
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.mft
File: ACB5F5BD4845167F55B8DBC49245C40C476C72D1.mft (raw, json)
Hash identifier: jHjC6K92bYO3QXPsvAnCnIJMYVo/bLR1wW3dzRERo38=
Subject key identifier: E8:AD:5F:6C:51:FE:6B:26:9A:B8:14:2C:B0:58:70:AC:38:BA:06:66
Authority key identifier: AC:B5:F5:BD:48:45:16:7F:55:B8:DB:C4:92:45:C4:0C:47:6C:72:D1
Certificate issuer: /CN=ACB5F5BD4845167F55B8DBC49245C40C476C72D1
Certificate serial: 0EF7A8767207D4F5ED17065E7C85BD7BCB2057DB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.mft
Manifest number: EA
Signing time: Sat 24 Oct 2026 16:19:32 +0000
Manifest this update: Sat 24 Oct 2026 16:14:32 +0000
Manifest next update: Sun 25 Oct 2026 17:36:32 +0000
Files and hashes: 1: 323430363a313334303a3a2f33322d3430203d3e20313430343037.roa (hash: CVFptYCjc0BlHCccW2Xncqnkcsz2aSryEWVdhnNHxQY=)
2: 3130332e3135312e33322e302f32342d3234203d3e20313430343037.roa (hash: yHKtP8J6sRjd2vBKKZ1C8jqGxnt5X4o3lstFY/wy1jg=)
3: 3130332e3135312e33322e302f32332d3233203d3e20313430343037.roa (hash: zegPh8h8i8vXslaukZ/A0UJgubb+r4V2izsS5x1SFA0=)
4: 323430363a313334303a3a2f33322d3332203d3e20313430343037.roa (hash: WxEwSz+sWi75wTD9LX4+TZFvBImk89xubZTfF5v2cCg=)
5: ACB5F5BD4845167F55B8DBC49245C40C476C72D1.crl (hash: E+gy+g23RICL2k7bBbyqZVx0fpp+CLX6qYf4tPxWVeM=)
6: 3130332e3135312e33332e302f32342d3234203d3e20313430343037.roa (hash: 12cGaGOgBCZ2rP3AvRmGNqqU8d1JvTtobCIZ/qRPUPE=)
7: 323430363a313334303a3a2f33322d3333203d3e20313430343037.roa (hash: MI6jQTtOVHvsuWHm0uvBE0TFhtVi+xCMKjXMCSCBFDY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.crl
rsync://rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Oct 2026 17:36:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:f7:a8:76:72:07:d4:f5:ed:17:06:5e:7c:85:bd:7b:cb:20:57:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ACB5F5BD4845167F55B8DBC49245C40C476C72D1
Validity
Not Before: Oct 24 16:14:32 2026 GMT
Not After : Oct 25 17:36:32 2026 GMT
Subject: CN=E8AD5F6C51FE6B269AB8142CB05870AC38BA0666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:24:41:2b:75:ef:84:ce:57:86:f0:f9:05:0a:
70:b4:05:4a:80:e0:30:81:11:23:af:57:63:2a:68:
7d:c1:58:90:fa:9c:3f:95:e6:c8:85:99:64:2d:62:
2b:bd:a4:fd:99:34:00:e1:7c:d9:6e:3a:ab:7f:21:
2a:f9:a5:82:09:7e:10:54:40:d1:bb:bc:93:cc:63:
4c:73:5a:f2:dd:71:3e:c7:3a:dc:b1:4a:fe:64:e6:
3b:45:58:59:1a:37:83:72:9a:25:de:2d:0b:e8:84:
23:d3:c4:84:35:69:82:81:11:76:43:e0:b0:e1:39:
b1:be:c2:3c:3d:e6:63:ad:65:08:be:46:9b:6a:81:
e9:68:78:5a:c1:cf:cd:15:53:f6:31:43:29:21:fb:
16:a9:85:83:d1:bc:a6:e2:01:cf:3d:a8:b3:63:e4:
e1:be:ae:e2:ff:67:89:a7:3f:32:f2:63:ff:3d:4a:
a6:9f:71:1c:b3:d4:49:9c:9b:4c:75:66:43:5c:65:
0c:f3:b8:8f:18:f7:d1:3a:b2:4d:b4:b3:36:c1:3f:
1c:bf:9a:d5:4d:0e:3c:65:1b:2e:77:6d:ac:d6:da:
42:3c:30:bf:a5:04:5a:68:78:57:cc:95:5a:77:09:
3d:66:c9:20:2b:10:35:9c:5e:12:f9:a1:64:82:64:
55:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AD:5F:6C:51:FE:6B:26:9A:B8:14:2C:B0:58:70:AC:38:BA:06:66
X509v3 Authority Key Identifier:
keyid:AC:B5:F5:BD:48:45:16:7F:55:B8:DB:C4:92:45:C4:0C:47:6C:72:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:c2:f8:05:aa:10:5e:2e:67:27:21:76:26:c5:fc:36:72:f9:
e2:9e:79:31:93:c6:c1:64:4e:81:6c:96:05:19:99:a2:98:2b:
53:22:ac:52:d5:a8:4a:33:17:d6:a7:45:3f:42:b0:d7:f2:c3:
35:95:ed:6e:ca:e3:20:68:9a:ff:52:3f:56:55:e0:53:41:e1:
1f:8f:e3:49:1d:2a:54:18:04:20:89:79:3f:88:25:c6:65:62:
94:6d:98:b6:16:e4:97:21:34:57:9c:97:a7:f6:8f:20:bf:ff:
90:a7:d9:aa:fc:cf:6c:27:29:ba:d3:10:53:87:dd:78:89:f6:
ee:3f:ba:90:30:52:66:95:23:b7:17:83:b3:3f:59:f5:c6:d2:
82:b1:95:8a:d0:bc:29:fc:4d:27:61:bc:20:a1:0f:57:32:83:
08:c8:2e:73:14:1e:2c:63:8c:12:5a:38:83:79:e5:03:12:f5:
d6:b2:c9:e7:86:65:b1:b3:30:7a:e9:3e:af:c5:1e:22:cd:58:
43:29:df:bc:53:a4:a7:bc:8d:82:88:72:46:f5:05:04:de:19:
8f:65:6f:ae:44:9b:c7:7a:7c:82:12:f9:f2:49:a2:44:d5:50:
0c:b9:7b:a9:ba:d0:63:4c:8e:35:d8:9c:46:b1:98:ef:fc:85:
a5:be:97:0a
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUDveodnIH1PXtFwZefIW9e8sgV9swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUNCNUY1QkQ0ODQ1MTY3RjU1QjhEQkM0OTI0NUM0MEM0
NzZDNzJEMTAeFw0yNjEwMjQxNjE0MzJaFw0yNjEwMjUxNzM2MzJaMDMxMTAvBgNV
BAMTKEU4QUQ1RjZDNTFGRTZCMjY5QUI4MTQyQ0IwNTg3MEFDMzhCQTA2NjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxJEErde+EzleG8PkFCnC0BUqA
4DCBESOvV2MqaH3BWJD6nD+V5siFmWQtYiu9pP2ZNADhfNluOqt/ISr5pYIJfhBU
QNG7vJPMY0xzWvLdcT7HOtyxSv5k5jtFWFkaN4NymiXeLQvohCPTxIQ1aYKBEXZD
4LDhObG+wjw95mOtZQi+RptqgeloeFrBz80VU/YxQykh+xaphYPRvKbiAc89qLNj
5OG+ruL/Z4mnPzLyY/89SqafcRyz1Emcm0x1ZkNcZQzzuI8Y99E6sk20szbBPxy/
mtVNDjxlGy53bazW2kI8ML+lBFpoeFfMlVp3CT1mySArEDWcXhL5oWSCZFVVAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU6K1fbFH+ayaauBQssFhwrDi6BmYwHwYDVR0j
BBgwFoAUrLX1vUhFFn9VuNvEkkXEDEdsctEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YzU5NmJjYzgtMzhjZC00NDM3LTgwYjEtNWJhZTlmODU3OTM3LzAvQUNCNUY1QkQ0
ODQ1MTY3RjU1QjhEQkM0OTI0NUM0MEM0NzZDNzJEMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BQ0I1RjVCRDQ4NDUxNjdGNTVCOERCQzQ5MjQ1QzQwQzQ3NkM3
MkQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzU5NmJjYzgtMzhjZC00NDM3LTgw
YjEtNWJhZTlmODU3OTM3LzAvQUNCNUY1QkQ0ODQ1MTY3RjU1QjhEQkM0OTI0NUM0
MEM0NzZDNzJEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHjC+AWqEF4uZychdibF/DZy+eKeeTGTxsFk
ToFslgUZmaKYK1MirFLVqEozF9anRT9CsNfywzWV7W7K4yBomv9SP1ZV4FNB4R+P
40kdKlQYBCCJeT+IJcZlYpRtmLYW5JchNFecl6f2jyC//5Cn2ar8z2wnKbrTEFOH
3XiJ9u4/upAwUmaVI7cXg7M/WfXG0oKxlYrQvCn8TSdhvCChD1cygwjILnMUHixj
jBJaOIN55QMS9dayyeeGZbGzMHrpPq/FHiLNWEMp37xTpKe8jYKIckb1BQTeGY9l
b65Em8d6fIIS+fJJokTVUAy5e6m60GNMjjXYnEaxmO/8haW+lwo=
-----END CERTIFICATE-----
Generated at Sat Oct 24 20:45:17 2026 by rpki-client