
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.mft
File: 26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.mft (raw, json)
Hash identifier: MSQyjXFw0kVvRMX2XJjo3616kO7mSjgSRE5QTi+uBis=
Subject key identifier: 70:9D:11:F2:38:A6:55:CE:95:EF:AA:FB:91:94:08:45:68:AE:E5:07
Authority key identifier: 26:AC:84:7A:FE:F1:BA:DA:17:32:A8:A2:24:9B:AE:EC:2F:2D:61:5A
Certificate issuer: /CN=26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A
Certificate serial: 34D0825B2B991E519E1AF1755F7CE658B3C485F4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 14:17:25 +0000
Manifest this update: Tue 02 Jun 2026 14:12:25 +0000
Manifest next update: Wed 03 Jun 2026 16:45:25 +0000
Files and hashes: 1: 3130332e3233392e32312e302f32342d3234203d3e20313531353139.roa (hash: xuo20faVsDcaxZ95BSzWiVO7mQjYOYEJpwuA8scBHdE=)
2: 3130332e3233392e32302e302f32342d3234203d3e20313531353139.roa (hash: WHmkkfpIM8Fej10LNvo4eMoAmMSgE4SOk4GXSFe9Ky8=)
3: 26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.crl (hash: hOvLrim6nfA5RPIyKY77gyQraIRtZ2qSyx1ZLEhizv0=)
4: 3130332e3233392e32302e302f32332d3234203d3e20313531353139.roa (hash: diFLhr4fVvfR6ElD2+x6FyfBVBmvWMODzaZCy9XdQ10=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.crl
rsync://rpki-rsync.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:d0:82:5b:2b:99:1e:51:9e:1a:f1:75:5f:7c:e6:58:b3:c4:85:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A
Validity
Not Before: Jun 2 14:12:25 2026 GMT
Not After : Jun 3 16:45:25 2026 GMT
Subject: CN=709D11F238A655CE95EFAAFB9194084568AEE507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:db:52:4e:2c:8d:fa:ed:12:30:8e:a1:6d:19:
6a:2a:f6:64:49:28:89:7b:30:00:54:2d:6a:ee:ee:
5e:bd:45:ea:30:83:66:34:de:5a:9a:2b:05:66:17:
33:6a:df:1c:28:65:9e:dd:a7:af:a1:6a:84:fd:f3:
22:37:d2:7c:bf:94:d7:90:4b:0b:6f:a6:ad:89:19:
55:e3:bf:c3:20:4b:a4:d6:b3:32:ff:89:a6:5f:4c:
8c:48:a7:58:7f:f1:68:14:d9:f1:66:c4:bc:91:3a:
7d:85:79:92:aa:77:6a:73:85:d2:12:5d:40:27:fd:
ea:b7:73:ee:f9:84:25:fb:31:04:cf:50:64:2f:08:
fd:93:f5:49:e1:72:22:72:76:2f:b7:ff:d9:ab:94:
6e:9c:21:9f:9c:6a:60:d5:f1:63:8a:51:4d:10:e8:
23:5d:69:a9:57:3f:e7:30:40:14:78:f0:38:6c:d6:
82:dd:ab:aa:92:85:5a:57:9a:c9:26:87:e7:31:05:
84:b4:98:29:c6:8d:c9:1f:9a:19:00:f2:b6:41:f6:
37:eb:3a:81:59:58:5f:7a:bd:cb:95:36:40:ce:d2:
64:2c:31:a3:e5:c5:0d:bd:56:fc:3a:1e:0c:68:c8:
ea:75:02:82:d5:78:e9:7c:ea:c6:12:15:2f:f4:27:
d9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9D:11:F2:38:A6:55:CE:95:EF:AA:FB:91:94:08:45:68:AE:E5:07
X509v3 Authority Key Identifier:
keyid:26:AC:84:7A:FE:F1:BA:DA:17:32:A8:A2:24:9B:AE:EC:2F:2D:61:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a7afd57a-e6de-4a5f-b5c6-10865d5a8c98/0/26AC847AFEF1BADA1732A8A2249BAEEC2F2D615A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:88:08:f3:0a:89:7e:de:a8:43:c7:66:59:66:fc:6a:55:7f:
78:c7:b6:ce:15:87:78:93:80:bd:21:86:31:33:20:80:41:46:
37:58:15:d2:f0:c4:ee:2f:b5:00:55:e8:c1:96:18:4c:6c:0e:
04:c4:86:e4:f3:ad:ac:dd:dd:b4:4a:49:07:d4:5b:b7:93:59:
16:23:35:5b:51:b0:7c:8a:35:11:ab:71:82:95:eb:16:7b:2c:
3e:66:b3:f0:c1:3c:1b:2d:cb:50:14:c7:0f:02:7b:45:ad:65:
de:52:6e:7d:e5:aa:00:36:69:e9:74:91:0e:65:63:a4:c0:12:
a9:3f:27:6c:d9:91:17:7a:de:9b:54:58:4f:eb:28:13:03:7c:
1c:71:03:45:e9:26:77:3e:a9:eb:e1:ad:a9:9f:70:5e:03:8d:
8e:5d:54:ac:a8:56:75:34:d9:54:ea:f0:b4:c8:20:f5:ec:0c:
3e:aa:87:78:a3:76:9c:50:c4:f2:3c:52:e3:85:00:f8:e1:b0:
e0:cb:e9:4b:1c:c9:39:c3:47:31:35:ca:9b:b1:75:f3:88:32:
67:cb:5a:a1:1d:cf:97:34:23:00:27:43:4d:8f:fe:f5:5f:74:
1e:d1:c2:fc:df:f1:35:7a:08:bf:56:9f:d3:e2:fb:2a:f1:27:
7b:1e:af:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:00:46 2026 by rpki-client