
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.mft
File: 26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.mft (raw, json)
Hash identifier: F3nkFeUsobsvtMdfqhW/KbVlgA6gmhzVoiN2FvImRIo=
Subject key identifier: 11:39:2E:CC:33:F0:87:EF:9B:58:95:E5:1A:96:DD:E3:53:5A:55:80
Authority key identifier: 26:AC:84:7A:FE:F1:BA:DA:17:32:A8:A2:24:9B:AE:EC:2F:2D:61:5A
Certificate issuer: /CN=26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A
Certificate serial: 7EA4AE01A5A1D9F40C1387ADCF16B344D2B7B654
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.mft
Manifest number: F7
Signing time: Tue 03 Nov 2026 01:19:06 +0000
Manifest this update: Tue 03 Nov 2026 01:14:06 +0000
Manifest next update: Wed 04 Nov 2026 04:18:06 +0000
Files and hashes: 1: 3130332e3233392e32302e302f32332d3234203d3e20313531353139.roa (hash: diFLhr4fVvfR6ElD2+x6FyfBVBmvWMODzaZCy9XdQ10=)
2: 3130332e3233392e32312e302f32342d3234203d3e20313531353139.roa (hash: xuo20faVsDcaxZ95BSzWiVO7mQjYOYEJpwuA8scBHdE=)
3: 3130332e3233392e32302e302f32342d3234203d3e20313531353139.roa (hash: WHmkkfpIM8Fej10LNvo4eMoAmMSgE4SOk4GXSFe9Ky8=)
4: 26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.crl (hash: tLee81jnUh/6okQyUOVWXwgjxGU4Jnq29T2x5jmLFZI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.crl
rsync://rpki-rsync.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Nov 2026 04:18:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:a4:ae:01:a5:a1:d9:f4:0c:13:87:ad:cf:16:b3:44:d2:b7:b6:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A
Validity
Not Before: Nov 3 01:14:06 2026 GMT
Not After : Nov 4 04:18:06 2026 GMT
Subject: CN=11392ECC33F087EF9B5895E51A96DDE3535A5580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e6:d5:23:d9:17:1a:35:b0:37:d4:37:2c:72:
1e:cf:91:48:8a:e5:d0:11:e9:ec:dc:c1:d6:fa:de:
2e:16:ed:1b:65:60:77:e3:a1:09:11:69:82:6c:43:
7b:31:73:71:be:1c:f6:57:0c:1c:d9:40:07:c9:ef:
4b:7b:e7:fe:0e:b5:7a:75:c7:69:be:7a:f6:1f:c1:
91:ae:75:b0:e2:a0:f2:5e:65:3c:8f:22:7f:9f:3d:
9e:77:11:3c:a2:2a:19:0b:b0:10:a7:a0:6b:02:11:
dd:86:ae:a9:05:89:3f:85:5f:2b:3a:41:bc:7a:c9:
c5:09:e5:1e:a6:3b:6b:36:8a:9e:a0:0b:74:03:d2:
33:4a:e0:f1:2f:38:c2:95:30:8b:b0:dc:d6:da:87:
d6:dc:f5:b9:b8:82:fa:22:18:f5:03:29:27:b6:75:
88:78:a8:6d:b6:aa:51:c3:58:7f:7e:7c:cc:3e:c4:
c1:ec:9b:df:a8:ea:98:a1:0a:02:7e:9c:0d:48:a7:
5e:64:e5:bd:c2:ee:8c:05:e5:16:82:90:c9:5c:4b:
8d:4c:6a:3b:31:09:c2:e4:2b:81:84:4a:4a:58:97:
ef:10:4b:ae:b2:31:82:54:b4:16:44:17:c6:a4:2f:
d2:aa:60:3d:c5:6e:c0:ff:bb:10:29:2e:6d:78:21:
6f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:39:2E:CC:33:F0:87:EF:9B:58:95:E5:1A:96:DD:E3:53:5A:55:80
X509v3 Authority Key Identifier:
keyid:26:AC:84:7A:FE:F1:BA:DA:17:32:A8:A2:24:9B:AE:EC:2F:2D:61:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:04:c2:38:66:56:6a:d1:3b:df:a8:9d:2a:6a:5b:88:88:89:
2d:40:8c:b0:a4:e9:88:77:0f:6e:45:fc:73:32:9c:34:65:11:
0c:f9:2d:4f:28:0b:fa:75:4d:27:7a:5b:a1:c4:4a:69:10:97:
68:69:a2:65:be:52:c3:ea:6d:78:35:c6:22:92:f5:ae:fa:0f:
25:b0:0e:3a:7c:21:58:27:26:a2:16:85:ea:4e:0d:74:25:99:
43:88:b8:c2:12:a1:12:d9:1d:08:93:0b:6e:a0:5d:ef:d7:68:
13:b1:19:92:01:ca:dd:05:dd:3d:6b:09:37:8b:15:f4:6a:88:
22:a1:6a:e6:73:95:35:8f:f5:04:2d:c0:9d:16:77:6d:52:f4:
d0:77:c0:ef:90:d5:98:af:22:9f:b9:f5:b1:5b:e6:e0:8b:ab:
11:c6:5f:b5:52:a8:cf:b7:8b:c4:20:4f:a0:e8:c2:f9:c2:e2:
20:59:88:6d:f1:e5:eb:72:9f:18:d0:12:07:da:59:ee:51:a2:
e5:ce:ce:cf:c2:58:04:3d:30:72:66:d2:58:42:dd:9b:c5:da:
38:5b:e4:85:1b:5e:46:69:9c:f0:c5:3b:8e:df:92:8a:2c:cf:
47:7e:35:5a:c8:ac:c9:fc:8b:e9:ca:40:80:5e:1b:69:4e:b9:
26:75:5b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 16:51:21 2026 by rpki-client