
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/A2CA2636D90ECEE03080294F58D8AB8A1B349996.mft
File: A2CA2636D90ECEE03080294F58D8AB8A1B349996.mft (raw, json)
Hash identifier: 4hGUvNgP+5PUsfoh9FAJWANMY8eawmuAWjtu/jwkLmA=
Subject key identifier: 07:E7:C7:F8:95:8C:4C:83:0B:8E:27:DA:7C:43:39:CD:65:FE:BE:4B
Authority key identifier: A2:CA:26:36:D9:0E:CE:E0:30:80:29:4F:58:D8:AB:8A:1B:34:99:96
Certificate issuer: /CN=A2CA2636D90ECEE03080294F58D8AB8A1B349996
Certificate serial: 4E37C8C1FBB50183DFEACE3DCA20147ACE3C59A7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2CA2636D90ECEE03080294F58D8AB8A1B349996.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/A2CA2636D90ECEE03080294F58D8AB8A1B349996.mft
Manifest number: EA
Signing time: Sat 24 Oct 2026 00:29:46 +0000
Manifest this update: Sat 24 Oct 2026 00:24:46 +0000
Manifest next update: Sun 25 Oct 2026 03:56:46 +0000
Files and hashes: 1: 3135372e32302e3233362e302f32342d3234203d3e203538333639.roa (hash: BrEAiFV+dHptCn088oRLw0yFHBOD29YxvGJgz6+xTEs=)
2: A2CA2636D90ECEE03080294F58D8AB8A1B349996.crl (hash: sF3V7mPvPkHf5bSxEG3n39qHs8k2oVDHqY7kAOtRZCs=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/A2CA2636D90ECEE03080294F58D8AB8A1B349996.crl
rsync://rpki-rsync.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/A2CA2636D90ECEE03080294F58D8AB8A1B349996.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2CA2636D90ECEE03080294F58D8AB8A1B349996.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Oct 2026 03:36:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:37:c8:c1:fb:b5:01:83:df:ea:ce:3d:ca:20:14:7a:ce:3c:59:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A2CA2636D90ECEE03080294F58D8AB8A1B349996
Validity
Not Before: Oct 24 00:24:46 2026 GMT
Not After : Oct 25 03:56:46 2026 GMT
Subject: CN=07E7C7F8958C4C830B8E27DA7C4339CD65FEBE4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:50:24:ae:eb:9b:bb:11:8c:e7:3e:b2:2f:df:
1e:da:e4:20:12:db:65:44:3e:9d:fd:8f:ef:6b:ad:
f0:e6:0f:ae:bc:84:b5:cf:a2:fb:64:bb:47:37:89:
88:ad:9a:0d:ff:57:a6:fc:49:c3:28:2c:1d:56:fc:
88:20:a5:30:c3:b0:54:c8:d8:31:67:ff:2f:58:71:
c1:ce:72:2b:05:46:3b:6a:3c:ca:31:44:de:53:af:
bc:49:42:b3:5c:cd:6e:be:5b:c9:9a:a8:a3:c7:e9:
99:ab:9e:5a:a6:2a:cd:2d:d7:ee:3a:2f:bc:31:64:
5a:90:3d:53:38:5e:44:83:41:31:ca:a4:92:9c:ab:
e0:0c:f6:e9:73:57:d8:cb:16:ef:f0:f8:a8:0e:c1:
ef:c4:5b:8d:3d:26:14:c9:18:d7:41:80:b9:17:7a:
b5:ac:68:96:1d:08:51:e6:6d:2a:df:d2:21:fe:7c:
4e:b9:6c:bf:85:27:21:a5:1e:82:2e:5a:e7:29:d6:
bf:64:98:a6:39:62:25:ad:5e:ac:fd:d9:cd:e4:42:
62:4d:00:a4:24:27:98:73:2c:e6:e5:26:d2:f5:40:
c4:0e:e3:86:4e:55:f8:27:8b:89:93:48:2a:83:60:
78:86:e4:e3:4d:7c:88:fd:0a:f3:16:9e:59:67:85:
cf:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E7:C7:F8:95:8C:4C:83:0B:8E:27:DA:7C:43:39:CD:65:FE:BE:4B
X509v3 Authority Key Identifier:
keyid:A2:CA:26:36:D9:0E:CE:E0:30:80:29:4F:58:D8:AB:8A:1B:34:99:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/A2CA2636D90ECEE03080294F58D8AB8A1B349996.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2CA2636D90ECEE03080294F58D8AB8A1B349996.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/A2CA2636D90ECEE03080294F58D8AB8A1B349996.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:6e:92:df:16:46:1c:ba:6c:9f:c6:d6:7b:ac:8c:c8:1b:7e:
ca:cc:b7:f1:9a:4c:20:8d:1a:63:c7:be:d8:c6:c2:23:d3:80:
d4:c6:0e:97:ad:fa:70:d4:2b:16:82:72:f1:43:be:84:ee:1e:
ba:73:71:3c:37:d5:d8:49:34:3f:cb:52:dc:a1:2b:86:5c:be:
42:19:1f:48:fd:da:62:61:cb:c8:30:8a:43:a1:91:49:63:4f:
3f:d4:3d:58:f5:fc:e2:31:33:b6:77:bd:b3:d1:af:ff:65:22:
03:a9:07:2b:9f:72:60:c9:88:58:be:d5:ed:22:bd:49:63:90:
9f:6f:77:70:e1:d0:73:c1:a9:b5:de:68:df:1f:a1:6f:12:29:
55:58:43:ad:90:3e:af:f8:36:03:2c:e8:a8:5c:17:07:e1:06:
ae:b0:c6:a5:bc:15:fa:95:c4:27:ab:a2:33:4a:52:e3:89:5a:
6a:b0:b5:66:22:16:ee:c6:84:2b:89:fc:82:79:cb:e9:c5:cc:
5e:8f:ea:1e:09:f6:3e:c1:9a:e2:f2:98:16:b8:e4:26:ea:8b:
ab:24:52:1b:00:45:4d:7f:55:5d:88:9d:9b:6c:dc:e8:ee:1d:
04:32:eb:37:1a:29:2e:68:7f:de:af:50:83:d4:81:de:cd:b3:
61:b9:2c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:48:04 2026 by rpki-client