
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.mft
File: AC1D31E1C0EBAF054936EEE31001AFEBD8908274.mft (raw, json)
Hash identifier: Wk1u7RtTZH/toW0g3WYkdh1GxdyCoeCse9Ss0y87Irk=
Subject key identifier: 9D:4B:8C:17:7D:A7:9B:56:58:07:08:46:B7:18:3B:F8:EA:52:D6:03
Authority key identifier: AC:1D:31:E1:C0:EB:AF:05:49:36:EE:E3:10:01:AF:EB:D8:90:82:74
Certificate issuer: /CN=AC1D31E1C0EBAF054936EEE31001AFEBD8908274
Certificate serial: 5BB7ACEEAACD15EBCB360FA6CF3762A4C068ECF7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.mft
Manifest number: 6F
Signing time: Fri 24 Jul 2026 01:25:55 +0000
Manifest this update: Fri 24 Jul 2026 01:20:55 +0000
Manifest next update: Sat 25 Jul 2026 04:56:55 +0000
Files and hashes: 1: AC1D31E1C0EBAF054936EEE31001AFEBD8908274.crl (hash: 7Zus/MzMx3gHlbUZ1Sg/67xAg4OKmt5z0wgp2d8joFg=)
2: 3130332e3130312e3231362e302f32342d3234203d3e20313530393431.roa (hash: WjJ5R6RxIV+WwM7kuHxJKIcmy8NFLw826KU6Z0WZ/xY=)
3: 3130332e3130312e3231372e302f32342d3234203d3e20313530393431.roa (hash: mI5pJthlZy5JwJ1aBsKt5QmSIIpmL45EJ55YLJWzCQg=)
4: 3130332e3130312e3231362e302f32332d3233203d3e20313530393431.roa (hash: Tf1Q9sDwa+GlXIub485EhNzCHd5//pppNP4qkGRGD+Y=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.crl
rsync://rpki-rsync.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:b7:ac:ee:aa:cd:15:eb:cb:36:0f:a6:cf:37:62:a4:c0:68:ec:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC1D31E1C0EBAF054936EEE31001AFEBD8908274
Validity
Not Before: Jul 24 01:20:55 2026 GMT
Not After : Jul 25 04:56:55 2026 GMT
Subject: CN=9D4B8C177DA79B5658070846B7183BF8EA52D603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0e:9d:fb:4c:8e:9d:c4:9e:ad:39:6a:51:ab:
49:15:3f:56:3f:9d:c1:7d:d0:03:54:8b:4c:2a:03:
34:25:c5:32:fb:59:9d:5e:5e:8c:93:e7:0e:e9:37:
69:06:b1:05:ff:1d:6a:92:2c:79:ce:62:01:e1:35:
dc:e9:7c:5d:9a:76:29:25:09:7c:3d:08:bc:33:ac:
b5:ec:0a:9d:d3:1b:5b:76:1a:16:d5:b0:44:14:f5:
8f:21:f5:e3:cd:f5:af:4c:36:88:9b:55:5b:9b:fd:
da:a3:96:bf:34:20:78:8e:0d:5c:0e:20:66:e5:1e:
da:b9:86:a4:5f:14:ef:36:9a:e1:a1:a1:e1:59:df:
2d:02:54:01:bf:86:78:d4:e3:e7:a0:9e:dc:19:ee:
a6:74:e0:bb:e3:b2:32:7c:d9:84:a7:50:01:d4:1a:
cd:96:78:b2:88:68:1f:55:81:2d:5f:a9:2e:8e:8a:
64:ef:5b:80:f4:c1:5d:d9:f0:c4:88:c8:ae:d3:79:
3a:17:59:8a:1d:f6:4b:c4:b4:ab:99:b2:b5:04:24:
a3:a5:9a:cc:92:61:c0:30:c0:f5:96:f1:bc:16:24:
25:48:ce:8e:da:ec:76:35:d3:6c:81:21:6d:b1:8c:
68:49:4f:80:e0:42:ef:71:83:9c:df:d8:4a:5c:04:
00:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:4B:8C:17:7D:A7:9B:56:58:07:08:46:B7:18:3B:F8:EA:52:D6:03
X509v3 Authority Key Identifier:
keyid:AC:1D:31:E1:C0:EB:AF:05:49:36:EE:E3:10:01:AF:EB:D8:90:82:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:5a:b2:a6:28:43:bf:d5:a0:24:76:89:0a:d5:59:c4:a5:33:
0f:1f:9c:41:02:13:21:00:9a:6b:c2:b8:6c:13:01:53:7b:9f:
53:36:3e:a9:2b:1c:50:96:21:36:02:1f:d9:98:c5:5d:ce:5c:
57:18:7c:d2:92:ca:0b:16:e9:0a:af:77:7c:7d:06:42:1e:0a:
21:0a:58:91:45:3c:bf:08:a3:70:d8:35:1c:f0:8d:d4:68:de:
7b:10:c5:5f:32:58:8f:03:b3:c9:d1:eb:5c:6a:0c:d0:a1:d9:
cc:18:27:71:3a:a8:6b:3e:b0:3a:7f:af:57:57:2f:86:50:30:
69:aa:b6:62:00:45:ac:db:0f:c3:bd:9d:8b:6d:6a:e7:4c:37:
a7:4b:4e:7f:cc:31:3a:c9:bf:ca:a7:da:62:31:da:34:37:44:
9c:0a:16:8e:e8:4b:df:92:70:6f:e6:3c:6b:13:11:73:b1:99:
30:b2:d9:ac:6f:19:29:95:0f:e4:ae:43:fd:b6:91:1d:07:dc:
f0:aa:18:32:e5:28:3b:71:dd:66:91:88:0e:b0:d1:d7:45:6a:
f3:de:58:74:78:0a:40:e8:b2:fd:e6:7a:0b:cc:df:30:65:4d:
c2:e8:ac:da:8d:60:b6:6f:12:7a:9d:7c:f9:a4:f8:06:c6:32:
93:88:be:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:13:50 2026 by rpki-client