
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/041E78A186856FDDB2C0EC51D0234F297B0694FB.mft
File: 041E78A186856FDDB2C0EC51D0234F297B0694FB.mft (raw, json)
Hash identifier: indqMrdRFfOyq3LI2nhK5Nt7fdLf+fbp9nmAAd9VD4I=
Subject key identifier: 47:10:EC:4E:08:87:13:95:B5:B8:71:AF:67:3A:71:D4:BA:7F:4E:5D
Authority key identifier: 04:1E:78:A1:86:85:6F:DD:B2:C0:EC:51:D0:23:4F:29:7B:06:94:FB
Certificate issuer: /CN=041E78A186856FDDB2C0EC51D0234F297B0694FB
Certificate serial: 20B50C5ACB4E606D656E0AF136291BAFFF2F0850
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/041E78A186856FDDB2C0EC51D0234F297B0694FB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/041E78A186856FDDB2C0EC51D0234F297B0694FB.mft
Manifest number: C1
Signing time: Wed 23 Sep 2026 17:27:39 +0000
Manifest this update: Wed 23 Sep 2026 17:22:39 +0000
Manifest next update: Thu 24 Sep 2026 20:04:39 +0000
Files and hashes: 1: 041E78A186856FDDB2C0EC51D0234F297B0694FB.crl (hash: wS3bEaieSo5DSuGs/hCGRWnJoADXkC9zLKhOXJThn3M=)
2: 3130332e31332e33362e302f32342d3234203d3e20313331373231.roa (hash: jFMQqts/Xb/kIK8tDhB7Inx5c23uykyP37ClMnrRbng=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/041E78A186856FDDB2C0EC51D0234F297B0694FB.crl
rsync://rpki-rsync.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/041E78A186856FDDB2C0EC51D0234F297B0694FB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/041E78A186856FDDB2C0EC51D0234F297B0694FB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 20:04:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:b5:0c:5a:cb:4e:60:6d:65:6e:0a:f1:36:29:1b:af:ff:2f:08:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=041E78A186856FDDB2C0EC51D0234F297B0694FB
Validity
Not Before: Sep 23 17:22:39 2026 GMT
Not After : Sep 24 20:04:39 2026 GMT
Subject: CN=4710EC4E08871395B5B871AF673A71D4BA7F4E5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:e0:46:1e:69:2a:52:df:3d:57:d5:94:2d:90:
ea:9b:ff:59:00:88:5d:9a:73:8e:d6:d9:9a:74:55:
18:71:f5:93:91:c3:ca:c4:80:a2:53:96:fc:1e:dc:
be:9a:32:28:0e:06:2c:ff:14:85:c0:a2:e3:d4:2f:
66:9a:f3:01:95:31:59:bc:04:28:f6:a4:d1:ab:2c:
b3:24:df:1e:f3:1f:19:b4:35:f1:bf:09:4d:a4:c5:
80:da:67:96:0a:10:24:23:7d:ca:bc:16:0b:14:ec:
a0:57:0d:20:58:f6:77:4f:8c:93:3f:ea:88:e1:fe:
e3:3b:14:06:a0:6b:a8:67:45:82:83:81:c7:dd:62:
54:cc:34:8e:18:b6:c4:40:93:90:ed:9f:4b:0f:61:
08:a3:0e:00:78:22:c3:74:1d:e9:d0:2b:1c:30:5a:
4b:c9:3d:54:3e:c8:66:ed:ea:42:27:d5:40:b9:04:
92:fd:83:1c:5f:ec:cf:85:28:6f:76:15:76:d6:5b:
cc:fc:ad:9c:42:d3:fe:39:3a:ec:e1:71:d1:2e:a7:
71:bb:d3:8d:72:47:30:0f:44:72:c8:df:c1:68:69:
b5:de:a0:d3:ce:26:fa:7e:eb:de:8f:2f:ea:78:0a:
82:e1:1b:c6:cd:41:5e:b0:be:42:e0:cd:d9:83:ed:
fd:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:10:EC:4E:08:87:13:95:B5:B8:71:AF:67:3A:71:D4:BA:7F:4E:5D
X509v3 Authority Key Identifier:
keyid:04:1E:78:A1:86:85:6F:DD:B2:C0:EC:51:D0:23:4F:29:7B:06:94:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/041E78A186856FDDB2C0EC51D0234F297B0694FB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/041E78A186856FDDB2C0EC51D0234F297B0694FB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/041E78A186856FDDB2C0EC51D0234F297B0694FB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:fc:26:cd:a0:81:09:b8:56:82:45:a3:a2:57:97:1f:34:b6:
61:07:b4:59:f8:b5:57:41:11:32:36:7b:03:f9:63:a0:75:0d:
92:be:1b:08:94:41:ab:85:fc:a4:1b:ba:fa:39:d8:a0:db:41:
43:65:03:6d:16:11:75:7f:f0:a0:ad:90:ac:73:4e:00:be:42:
d5:44:a3:8f:5a:a6:e8:14:68:5e:d8:df:50:bf:eb:49:e1:d0:
9d:47:b1:9b:9e:ed:74:2a:32:82:cd:dd:d5:37:2b:89:8b:8e:
92:e1:05:9a:c4:00:62:de:3f:63:8f:c0:b9:8f:70:23:a5:e7:
2f:f1:e0:35:c7:f1:fe:e1:3c:f5:17:27:51:f2:07:67:f6:4b:
2e:97:7a:f9:84:70:df:ac:2e:f4:32:33:97:69:f0:01:b2:24:
d3:8d:b6:12:0a:c0:16:a0:ac:d4:eb:6a:b1:c0:d8:42:70:5d:
03:2f:3c:7e:27:bc:72:ef:d2:ba:d5:b2:ef:a4:bf:1b:06:cd:
3a:bf:37:d3:4f:9d:50:3e:e0:f3:47:17:73:21:89:76:7a:77:
0f:94:13:63:2e:74:b1:5e:cf:40:63:a4:48:9c:d4:25:3c:53:
d6:94:39:be:80:49:6b:0a:4c:48:28:dc:18:9d:cf:ec:b6:5d:
87:07:16:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:01:52 2026 by rpki-client