
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/ACF266E9010F46F691CC6A492EB1EAC623155D6B.mft
File: ACF266E9010F46F691CC6A492EB1EAC623155D6B.mft (raw, json)
Hash identifier: 3yhROkazwXi4QamK6uSzODbptwVARuj9146YbTbVe2s=
Subject key identifier: AF:70:7A:88:A0:ED:D2:96:1E:8B:63:2B:F2:48:16:DE:0D:BF:3F:50
Authority key identifier: AC:F2:66:E9:01:0F:46:F6:91:CC:6A:49:2E:B1:EA:C6:23:15:5D:6B
Certificate issuer: /CN=ACF266E9010F46F691CC6A492EB1EAC623155D6B
Certificate serial: 1861ACA3B604B25F5930742378616F77A8634D61
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ACF266E9010F46F691CC6A492EB1EAC623155D6B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/ACF266E9010F46F691CC6A492EB1EAC623155D6B.mft
Manifest number: C1
Signing time: Wed 23 Sep 2026 05:07:20 +0000
Manifest this update: Wed 23 Sep 2026 05:02:20 +0000
Manifest next update: Thu 24 Sep 2026 07:06:20 +0000
Files and hashes: 1: 3230332e3137312e3232312e302f32342d3234203d3e203435323938.roa (hash: MUcpE9ISijiu2jmaCVn/Sl4d64Wp2iYm3FrbZk8E76Q=)
2: ACF266E9010F46F691CC6A492EB1EAC623155D6B.crl (hash: MTpZjOU4AVHETNQqYzNxqGUwECO4A/PYRTm16CRlyh0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/ACF266E9010F46F691CC6A492EB1EAC623155D6B.crl
rsync://rpki-rsync.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/ACF266E9010F46F691CC6A492EB1EAC623155D6B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ACF266E9010F46F691CC6A492EB1EAC623155D6B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 07:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:61:ac:a3:b6:04:b2:5f:59:30:74:23:78:61:6f:77:a8:63:4d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ACF266E9010F46F691CC6A492EB1EAC623155D6B
Validity
Not Before: Sep 23 05:02:20 2026 GMT
Not After : Sep 24 07:06:20 2026 GMT
Subject: CN=AF707A88A0EDD2961E8B632BF24816DE0DBF3F50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:dc:e3:13:2f:ad:d4:f2:b5:1e:4a:20:9a:10:
92:00:c4:24:94:ce:af:1a:19:44:df:bb:3d:17:4d:
a4:92:db:c6:73:35:a5:96:34:04:fc:59:74:a3:c0:
a3:97:3d:57:f0:aa:4f:cd:81:11:c4:88:49:73:44:
8d:77:04:88:00:d3:aa:90:0d:44:b8:64:7d:a2:42:
7f:92:2b:85:3c:33:75:fc:db:de:07:9d:e9:f5:83:
d9:e2:6e:48:b7:5d:7f:20:91:0f:eb:2b:5d:08:33:
af:bb:91:90:8e:33:3c:30:96:84:e6:96:e8:af:b7:
58:95:21:43:ef:41:df:59:0a:17:07:21:99:41:4b:
eb:c7:55:1e:c1:85:47:7c:1d:55:d5:e5:a1:87:d2:
33:10:7e:17:9e:06:2b:b0:ab:d5:3b:aa:39:73:a3:
2a:00:00:94:2b:e0:0b:b5:5f:8f:63:a8:eb:32:56:
b9:52:9e:90:fe:5b:f9:7a:d1:bc:86:53:5f:7c:64:
0f:68:6c:31:ca:b0:89:25:8c:fa:08:31:1d:f0:cb:
93:fa:ff:94:55:e0:f9:a2:69:1e:e3:58:21:a1:56:
65:3b:97:47:d0:44:1c:16:de:92:88:29:98:6d:74:
7e:a9:3e:cc:34:82:7d:a9:2a:cc:a3:66:92:58:cc:
23:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:70:7A:88:A0:ED:D2:96:1E:8B:63:2B:F2:48:16:DE:0D:BF:3F:50
X509v3 Authority Key Identifier:
keyid:AC:F2:66:E9:01:0F:46:F6:91:CC:6A:49:2E:B1:EA:C6:23:15:5D:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/ACF266E9010F46F691CC6A492EB1EAC623155D6B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ACF266E9010F46F691CC6A492EB1EAC623155D6B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/ACF266E9010F46F691CC6A492EB1EAC623155D6B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:fc:cc:75:56:3c:d8:d8:d9:71:0d:3e:65:2c:bb:48:9f:bf:
39:ef:11:34:b3:c3:ae:13:14:8a:ef:9a:b9:e3:63:e6:80:d5:
45:1c:d0:84:56:51:f2:a1:f5:6f:1a:a4:2f:d7:52:85:50:61:
90:d8:d1:75:ee:44:9d:c8:db:46:ae:fc:6e:43:50:fc:16:7a:
8d:e7:3c:3e:54:c7:fc:68:ae:96:5c:13:c4:f0:ee:fa:e4:5e:
55:fe:4d:43:c9:93:a6:bc:ac:41:fc:44:c1:22:0b:3d:01:a3:
f8:3b:78:a2:08:64:30:6d:f6:13:c3:0a:c9:7d:90:50:6b:ba:
a6:ef:6c:4d:72:15:95:87:13:3e:23:50:10:96:87:68:68:20:
e3:3e:6d:ca:4b:d0:56:1d:13:f5:0d:70:06:6b:16:a5:57:04:
e5:67:d0:57:60:53:e3:fc:28:5d:17:da:51:a5:9b:76:f4:98:
d8:f7:eb:36:e3:3f:5f:0c:ca:2e:2d:17:90:75:cc:4e:0c:96:
64:26:af:92:5b:05:d8:91:d6:65:39:98:ab:1e:89:46:d2:bd:
db:b3:44:84:30:ff:b5:64:80:f4:5b:05:09:bb:e0:c8:b7:7d:
4a:0d:64:b9:22:47:75:e9:5b:e1:8f:c7:16:ae:b6:98:3c:a8:
7b:2e:09:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:13:10 2026 by rpki-client