
$ rpki-client -vvf repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.mft
File: ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.mft (raw, json)
Hash identifier: yZXIeM96xAB0N9Y2d0lIFSEMteosJqgYuDHoQaXy8Xo=
Subject key identifier: BF:5C:F0:BD:75:6F:E5:7E:6F:CF:06:07:13:DA:DC:73:1F:BD:D3:D8
Authority key identifier: AC:DA:02:2F:7F:3E:28:A6:E1:31:DA:80:D4:C4:18:E8:3C:D0:7C:73
Certificate issuer: /CN=ACDA022F7F3E28A6E131DA80D4C418E83CD07C73
Certificate serial: 31F9F7ABFC807F40C2C2D5E93D793DBE8E34CAEE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.mft
Manifest number: 041E
Signing time: Mon 02 Mar 2026 04:50:03 +0000
Manifest this update: Mon 02 Mar 2026 04:45:03 +0000
Manifest next update: Thu 05 Mar 2026 12:09:03 +0000
Files and hashes: 1: 3131362e35382e3139342e302f32342d3234203d3e203338313534.roa (hash: zWM0xGqqaOdxz1Hu9SQE3wCPcPGJcY2qyq+pULXMUKw=)
2: 3131362e35382e3139322e302f32312d3234203d3e203338313534.roa (hash: shSt6RZ1MwvIPYyETnN1BneHslb44OdrCSOCCLJ7w9E=)
3: ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.crl (hash: wrgMNV0SRGmkSFTQuCqzeTTps1LGhMyWB9EsNz4BGkE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.crl
rsync://repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 06:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:f9:f7:ab:fc:80:7f:40:c2:c2:d5:e9:3d:79:3d:be:8e:34:ca:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ACDA022F7F3E28A6E131DA80D4C418E83CD07C73
Validity
Not Before: Mar 2 04:45:03 2026 GMT
Not After : Mar 5 12:09:03 2026 GMT
Subject: CN=BF5CF0BD756FE57E6FCF060713DADC731FBDD3D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ed:cf:07:ed:56:67:78:dd:9a:27:d9:73:c9:
50:ad:14:bb:a8:36:e8:77:22:13:aa:4a:3a:25:f5:
0b:2a:3b:c6:a1:61:b3:07:b2:cf:24:59:a9:88:0a:
5d:41:91:8e:93:95:d7:14:ee:ff:3b:c0:25:93:b3:
2a:d4:97:04:c2:21:16:78:68:2f:36:6e:44:15:86:
c9:00:14:b8:cc:e6:5f:ef:cc:af:9e:eb:96:fa:51:
98:70:48:cf:67:39:ce:b8:b3:95:8b:37:28:c9:60:
dd:d2:61:d7:23:b0:64:3c:44:db:70:b6:5a:72:39:
a2:85:a4:f7:8b:15:b9:e2:c6:9f:e3:26:fb:15:a6:
a2:b7:5a:00:b9:1e:3d:ba:88:fb:20:20:a9:31:bb:
d9:6f:4e:83:85:c9:86:0d:01:f8:41:6e:9b:da:c3:
cc:6d:49:4e:7c:af:7e:3a:b7:4b:04:29:95:19:4e:
a0:fc:2d:85:15:cb:77:3e:79:60:64:84:02:cd:0d:
75:4a:47:e4:bd:6f:0c:87:1e:2a:d3:a4:ba:b0:e1:
ec:66:4c:b4:84:ac:1d:2a:b0:25:aa:d8:bd:48:4d:
cc:46:f8:50:02:f4:e2:fe:f2:8e:d1:2f:18:ad:66:
3c:9e:b2:a8:4d:aa:7b:dc:41:be:17:82:c7:53:c3:
78:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:5C:F0:BD:75:6F:E5:7E:6F:CF:06:07:13:DA:DC:73:1F:BD:D3:D8
X509v3 Authority Key Identifier:
keyid:AC:DA:02:2F:7F:3E:28:A6:E1:31:DA:80:D4:C4:18:E8:3C:D0:7C:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:06:00:92:75:74:14:24:57:5f:bf:b0:04:48:3e:56:20:5e:
79:db:50:b5:f6:c8:b1:c0:d3:32:8e:22:17:ed:c7:79:3c:d1:
67:22:e3:76:ba:14:a5:4b:79:a1:a3:ac:ab:6d:ee:28:42:cf:
cb:5f:8d:5e:5b:3d:26:1e:ef:8f:86:f9:a9:0b:07:fa:e0:ba:
91:ae:c9:01:0d:39:b5:67:89:b9:6a:45:ac:38:6e:4c:3f:a0:
c5:47:72:dc:22:88:3f:d5:a5:14:c5:b4:af:8e:1a:dd:81:75:
91:17:34:77:f8:a5:28:a5:c0:d7:da:04:38:f5:a0:7a:3f:77:
63:9b:6e:f5:cd:bf:43:76:cf:ef:7d:59:cc:de:ea:80:d3:bc:
8f:b4:47:23:b1:d6:de:9e:d7:c5:4b:57:b7:cc:f9:91:9e:3b:
18:2a:7a:c8:f9:91:c5:a3:64:e7:af:0f:5a:31:e5:11:35:84:
63:6d:e3:7c:f7:a8:c6:2e:70:d5:c3:94:89:72:0b:00:86:92:
54:04:ba:1c:b9:95:76:c5:6e:0e:13:de:b7:95:04:82:60:86:
80:eb:1a:64:f1:2e:9c:14:ba:c0:39:36:c8:a5:5e:b3:f5:1d:
99:27:9c:02:43:c6:7f:8b:db:e8:c5:0b:2c:d2:c3:d7:60:e6:
73:88:39:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:04:09 2026 by rpki-client