
$ rpki-client -vvf rpki-rsync.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/CB78BE291F4C68861081295C7864E4DC5943795A.mft
File: CB78BE291F4C68861081295C7864E4DC5943795A.mft (raw, json)
Hash identifier: 4TO7NewiaHYGuqbFecKpZyD2FXX5in5OCX7RuHGwfuM=
Subject key identifier: 4A:C5:62:A2:B2:B6:E3:57:24:4B:F1:B7:22:F3:02:0D:1D:08:ED:33
Authority key identifier: CB:78:BE:29:1F:4C:68:86:10:81:29:5C:78:64:E4:DC:59:43:79:5A
Certificate issuer: /CN=CB78BE291F4C68861081295C7864E4DC5943795A
Certificate serial: 77A8BD639A9E0695B8D58046D06C2BDA331247B5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB78BE291F4C68861081295C7864E4DC5943795A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/CB78BE291F4C68861081295C7864E4DC5943795A.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 23:38:42 +0000
Manifest this update: Thu 23 Jul 2026 23:33:42 +0000
Manifest next update: Sat 25 Jul 2026 02:49:42 +0000
Files and hashes: 1: 3130332e3134382e3139342e302f32342d3234203d3e20313430303033.roa (hash: Sw+OUdszsTIUzZ+1lqD/i8/2BPm17GQD5VfJxVXp+AM=)
2: CB78BE291F4C68861081295C7864E4DC5943795A.crl (hash: LhIStEPkuCQ5pOWJCT4R0mqXkw/d3FTIr7QPBt3PDm0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/CB78BE291F4C68861081295C7864E4DC5943795A.crl
rsync://rpki-rsync.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/CB78BE291F4C68861081295C7864E4DC5943795A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB78BE291F4C68861081295C7864E4DC5943795A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 02:49:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:a8:bd:63:9a:9e:06:95:b8:d5:80:46:d0:6c:2b:da:33:12:47:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB78BE291F4C68861081295C7864E4DC5943795A
Validity
Not Before: Jul 23 23:33:42 2026 GMT
Not After : Jul 25 02:49:42 2026 GMT
Subject: CN=4AC562A2B2B6E357244BF1B722F3020D1D08ED33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2b:61:4a:f0:e7:fb:18:0b:eb:51:0c:50:b7:
c0:e7:50:72:89:4d:fa:a8:04:7c:59:26:ce:26:b8:
ec:1d:a3:b6:d1:72:ce:3a:4c:55:07:cf:1b:d7:96:
c6:cb:48:cc:5f:9f:34:16:ec:3b:e9:bb:1f:6b:f2:
d9:57:49:32:2d:ac:4f:e0:40:e5:2d:14:41:c7:bd:
88:b0:20:bf:c0:86:30:38:b2:83:38:a2:c9:94:40:
d2:1e:04:8a:59:e8:7f:54:9c:0e:58:2a:58:df:e3:
67:0e:7a:8b:12:0e:21:80:86:20:1c:7f:83:c9:81:
c0:7b:76:c2:43:74:6b:8f:27:a3:50:00:a7:3b:f3:
8d:d1:8b:be:bd:56:a8:4c:db:42:a3:00:11:b9:7a:
6f:41:b8:b4:3b:f5:cb:a7:57:aa:b4:6f:76:3d:fa:
07:1c:4e:97:4d:22:f5:34:4a:78:c5:16:9b:9a:fe:
d3:e9:fb:8b:c2:1b:8a:9e:a1:57:b7:42:ee:49:5a:
02:ca:8e:54:7c:84:f8:99:4b:75:4c:33:c2:c3:d2:
91:bd:37:47:c8:14:10:dc:18:f6:22:3c:7f:57:a0:
2e:0e:30:06:b9:c4:f5:b0:1c:87:89:01:22:ef:20:
03:a9:12:90:e5:02:f1:dc:07:4c:c8:1d:ef:0a:5f:
05:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C5:62:A2:B2:B6:E3:57:24:4B:F1:B7:22:F3:02:0D:1D:08:ED:33
X509v3 Authority Key Identifier:
keyid:CB:78:BE:29:1F:4C:68:86:10:81:29:5C:78:64:E4:DC:59:43:79:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/CB78BE291F4C68861081295C7864E4DC5943795A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB78BE291F4C68861081295C7864E4DC5943795A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/CB78BE291F4C68861081295C7864E4DC5943795A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:0c:c4:9a:6f:36:eb:b9:3b:78:6b:d5:4e:26:5e:42:03:28:
ad:8e:f0:0c:49:3e:4e:6d:fb:5a:30:d6:e1:7a:6c:e8:0a:2a:
ff:71:dd:0c:89:9e:e9:46:8a:0e:61:36:cc:26:4b:2c:70:92:
54:86:76:37:b2:8d:62:9d:8b:63:94:b3:ce:58:1c:69:ba:fa:
cb:72:c7:c8:46:cf:04:ed:4f:2f:50:bf:a0:50:1d:53:12:37:
bc:fb:00:79:8c:46:6c:54:b5:f0:fc:89:ef:fd:08:8f:b1:d0:
33:31:35:21:35:42:e4:d3:49:43:52:51:49:86:65:7f:c4:10:
09:78:83:fb:6d:8f:03:f8:e6:4e:bd:34:44:e6:7e:77:59:25:
a3:d1:74:ae:53:7c:e3:ae:d8:49:af:91:71:60:b8:c3:88:1a:
c7:42:ea:dc:46:9c:1b:38:95:d6:21:1e:41:83:a7:16:fe:7e:
bf:d3:8c:17:98:4f:ee:a1:a4:3d:e4:d6:25:3d:35:29:25:19:
3d:7f:13:f8:73:8e:8d:0f:28:a9:de:18:4c:64:1c:5d:08:85:
68:9d:18:a5:1f:9f:41:5e:77:e8:6a:85:84:6b:80:0b:95:a0:
84:48:1f:62:4e:a0:58:45:e6:69:26:a4:21:96:3a:0e:e6:66:
de:1f:60:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:14:34 2026 by rpki-client