
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.mft
File: B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.mft (raw, json)
Hash identifier: L1ce0CaXN7zTtTbqvLcYZosGKOjCBVTfALHGZTvkfX0=
Subject key identifier: 44:85:B9:2A:7C:3E:A3:82:C7:5B:75:46:42:0F:7C:6D:06:DD:50:2E
Authority key identifier: B7:AC:AC:8C:1A:6D:56:7C:70:21:67:C3:BF:5D:55:DC:A8:06:1D:09
Certificate issuer: /CN=B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09
Certificate serial: 459DC300155C2BD905ACB6187148FCCC30F1F6C4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.mft
Manifest number: EB
Signing time: Sun 25 Oct 2026 18:40:09 +0000
Manifest this update: Sun 25 Oct 2026 18:35:09 +0000
Manifest next update: Mon 26 Oct 2026 20:43:09 +0000
Files and hashes: 1: 3130332e34322e3131382e302f32342d3234203d3e203234353139.roa (hash: UiQg2uhClOmxDzilityVFDsUTcFwNoOe65yL07fwsrE=)
2: 3130332e34322e3131392e302f32342d3234203d3e203234353139.roa (hash: 3thO/9yyE41CicpFLtHQ75Nw909jV+2QY8QpbmSrjas=)
3: 3130332e34322e3131372e302f32342d3234203d3e20313431393638.roa (hash: D+vBT8RjuXQRENNs+sRNnv0u+qOPPua7Ci6xauViEhY=)
4: 3130332e34322e3131362e302f32322d3232203d3e203234353139.roa (hash: iaB2BU40NYYT5gzoU2/HVHmJ1OLrV8vuDA/NUX6fKHM=)
5: 3130332e34322e3131362e302f32342d3234203d3e20313431393638.roa (hash: LFwbkJ+ntBwxqtVdCPUurrC+Hhb3oO3C1dGEk8iDIYc=)
6: B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.crl (hash: Wus9yM+MA4ExbUC9TK6bdjCtAohdBlHjKVAEF5E3Fxo=)
7: 3130332e34322e3131382e302f32332d3233203d3e203234353139.roa (hash: LUmG2PnUdmtlekMQPkmF2jVlBr5BwiDl1Q3zaubpydY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.crl
rsync://rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 12:34:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:9d:c3:00:15:5c:2b:d9:05:ac:b6:18:71:48:fc:cc:30:f1:f6:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09
Validity
Not Before: Oct 25 18:35:09 2026 GMT
Not After : Oct 26 20:43:09 2026 GMT
Subject: CN=4485B92A7C3EA382C75B7546420F7C6D06DD502E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b5:87:67:e9:3e:73:09:a5:56:83:74:ae:fd:
a9:ba:36:0f:57:f8:df:b8:85:ec:00:e8:71:d9:da:
14:ee:6a:81:a2:fc:45:fd:09:83:77:13:bc:cb:fb:
77:b5:5c:91:fa:4e:5c:29:37:2d:08:50:ea:77:ff:
17:ad:79:7d:f4:4c:08:c4:86:17:98:5f:43:b3:df:
5f:22:a1:a5:7e:87:cd:9a:1c:9a:e3:a5:6e:9e:a1:
72:1b:ab:8e:88:08:97:4b:92:e4:60:78:d3:e7:46:
ae:8d:79:c0:67:c2:18:80:b8:43:2d:31:7c:b2:25:
17:fa:b6:f8:9a:02:a4:c1:06:b3:5e:31:cc:ed:a4:
ed:df:66:f1:6d:26:17:d5:bb:70:a7:d0:ad:45:fd:
4b:71:48:eb:7c:e7:72:4d:4e:9b:6b:c2:2c:9d:ae:
a1:26:83:f1:1c:07:2e:4b:fd:77:d8:e2:00:30:6a:
81:d7:86:0b:0f:d2:a1:db:f4:8e:e0:59:f9:c3:36:
d3:d8:b4:fd:2a:89:2f:9a:99:d1:1d:b1:f7:78:9f:
04:a3:60:5b:6f:58:07:2f:75:6c:75:1a:4e:49:47:
08:05:4b:0b:17:f8:d4:c1:94:fe:11:c8:de:0f:88:
a9:98:48:98:93:37:89:5d:cb:25:89:88:5d:ca:45:
37:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:85:B9:2A:7C:3E:A3:82:C7:5B:75:46:42:0F:7C:6D:06:DD:50:2E
X509v3 Authority Key Identifier:
keyid:B7:AC:AC:8C:1A:6D:56:7C:70:21:67:C3:BF:5D:55:DC:A8:06:1D:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:56:6b:27:fd:ed:f8:aa:c5:e5:2b:38:70:7e:29:c1:6b:e1:
73:9a:c9:77:ac:85:3b:f3:ea:d1:9b:d3:62:93:79:02:b7:a4:
f5:81:28:00:5b:d8:45:ee:b3:3c:fc:c2:23:91:6c:22:0d:7f:
ef:13:46:fe:77:79:57:9d:e1:67:c2:59:ac:fb:14:6e:30:ee:
d8:d0:bc:05:0e:62:5b:f5:49:46:17:01:8a:1b:44:f1:90:a0:
20:9c:8c:f1:1a:3c:2b:6b:b9:8a:64:88:f0:fa:40:4b:24:f4:
ce:e5:b6:17:bc:2d:38:f2:51:a9:cd:44:4b:67:74:a5:c3:51:
56:64:1f:5b:f0:c3:83:51:ea:a5:51:fe:6a:6b:34:46:77:db:
80:7a:0e:7d:42:b8:4c:84:18:7a:e2:99:ba:e8:06:61:0c:7a:
10:4d:66:5b:f5:bb:c4:1e:50:9e:2e:35:13:84:9c:64:77:5d:
2d:8c:dc:44:e2:4b:1d:99:74:ec:14:76:f8:ee:e3:60:6e:1b:
34:1a:b1:de:25:13:62:c0:a0:16:4d:7b:d5:56:ac:b5:a1:be:
c4:89:64:a4:08:32:16:34:ca:8a:13:eb:07:a1:dc:e9:9f:cb:
54:e2:61:28:a2:14:56:1c:bd:f8:7f:53:b4:ea:32:74:61:28:
09:23:f8:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:23:12 2026 by rpki-client