
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/A178C6332DA881B104F0F93428812E41FBC50469.mft
File: A178C6332DA881B104F0F93428812E41FBC50469.mft (raw, json)
Hash identifier: EeUG3/UAEjZNGjZdnkpNRh3E+1MLVWSabqtLXWLUqfY=
Subject key identifier: AA:51:E2:5B:BF:3E:49:A0:23:16:C9:09:2F:C5:4A:B4:A8:E3:2D:74
Authority key identifier: A1:78:C6:33:2D:A8:81:B1:04:F0:F9:34:28:81:2E:41:FB:C5:04:69
Certificate issuer: /CN=A178C6332DA881B104F0F93428812E41FBC50469
Certificate serial: 1082C0E098CCA944F753FFB1DDDD98E1221D505B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A178C6332DA881B104F0F93428812E41FBC50469.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/A178C6332DA881B104F0F93428812E41FBC50469.mft
Manifest number: C1
Signing time: Thu 24 Sep 2026 23:14:22 +0000
Manifest this update: Thu 24 Sep 2026 23:09:22 +0000
Manifest next update: Sat 26 Sep 2026 02:11:22 +0000
Files and hashes: 1: 3130332e3133302e36302e302f32322d3232203d3e20313338303739.roa (hash: T8b8X/AfVB8Tnh4l1K8U5NgBu0/TMby8x0cMkC4txGQ=)
2: 3130332e3133302e36332e302f32342d3234203d3e20313338303739.roa (hash: cCLPkQchjHWkE+UKdKRA08i0rTrBMXXMvMlke2pO7XI=)
3: A178C6332DA881B104F0F93428812E41FBC50469.crl (hash: cVXS0G7BcYGPmEIEezcyLeM0Frzh8TI9tcxDPwIOLSA=)
4: 3130332e3133302e36302e302f32332d3233203d3e20313338303739.roa (hash: PRU3xKp5Vx/uul+EMJIb2hSjg7qhpttIRi3G7tygtR0=)
5: 3130332e3133302e36312e302f32342d3234203d3e20313338303739.roa (hash: vs9KcuATR80vKXSPBYx5Yt5jWTx8cmO/KuCAtfLcIDQ=)
6: 3130332e3133302e36322e302f32342d3234203d3e20313338303739.roa (hash: r93AiQLpEiiQUZdR6WD0a4zObzoCKw/EIXeQ7BGbSPw=)
7: 3130332e3133302e36302e302f32342d3234203d3e20313338303739.roa (hash: y5uAk2aLtDJOH/AO3GV3v97lCgPXV0mBWicCymq9t4k=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/A178C6332DA881B104F0F93428812E41FBC50469.crl
rsync://rpki-rsync.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/A178C6332DA881B104F0F93428812E41FBC50469.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A178C6332DA881B104F0F93428812E41FBC50469.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 02:11:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:82:c0:e0:98:cc:a9:44:f7:53:ff:b1:dd:dd:98:e1:22:1d:50:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A178C6332DA881B104F0F93428812E41FBC50469
Validity
Not Before: Sep 24 23:09:22 2026 GMT
Not After : Sep 26 02:11:22 2026 GMT
Subject: CN=AA51E25BBF3E49A02316C9092FC54AB4A8E32D74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f0:60:7d:27:7a:5b:f5:29:8c:ff:88:96:99:
d6:bb:fd:54:99:71:f5:48:14:60:89:70:4d:ce:94:
1c:cf:77:3a:fc:51:48:91:b8:9b:92:31:29:85:54:
78:42:6d:68:04:af:04:9d:eb:3b:9f:71:a3:66:59:
38:44:87:15:0d:15:5b:84:8f:a5:71:3a:8d:de:16:
79:a3:78:b4:87:c3:54:ed:0e:ef:ec:3a:2b:70:65:
f5:1a:f1:e5:b1:89:e8:8f:11:f3:79:2a:87:ad:b0:
3b:56:50:28:d4:32:b1:17:44:da:c2:a6:30:b5:c5:
f2:78:07:12:17:1b:6d:6f:6d:9a:de:51:0d:1a:01:
1d:31:18:72:86:64:69:ed:b3:ce:38:2c:b3:fb:9b:
4f:72:6f:10:d3:df:18:f6:74:18:f3:61:58:a9:c6:
ab:d7:7f:0a:74:fd:57:20:29:6c:ea:17:ee:b3:2d:
27:3f:1e:b9:f3:83:e5:57:79:0e:fc:57:f8:cf:0a:
b6:de:1b:b3:3d:81:b5:d4:8c:33:4b:9f:f6:bc:67:
87:c2:6c:a6:f8:1f:85:8f:e0:de:70:93:58:bc:97:
c7:2e:2a:29:3d:05:0e:fb:04:66:4c:d3:30:82:ec:
8f:60:31:5f:07:a9:e0:b0:52:cd:21:a8:76:5d:87:
33:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:51:E2:5B:BF:3E:49:A0:23:16:C9:09:2F:C5:4A:B4:A8:E3:2D:74
X509v3 Authority Key Identifier:
keyid:A1:78:C6:33:2D:A8:81:B1:04:F0:F9:34:28:81:2E:41:FB:C5:04:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/A178C6332DA881B104F0F93428812E41FBC50469.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A178C6332DA881B104F0F93428812E41FBC50469.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/A178C6332DA881B104F0F93428812E41FBC50469.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:17:4a:f6:53:f5:da:bd:a1:72:a1:f8:04:d3:dc:79:af:72:
00:a5:02:f6:32:6f:c0:f6:eb:d3:03:e5:8c:8f:ae:85:27:34:
58:79:41:9d:b4:3d:e9:6b:38:20:4b:e1:a6:da:a9:53:87:54:
70:b9:1d:da:2a:24:50:09:89:3d:2b:d5:a9:da:82:e5:21:23:
59:38:60:db:71:c1:f7:6b:1b:12:a9:d9:ee:22:d1:d2:51:cc:
15:00:53:fb:6a:ba:7f:6d:24:66:8a:90:0a:6f:ee:7b:52:6b:
93:bf:cd:cd:98:bc:ab:cf:5a:25:de:a3:b1:2e:01:91:a7:a9:
8e:40:45:36:8b:92:6a:a7:fb:e7:d8:dc:a4:24:8f:13:dd:c9:
6c:de:6e:bb:35:70:df:5e:0e:e7:24:b5:c2:54:b4:76:b1:c9:
3c:e7:f4:8f:34:a6:50:e1:d2:6b:05:60:e9:58:fc:70:d0:ae:
93:9d:0f:4e:4f:01:83:da:ec:e5:cf:da:a6:47:f0:e7:28:b6:
92:84:69:36:0e:21:d6:bc:dc:85:6b:54:fd:e8:76:21:62:9f:
65:f7:ee:aa:51:1f:95:fc:ca:91:3e:f6:a9:02:b5:0f:63:fc:
92:6f:2a:d9:76:e4:ee:88:3b:28:d6:87:e9:d0:c3:fa:43:83:
70:00:11:de
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUEILA4JjMqUT3U/+x3d2Y4SIdUFswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTE3OEM2MzMyREE4ODFCMTA0RjBGOTM0Mjg4MTJFNDFG
QkM1MDQ2OTAeFw0yNjA5MjQyMzA5MjJaFw0yNjA5MjYwMjExMjJaMDMxMTAvBgNV
BAMTKEFBNTFFMjVCQkYzRTQ5QTAyMzE2QzkwOTJGQzU0QUI0QThFMzJENzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQ8GB9J3pb9SmM/4iWmda7/VSZ
cfVIFGCJcE3OlBzPdzr8UUiRuJuSMSmFVHhCbWgErwSd6zufcaNmWThEhxUNFVuE
j6VxOo3eFnmjeLSHw1TtDu/sOitwZfUa8eWxieiPEfN5KoetsDtWUCjUMrEXRNrC
pjC1xfJ4BxIXG21vbZreUQ0aAR0xGHKGZGnts844LLP7m09ybxDT3xj2dBjzYVip
xqvXfwp0/VcgKWzqF+6zLSc/Hrnzg+VXeQ78V/jPCrbeG7M9gbXUjDNLn/a8Z4fC
bKb4H4WP4N5wk1i8l8cuKik9BQ77BGZM0zCC7I9gMV8HqeCwUs0hqHZdhzNnAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUqlHiW78+SaAjFskJL8VKtKjjLXQwHwYDVR0j
BBgwFoAUoXjGMy2ogbEE8Pk0KIEuQfvFBGkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OTEyYTNmMjgtODI3My00ZGQ1LTg3ZmMtMWVmMDBhY2FjOWI2LzAvQTE3OEM2MzMy
REE4ODFCMTA0RjBGOTM0Mjg4MTJFNDFGQkM1MDQ2OS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BMTc4QzYzMzJEQTg4MUIxMDRGMEY5MzQyODgxMkU0MUZCQzUw
NDY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTEyYTNmMjgtODI3My00ZGQ1LTg3
ZmMtMWVmMDBhY2FjOWI2LzAvQTE3OEM2MzMyREE4ODFCMTA0RjBGOTM0Mjg4MTJF
NDFGQkM1MDQ2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAI8XSvZT9dq9oXKh+ATT3HmvcgClAvYyb8D2
69MD5YyProUnNFh5QZ20PelrOCBL4abaqVOHVHC5HdoqJFAJiT0r1anaguUhI1k4
YNtxwfdrGxKp2e4i0dJRzBUAU/tqun9tJGaKkApv7ntSa5O/zc2YvKvPWiXeo7Eu
AZGnqY5ARTaLkmqn++fY3KQkjxPdyWzebrs1cN9eDucktcJUtHaxyTzn9I80plDh
0msFYOlY/HDQrpOdD05PAYPa7OXP2qZH8OcotpKEaTYOIda83IVrVP3odiFin2X3
7qpRH5X8ypE+9qkCtQ9j/JJvKtl25O6IOyjWh+nQw/pDg3AAEd4=
-----END CERTIFICATE-----
Generated at Fri Sep 25 19:13:52 2026 by rpki-client