
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.mft
File: AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.mft (raw, json)
Hash identifier: voVKYqRggiLz2R/3TUQLJxietChu9BzBPoHdwgiqaHY=
Subject key identifier: 3B:1E:64:8C:16:F3:B2:C9:82:0F:58:EE:18:EC:0A:46:02:C0:BF:63
Authority key identifier: AC:9E:E5:D4:AC:F7:FD:0D:FD:66:CD:FE:D1:20:17:1D:F6:19:5E:B0
Certificate issuer: /CN=AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0
Certificate serial: 5510160B0E61CFFCC4F964F6A03289BD9BFCF745
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.mft
Manifest number: D6
Signing time: Fri 09 Oct 2026 20:02:34 +0000
Manifest this update: Fri 09 Oct 2026 19:57:34 +0000
Manifest next update: Sat 10 Oct 2026 23:23:34 +0000
Files and hashes: 1: 3130332e3136322e3132322e302f32332d3234203d3e203137393935.roa (hash: OLWauFfmrw2a6NVsZr060P9JMbawsYC5rFsVrmOkFCE=)
2: AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.crl (hash: oetI4xKSNqF8Ph0vjU/iyA7eJoKeyzUsapqV5QtSczw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.crl
rsync://rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 23:23:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:10:16:0b:0e:61:cf:fc:c4:f9:64:f6:a0:32:89:bd:9b:fc:f7:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0
Validity
Not Before: Oct 9 19:57:34 2026 GMT
Not After : Oct 10 23:23:34 2026 GMT
Subject: CN=3B1E648C16F3B2C9820F58EE18EC0A4602C0BF63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:db:1a:4d:f0:92:68:28:49:b6:e3:bd:e0:39:
21:56:53:52:a2:f3:42:08:a8:1b:a3:8a:4e:ed:0f:
eb:fa:0e:28:97:45:c9:2c:87:f4:98:af:50:18:0b:
6c:cf:06:42:42:33:81:e4:b1:f2:8b:6c:56:1f:1a:
f3:cc:fc:17:7a:50:cf:a5:ec:6c:f8:19:40:34:ff:
78:ce:24:8b:39:6e:4a:35:75:48:af:e4:9d:13:0b:
d9:6c:3e:16:a0:ba:70:dc:d1:af:aa:e3:4d:3e:15:
bb:ef:11:fa:f2:e3:59:e4:55:ce:08:bf:0d:09:f3:
45:93:49:7d:77:26:83:c8:a8:1a:6b:d0:a0:29:06:
e2:f7:5b:72:83:26:41:4c:ba:5d:94:ff:cc:06:a1:
c8:10:7b:e6:ca:d3:c0:01:00:2b:99:81:16:65:4c:
97:53:bb:b8:d6:e1:39:51:62:77:c6:56:ca:4f:20:
80:eb:aa:f8:00:01:5b:47:73:3c:56:df:e3:fd:60:
54:03:d6:62:04:11:4a:4d:36:03:18:f7:24:49:33:
7f:f8:9c:50:66:bd:29:48:3d:91:7b:7e:1e:63:e5:
b9:aa:59:cc:e9:6a:cc:11:18:95:94:6b:e5:ca:4a:
b7:f7:df:44:18:68:db:24:28:b1:09:4f:f0:90:59:
aa:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:1E:64:8C:16:F3:B2:C9:82:0F:58:EE:18:EC:0A:46:02:C0:BF:63
X509v3 Authority Key Identifier:
keyid:AC:9E:E5:D4:AC:F7:FD:0D:FD:66:CD:FE:D1:20:17:1D:F6:19:5E:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:b1:c6:5b:72:30:99:af:ce:2e:35:c9:37:d4:5e:10:71:96:
d8:5e:3c:c5:58:fa:4c:c3:a9:0c:7d:66:2c:36:b9:4b:47:18:
84:19:c0:06:03:ce:a3:fe:02:94:b6:24:4a:e7:71:05:d5:ba:
51:e0:e8:00:2e:fd:dd:9a:bc:63:78:85:eb:12:99:cc:62:7c:
73:c8:bd:ee:5b:71:2e:e1:4e:88:87:0d:eb:71:1a:03:1d:99:
79:82:02:00:8a:05:fc:07:46:ea:14:dd:3e:72:2a:5b:58:02:
db:ef:01:aa:de:23:21:67:97:e5:2c:f6:ab:42:cc:20:9c:89:
d1:7b:16:d0:95:07:96:e9:75:e9:6a:18:ae:9e:34:87:f7:da:
5a:75:df:63:61:22:56:60:ce:07:a2:f7:61:b0:15:48:a9:bb:
db:2d:f3:23:aa:f4:f5:7c:ac:de:c1:6f:a4:1e:15:1a:39:81:
60:01:91:c3:14:6d:76:3b:97:a8:3a:80:64:4b:9d:f9:f5:c3:
5a:54:a8:6d:90:65:94:a8:4b:51:bf:5d:c6:e3:1f:16:56:90:
0a:4b:5f:bc:89:79:d5:86:78:41:45:26:b6:ea:c8:da:6d:32:
59:9f:13:32:13:ca:0f:7c:4d:cc:32:f5:44:8e:15:7d:58:71:
4a:85:c6:6b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUVRAWCw5hz/zE+WT2oDKJvZv890UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM5RUU1RDRBQ0Y3RkQwREZENjZDREZFRDEyMDE3MURG
NjE5NUVCMDAeFw0yNjEwMDkxOTU3MzRaFw0yNjEwMTAyMzIzMzRaMDMxMTAvBgNV
BAMTKDNCMUU2NDhDMTZGM0IyQzk4MjBGNThFRTE4RUMwQTQ2MDJDMEJGNjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt2xpN8JJoKEm2473gOSFWU1Ki
80IIqBujik7tD+v6DiiXRcksh/SYr1AYC2zPBkJCM4HksfKLbFYfGvPM/Bd6UM+l
7Gz4GUA0/3jOJIs5bko1dUiv5J0TC9lsPhagunDc0a+q400+FbvvEfry41nkVc4I
vw0J80WTSX13JoPIqBpr0KApBuL3W3KDJkFMul2U/8wGocgQe+bK08ABACuZgRZl
TJdTu7jW4TlRYnfGVspPIIDrqvgAAVtHczxW3+P9YFQD1mIEEUpNNgMY9yRJM3/4
nFBmvSlIPZF7fh5j5bmqWczpaswRGJWUa+XKSrf330QYaNskKLEJT/CQWaqxAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUOx5kjBbzssmCD1juGOwKRgLAv2MwHwYDVR0j
BBgwFoAUrJ7l1Kz3/Q39Zs3+0SAXHfYZXrAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDFiM2ZlNDUtYjU4OC00YmI3LWFlOTAtOTFmNTdmNTkzY2I1LzAvQUM5RUU1RDRB
Q0Y3RkQwREZENjZDREZFRDEyMDE3MURGNjE5NUVCMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BQzlFRTVENEFDRjdGRDBERkQ2NkNERkVEMTIwMTcxREY2MTk1
RUIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDFiM2ZlNDUtYjU4OC00YmI3LWFl
OTAtOTFmNTdmNTkzY2I1LzAvQUM5RUU1RDRBQ0Y3RkQwREZENjZDREZFRDEyMDE3
MURGNjE5NUVCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKSxxltyMJmvzi41yTfUXhBxlthePMVY+kzD
qQx9Ziw2uUtHGIQZwAYDzqP+ApS2JErncQXVulHg6AAu/d2avGN4hesSmcxifHPI
ve5bcS7hToiHDetxGgMdmXmCAgCKBfwHRuoU3T5yKltYAtvvAareIyFnl+Us9qtC
zCCcidF7FtCVB5bpdelqGK6eNIf32lp132NhIlZgzgei92GwFUipu9st8yOq9PV8
rN7Bb6QeFRo5gWABkcMUbXY7l6g6gGRLnfn1w1pUqG2QZZSoS1G/XcbjHxZWkApL
X7yJedWGeEFFJrbqyNptMlmfEzITyg98Tcwy9USOFX1YcUqFxms=
-----END CERTIFICATE-----
Generated at Sat Oct 10 17:16:19 2026 by rpki-client