
$ rpki-client -vvf rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.mft
File: 788C601EAD373E0C10915EB3D5D99F52AFF72BFA.mft (raw, json)
Hash identifier: QrvVBefJGjxLyEWjgLz9IzF698bOtYIPj1pChhGBJ4k=
Subject key identifier: 19:8D:CE:55:A0:FA:56:DE:59:03:AE:EE:31:C3:1F:24:0D:53:AB:A3
Authority key identifier: 78:8C:60:1E:AD:37:3E:0C:10:91:5E:B3:D5:D9:9F:52:AF:F7:2B:FA
Certificate issuer: /CN=788C601EAD373E0C10915EB3D5D99F52AFF72BFA
Certificate serial: 6749BD28726973917D4AC292556FF8DC2943132E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.mft
Manifest number: 6E
Signing time: Fri 24 Jul 2026 01:05:28 +0000
Manifest this update: Fri 24 Jul 2026 01:00:28 +0000
Manifest next update: Sat 25 Jul 2026 04:56:28 +0000
Files and hashes: 1: 3130332e3131362e3231362e302f32342d3234203d3e20313337333636.roa (hash: wJR2nuwydbqFCTFbU0MKnXlorFv2QpV5ZLVXkfDfe78=)
2: 3130332e3131362e3231392e302f32342d3234203d3e20313337333637.roa (hash: 2BQf1MoYT0XGiyUxqcqKQM552NzemZjiZh/eJ1HL/Ow=)
3: 3130332e3131362e3231382e302f32342d3234203d3e20313337333636.roa (hash: +WPVozpZcn/3/eLncGOKTtGwOiKAcol7sdk9fs/XBJg=)
4: 3130332e3131362e3231372e302f32342d3234203d3e20313337333636.roa (hash: ezj7o418kHVsUpxHI+JsvUw+jteTe5LJOavPTf4FP1A=)
5: 788C601EAD373E0C10915EB3D5D99F52AFF72BFA.crl (hash: oW1A/qkdVjGqpw6V0xEYglNMpnTTLY/Oftb3s+Eaa9A=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.crl
rsync://rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:49:bd:28:72:69:73:91:7d:4a:c2:92:55:6f:f8:dc:29:43:13:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=788C601EAD373E0C10915EB3D5D99F52AFF72BFA
Validity
Not Before: Jul 24 01:00:28 2026 GMT
Not After : Jul 25 04:56:28 2026 GMT
Subject: CN=198DCE55A0FA56DE5903AEEE31C31F240D53ABA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:1a:cb:a3:da:33:0d:11:2f:c1:bd:e5:8b:f2:
03:3d:62:99:0b:e1:fa:5d:93:54:43:7a:01:43:c8:
f9:3b:db:23:26:66:f5:ed:8e:9a:d1:07:64:98:10:
fb:27:63:0a:79:ec:c9:1c:ed:a8:74:85:bd:f9:72:
3a:43:00:97:19:fb:e1:9a:5f:c7:df:c0:35:32:21:
09:38:97:2c:a3:55:40:7c:b5:52:90:e6:80:47:35:
f0:57:17:8e:a1:76:7a:52:5d:dc:08:06:74:b6:a5:
cf:7b:0c:5f:ee:4e:2b:63:10:8a:ae:96:8c:87:f9:
e8:54:34:34:9f:b2:00:7f:69:99:d6:31:cd:6c:f6:
9d:33:9a:5f:83:99:9e:5f:52:07:fb:f4:18:59:11:
ad:e1:78:91:12:d0:2b:cf:18:4e:4a:93:bc:3e:a9:
4b:14:d0:60:32:77:4f:86:92:c8:5b:33:fc:22:f9:
36:51:f3:21:24:7b:b0:0c:20:97:0b:fd:9b:af:da:
56:e6:eb:29:2a:0d:00:8b:41:99:ee:3b:1e:bb:33:
c6:b0:c9:73:f1:21:1a:ce:32:72:7d:33:89:5c:27:
d2:35:2c:22:70:8c:19:b7:d5:db:30:28:2f:7a:e8:
62:65:e8:f7:f8:f4:60:f6:d2:85:ab:f2:94:a7:7c:
4d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:8D:CE:55:A0:FA:56:DE:59:03:AE:EE:31:C3:1F:24:0D:53:AB:A3
X509v3 Authority Key Identifier:
keyid:78:8C:60:1E:AD:37:3E:0C:10:91:5E:B3:D5:D9:9F:52:AF:F7:2B:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/788C601EAD373E0C10915EB3D5D99F52AFF72BFA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:78:71:48:77:53:54:ed:6c:f2:e5:d6:4c:4f:de:b5:f2:e3:
6f:80:c4:95:52:ac:13:bc:ac:a0:ac:9b:c9:6e:4a:b6:b6:68:
19:b3:64:6b:99:82:98:3f:06:ba:69:e8:10:8c:bb:71:07:cf:
3e:1d:12:7a:e9:2f:73:3c:7f:a6:f1:73:1d:7e:74:4c:57:c1:
bf:a2:43:c2:76:8b:cb:1e:32:90:3c:c5:47:51:45:52:81:8c:
53:45:22:54:d0:2f:94:ba:0a:1c:fa:8d:8e:c6:b2:26:f9:89:
1c:a0:fe:a8:68:d6:f0:12:a7:c6:66:63:2a:e4:64:d0:a5:96:
21:eb:f1:87:0b:aa:d7:1a:fb:44:44:6a:b7:1e:43:d3:84:d8:
ae:a1:bb:a3:94:21:ad:d6:b8:a7:d3:43:71:1f:a9:f1:32:4e:
db:7e:7d:0d:94:0c:71:12:a3:b5:ba:83:e9:ff:bf:e6:22:ee:
98:fd:3e:91:04:1f:f9:6b:8d:c8:9d:49:36:9a:a6:fd:97:d9:
83:b4:eb:54:b3:d6:b3:26:ed:1e:27:1c:a0:8d:f6:75:48:7e:
f0:74:62:c5:76:6a:4e:ce:19:94:74:09:4e:15:6f:a7:d5:7e:
ff:b7:a3:e3:ee:01:8b:07:58:46:85:9a:ea:d3:e6:99:7d:33:
5d:0c:a3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:17:18 2026 by rpki-client