
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.mft
File: AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.mft (raw, json)
Hash identifier: d69jLOi4GK7qejQkPzKXHBYl+i0Ut+A0TEkL4/PeHTw=
Subject key identifier: 40:CF:FD:73:ED:F1:0C:16:97:43:AD:B5:75:EE:F6:D1:E5:63:3D:27
Authority key identifier: AC:7E:AF:B0:07:F3:DD:9B:32:32:7F:16:3D:AF:2A:92:B5:CE:EC:47
Certificate issuer: /CN=AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47
Certificate serial: 2F06F2D3F8AB894D382BBE7481572766723BD737
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.mft
Manifest number: 71
Signing time: Fri 24 Jul 2026 05:51:37 +0000
Manifest this update: Fri 24 Jul 2026 05:46:37 +0000
Manifest next update: Sat 25 Jul 2026 09:30:37 +0000
Files and hashes: 1: AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.crl (hash: 88CbTpsHGzr65boKhlArPjTskWM4CRX9k80ag9X1r+o=)
2: 3130332e3131302e34312e302f32342d3234203d3e20313530343734.roa (hash: obnag6K+/PYNxyPn5mnr74fqA7ofmhwpwaEP4tBMPxc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.crl
rsync://rpki-rsync.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 07:07:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:06:f2:d3:f8:ab:89:4d:38:2b:be:74:81:57:27:66:72:3b:d7:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47
Validity
Not Before: Jul 24 05:46:37 2026 GMT
Not After : Jul 25 09:30:37 2026 GMT
Subject: CN=40CFFD73EDF10C169743ADB575EEF6D1E5633D27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:64:6e:78:8f:df:45:64:ab:fb:a1:8a:5d:0e:
a1:27:51:f3:b5:08:f2:52:e4:ea:30:cf:dc:02:af:
ee:26:c8:62:f7:c4:9a:e6:43:12:52:94:bc:c4:4b:
92:fa:b5:35:76:ba:58:9f:6a:2f:fb:c0:bb:1e:ed:
31:88:92:5e:a8:75:b2:cb:cc:df:a0:fc:48:b4:cb:
3d:f9:a1:e7:39:2a:d1:13:b4:cc:ff:bd:dc:3b:01:
5c:1b:5e:f1:1e:42:c5:10:17:59:92:61:eb:96:a0:
a3:32:e2:34:72:79:95:a4:5e:b0:77:81:ad:38:c4:
09:5a:30:b8:fb:5b:2b:ab:2f:45:69:c8:b3:26:1a:
99:1b:32:fe:03:65:b3:a3:d4:c0:5c:e7:86:ac:cb:
9a:40:b7:bd:26:a6:35:d8:32:9a:26:dc:64:83:83:
b4:73:22:bf:a5:83:78:f3:95:43:a6:13:d0:6e:3f:
c3:c3:6c:75:2f:c4:4a:f0:29:4c:96:8b:dc:ba:62:
79:f0:7d:64:35:d6:13:d6:f5:d0:d4:6a:0d:e7:c3:
e0:a1:52:67:ca:7a:ae:d3:37:11:44:12:5e:a8:e6:
3e:06:99:80:33:46:67:4a:d1:d5:b3:c8:c3:c3:9b:
7a:30:ef:d6:d4:56:f3:57:a0:d5:1c:fa:0c:73:c9:
67:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:CF:FD:73:ED:F1:0C:16:97:43:AD:B5:75:EE:F6:D1:E5:63:3D:27
X509v3 Authority Key Identifier:
keyid:AC:7E:AF:B0:07:F3:DD:9B:32:32:7F:16:3D:AF:2A:92:B5:CE:EC:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:a9:a9:e2:3c:05:6b:d6:90:6a:de:0a:15:0e:0b:27:d4:1d:
94:9d:a6:40:e0:7f:32:ae:11:ca:1d:9d:e8:2f:9d:71:c2:e5:
32:77:96:c7:84:4d:56:dc:f5:1e:08:df:66:a1:ce:02:32:c0:
aa:ce:23:2b:b5:15:24:68:a5:2f:b9:fd:29:14:b2:58:96:c6:
f9:7c:f1:47:dd:fe:db:9f:c0:12:1f:7f:5d:82:31:67:b0:14:
8d:d1:cf:ce:a1:74:6c:f9:77:7d:f3:ae:04:3b:9b:b2:85:20:
74:27:26:d7:bc:46:be:ce:8d:ee:e0:33:37:33:32:a6:eb:b7:
3c:47:72:f8:04:f4:a4:7f:b9:a7:09:16:2e:a2:15:c3:bc:a6:
bd:02:e2:af:1c:2d:91:b8:9a:13:4b:7e:f6:57:d6:cc:f5:68:
e7:4b:8f:ed:42:43:ea:fd:96:20:93:5e:31:9b:56:97:5f:3d:
60:34:51:71:aa:c5:d7:55:ff:29:f9:97:1c:51:b7:ca:8a:96:
6c:21:03:83:cb:9b:60:40:91:06:1e:e0:bc:5d:db:7d:47:2f:
2d:b6:6b:d9:70:3d:ab:b3:f6:ae:3c:56:92:8c:c7:34:bc:05:
b9:b4:19:03:49:a4:0d:e5:80:0e:aa:67:a4:60:cc:c1:7b:af:
08:eb:5c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:46:47 2026 by rpki-client