
$ rpki-client -vvf rpki-rsync.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/1/378A3CDFC885FF682AB4268D41AC4081FB774095.mft
File: 378A3CDFC885FF682AB4268D41AC4081FB774095.mft (raw, json)
Hash identifier: 4fOxCf3wUCndUztyQiO7di4JsA9AjtdXmTgfnW6EsCs=
Subject key identifier: 06:8C:CD:D4:86:D1:6A:5E:40:BD:C9:FB:FB:48:1C:27:6C:81:95:D7
Authority key identifier: 37:8A:3C:DF:C8:85:FF:68:2A:B4:26:8D:41:AC:40:81:FB:77:40:95
Certificate issuer: /CN=378A3CDFC885FF682AB4268D41AC4081FB774095
Certificate serial: 5BCFF51E7D499E2692B87E337E78BD9DF09BBD39
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/378A3CDFC885FF682AB4268D41AC4081FB774095.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/1/378A3CDFC885FF682AB4268D41AC4081FB774095.mft
Manifest number: 6F
Signing time: Fri 24 Jul 2026 03:48:58 +0000
Manifest this update: Fri 24 Jul 2026 03:43:58 +0000
Manifest next update: Sat 25 Jul 2026 05:53:58 +0000
Files and hashes: 1: 378A3CDFC885FF682AB4268D41AC4081FB774095.crl (hash: sKo9NLSl4Ha9pYVB6xgq0/RRks/XsTwBZ3NPVHn6Oas=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/1/378A3CDFC885FF682AB4268D41AC4081FB774095.crl
rsync://rpki-rsync.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/1/378A3CDFC885FF682AB4268D41AC4081FB774095.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/378A3CDFC885FF682AB4268D41AC4081FB774095.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:cf:f5:1e:7d:49:9e:26:92:b8:7e:33:7e:78:bd:9d:f0:9b:bd:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=378A3CDFC885FF682AB4268D41AC4081FB774095
Validity
Not Before: Jul 24 03:43:58 2026 GMT
Not After : Jul 25 05:53:58 2026 GMT
Subject: CN=068CCDD486D16A5E40BDC9FBFB481C276C8195D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d2:cc:2d:36:d3:e1:ad:18:de:e8:f2:7b:b7:
6c:79:63:00:c6:43:41:b0:d2:1b:77:77:38:1e:e8:
65:5b:da:3c:46:e8:71:e5:c6:46:f5:b2:50:a4:50:
75:56:31:75:5b:95:5f:d1:3d:c2:21:a4:43:8b:42:
a4:2f:6d:3f:6f:ed:03:cd:94:d2:25:d1:7b:95:38:
fb:ff:a2:47:25:40:90:a5:39:fe:4f:2d:0d:c6:1a:
60:c1:f6:6e:f0:09:ed:6d:12:94:01:57:e8:ad:d7:
5b:d3:e2:64:31:6d:f3:b8:0f:73:6f:9d:28:74:bb:
09:1c:18:0e:7c:1a:5a:44:58:83:8f:e6:da:87:d1:
66:44:5f:cd:d6:69:e5:d4:4c:23:05:8e:fb:d3:41:
d2:f8:5d:c5:7b:17:56:09:c8:6b:ba:be:77:32:33:
be:89:95:36:71:c6:53:af:65:5e:f3:e8:75:61:4c:
1f:f6:a4:28:01:4d:3c:53:1c:68:c8:71:d9:c1:3b:
55:98:1f:e4:fa:22:e0:d5:c7:d3:78:ba:a9:ea:51:
a2:d7:32:0b:a1:39:25:e3:31:ed:fe:e0:1d:3e:97:
6f:70:d8:95:84:e4:3c:56:80:0c:da:1c:ec:2f:a7:
34:bf:b6:d8:33:fa:73:df:b4:66:c1:e2:90:ac:1e:
e4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:8C:CD:D4:86:D1:6A:5E:40:BD:C9:FB:FB:48:1C:27:6C:81:95:D7
X509v3 Authority Key Identifier:
keyid:37:8A:3C:DF:C8:85:FF:68:2A:B4:26:8D:41:AC:40:81:FB:77:40:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/1/378A3CDFC885FF682AB4268D41AC4081FB774095.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/378A3CDFC885FF682AB4268D41AC4081FB774095.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/1/378A3CDFC885FF682AB4268D41AC4081FB774095.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:d5:0e:51:d5:b9:0c:bf:a5:99:5b:f4:51:cf:5b:5f:7f:4a:
5d:19:c2:c7:41:57:e1:59:67:8d:61:87:dd:8e:67:9f:73:55:
4a:43:77:9a:95:17:41:3d:0f:f6:3f:8b:95:f5:eb:44:62:b0:
d6:9c:0c:c9:78:14:da:7e:9b:1b:cf:24:ec:08:46:c5:ea:6e:
a7:56:f6:49:24:f4:08:91:a2:4a:37:41:f6:38:b4:a3:4d:94:
1d:1a:0b:bc:59:c4:41:b3:d4:56:9c:54:82:6f:81:7f:47:08:
d8:5b:23:67:05:7a:d0:2c:9d:d1:54:07:b6:fd:b0:45:af:ba:
ec:1c:3a:5c:6a:8a:49:58:77:e0:20:99:c7:04:8e:ec:f1:06:
e2:3e:4b:a7:86:80:cf:8d:95:bc:44:de:b1:9f:02:92:bf:d5:
68:6e:12:82:e2:e5:d8:48:8a:a9:07:fd:3b:1f:d4:c5:7a:bf:
90:bb:03:38:18:f5:12:99:9d:85:7c:67:a2:9e:95:54:e3:36:
34:40:50:c9:d9:2b:45:1f:09:b9:61:22:d6:6c:2b:9a:26:c5:
85:d8:7f:10:aa:bd:70:d2:b0:b4:ba:d3:97:c9:08:2c:67:11:
64:82:69:1a:b8:bb:7a:37:3f:2d:a6:f7:04:d2:03:5d:6c:6a:
26:64:33:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:11:02 2026 by rpki-client