
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/787B7E1048C16AB0BE85DAB0BB116B1706F3056E.mft
File: 787B7E1048C16AB0BE85DAB0BB116B1706F3056E.mft (raw, json)
Hash identifier: gc6t6su/RQb97z56pSoPP2GRl6u9llmA6c8knJi9z1Y=
Subject key identifier: EC:24:76:9C:E2:2C:89:08:3C:B7:8B:F4:CF:C9:6C:7E:0A:92:5B:36
Authority key identifier: 78:7B:7E:10:48:C1:6A:B0:BE:85:DA:B0:BB:11:6B:17:06:F3:05:6E
Certificate issuer: /CN=787B7E1048C16AB0BE85DAB0BB116B1706F3056E
Certificate serial: 7562FE5B179EE5BF5E0C9D12C34C115881219994
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/787B7E1048C16AB0BE85DAB0BB116B1706F3056E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/787B7E1048C16AB0BE85DAB0BB116B1706F3056E.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 13:18:23 +0000
Manifest this update: Tue 12 May 2026 13:13:23 +0000
Manifest next update: Wed 13 May 2026 13:48:23 +0000
Files and hashes: 1: 787B7E1048C16AB0BE85DAB0BB116B1706F3056E.crl (hash: VzrqFXQE69awnJyqeUa5XDj0bbCaEmK/pJIJgBk2GF4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/787B7E1048C16AB0BE85DAB0BB116B1706F3056E.crl
rsync://rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/787B7E1048C16AB0BE85DAB0BB116B1706F3056E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/787B7E1048C16AB0BE85DAB0BB116B1706F3056E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:62:fe:5b:17:9e:e5:bf:5e:0c:9d:12:c3:4c:11:58:81:21:99:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=787B7E1048C16AB0BE85DAB0BB116B1706F3056E
Validity
Not Before: May 12 13:13:23 2026 GMT
Not After : May 13 13:48:23 2026 GMT
Subject: CN=EC24769CE22C89083CB78BF4CFC96C7E0A925B36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:03:d2:11:87:a1:12:88:31:2f:2c:67:b2:f3:
b9:75:b5:1f:94:1b:eb:11:70:77:b4:6d:ab:f3:26:
99:18:dc:80:05:35:a8:59:b1:bc:fc:69:c8:07:24:
5a:10:9e:ac:1d:07:af:e5:fe:fe:54:f7:ed:40:c2:
9c:c3:cc:10:ca:fc:4f:79:14:8e:03:98:a8:d7:3e:
c2:67:b5:e7:b1:70:68:1c:81:c5:42:a5:6a:25:18:
53:d0:f1:d5:3c:4e:fd:60:9a:7f:9f:06:55:8b:2d:
d3:d3:5c:f1:13:d2:e9:0e:c2:c3:45:84:4a:6d:c6:
74:2f:42:96:9f:2f:ed:6b:cf:04:e9:64:2f:a6:80:
9f:16:f8:2f:a9:54:c4:77:48:21:ec:0c:2c:44:73:
d5:a4:55:26:ba:35:56:05:ed:4d:af:14:01:3a:65:
3a:a2:10:95:43:78:d8:ef:ad:ed:4b:5d:b9:f4:f3:
47:71:d3:9b:ce:c9:bc:35:99:19:35:51:e2:58:fc:
f6:2f:e8:3b:59:a3:bc:c3:eb:09:4f:a4:cb:2f:3a:
52:08:ba:12:db:7f:44:bd:bb:29:ca:57:a6:90:43:
58:da:e9:2e:70:5e:54:20:3b:1a:e9:ab:d2:45:d1:
48:61:f0:60:65:b1:f3:db:9b:dc:d9:87:8d:86:36:
7b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:24:76:9C:E2:2C:89:08:3C:B7:8B:F4:CF:C9:6C:7E:0A:92:5B:36
X509v3 Authority Key Identifier:
keyid:78:7B:7E:10:48:C1:6A:B0:BE:85:DA:B0:BB:11:6B:17:06:F3:05:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/787B7E1048C16AB0BE85DAB0BB116B1706F3056E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/787B7E1048C16AB0BE85DAB0BB116B1706F3056E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/787B7E1048C16AB0BE85DAB0BB116B1706F3056E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:b9:7d:a9:6e:d1:6e:85:29:42:06:3d:67:40:aa:d2:6e:97:
d1:90:1e:1d:e3:c2:35:28:df:9f:8b:70:d8:2a:e5:d7:4b:69:
6c:f3:d7:a9:c2:9f:8e:61:12:0a:f5:b5:bf:df:42:4f:33:01:
35:60:f5:d0:3a:6d:8b:9a:06:e3:89:d8:db:7a:9c:61:80:58:
f5:a3:d4:3f:8a:27:70:44:12:39:fc:bd:0b:5d:05:6c:9c:a6:
45:ca:e1:19:3e:b2:0a:c6:41:86:3c:cc:0c:65:bd:67:9a:31:
1e:b3:60:cc:ae:a6:cd:7f:36:5d:cf:cc:c9:ee:c6:c4:00:f3:
63:65:34:f0:61:d8:54:fc:15:cf:25:74:8f:2f:4c:6d:93:93:
1a:81:f8:1d:43:e5:c6:8f:92:01:db:6c:04:89:5d:8e:71:43:
db:a1:c4:24:89:15:3d:d3:85:41:0a:be:c8:c6:90:e0:71:4a:
e3:a8:55:29:7a:56:74:20:47:4a:d9:14:29:d9:3e:27:6e:d4:
8d:00:38:11:51:b3:61:74:d8:37:d1:34:1f:ce:83:2a:b4:73:
0f:e4:ba:ad:e7:82:ab:b0:b3:97:30:a7:8e:9e:58:bf:12:a8:
65:e9:f6:70:7a:80:a1:00:c7:40:e4:0f:67:78:ca:30:62:13:
37:e1:10:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:26:06 2026 by rpki-client