
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/1/378A3CDFC885FF682AB4268D41AC4081FB774095.mft
File: 378A3CDFC885FF682AB4268D41AC4081FB774095.mft (raw, json)
Hash identifier: pPjckKJnwoEmattPEB48aZ/2RoAqr2uLWyUbUSruvaY=
Subject key identifier: F5:15:CF:C8:EE:F6:02:B1:34:31:C9:65:D9:F7:0E:40:A8:0B:38:E5
Authority key identifier: 37:8A:3C:DF:C8:85:FF:68:2A:B4:26:8D:41:AC:40:81:FB:77:40:95
Certificate issuer: /CN=378A3CDFC885FF682AB4268D41AC4081FB774095
Certificate serial: 6E9E24F2C7AB4657A3AD24E156573A2E6782871C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/378A3CDFC885FF682AB4268D41AC4081FB774095.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/1/378A3CDFC885FF682AB4268D41AC4081FB774095.mft
Manifest number: C2
Signing time: Thu 24 Sep 2026 00:51:45 +0000
Manifest this update: Thu 24 Sep 2026 00:46:45 +0000
Manifest next update: Fri 25 Sep 2026 04:04:45 +0000
Files and hashes: 1: 378A3CDFC885FF682AB4268D41AC4081FB774095.crl (hash: ZrkV7wXjwAE9VBsCr2x2ylb6AKWdGhEkRDZZSkThx/E=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/1/378A3CDFC885FF682AB4268D41AC4081FB774095.crl
rsync://rpki-rsync.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/1/378A3CDFC885FF682AB4268D41AC4081FB774095.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/378A3CDFC885FF682AB4268D41AC4081FB774095.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:9e:24:f2:c7:ab:46:57:a3:ad:24:e1:56:57:3a:2e:67:82:87:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=378A3CDFC885FF682AB4268D41AC4081FB774095
Validity
Not Before: Sep 24 00:46:45 2026 GMT
Not After : Sep 25 04:04:45 2026 GMT
Subject: CN=F515CFC8EEF602B13431C965D9F70E40A80B38E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ed:44:4a:c1:24:1e:1f:bf:47:61:b8:fe:d6:
b3:ec:f4:82:90:52:69:3e:35:c8:cc:ef:2e:f2:14:
18:30:3f:dd:69:e4:f5:01:86:44:3e:2a:4c:ba:83:
39:b6:de:70:16:66:3d:d7:00:d7:7e:c9:2c:97:01:
ac:f7:58:30:5d:fb:f1:ec:47:e8:9e:81:f9:71:50:
57:1b:70:2c:f4:89:a6:8e:31:47:c5:b2:cd:0c:9f:
8a:7d:31:80:a9:dc:d0:da:4d:73:f7:ec:57:45:b8:
da:07:d2:bc:5c:47:b1:7b:26:c7:85:21:b4:c8:4e:
4c:2e:fb:72:41:a3:34:c6:22:52:b2:65:e1:dd:27:
54:1c:0b:1c:88:94:e9:d0:09:96:d1:26:e3:7e:2b:
b1:64:3c:2c:d0:2b:01:05:5c:db:5b:f7:a7:40:f7:
f1:45:62:78:ff:e5:99:b6:96:d9:5a:12:a9:39:99:
d7:92:6d:c5:22:4e:1f:3a:0d:18:17:e9:03:28:3c:
3e:81:d7:34:1d:4e:ce:9a:22:1c:f1:5f:10:08:38:
37:97:3a:2e:20:e1:ad:0e:a9:9d:f9:01:08:9e:d1:
07:bc:cc:85:31:aa:83:1b:ef:db:88:9d:b1:24:1a:
fa:5d:9e:cb:c9:ac:41:38:af:b8:9b:6b:7c:07:ed:
db:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:15:CF:C8:EE:F6:02:B1:34:31:C9:65:D9:F7:0E:40:A8:0B:38:E5
X509v3 Authority Key Identifier:
keyid:37:8A:3C:DF:C8:85:FF:68:2A:B4:26:8D:41:AC:40:81:FB:77:40:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/1/378A3CDFC885FF682AB4268D41AC4081FB774095.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/378A3CDFC885FF682AB4268D41AC4081FB774095.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/1/378A3CDFC885FF682AB4268D41AC4081FB774095.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:f1:16:26:88:27:ab:f6:2b:6a:b0:bc:6f:32:fb:89:56:39:
50:a5:24:0b:95:84:51:c2:c3:ed:43:cf:f4:10:b1:1b:4e:18:
fd:55:d7:ff:25:62:1d:b3:c6:b8:ca:64:f1:90:9b:44:5b:87:
f9:ac:26:0f:9d:a1:89:22:53:67:df:3e:f9:cc:9b:13:56:00:
3b:a3:2b:9b:98:92:93:6a:47:df:a8:f9:6d:5e:65:cf:9e:cc:
9f:95:d1:b7:f4:ba:17:9b:2a:80:1c:40:ab:d7:0b:2f:15:10:
49:32:df:05:16:79:f4:25:93:4c:15:25:41:93:2e:22:7f:e8:
36:4a:cf:eb:0b:e6:f1:2d:39:58:88:0e:1b:34:29:c5:85:0e:
9a:98:2d:29:04:7b:18:f4:af:0d:29:61:6e:5f:69:e9:1b:a2:
aa:cb:89:15:7e:55:65:0b:e1:1c:23:43:9a:c4:e6:33:23:26:
f1:65:58:c6:65:41:49:aa:47:f9:f3:e1:11:c4:3f:22:a7:6f:
01:5c:fb:be:b7:65:16:1b:83:18:d1:c7:b7:3b:0f:9f:44:a9:
7c:e4:35:fb:53:36:76:1c:a4:67:96:e8:a6:cc:2e:3e:39:d3:
91:99:53:94:13:ed:ea:cb:80:cf:81:dc:49:33:45:cf:8a:ae:
4b:ab:a0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:27:24 2026 by rpki-client