88:51:b4:cc:
14:91:4b:f9:94:c1:e5:c7:ce:a9:08:5f:57:a4:8a:b5:f0:69:
e1:7a:11:2c:a3:19:4e:bb:b2:70:ce:c4:c2:e8:6c:6b:a8:90:
21:3f:25:38:da:21:3f:cb:b3:5a:47:22:61:a1:ef:6e:4b:76:
b7:75:40:61:ad:2f:b6:64:20:8d:91:49:c7:50:8f:1b:4e:19:
6a:2b:58:e7:6f:03:5c:0a:04:19:5c:4c:d7:f7:65:25:32:81:
eb:9c:aa:26:04:71:16:80:b8:5a:94:8e:63:2a:ee:ab:18:fc:
0e:7f:bb:98
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUOQYWWpfWhcbNy8HAqD1wGttosv8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzgxQkUwMjY3MDFEQUZBMzkxNzU4RjQ0Nzk0RjU4QkRG
RjNDN0U2ODAeFw0yNjA1MTIxOTI1MzNaFw0yNjA1MTMyMjAwMzNaMDMxMTAvBgNV
BAMTKDAxQkNCQzIyNUY0NjRGREUyQkQyOTJEMjQ5NTBGMzBFNjE5QTdCMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn30eBSXFN2aUZWBNHjZiZrWfn
xu5I57OeaccHIA83kRd4XXiMhxJuy1hrEx2c1Oo04pjF5hEpugZm6Vg58RlzulvS
MdO9xasNgRTBl/Hb2rsEQzbu0vk93uU3c4ocds24+feIko9LlJh85ZhrpNu463Tk
rNbva941DRv7M9lHecmkv1ou5YbOHMMPkaB0h0KW/ybIkpnZ9ZQKGQgRmB+fRcEP
4+W8BEdsq1OJYcYvuR2cvrKIW8rc9Lh5IXYkyteAnpNL/m35/gJnPCQW3HG1Auik
Skfx8KUQJKDHJql2ZPth4cHPR/xw+Gl0HgDri+vlTuOoeVQb50Qsp8jKbyzFAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUAby8Il9GT94r0pLSSVDzDmGaexswHwYDVR0j
BBgwFoAUeBvgJnAdr6ORdY9EeU9Yvf88fmgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MjRkMTA4ZjctMDhiMi00MDlmLThhNzAtYTljNjdhZTVlZDIyLzAvNzgxQkUwMjY3
MDFEQUZBMzkxNzU4RjQ0Nzk0RjU4QkRGRjNDN0U2OC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83ODFCRTAyNjcwMURBRkEzOTE3NThGNDQ3OTRGNThCREZGM0M3
RTY4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjRkMTA4ZjctMDhiMi00MDlmLThh
NzAtYTljNjdhZTVlZDIyLzAvNzgxQkUwMjY3MDFEQUZBMzkxNzU4RjQ0Nzk0RjU4
QkRGRjNDN0U2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAG4pPY/VjDlrC7vmvW7+XEyLlEN/YIWGFaSU
HqqH0EyhhN1qbtSJJ4X045A2t1TtvIgiqyHwNN0lHbTp4q+h76Jd36hPZ5dI0PlF
NRgPmSeWfZYJuVxh32Nedy4OA/Si+EMsnSlqA/ddx0Y1j9P8G9Otay+yMq/Ts0+K
VY4rPIDS0PKwqNasqX93SnM9iFG0zBSRS/mUweXHzqkIX1ekirXwaeF6ESyjGU67
snDOxMLobGuokCE/JTjaIT/Ls1pHImGh725Ldrd1QGGtL7ZkII2RScdQjxtOGWor
WOdvA1wKBBlcTNf3ZSUygeucqiYEcRaAuFqUjmMq7qsY/A5/u5g=
-----END CERTIFICATE-----
Generated at Wed May 13 02:13:03 2026 by rpki-client