
$ rpki-client -vvf rpki-rsync.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.mft
File: 778A71BB3C91368C656DEB818E9DB403DBD1E2C4.mft (raw, json)
Hash identifier: bRkSXr/xGOjW54qv35oIm//vGmX1OjtICc4Js8tmBps=
Subject key identifier: 35:15:A7:03:4C:2E:98:73:42:95:FD:2A:91:D4:3A:79:B1:45:B1:FF
Authority key identifier: 77:8A:71:BB:3C:91:36:8C:65:6D:EB:81:8E:9D:B4:03:DB:D1:E2:C4
Certificate issuer: /CN=778A71BB3C91368C656DEB818E9DB403DBD1E2C4
Certificate serial: A42D82020067F71B2F707B323FD96782A62B0A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.mft
Manifest number: 70
Signing time: Fri 24 Jul 2026 03:33:42 +0000
Manifest this update: Fri 24 Jul 2026 03:28:42 +0000
Manifest next update: Sat 25 Jul 2026 03:46:42 +0000
Files and hashes: 1: 778A71BB3C91368C656DEB818E9DB403DBD1E2C4.crl (hash: y2mdRsBzPnY7M9c6eVDxgcezkZqz5uFHb2wI+loI0g8=)
2: 3130332e3234382e382e302f32332d3234203d3e20313531353338.roa (hash: ccnKpMhAZ50WINER3EYQ3VYvFkNVbacY8s+OufsENRg=)
3: 323030313a6466323a633963303a3a2f34382d3438203d3e20313531353338.roa (hash: YndAlxaqXYkWW68P17cuw0iGsOCiRy+p2CjBviV7Rok=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.crl
rsync://rpki-rsync.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 03:46:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
a4:2d:82:02:00:67:f7:1b:2f:70:7b:32:3f:d9:67:82:a6:2b:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=778A71BB3C91368C656DEB818E9DB403DBD1E2C4
Validity
Not Before: Jul 24 03:28:42 2026 GMT
Not After : Jul 25 03:46:42 2026 GMT
Subject: CN=3515A7034C2E98734295FD2A91D43A79B145B1FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cc:f0:8a:79:29:cc:02:44:74:3b:2b:64:a9:
43:6a:9e:cb:7d:31:a1:69:0b:7b:4e:8e:76:30:7b:
c2:44:68:d2:a2:56:99:0c:af:48:03:73:92:c8:d4:
20:87:35:8f:cd:6f:85:45:63:19:68:38:10:56:b3:
83:fc:2d:f0:b3:cd:1f:a4:f2:78:f4:e8:75:48:eb:
14:5b:fc:32:e8:a7:1e:97:c3:20:3b:71:80:0c:19:
2a:33:77:74:82:33:c9:e4:2f:e7:56:f7:63:a9:de:
e3:6f:2d:cc:28:bb:73:7a:cb:ce:db:3a:a7:7a:50:
d9:c5:a9:3c:02:13:ac:59:4d:80:70:68:f1:29:40:
ae:23:7b:eb:80:83:8a:8f:5c:5c:38:14:00:6e:25:
4e:0a:b5:3d:d9:ad:50:40:31:30:d9:e6:e7:ab:99:
70:fc:40:fa:b9:94:b9:55:71:12:c6:63:ab:0d:50:
80:9b:a8:ec:aa:09:a8:7c:1f:d2:a3:0e:b5:1e:f7:
92:76:f0:9b:64:3c:2b:72:4d:e3:6c:27:d8:92:a9:
ce:1a:99:55:1a:ed:25:ce:29:c1:de:c7:a1:a7:58:
e6:cd:9c:31:4c:92:44:af:6b:43:3d:80:82:ea:a1:
39:66:ad:50:99:33:78:33:b3:d6:65:dd:e9:74:1d:
8e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:15:A7:03:4C:2E:98:73:42:95:FD:2A:91:D4:3A:79:B1:45:B1:FF
X509v3 Authority Key Identifier:
keyid:77:8A:71:BB:3C:91:36:8C:65:6D:EB:81:8E:9D:B4:03:DB:D1:E2:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/778A71BB3C91368C656DEB818E9DB403DBD1E2C4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:a4:6e:3c:3f:74:d4:5b:70:39:46:33:55:77:97:92:03:61:
b0:d5:82:88:01:c9:45:ee:0b:5c:e2:fc:cb:f4:b2:36:20:9b:
68:a7:29:f5:69:4c:52:f3:d4:31:ff:ba:7e:2c:d1:34:8b:3b:
49:ba:aa:e2:3b:85:3f:d5:74:d8:06:56:86:a1:fd:80:03:0e:
36:5b:a6:8c:0b:e7:40:f3:b1:ba:4f:f5:9e:37:a5:da:6a:04:
12:16:50:b6:86:a0:9e:b0:d2:b1:1f:30:9d:8e:56:be:2f:00:
ad:13:02:21:48:4c:c9:35:f8:86:a4:1b:c6:ed:3a:ff:7e:a8:
21:60:51:a0:2c:12:f5:9e:7e:a9:4a:87:54:f3:e7:e8:90:95:
83:63:e7:ba:bf:9f:3d:41:0e:9c:2c:e4:1f:6b:a9:38:79:c2:
92:96:1a:d8:25:bd:7f:71:b8:e0:c2:d3:19:c4:48:dd:1e:f2:
8d:b7:df:09:02:18:a3:3c:95:25:98:80:3b:66:a3:c4:c7:95:
3d:a0:7d:74:7a:d9:03:ae:b4:bf:67:d2:a4:bb:ea:e6:63:30:
c8:2c:a4:fa:fa:57:07:4a:28:db:8e:60:22:f7:2c:02:c0:64:
d4:83:70:50:f2:09:75:c8:cf:1b:42:e8:6d:9a:b6:28:0a:1b:
46:5e:d7:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:40:54 2026 by rpki-client