
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.mft
File: ACB5F5BD4845167F55B8DBC49245C40C476C72D1.mft (raw, json)
Hash identifier: 4nfu3YO9IxiGE+VFmrvuQ1M65t4KBpjG/ROcHkSe13s=
Subject key identifier: AD:BE:7F:B5:2A:7B:CA:5E:AE:59:EA:D1:04:0D:7E:08:41:EC:27:BA
Authority key identifier: AC:B5:F5:BD:48:45:16:7F:55:B8:DB:C4:92:45:C4:0C:47:6C:72:D1
Certificate issuer: /CN=ACB5F5BD4845167F55B8DBC49245C40C476C72D1
Certificate serial: 177DA90D6598BB4575F5DC46BFB19E1C41EB4EAD
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.mft
Manifest number: 6F
Signing time: Fri 24 Jul 2026 01:15:42 +0000
Manifest this update: Fri 24 Jul 2026 01:10:42 +0000
Manifest next update: Sat 25 Jul 2026 03:04:42 +0000
Files and hashes: 1: ACB5F5BD4845167F55B8DBC49245C40C476C72D1.crl (hash: +xvlZjodhkIENBM8fuqWRCG6GWZ01LSbxFJ81/YEy8o=)
2: 3130332e3135312e33322e302f32332d3233203d3e20313430343037.roa (hash: zegPh8h8i8vXslaukZ/A0UJgubb+r4V2izsS5x1SFA0=)
3: 323430363a313334303a3a2f33322d3430203d3e20313430343037.roa (hash: CVFptYCjc0BlHCccW2Xncqnkcsz2aSryEWVdhnNHxQY=)
4: 323430363a313334303a3a2f33322d3332203d3e20313430343037.roa (hash: WxEwSz+sWi75wTD9LX4+TZFvBImk89xubZTfF5v2cCg=)
5: 323430363a313334303a3a2f33322d3333203d3e20313430343037.roa (hash: MI6jQTtOVHvsuWHm0uvBE0TFhtVi+xCMKjXMCSCBFDY=)
6: 3130332e3135312e33322e302f32342d3234203d3e20313430343037.roa (hash: yHKtP8J6sRjd2vBKKZ1C8jqGxnt5X4o3lstFY/wy1jg=)
7: 3130332e3135312e33332e302f32342d3234203d3e20313430343037.roa (hash: 12cGaGOgBCZ2rP3AvRmGNqqU8d1JvTtobCIZ/qRPUPE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.crl
rsync://rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 03:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:7d:a9:0d:65:98:bb:45:75:f5:dc:46:bf:b1:9e:1c:41:eb:4e:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ACB5F5BD4845167F55B8DBC49245C40C476C72D1
Validity
Not Before: Jul 24 01:10:42 2026 GMT
Not After : Jul 25 03:04:42 2026 GMT
Subject: CN=ADBE7FB52A7BCA5EAE59EAD1040D7E0841EC27BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:21:b7:6a:a3:83:ce:5f:50:eb:57:74:ab:2d:
bc:89:36:47:a5:90:e9:a3:fc:79:eb:e3:c8:fb:0b:
ce:65:b5:43:d9:fa:25:bb:2f:29:31:93:4b:9e:58:
c0:19:ac:a2:b8:a1:a4:86:9b:cb:a9:77:e8:a6:45:
c3:9d:67:1c:52:18:d2:2a:1f:09:0a:04:5b:9b:24:
fa:e8:08:f1:db:ea:1f:ec:1a:d7:f3:f8:f4:3f:d1:
0d:14:37:28:78:71:e9:c6:a3:46:12:24:99:ba:95:
c7:29:d2:c0:8a:60:ab:5d:d4:5d:09:f1:69:36:26:
2c:28:a2:f3:5f:f9:d4:d7:37:06:f3:9a:3c:49:e0:
d1:58:c1:0c:a4:04:99:f6:c1:74:70:57:41:98:b2:
45:c2:6d:00:32:0d:b5:5a:02:90:be:96:d5:b8:ad:
29:7d:d6:68:a4:4a:61:2c:d0:04:59:15:02:54:06:
f3:25:05:af:f7:10:d4:be:9c:ed:49:d6:34:6c:a7:
43:ff:ff:5b:d7:e9:71:13:a9:6c:de:2e:29:85:2e:
3d:48:5c:fa:a2:91:03:5c:75:f5:ca:44:ae:44:a3:
1e:53:23:3a:fa:52:8a:ba:05:d3:2b:f0:8b:56:59:
29:26:f5:e9:b3:a2:6c:17:b6:a9:0d:10:b9:7b:5b:
a6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:BE:7F:B5:2A:7B:CA:5E:AE:59:EA:D1:04:0D:7E:08:41:EC:27:BA
X509v3 Authority Key Identifier:
keyid:AC:B5:F5:BD:48:45:16:7F:55:B8:DB:C4:92:45:C4:0C:47:6C:72:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:04:76:05:0e:f7:30:f3:94:d4:2e:f0:f1:93:f3:ad:93:1e:
e3:e2:5a:57:dd:99:65:39:ff:5a:03:5a:17:5f:e3:5c:4f:3a:
53:f5:71:4d:5b:8f:24:3e:df:e7:87:f5:61:86:93:1f:88:b1:
b7:56:11:a5:d4:33:f0:a7:7b:5b:28:5f:0b:d3:c3:94:40:15:
2d:1c:90:ca:a0:05:9a:7f:72:3f:3b:ac:6c:60:85:36:17:1e:
fa:69:20:06:4c:41:9d:05:58:88:4e:6e:2b:12:e1:32:c2:cc:
af:b4:83:bb:38:ee:8d:ce:83:27:65:bc:6f:c0:35:63:de:d8:
38:95:f9:e1:cb:03:8c:b1:33:66:5f:de:98:4e:2f:a1:dc:97:
8c:03:61:0e:7f:35:af:0a:bc:05:be:68:e0:73:2b:1c:a6:eb:
6e:59:f3:45:1b:01:ac:de:ef:5d:2c:a5:d3:50:32:7c:d5:27:
f4:03:8e:a9:63:37:62:ed:da:e3:7b:35:a8:61:e8:16:58:88:
3c:f8:73:4a:ee:68:cb:6c:8f:c3:ef:97:9d:e5:99:7f:4b:85:
02:7c:91:ad:cd:1e:12:37:e2:d2:7a:86:26:cc:3e:1e:79:57:
eb:91:e2:11:3b:47:9b:dd:28:e6:05:df:3c:0b:c0:3b:b9:0d:
9d:6a:c9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:21:56 2026 by rpki-client