
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.mft
File: ACB5F5BD4845167F55B8DBC49245C40C476C72D1.mft (raw, json)
Hash identifier: e/C9jaL9wa/c9g+cDKUTTLeG4uPy9QHL+pcv7UmajBc=
Subject key identifier: 67:02:C7:49:BF:16:AC:26:BB:F9:FE:88:D6:1E:95:80:E7:0D:5D:4F
Authority key identifier: AC:B5:F5:BD:48:45:16:7F:55:B8:DB:C4:92:45:C4:0C:47:6C:72:D1
Certificate issuer: /CN=ACB5F5BD4845167F55B8DBC49245C40C476C72D1
Certificate serial: 031BA4FAA0424AB1B25CDBEB37D9DAD64ABF197C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.mft
Manifest number: A5
Signing time: Wed 02 Sep 2026 16:02:35 +0000
Manifest this update: Wed 02 Sep 2026 15:57:35 +0000
Manifest next update: Thu 03 Sep 2026 18:11:35 +0000
Files and hashes: 1: 323430363a313334303a3a2f33322d3332203d3e20313430343037.roa (hash: WxEwSz+sWi75wTD9LX4+TZFvBImk89xubZTfF5v2cCg=)
2: 3130332e3135312e33322e302f32342d3234203d3e20313430343037.roa (hash: yHKtP8J6sRjd2vBKKZ1C8jqGxnt5X4o3lstFY/wy1jg=)
3: 3130332e3135312e33322e302f32332d3233203d3e20313430343037.roa (hash: zegPh8h8i8vXslaukZ/A0UJgubb+r4V2izsS5x1SFA0=)
4: 3130332e3135312e33332e302f32342d3234203d3e20313430343037.roa (hash: 12cGaGOgBCZ2rP3AvRmGNqqU8d1JvTtobCIZ/qRPUPE=)
5: 323430363a313334303a3a2f33322d3333203d3e20313430343037.roa (hash: MI6jQTtOVHvsuWHm0uvBE0TFhtVi+xCMKjXMCSCBFDY=)
6: ACB5F5BD4845167F55B8DBC49245C40C476C72D1.crl (hash: 2IUEbqA/re32DPNwusNp+P64Q2GY6HVUq1rSebIHAzw=)
7: 323430363a313334303a3a2f33322d3430203d3e20313430343037.roa (hash: CVFptYCjc0BlHCccW2Xncqnkcsz2aSryEWVdhnNHxQY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.crl
rsync://rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 03 Sep 2026 18:11:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:1b:a4:fa:a0:42:4a:b1:b2:5c:db:eb:37:d9:da:d6:4a:bf:19:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ACB5F5BD4845167F55B8DBC49245C40C476C72D1
Validity
Not Before: Sep 2 15:57:35 2026 GMT
Not After : Sep 3 18:11:35 2026 GMT
Subject: CN=6702C749BF16AC26BBF9FE88D61E9580E70D5D4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:50:e4:45:dd:e8:78:73:37:5f:20:57:5c:e6:
16:8a:1c:96:18:c7:3e:fa:a4:f6:90:9b:82:89:5c:
87:98:18:29:87:41:9e:82:69:b7:f6:0b:ac:af:6b:
f9:74:14:9b:f0:23:74:c7:c7:90:0a:87:19:60:fc:
ce:97:c6:16:af:26:b2:d4:70:0a:78:36:44:4e:94:
f2:a7:f1:65:0d:ef:91:b4:82:cb:f0:54:f6:ab:36:
ad:0b:82:21:65:84:b9:c9:8f:4c:c3:6b:60:38:a1:
c2:21:37:8b:4d:ab:8b:06:9f:56:33:ba:6d:1f:65:
4d:a1:24:0d:fd:ba:e6:47:71:ea:0e:df:d4:00:31:
10:77:0f:6e:c0:5f:5e:5f:c3:cd:97:a3:e0:2e:7e:
8e:3a:f3:47:ac:01:c4:09:57:ef:23:8b:c8:cd:cf:
a7:2e:0f:44:f4:4f:9e:54:d3:b6:e6:15:ef:6a:d0:
a8:48:f9:59:a3:60:48:60:e1:b8:77:dd:ce:af:7d:
cb:14:21:09:b5:fd:16:b2:51:cb:93:45:86:94:22:
56:6c:a3:45:f1:31:39:7b:55:f7:14:d8:13:5f:47:
83:60:04:b7:f5:11:ad:83:9f:7a:ce:22:85:63:21:
19:e6:99:65:92:4a:9c:7b:cb:2b:89:e5:d1:71:8d:
cd:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:02:C7:49:BF:16:AC:26:BB:F9:FE:88:D6:1E:95:80:E7:0D:5D:4F
X509v3 Authority Key Identifier:
keyid:AC:B5:F5:BD:48:45:16:7F:55:B8:DB:C4:92:45:C4:0C:47:6C:72:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:01:77:a1:b9:99:dc:cc:79:bd:01:80:bb:52:5c:e4:99:df:
31:5d:6f:c9:d5:7b:80:a0:ad:3a:b9:23:78:ee:00:4d:48:45:
26:b1:4d:9e:5d:1b:96:83:1a:b9:ae:68:b8:a7:0b:1f:de:be:
37:24:d9:a5:bb:15:64:6b:45:20:3c:86:e1:13:92:0f:a3:f4:
af:8e:62:0c:cd:4c:55:7e:cb:88:9e:b9:84:ee:19:54:d5:77:
ee:00:56:d9:0b:11:33:de:aa:91:7b:5b:7d:3d:a2:d7:34:79:
4e:5c:50:f7:a0:e6:fa:01:b0:28:1c:5f:2c:7b:bc:69:eb:04:
b8:6e:80:3e:dd:6b:f2:bd:8f:0f:46:36:45:68:52:a2:73:cc:
0c:7a:cb:6a:d6:76:74:38:1e:14:86:dd:3b:26:ac:e3:f8:de:
11:4d:eb:b6:36:de:a1:1a:52:2b:c7:85:cf:71:be:00:37:3d:
99:5d:e2:2b:40:98:95:09:44:fe:62:ba:8d:da:12:b1:14:2b:
5a:9e:ad:d1:69:c0:2b:0e:aa:a5:7a:24:12:ed:30:98:00:88:
7f:18:a0:28:65:12:61:3a:24:db:b4:6d:10:0d:2c:34:22:90:
9b:fd:b7:a2:f6:fd:88:61:72:87:fd:99:e8:6f:de:7b:f8:e4:
de:53:62:83
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUAxuk+qBCSrGyXNvrN9na1kq/GXwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUNCNUY1QkQ0ODQ1MTY3RjU1QjhEQkM0OTI0NUM0MEM0
NzZDNzJEMTAeFw0yNjA5MDIxNTU3MzVaFw0yNjA5MDMxODExMzVaMDMxMTAvBgNV
BAMTKDY3MDJDNzQ5QkYxNkFDMjZCQkY5RkU4OEQ2MUU5NTgwRTcwRDVENEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcUORF3eh4czdfIFdc5haKHJYY
xz76pPaQm4KJXIeYGCmHQZ6Cabf2C6yva/l0FJvwI3THx5AKhxlg/M6XxhavJrLU
cAp4NkROlPKn8WUN75G0gsvwVParNq0LgiFlhLnJj0zDa2A4ocIhN4tNq4sGn1Yz
um0fZU2hJA39uuZHceoO39QAMRB3D27AX15fw82Xo+Aufo4680esAcQJV+8ji8jN
z6cuD0T0T55U07bmFe9q0KhI+VmjYEhg4bh33c6vfcsUIQm1/RayUcuTRYaUIlZs
o0XxMTl7VfcU2BNfR4NgBLf1Ea2Dn3rOIoVjIRnmmWWSSpx7yyuJ5dFxjc0rAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUZwLHSb8WrCa7+f6I1h6VgOcNXU8wHwYDVR0j
BBgwFoAUrLX1vUhFFn9VuNvEkkXEDEdsctEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YzU5NmJjYzgtMzhjZC00NDM3LTgwYjEtNWJhZTlmODU3OTM3LzAvQUNCNUY1QkQ0
ODQ1MTY3RjU1QjhEQkM0OTI0NUM0MEM0NzZDNzJEMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BQ0I1RjVCRDQ4NDUxNjdGNTVCOERCQzQ5MjQ1QzQwQzQ3NkM3
MkQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzU5NmJjYzgtMzhjZC00NDM3LTgw
YjEtNWJhZTlmODU3OTM3LzAvQUNCNUY1QkQ0ODQ1MTY3RjU1QjhEQkM0OTI0NUM0
MEM0NzZDNzJEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAL4Bd6G5mdzMeb0BgLtSXOSZ3zFdb8nVe4Cg
rTq5I3juAE1IRSaxTZ5dG5aDGrmuaLinCx/evjck2aW7FWRrRSA8huETkg+j9K+O
YgzNTFV+y4ieuYTuGVTVd+4AVtkLETPeqpF7W309otc0eU5cUPeg5voBsCgcXyx7
vGnrBLhugD7da/K9jw9GNkVoUqJzzAx6y2rWdnQ4HhSG3TsmrOP43hFN67Y23qEa
UivHhc9xvgA3PZld4itAmJUJRP5iuo3aErEUK1qerdFpwCsOqqV6JBLtMJgAiH8Y
oChlEmE6JNu0bRANLDQikJv9t6L2/Yhhcof9mehv3nv45N5TYoM=
-----END CERTIFICATE-----
Generated at Thu Sep 3 09:29:11 2026 by rpki-client