
$ rpki-client -vvf rpki-rsync.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/A2CA2636D90ECEE03080294F58D8AB8A1B349996.mft
File: A2CA2636D90ECEE03080294F58D8AB8A1B349996.mft (raw, json)
Hash identifier: dBy0B8ANrMtEaKy2hJ42NWIE/PoGyP2UmMNAcLDLv+g=
Subject key identifier: D1:19:61:43:0A:E2:7E:88:5E:10:C3:BF:02:19:F1:44:A7:BF:1D:94
Authority key identifier: A2:CA:26:36:D9:0E:CE:E0:30:80:29:4F:58:D8:AB:8A:1B:34:99:96
Certificate issuer: /CN=A2CA2636D90ECEE03080294F58D8AB8A1B349996
Certificate serial: 3C0D01572D0354F52C5F424B6348AD924E4CD373
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2CA2636D90ECEE03080294F58D8AB8A1B349996.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/A2CA2636D90ECEE03080294F58D8AB8A1B349996.mft
Manifest number: 50
Signing time: Tue 30 Jun 2026 04:35:56 +0000
Manifest this update: Tue 30 Jun 2026 04:30:56 +0000
Manifest next update: Wed 01 Jul 2026 06:03:56 +0000
Files and hashes: 1: 3135372e32302e3233362e302f32342d3234203d3e203538333639.roa (hash: BrEAiFV+dHptCn088oRLw0yFHBOD29YxvGJgz6+xTEs=)
2: A2CA2636D90ECEE03080294F58D8AB8A1B349996.crl (hash: qnKUJbO3cOmkrqwFQuNk/mVwc0JDSlSdEEQjY/vSgGU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/A2CA2636D90ECEE03080294F58D8AB8A1B349996.crl
rsync://rpki-rsync.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/A2CA2636D90ECEE03080294F58D8AB8A1B349996.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2CA2636D90ECEE03080294F58D8AB8A1B349996.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Jul 2026 06:03:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:0d:01:57:2d:03:54:f5:2c:5f:42:4b:63:48:ad:92:4e:4c:d3:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A2CA2636D90ECEE03080294F58D8AB8A1B349996
Validity
Not Before: Jun 30 04:30:56 2026 GMT
Not After : Jul 1 06:03:56 2026 GMT
Subject: CN=D11961430AE27E885E10C3BF0219F144A7BF1D94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:27:06:70:c2:6d:43:6c:a5:6a:ca:a5:a2:32:
25:f6:8f:a0:c9:3e:ad:ca:59:84:cc:7f:71:1e:10:
1d:f0:7b:b4:94:57:c7:9c:3c:43:c0:29:51:1a:44:
17:de:35:c1:82:bc:82:49:31:1e:33:5d:2f:bc:2a:
f1:08:3a:8b:ae:9b:80:71:3f:86:82:60:d5:dd:46:
84:f5:85:c1:0d:f2:f6:05:7f:9f:8e:4c:1a:2e:14:
54:cd:17:68:f9:d0:0d:bb:90:a4:3a:9e:e2:6e:59:
d6:0a:bd:54:64:93:4f:22:68:e4:75:92:84:c9:30:
dc:b4:08:84:03:32:bb:74:91:11:ed:9b:37:96:3a:
61:6f:fb:b7:be:a4:36:d0:c1:a7:64:47:5c:97:2f:
15:ad:ff:d2:ca:4b:ab:3a:ce:fb:e5:91:8b:ae:1f:
1a:8a:26:df:79:15:23:d8:73:42:e2:b2:14:45:7d:
f0:48:7a:19:fa:a6:91:88:44:89:5f:65:62:99:76:
e8:4b:3a:da:3a:25:cc:2b:a5:18:ef:df:5e:50:b1:
f2:9c:ab:53:33:c5:b5:1f:0a:be:84:ba:34:ba:54:
21:9e:1f:4a:45:b0:b7:da:a6:e7:a0:4f:3a:0f:78:
33:39:3d:8c:03:a0:e3:cf:05:16:1e:33:8c:70:a1:
e3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:19:61:43:0A:E2:7E:88:5E:10:C3:BF:02:19:F1:44:A7:BF:1D:94
X509v3 Authority Key Identifier:
keyid:A2:CA:26:36:D9:0E:CE:E0:30:80:29:4F:58:D8:AB:8A:1B:34:99:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/A2CA2636D90ECEE03080294F58D8AB8A1B349996.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2CA2636D90ECEE03080294F58D8AB8A1B349996.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/A2CA2636D90ECEE03080294F58D8AB8A1B349996.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:90:ae:69:e9:73:ff:1a:f3:ac:91:51:a7:c7:80:27:48:37:
0d:ab:11:33:b2:87:27:67:9a:12:a2:0a:d4:7e:6d:dc:5c:4f:
7d:01:33:2e:32:12:9e:24:80:90:6f:db:6d:f8:4e:13:8c:3e:
47:81:db:e3:63:df:7e:39:41:75:0f:cc:b6:6f:fa:39:87:03:
d6:e9:37:d4:3e:04:26:8e:4a:bb:f1:3b:4d:77:e4:0b:56:77:
18:ba:1a:48:0c:36:90:1f:f0:ca:42:1d:cd:67:7e:67:40:78:
e7:5e:44:0c:c2:46:75:d6:c4:2d:8c:d8:0c:ae:79:27:c2:5f:
cf:5b:5e:95:81:08:79:c8:c3:e5:6e:52:34:30:f3:79:b4:eb:
38:41:ef:57:f8:b4:c6:e3:78:1d:bc:71:e6:2c:60:fb:cb:6a:
84:b7:f1:75:8e:88:d4:5b:df:0c:d1:89:6f:7a:c9:d1:1f:e5:
20:fb:15:68:29:34:7e:91:56:2a:8e:e6:b8:4c:6a:22:3d:a2:
29:f7:09:3e:d9:86:49:06:7f:df:b0:21:0f:93:01:e2:fe:c0:
de:53:58:21:d1:06:77:50:00:30:e3:aa:ca:3e:ac:f6:75:57:
dc:a1:49:aa:86:0f:f9:75:20:59:54:1f:95:66:21:45:c6:02:
d3:04:7b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 14:19:59 2026 by rpki-client