
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/ACF266E9010F46F691CC6A492EB1EAC623155D6B.mft
File: ACF266E9010F46F691CC6A492EB1EAC623155D6B.mft (raw, json)
Hash identifier: npbv2520Y7URFIr7V7eEvuVdy8VAu4utHDTvoA0K/Dc=
Subject key identifier: A1:A4:7F:95:61:BF:0A:18:50:87:29:C8:84:F9:C6:3F:DD:E8:FB:1D
Authority key identifier: AC:F2:66:E9:01:0F:46:F6:91:CC:6A:49:2E:B1:EA:C6:23:15:5D:6B
Certificate issuer: /CN=ACF266E9010F46F691CC6A492EB1EAC623155D6B
Certificate serial: 4851FEC074609FA3121EBA9B0651400D0543F8C9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ACF266E9010F46F691CC6A492EB1EAC623155D6B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/ACF266E9010F46F691CC6A492EB1EAC623155D6B.mft
Manifest number: ED
Signing time: Mon 26 Oct 2026 22:13:06 +0000
Manifest this update: Mon 26 Oct 2026 22:08:06 +0000
Manifest next update: Wed 28 Oct 2026 01:06:06 +0000
Files and hashes: 1: ACF266E9010F46F691CC6A492EB1EAC623155D6B.crl (hash: yn867K7raTSvpve0tjG796jHYfdpI5lQCO30La5JsQc=)
2: 3230332e3137312e3232312e302f32342d3234203d3e203435323938.roa (hash: MUcpE9ISijiu2jmaCVn/Sl4d64Wp2iYm3FrbZk8E76Q=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/ACF266E9010F46F691CC6A492EB1EAC623155D6B.crl
rsync://rpki-rsync.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/ACF266E9010F46F691CC6A492EB1EAC623155D6B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ACF266E9010F46F691CC6A492EB1EAC623155D6B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Oct 2026 12:57:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:51:fe:c0:74:60:9f:a3:12:1e:ba:9b:06:51:40:0d:05:43:f8:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ACF266E9010F46F691CC6A492EB1EAC623155D6B
Validity
Not Before: Oct 26 22:08:06 2026 GMT
Not After : Oct 28 01:06:06 2026 GMT
Subject: CN=A1A47F9561BF0A18508729C884F9C63FDDE8FB1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:25:5d:2d:5d:6c:47:66:cf:53:d8:67:bd:d3:
6a:22:9f:56:ac:c1:b1:c9:59:03:01:7e:58:e8:43:
80:b2:4c:13:04:f0:eb:07:c4:09:85:57:11:53:2b:
27:6a:62:74:9e:88:88:f5:3b:a8:50:5c:d9:64:b3:
23:fe:80:1e:23:95:05:27:9e:5d:6b:81:33:cf:ee:
3f:e8:97:11:e0:32:70:0c:8c:c2:2f:4b:b9:5c:4c:
9c:90:36:9e:9d:7e:7a:3b:28:d0:50:d6:af:a6:bc:
08:f2:1c:5a:c5:9c:c1:a5:23:35:e6:f1:52:3c:15:
91:00:53:ef:f1:2d:4d:0c:74:e6:80:20:6d:48:fd:
dc:fd:74:59:57:d2:9c:f9:cf:db:bc:fc:45:0e:f0:
ea:fe:11:03:ff:52:cb:93:75:7f:85:ba:f3:ed:70:
3f:cc:e7:26:21:b2:84:a3:40:88:8e:83:a8:33:66:
02:28:89:f9:24:58:2f:e6:ea:ca:7e:11:17:cc:10:
d0:4d:a4:26:ef:d1:8e:a1:67:cf:68:a7:30:95:7a:
b0:b5:70:7a:24:0c:b6:f9:e2:82:27:4d:e8:4e:ea:
cb:6d:1d:ec:5e:0e:db:3d:57:e0:6a:d5:40:5a:3e:
03:95:04:aa:4e:b0:ec:df:81:9f:2a:7f:98:e3:14:
56:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A4:7F:95:61:BF:0A:18:50:87:29:C8:84:F9:C6:3F:DD:E8:FB:1D
X509v3 Authority Key Identifier:
keyid:AC:F2:66:E9:01:0F:46:F6:91:CC:6A:49:2E:B1:EA:C6:23:15:5D:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/ACF266E9010F46F691CC6A492EB1EAC623155D6B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ACF266E9010F46F691CC6A492EB1EAC623155D6B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/ACF266E9010F46F691CC6A492EB1EAC623155D6B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:5c:8d:fd:f3:6e:09:a4:26:77:a0:90:86:1e:84:8f:22:42:
fd:b0:b6:43:ba:63:7b:e3:4c:5e:fd:e3:86:8a:38:3d:1b:55:
c5:1b:48:4a:40:b3:4e:83:50:d3:d0:9a:e6:ed:93:b6:15:a8:
56:eb:45:09:f0:fd:42:68:26:f1:4e:69:2c:9e:67:81:6d:d9:
77:95:e6:bb:ed:44:ff:f0:56:69:db:7a:5f:0d:77:23:02:32:
2c:94:ed:27:dc:97:ec:25:af:59:ad:78:52:41:00:58:7e:76:
43:2f:05:da:17:29:bf:4f:9d:5d:be:48:2c:b2:c6:f7:61:18:
86:30:ed:26:f7:9b:aa:9e:9a:13:f7:b0:ba:dd:a6:ef:0d:05:
7c:32:20:fe:03:6c:76:10:46:09:ad:3e:ce:80:01:17:3b:8b:
d5:e5:fb:51:03:9e:47:1f:6b:54:a0:35:f7:3b:3a:57:91:ca:
fc:30:26:83:77:ee:1e:31:6f:e0:1d:c0:0e:d8:b7:69:f5:64:
de:89:20:ee:8b:05:63:75:8c:4b:d5:c6:d5:83:1d:79:f6:1d:
d7:53:ff:ac:3e:18:06:df:dc:a4:a2:e1:a2:66:49:7a:d4:1d:
57:fd:db:36:74:de:6a:47:61:4c:32:3e:6f:85:0e:39:d1:8d:
29:1f:4d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 03:55:56 2026 by rpki-client