
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.mft
File: AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.mft (raw, json)
Hash identifier: rV36IvLKW4SdjdeWJJPhCb2rLpduxfG/ZIh1SZew3IU=
Subject key identifier: A0:DA:6A:37:17:FD:1B:ED:D1:ED:16:00:10:D9:5A:DB:03:94:6E:85
Authority key identifier: AC:9E:E5:D4:AC:F7:FD:0D:FD:66:CD:FE:D1:20:17:1D:F6:19:5E:B0
Certificate issuer: /CN=AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0
Certificate serial: 0DBD8D162B9086A5F1F39FCC5979F9A928B05EF4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.mft
Manifest number: 47
Signing time: Wed 24 Jun 2026 00:41:26 +0000
Manifest this update: Wed 24 Jun 2026 00:36:26 +0000
Manifest next update: Thu 25 Jun 2026 01:03:26 +0000
Files and hashes: 1: 3130332e3136322e3132322e302f32332d3234203d3e203137393935.roa (hash: OLWauFfmrw2a6NVsZr060P9JMbawsYC5rFsVrmOkFCE=)
2: AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.crl (hash: XEojT3hvZWD95ywGIk3OBUuxY032rC45CyteSjzrXOM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.crl
rsync://rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Jun 2026 01:03:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:bd:8d:16:2b:90:86:a5:f1:f3:9f:cc:59:79:f9:a9:28:b0:5e:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0
Validity
Not Before: Jun 24 00:36:26 2026 GMT
Not After : Jun 25 01:03:26 2026 GMT
Subject: CN=A0DA6A3717FD1BEDD1ED160010D95ADB03946E85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f9:65:7e:fb:65:27:e3:3b:16:d1:66:ea:d8:
aa:15:30:ee:47:9d:20:a6:7e:e6:cc:70:00:a4:0d:
79:34:ac:e7:0d:d0:31:9f:95:43:bd:fb:e1:98:88:
0e:c6:5e:cd:7a:56:9f:4c:30:d7:b5:3a:5b:02:9f:
4b:63:d3:de:e1:ee:03:37:fe:b5:53:b7:62:16:f8:
3c:cf:45:aa:98:e1:c8:77:36:53:25:3f:74:f8:99:
e2:b1:7b:59:4e:f3:4c:e5:a7:80:a1:39:be:1e:16:
48:5a:51:bb:e4:7d:ff:59:f5:fb:67:5b:21:ba:a1:
35:b7:ec:4e:9a:fa:4f:34:ed:7b:07:a6:12:c1:0f:
9b:f1:6c:02:7f:be:41:99:01:7a:f3:c2:d2:5e:29:
17:cc:22:50:10:43:1f:fe:47:55:8c:21:3b:18:6b:
3d:b3:7b:f9:40:de:22:8c:c1:d6:a3:7c:ec:e4:86:
cd:16:09:3a:a0:ec:e9:98:24:b2:38:73:59:aa:63:
e2:c9:5e:1e:89:74:4f:85:ef:c8:bf:e4:fc:7e:52:
f3:e6:59:e1:7d:6b:fd:1b:71:00:83:10:c8:00:5f:
0e:da:c0:14:c2:0a:e8:54:d9:6f:8b:3a:8b:42:03:
a5:ea:de:44:bb:87:34:85:ec:93:a0:c5:c0:00:bb:
91:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:DA:6A:37:17:FD:1B:ED:D1:ED:16:00:10:D9:5A:DB:03:94:6E:85
X509v3 Authority Key Identifier:
keyid:AC:9E:E5:D4:AC:F7:FD:0D:FD:66:CD:FE:D1:20:17:1D:F6:19:5E:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:cc:53:02:c4:7e:83:fb:4e:40:b3:69:84:cc:88:cc:04:07:
08:03:0b:42:f8:80:ab:96:0c:22:b7:23:ac:c7:10:96:a8:2a:
7a:fc:8b:cc:26:4d:de:54:31:27:3a:a5:8e:11:89:ad:14:6c:
bc:89:35:33:fb:8b:87:6c:04:14:38:88:98:c9:d8:eb:40:5a:
cd:4f:7d:74:c2:9d:c0:c8:4e:bf:1a:ad:39:01:d4:5b:b3:46:
d8:30:c4:e6:96:b4:36:db:30:eb:97:63:d6:55:7d:e3:ef:1f:
68:89:7f:df:a5:a1:6e:34:8f:3c:83:08:58:e6:91:ce:c7:b9:
5d:2c:19:8d:d3:e1:df:bf:8f:17:c9:0b:3d:2f:3f:60:05:56:
5e:92:e9:f5:ed:ab:f7:c3:85:ff:a0:28:1d:18:27:a2:59:19:
17:11:e8:00:28:09:c1:89:66:d6:33:37:1d:b7:3d:75:2e:9c:
0e:e0:72:34:6b:6c:62:00:ea:a6:9f:3d:57:8d:ca:3b:72:2c:
cc:56:be:c4:64:b0:7f:49:fa:33:ea:4c:a4:85:44:ff:31:da:
34:8b:4a:f0:71:c2:65:f9:1c:96:08:1f:41:55:99:f7:87:6c:
ba:73:26:f6:4b:51:5c:3c:a0:8d:02:67:d1:cf:78:c8:c0:8a:
b8:f1:6b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 15:36:52 2026 by rpki-client