
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.mft
File: ACB5F5BD4845167F55B8DBC49245C40C476C72D1.mft (raw, json)
Hash identifier: P6pXHsfITj77AtVBM6vj2XKwoU8BdQ5FcwO16XL3neY=
Subject key identifier: 9F:9B:69:D8:38:15:51:92:85:AF:EB:BD:85:91:5B:80:62:BB:EF:D0
Authority key identifier: AC:B5:F5:BD:48:45:16:7F:55:B8:DB:C4:92:45:C4:0C:47:6C:72:D1
Certificate issuer: /CN=ACB5F5BD4845167F55B8DBC49245C40C476C72D1
Certificate serial: 7A5FDEE9F68A8AED681C80809D1EED74235B170C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 22:15:31 +0000
Manifest this update: Tue 12 May 2026 22:10:31 +0000
Manifest next update: Wed 13 May 2026 22:18:31 +0000
Files and hashes: 1: 323430363a313334303a3a2f33322d3332203d3e20313430343037.roa (hash: WxEwSz+sWi75wTD9LX4+TZFvBImk89xubZTfF5v2cCg=)
2: 3130332e3135312e33322e302f32332d3233203d3e20313430343037.roa (hash: zegPh8h8i8vXslaukZ/A0UJgubb+r4V2izsS5x1SFA0=)
3: 3130332e3135312e33332e302f32342d3234203d3e20313430343037.roa (hash: 12cGaGOgBCZ2rP3AvRmGNqqU8d1JvTtobCIZ/qRPUPE=)
4: 323430363a313334303a3a2f33322d3430203d3e20313430343037.roa (hash: CVFptYCjc0BlHCccW2Xncqnkcsz2aSryEWVdhnNHxQY=)
5: ACB5F5BD4845167F55B8DBC49245C40C476C72D1.crl (hash: whRXgNAmtCGEH4H1d4K2qY5H2Cj33UAVkuUhvo1UZrw=)
6: 323430363a313334303a3a2f33322d3333203d3e20313430343037.roa (hash: MI6jQTtOVHvsuWHm0uvBE0TFhtVi+xCMKjXMCSCBFDY=)
7: 3130332e3135312e33322e302f32342d3234203d3e20313430343037.roa (hash: yHKtP8J6sRjd2vBKKZ1C8jqGxnt5X4o3lstFY/wy1jg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.crl
rsync://rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:18:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:5f:de:e9:f6:8a:8a:ed:68:1c:80:80:9d:1e:ed:74:23:5b:17:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ACB5F5BD4845167F55B8DBC49245C40C476C72D1
Validity
Not Before: May 12 22:10:31 2026 GMT
Not After : May 13 22:18:31 2026 GMT
Subject: CN=9F9B69D83815519285AFEBBD85915B8062BBEFD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e3:2c:25:e5:74:40:d8:b7:ed:f7:f8:f9:37:
12:49:4b:9f:43:a7:32:5f:80:53:d9:dd:18:55:9f:
32:97:7b:4c:1b:aa:92:9a:e4:2c:98:1c:30:3a:4d:
d6:a0:f7:3b:e4:70:46:0a:41:d9:d0:33:a4:c3:70:
95:7f:f6:42:72:bb:a4:27:2c:1f:e9:ab:90:d0:ff:
81:20:93:2e:f8:df:f8:23:15:b9:e0:25:a9:6a:ce:
e2:cd:52:9b:d5:7a:49:cf:76:8a:ca:9f:d8:ed:eb:
d6:58:02:b6:57:68:39:09:71:64:03:8d:9c:68:f3:
30:b7:ee:b2:66:b9:22:5f:a0:b5:62:68:84:cc:de:
d5:38:b9:df:b1:e2:59:82:7e:e5:c6:af:f0:4f:b0:
d9:2e:46:a7:6c:d5:1f:71:40:99:17:0c:93:4c:07:
f6:e7:1c:55:bd:ae:6a:94:d0:45:0e:85:5c:18:bd:
0f:02:db:23:8a:a0:e1:95:15:4a:c8:42:3d:a2:ce:
8e:c0:f6:9f:87:44:22:5f:c1:ea:b3:41:31:7d:8b:
1e:4f:6e:73:e5:c7:4a:18:5f:74:a2:a8:ba:73:c3:
9c:e6:10:c1:2c:ea:82:4d:dd:17:59:d6:d7:1e:c5:
8d:b8:c2:23:2e:f4:67:05:64:fd:51:3f:6a:8e:a4:
2b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:9B:69:D8:38:15:51:92:85:AF:EB:BD:85:91:5B:80:62:BB:EF:D0
X509v3 Authority Key Identifier:
keyid:AC:B5:F5:BD:48:45:16:7F:55:B8:DB:C4:92:45:C4:0C:47:6C:72:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:ed:01:4f:67:07:7e:d3:46:c0:4e:03:6a:0b:5f:5f:bc:bd:
ff:dd:f2:74:05:b8:e5:2d:cb:47:76:e3:d6:ff:69:74:75:b5:
58:36:3f:0e:89:cd:f1:a8:3b:06:3d:40:7b:94:6e:75:3b:26:
f3:9e:d0:be:70:59:cd:4f:1f:23:cc:09:cb:0d:42:50:86:0f:
14:91:c4:e2:e6:02:1c:18:a7:a6:21:3c:58:9a:84:54:ab:bf:
a5:38:7e:ba:71:8f:66:4b:12:d4:c8:fa:62:b3:ff:52:e1:33:
d5:ae:c2:ea:14:c8:1b:31:15:6c:bc:fe:e0:9d:b1:86:f1:76:
a5:91:7b:0e:3c:d8:a1:16:4f:a7:1e:b7:ea:c7:26:02:a6:cd:
21:15:8f:26:f2:78:9d:80:b2:29:1d:82:11:ff:9f:cc:03:d0:
66:db:cc:0f:d5:10:9d:fa:63:11:cd:87:4c:f0:da:fd:ae:1c:
fb:a6:d4:15:d1:41:e1:1d:10:65:83:d2:b8:50:9a:d8:19:51:
36:e0:2f:a7:c6:f8:5a:58:05:96:18:9c:c5:d6:d1:aa:90:2c:
12:a1:1d:28:fe:0e:af:f9:d1:87:1a:b5:0c:92:a2:f6:6f:3c:
f2:96:a4:31:d0:28:99:22:8b:b6:fe:3a:24:53:85:13:cc:ef:
d7:16:e6:8c
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUel/e6faKiu1oHICAnR7tdCNbFwwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUNCNUY1QkQ0ODQ1MTY3RjU1QjhEQkM0OTI0NUM0MEM0
NzZDNzJEMTAeFw0yNjA1MTIyMjEwMzFaFw0yNjA1MTMyMjE4MzFaMDMxMTAvBgNV
BAMTKDlGOUI2OUQ4MzgxNTUxOTI4NUFGRUJCRDg1OTE1QjgwNjJCQkVGRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc4ywl5XRA2Lft9/j5NxJJS59D
pzJfgFPZ3RhVnzKXe0wbqpKa5CyYHDA6Tdag9zvkcEYKQdnQM6TDcJV/9kJyu6Qn
LB/pq5DQ/4Egky743/gjFbngJalqzuLNUpvVeknPdorKn9jt69ZYArZXaDkJcWQD
jZxo8zC37rJmuSJfoLViaITM3tU4ud+x4lmCfuXGr/BPsNkuRqds1R9xQJkXDJNM
B/bnHFW9rmqU0EUOhVwYvQ8C2yOKoOGVFUrIQj2izo7A9p+HRCJfweqzQTF9ix5P
bnPlx0oYX3SiqLpzw5zmEMEs6oJN3RdZ1tcexY24wiMu9GcFZP1RP2qOpCu3AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUn5tp2DgVUZKFr+u9hZFbgGK779AwHwYDVR0j
BBgwFoAUrLX1vUhFFn9VuNvEkkXEDEdsctEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YzU5NmJjYzgtMzhjZC00NDM3LTgwYjEtNWJhZTlmODU3OTM3LzAvQUNCNUY1QkQ0
ODQ1MTY3RjU1QjhEQkM0OTI0NUM0MEM0NzZDNzJEMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BQ0I1RjVCRDQ4NDUxNjdGNTVCOERCQzQ5MjQ1QzQwQzQ3NkM3
MkQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzU5NmJjYzgtMzhjZC00NDM3LTgw
YjEtNWJhZTlmODU3OTM3LzAvQUNCNUY1QkQ0ODQ1MTY3RjU1QjhEQkM0OTI0NUM0
MEM0NzZDNzJEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIbtAU9nB37TRsBOA2oLX1+8vf/d8nQFuOUt
y0d249b/aXR1tVg2Pw6JzfGoOwY9QHuUbnU7JvOe0L5wWc1PHyPMCcsNQlCGDxSR
xOLmAhwYp6YhPFiahFSrv6U4frpxj2ZLEtTI+mKz/1LhM9WuwuoUyBsxFWy8/uCd
sYbxdqWRew482KEWT6cet+rHJgKmzSEVjybyeJ2AsikdghH/n8wD0GbbzA/VEJ36
YxHNh0zw2v2uHPum1BXRQeEdEGWD0rhQmtgZUTbgL6fG+FpYBZYYnMXW0aqQLBKh
HSj+Dq/50YcatQySovZvPPKWpDHQKJkii7b+OiRThRPM79cW5ow=
-----END CERTIFICATE-----
Generated at Wed May 13 03:58:51 2026 by rpki-client