
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.mft
File: AC1D31E1C0EBAF054936EEE31001AFEBD8908274.mft (raw, json)
Hash identifier: /X/MaQlRE4P8knkrnVAxzj2dO0/lqHiUKtHnRo2PhRE=
Subject key identifier: 8A:1C:5E:45:E1:21:D2:BB:47:6E:71:7F:6A:0F:D4:A1:18:79:CE:CE
Authority key identifier: AC:1D:31:E1:C0:EB:AF:05:49:36:EE:E3:10:01:AF:EB:D8:90:82:74
Certificate issuer: /CN=AC1D31E1C0EBAF054936EEE31001AFEBD8908274
Certificate serial: 52CC386D7C7460927D3D0468827119EEAF2E3564
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.mft
Manifest number: 6B
Signing time: Tue 21 Jul 2026 03:40:21 +0000
Manifest this update: Tue 21 Jul 2026 03:35:21 +0000
Manifest next update: Wed 22 Jul 2026 04:42:21 +0000
Files and hashes: 1: 3130332e3130312e3231372e302f32342d3234203d3e20313530393431.roa (hash: mI5pJthlZy5JwJ1aBsKt5QmSIIpmL45EJ55YLJWzCQg=)
2: AC1D31E1C0EBAF054936EEE31001AFEBD8908274.crl (hash: 7L3+/x/3AsqVy6SJYwJo/ZtBWdTQNDY/kZTEw4Ok7lQ=)
3: 3130332e3130312e3231362e302f32332d3233203d3e20313530393431.roa (hash: Tf1Q9sDwa+GlXIub485EhNzCHd5//pppNP4qkGRGD+Y=)
4: 3130332e3130312e3231362e302f32342d3234203d3e20313530393431.roa (hash: WjJ5R6RxIV+WwM7kuHxJKIcmy8NFLw826KU6Z0WZ/xY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.crl
rsync://rpki-rsync.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 02:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:cc:38:6d:7c:74:60:92:7d:3d:04:68:82:71:19:ee:af:2e:35:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC1D31E1C0EBAF054936EEE31001AFEBD8908274
Validity
Not Before: Jul 21 03:35:21 2026 GMT
Not After : Jul 22 04:42:21 2026 GMT
Subject: CN=8A1C5E45E121D2BB476E717F6A0FD4A11879CECE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:29:95:8c:e0:10:85:bc:67:f6:8b:d4:25:e9:
21:1f:45:7d:86:e6:0a:75:04:eb:92:bf:bd:5c:92:
99:d5:09:31:98:22:83:f1:41:0c:24:7a:02:30:53:
5c:b4:37:14:d6:fb:ae:21:ea:15:05:88:a2:53:aa:
4d:a3:c3:9a:00:5c:a5:64:30:9c:54:01:cd:70:15:
62:d7:49:17:83:dc:22:b3:a7:3f:b5:33:1e:da:70:
f6:6e:06:95:7c:fb:7f:ef:cf:07:3e:23:c3:76:1a:
fd:d0:53:86:7a:3c:c2:bf:9f:d4:9f:d3:1a:61:b0:
29:89:a9:9b:dc:cd:05:c6:53:d5:b8:5a:ba:6d:b2:
7a:33:8e:43:f2:15:43:4d:99:07:72:66:b0:8d:ab:
1a:c5:7f:a5:70:ac:60:15:92:9a:68:91:6c:0c:6e:
37:35:b7:a4:ea:20:1a:bb:5c:ce:d8:39:2a:39:cd:
45:7f:da:35:a3:8a:9d:4f:7f:35:a6:95:18:95:32:
6b:83:af:d5:0e:c8:6f:6e:24:29:15:01:5f:b4:b4:
4d:5c:fe:a7:15:22:a0:43:56:cd:69:58:2e:9e:4b:
c0:42:e2:3f:c1:3c:13:43:11:55:fb:de:5a:29:80:
d5:57:6a:80:78:70:a3:8f:ab:86:19:75:fe:54:7d:
ea:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:1C:5E:45:E1:21:D2:BB:47:6E:71:7F:6A:0F:D4:A1:18:79:CE:CE
X509v3 Authority Key Identifier:
keyid:AC:1D:31:E1:C0:EB:AF:05:49:36:EE:E3:10:01:AF:EB:D8:90:82:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:a1:42:75:79:97:f3:4c:75:13:fe:9e:26:a7:e8:19:ef:e1:
fc:74:fb:5d:e4:99:a8:62:b1:78:64:34:a3:74:00:65:6b:c0:
14:6f:48:81:ce:68:02:ba:5d:c5:37:ee:b4:5e:ec:ab:bf:fb:
4d:29:71:ec:e4:eb:55:5a:56:8c:5c:07:b1:fd:64:df:22:2b:
88:6c:8b:13:ce:fb:34:fd:9d:4c:85:f5:7b:0c:c1:b3:97:3a:
b8:e1:36:f3:44:c0:1d:6d:2a:eb:b1:bf:b6:33:a6:6d:57:db:
2d:91:15:12:e8:30:3a:37:66:53:a9:dd:dc:ec:8f:57:53:c3:
37:c8:23:0b:08:57:e9:02:b2:a8:bc:c7:03:6f:78:c1:ce:6d:
86:31:10:6e:67:31:4c:5f:c5:63:41:72:8c:d4:2b:77:0a:e6:
0f:2e:a6:ff:b2:e1:d5:7b:98:d1:b6:77:41:4e:b3:84:7c:11:
b4:af:67:4e:93:aa:49:6d:3f:5c:5a:c5:8f:e1:52:64:33:2b:
ff:6c:2b:eb:71:83:bc:e1:cf:b5:ff:d6:8a:5a:9e:b1:b1:3b:
a5:ba:85:6e:b4:34:61:3f:5f:d3:50:9e:8b:8f:9a:20:ce:e0:
61:87:3b:21:8f:9b:11:65:18:4b:01:3c:3f:65:47:d4:45:45:
35:29:63:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:29:15 2026 by rpki-client