
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/AC861103DDC024E3BEB681351D66B027A8BA785A.mft
File: AC861103DDC024E3BEB681351D66B027A8BA785A.mft (raw, json)
Hash identifier: Q3ApeAhc/7ORKKlZ2lJ0HYbZV+kRmYiXTGTPE3fYGIw=
Subject key identifier: FD:DA:EA:0E:E4:2D:D6:EA:4C:57:11:96:82:A9:FE:D9:A1:CD:C3:1C
Authority key identifier: AC:86:11:03:DD:C0:24:E3:BE:B6:81:35:1D:66:B0:27:A8:BA:78:5A
Certificate issuer: /CN=AC861103DDC024E3BEB681351D66B027A8BA785A
Certificate serial: 1BC4ABBD5F6A718B2A8DA442B2F63F1AA68EEDDD
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC861103DDC024E3BEB681351D66B027A8BA785A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/AC861103DDC024E3BEB681351D66B027A8BA785A.mft
Manifest number: 42
Signing time: Sat 20 Jun 2026 05:41:40 +0000
Manifest this update: Sat 20 Jun 2026 05:36:40 +0000
Manifest next update: Sun 21 Jun 2026 09:38:40 +0000
Files and hashes: 1: 3130332e3135382e3235322e302f32332d3233203d3e20313431313337.roa (hash: J7StUV2ZODyDnpl4H6qRmHDEDNeYTV1qNMuPRyc9WyE=)
2: 323430363a633634303a313a3a2f34382d3438203d3e20313431313337.roa (hash: SC/sM91Mj29qp/7MnNyzUUwPkBeQTEbv2cnvmQBFqIM=)
3: 3130332e3135382e3235332e302f32342d3234203d3e20313431313337.roa (hash: Cxuw8utleC956EhbVyK4h8tr3eWPWdRF27VOeiD3sxU=)
4: AC861103DDC024E3BEB681351D66B027A8BA785A.crl (hash: grW9OyTz0JVSV8Lh10BmUlIIqRTLxUmI1dzbbZ61QtY=)
5: 323430363a633634303a323a3a2f34382d3438203d3e20313431313337.roa (hash: qh5eFZWjtfs6SGeMUmGMmglBO26iaZvOjL82WMbtwVc=)
6: 3130332e3135382e3235322e302f32342d3234203d3e20313431313337.roa (hash: SW4deFwDdRpgisaH7RqLBMHR3upFCn0yA60y2S1M1VI=)
7: 323430363a633634303a3a2f33322d3332203d3e20313431313337.roa (hash: pE41vn8Dt1qZrL/6IKcEElho8GXY6UXGVa22Zlk5Klg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/AC861103DDC024E3BEB681351D66B027A8BA785A.crl
rsync://rpki-rsync.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/AC861103DDC024E3BEB681351D66B027A8BA785A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC861103DDC024E3BEB681351D66B027A8BA785A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Jun 2026 07:28:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:c4:ab:bd:5f:6a:71:8b:2a:8d:a4:42:b2:f6:3f:1a:a6:8e:ed:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC861103DDC024E3BEB681351D66B027A8BA785A
Validity
Not Before: Jun 20 05:36:40 2026 GMT
Not After : Jun 21 09:38:40 2026 GMT
Subject: CN=FDDAEA0EE42DD6EA4C57119682A9FED9A1CDC31C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:63:0f:06:8a:a8:09:e9:02:fd:88:35:88:b0:
e5:dd:b1:8c:cc:48:df:4e:e0:af:ea:fa:3f:a4:4d:
32:90:cf:41:d2:13:82:af:53:52:1a:e3:55:71:51:
a7:b8:d3:c9:22:21:28:f4:e0:d9:85:1c:ec:1b:45:
46:d2:d2:5e:2b:4c:35:b3:44:c7:81:cb:69:b5:d9:
62:95:86:1b:74:ce:d8:d9:49:5d:78:a4:83:54:46:
a3:66:0b:37:62:0b:ff:7f:ec:9e:17:6b:3c:e4:88:
1c:39:76:30:f7:e2:a8:5c:86:00:0d:87:d9:f9:e9:
9b:a7:34:bb:9a:3b:59:65:9c:ed:a0:38:e0:43:78:
f3:46:c8:26:f8:bc:8b:12:ed:c1:35:ec:95:03:63:
b5:ec:2d:17:fd:e8:5e:de:07:f5:a5:64:c3:04:56:
1a:9e:a8:cf:1d:c3:21:df:36:fd:c1:3a:ff:06:8b:
eb:94:b2:91:d8:e5:d9:98:58:55:ef:ee:54:49:68:
72:37:37:55:b8:64:d9:26:17:c0:a2:92:7d:ae:22:
a5:0d:74:2b:ac:fd:38:66:11:04:bc:80:71:94:3d:
e9:a0:79:f8:03:6e:f6:9b:f0:5a:fc:58:5d:13:5a:
f6:df:b4:d7:9f:2a:2a:f1:58:32:d2:c0:da:e2:47:
ba:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:DA:EA:0E:E4:2D:D6:EA:4C:57:11:96:82:A9:FE:D9:A1:CD:C3:1C
X509v3 Authority Key Identifier:
keyid:AC:86:11:03:DD:C0:24:E3:BE:B6:81:35:1D:66:B0:27:A8:BA:78:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/AC861103DDC024E3BEB681351D66B027A8BA785A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC861103DDC024E3BEB681351D66B027A8BA785A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/AC861103DDC024E3BEB681351D66B027A8BA785A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:cf:2c:6a:3b:50:b5:15:45:b1:0b:f9:f7:6f:e1:fb:7a:f9:
52:1e:0f:e9:02:5a:aa:76:44:e2:05:a7:c6:5d:a2:c9:6a:e8:
b2:79:2b:6d:e5:8e:ea:b4:75:d1:9f:c7:bd:32:8c:b9:c8:c7:
1e:7b:55:1d:3c:c7:9a:b9:13:f7:80:ab:66:d5:52:e2:27:d1:
08:9f:57:1f:62:78:2c:6e:43:3f:64:ad:bf:53:41:3e:85:d3:
7b:ed:de:8c:12:85:3b:32:f0:62:2a:c8:37:13:c7:b7:69:df:
ee:49:d7:12:f4:f6:10:b7:f8:ee:d9:38:d9:24:f5:5e:4c:57:
e6:03:f3:c8:21:e0:10:c7:ae:8e:99:d8:5c:df:78:76:15:5f:
4e:57:b3:c7:97:62:ea:af:23:94:db:ad:eb:59:2a:70:a0:79:
42:99:a7:82:4b:59:3b:96:7a:fb:53:71:1f:7d:e3:a3:2c:fd:
76:db:97:da:c4:1a:8e:e9:97:5e:fb:cf:d8:94:34:78:e7:7a:
c7:76:9e:97:c7:6b:1e:7c:95:d6:b7:5f:c1:ad:ab:31:27:a1:
c4:2a:52:4b:bd:5a:01:14:36:30:b7:97:24:0a:f2:df:d3:01:
99:da:83:f3:3e:81:41:5a:93:c0:bf:3b:11:36:e4:29:ee:3b:
bc:84:92:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 09:18:31 2026 by rpki-client