
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/ACF266E9010F46F691CC6A492EB1EAC623155D6B.mft
File: ACF266E9010F46F691CC6A492EB1EAC623155D6B.mft (raw, json)
Hash identifier: L3J9sHbHB9pMkLdPRbbGuXK1ODscRKeGnijsvL4IfJU=
Subject key identifier: D5:E4:EA:FD:D5:09:40:3B:A8:81:2F:93:D7:FC:4C:EA:CA:22:13:30
Authority key identifier: AC:F2:66:E9:01:0F:46:F6:91:CC:6A:49:2E:B1:EA:C6:23:15:5D:6B
Certificate issuer: /CN=ACF266E9010F46F691CC6A492EB1EAC623155D6B
Certificate serial: 0F9CCDD6C9963A0D0153FB8CEC993600497EBB95
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ACF266E9010F46F691CC6A492EB1EAC623155D6B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/ACF266E9010F46F691CC6A492EB1EAC623155D6B.mft
Manifest number: 62
Signing time: Tue 14 Jul 2026 02:07:07 +0000
Manifest this update: Tue 14 Jul 2026 02:02:07 +0000
Manifest next update: Wed 15 Jul 2026 02:59:07 +0000
Files and hashes: 1: 3230332e3137312e3232312e302f32342d3234203d3e203435323938.roa (hash: MUcpE9ISijiu2jmaCVn/Sl4d64Wp2iYm3FrbZk8E76Q=)
2: ACF266E9010F46F691CC6A492EB1EAC623155D6B.crl (hash: t3qnM+6teCxMFZxCm6+DxiWYNYuk2AsNsNLHMPySnC8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/ACF266E9010F46F691CC6A492EB1EAC623155D6B.crl
rsync://rpki-rsync.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/ACF266E9010F46F691CC6A492EB1EAC623155D6B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ACF266E9010F46F691CC6A492EB1EAC623155D6B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Jul 2026 22:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:9c:cd:d6:c9:96:3a:0d:01:53:fb:8c:ec:99:36:00:49:7e:bb:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ACF266E9010F46F691CC6A492EB1EAC623155D6B
Validity
Not Before: Jul 14 02:02:07 2026 GMT
Not After : Jul 15 02:59:07 2026 GMT
Subject: CN=D5E4EAFDD509403BA8812F93D7FC4CEACA221330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f8:45:48:4b:5b:e1:96:69:e1:ea:3f:ce:7e:
12:0b:cb:6f:da:54:0b:f9:65:eb:ae:c8:11:63:03:
ff:cf:4b:24:36:7d:2f:ed:65:72:33:90:52:ba:91:
a1:1c:2e:65:20:a0:c2:37:20:53:70:01:98:d5:d1:
0e:df:7a:96:13:54:d7:91:ef:04:eb:59:d9:ad:b3:
e7:14:07:32:92:27:90:eb:23:d2:00:cb:50:38:0c:
2b:fa:03:7c:90:85:54:16:cb:90:a6:19:56:ab:ba:
02:c2:f2:73:d5:37:61:97:9d:ff:39:be:ef:44:de:
32:f7:3c:3d:40:6f:3b:11:b3:b9:71:a3:64:7f:ec:
9a:ce:d1:14:f8:32:9f:0e:29:7b:c2:ef:c0:a1:79:
99:0a:96:69:2d:30:88:45:83:76:4f:20:48:80:8d:
e6:c2:86:95:ea:2f:95:79:e4:16:ef:82:96:1e:b8:
06:3a:40:cd:3e:4f:d8:df:5f:29:26:f7:11:84:c4:
5a:27:df:7f:2d:c3:33:d5:21:73:be:93:ca:a8:18:
2e:6a:6b:31:bd:b3:04:f8:f1:7a:1b:ca:8b:e9:48:
9f:be:4d:71:51:09:ae:2c:54:ea:27:79:b8:f0:eb:
9a:a7:8e:49:47:80:8c:52:2e:9d:66:9c:3a:3f:bd:
77:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E4:EA:FD:D5:09:40:3B:A8:81:2F:93:D7:FC:4C:EA:CA:22:13:30
X509v3 Authority Key Identifier:
keyid:AC:F2:66:E9:01:0F:46:F6:91:CC:6A:49:2E:B1:EA:C6:23:15:5D:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/ACF266E9010F46F691CC6A492EB1EAC623155D6B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ACF266E9010F46F691CC6A492EB1EAC623155D6B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/ACF266E9010F46F691CC6A492EB1EAC623155D6B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:60:a2:7a:c7:4f:a5:71:1c:2c:4a:32:ff:cc:86:c9:50:b4:
f2:38:e4:c3:e9:61:58:ec:a1:4f:2b:c6:0a:f8:97:a4:aa:21:
13:3a:1b:24:49:e3:7a:e4:55:59:32:0e:56:d9:6c:80:b6:4a:
f9:9d:21:bb:3e:6b:fe:d5:f6:e6:a6:44:cd:fd:ce:9d:96:de:
b3:ad:74:01:ef:d6:79:5f:48:e6:e2:78:62:46:2a:03:5a:44:
4f:bd:bf:30:5b:33:78:e7:5f:23:79:0b:e3:df:0e:88:be:e4:
ce:f4:2a:4d:de:bb:fe:28:5e:c0:8b:38:ea:e3:e5:2f:03:b5:
94:1b:8d:d6:44:70:d9:f1:0a:dc:aa:d7:7b:fa:83:63:c5:d3:
7b:05:9a:77:a3:d9:58:ac:1a:f6:bb:9e:b1:be:2f:ae:49:d0:
2f:7d:0c:b6:61:86:81:14:57:9f:f4:8c:9b:70:f1:ce:f3:26:
da:ac:ba:31:f5:45:56:4e:2b:75:bd:20:c2:e2:5f:ec:df:71:
58:3b:1c:dc:c4:48:14:e9:14:c6:71:32:8d:9b:88:21:9b:ba:
e4:f3:b8:b4:e4:0f:01:f6:fa:76:8d:da:91:d8:d9:2f:5c:07:
ac:a1:03:33:75:89:bd:de:60:e8:6f:2b:60:03:19:52:a2:49:
80:60:2c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 04:00:59 2026 by rpki-client