
$ rpki-client -vvf rpki-rsync.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.mft
File: 778A71BB3C91368C656DEB818E9DB403DBD1E2C4.mft (raw, json)
Hash identifier: 4d+RIurLfCuY8PCmNtqhzxp56PBWyZL0sMyPRL9j6Fg=
Subject key identifier: A6:C3:D7:D3:E0:95:26:EE:78:E9:7A:68:F8:BC:45:CA:CF:72:19:77
Authority key identifier: 77:8A:71:BB:3C:91:36:8C:65:6D:EB:81:8E:9D:B4:03:DB:D1:E2:C4
Certificate issuer: /CN=778A71BB3C91368C656DEB818E9DB403DBD1E2C4
Certificate serial: 75C712D0CF5E37E65CF1F876879FF21D53AB7D9C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 09:20:44 +0000
Manifest this update: Tue 12 May 2026 09:15:44 +0000
Manifest next update: Wed 13 May 2026 10:46:44 +0000
Files and hashes: 1: 323030313a6466323a633963303a3a2f34382d3438203d3e20313531353338.roa (hash: YndAlxaqXYkWW68P17cuw0iGsOCiRy+p2CjBviV7Rok=)
2: 3130332e3234382e382e302f32332d3234203d3e20313531353338.roa (hash: ccnKpMhAZ50WINER3EYQ3VYvFkNVbacY8s+OufsENRg=)
3: 778A71BB3C91368C656DEB818E9DB403DBD1E2C4.crl (hash: XSPCvTPEKTLrFYGAvCF9eTqXq76r+wsikdDdlU4KKGg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.crl
rsync://rpki-rsync.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:c7:12:d0:cf:5e:37:e6:5c:f1:f8:76:87:9f:f2:1d:53:ab:7d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=778A71BB3C91368C656DEB818E9DB403DBD1E2C4
Validity
Not Before: May 12 09:15:44 2026 GMT
Not After : May 13 10:46:44 2026 GMT
Subject: CN=A6C3D7D3E09526EE78E97A68F8BC45CACF721977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a3:cf:8a:2b:01:5d:b2:91:26:15:29:32:ac:
5c:c9:7c:08:5d:58:95:70:be:36:6a:7f:5f:99:b7:
bc:cb:45:20:37:9a:82:03:82:9d:bb:6e:cf:7e:ce:
b3:81:0c:a6:a1:e8:1c:ed:81:fb:ce:a2:ea:9a:8c:
12:38:69:8f:9b:bb:2b:e4:58:5e:0c:ce:1e:f2:dc:
05:dc:0d:13:f6:4d:91:97:13:6d:f1:fa:50:77:e0:
64:a1:b5:5a:8b:f2:1b:36:f4:5d:1f:a2:16:d8:1c:
c4:84:7c:69:9f:39:db:d6:de:9a:fb:1d:53:7e:7a:
3d:ed:da:cb:b8:98:eb:de:12:60:00:83:00:b8:04:
69:c7:42:26:16:a8:27:4c:8c:83:6f:8a:47:0d:fc:
d8:59:86:54:a2:85:2c:64:66:00:10:ec:21:10:1c:
7b:af:c8:32:84:fa:46:6f:1a:d1:77:6a:3d:8b:7e:
45:bb:f5:36:45:e7:d5:d6:43:9a:dc:2d:b7:46:1c:
fd:2e:6b:75:5e:0e:92:cc:5b:a0:81:99:57:9a:72:
91:f4:c4:73:c4:a7:bc:55:71:31:cd:f0:52:e5:91:
11:f5:ee:e5:82:4a:89:63:a9:73:22:36:ec:4f:03:
c7:8f:38:0d:a4:a8:88:03:a3:f1:90:c2:20:06:27:
f8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C3:D7:D3:E0:95:26:EE:78:E9:7A:68:F8:BC:45:CA:CF:72:19:77
X509v3 Authority Key Identifier:
keyid:77:8A:71:BB:3C:91:36:8C:65:6D:EB:81:8E:9D:B4:03:DB:D1:E2:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:9a:e3:24:e9:be:f0:22:e3:00:b3:21:d2:e4:37:f8:86:6b:
c2:ec:1f:a5:22:1f:bc:96:1e:d6:0d:1f:50:2d:83:d5:a6:27:
97:6c:7a:1f:8b:c4:34:35:21:81:a5:5a:31:1d:1d:ef:64:9d:
94:23:10:2a:92:01:43:b0:2f:0b:99:e3:5c:e9:7c:f3:ab:2b:
c5:3b:85:87:6e:30:96:5c:2a:96:74:23:51:2e:94:80:0a:09:
8f:31:64:c3:85:ac:32:38:b1:8a:b9:24:66:c6:c2:55:6a:eb:
80:f0:c0:7b:3c:31:52:cb:51:c5:bf:77:be:96:c7:db:79:60:
eb:0e:2e:e2:66:d5:6e:d2:7e:b6:e3:22:e8:99:71:6e:08:16:
88:b4:dd:93:fc:35:28:7b:7c:db:f5:64:73:d5:7f:66:fc:4e:
55:66:24:80:01:ab:e7:a8:96:8f:f9:1f:00:bf:3d:a2:fb:a2:
66:b3:c9:5d:47:a7:ff:b5:46:af:16:ff:d7:3c:44:81:9c:af:
75:41:6a:94:e0:96:b3:48:04:63:6f:5e:89:97:bc:a2:b6:ae:
2a:41:50:5d:a7:4d:2b:50:88:c7:e3:5a:d6:f6:61:ca:53:31:
0a:46:8f:4e:0e:31:5b:54:c6:85:f8:6b:d5:fe:4f:b6:13:5f:
46:9f:1f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:20:00 2026 by rpki-client