
$ rpki-client -vvf repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft
File: ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft (raw, json)
Hash identifier: fhw3qSu+fdnf2C6OPW4duETea0o2MMgpIm7UqcfGAgM=
Subject key identifier: EC:09:6E:A7:F4:9F:5E:68:B9:8D:5F:ED:45:F3:EF:60:FD:12:F4:84
Authority key identifier: AC:FB:1A:5D:99:38:A6:4B:3B:54:A8:32:D5:B7:9C:03:24:86:A7:59
Certificate issuer: /CN=ACFB1A5D9938A64B3B54A832D5B79C032486A759
Certificate serial: 05586730A548FD579BBFEB5F4C955A1AEAB82506
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ACFB1A5D9938A64B3B54A832D5B79C032486A759.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft
Manifest number: 0112
Signing time: Thu 16 Apr 2026 16:00:01 +0000
Manifest this update: Thu 16 Apr 2026 15:55:01 +0000
Manifest next update: Sun 19 Apr 2026 17:52:01 +0000
Files and hashes: 1: 3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa (hash: EWnjtErVMnBbrrbwTFVBXyhULkzmfdybYpW9vhB6Px8=)
2: ACFB1A5D9938A64B3B54A832D5B79C032486A759.crl (hash: N9HiGEBcbbOv3MRvPWHJNmCBaNjejG5Z7v0mraudc7s=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.crl
rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ACFB1A5D9938A64B3B54A832D5B79C032486A759.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 17:52:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:58:67:30:a5:48:fd:57:9b:bf:eb:5f:4c:95:5a:1a:ea:b8:25:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ACFB1A5D9938A64B3B54A832D5B79C032486A759
Validity
Not Before: Apr 16 15:55:01 2026 GMT
Not After : Apr 19 17:52:01 2026 GMT
Subject: CN=EC096EA7F49F5E68B98D5FED45F3EF60FD12F484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:10:21:68:8f:ba:59:d6:a1:a2:b1:00:73:be:
25:72:a9:05:d7:58:7f:73:23:d7:36:f9:6e:7c:9c:
37:0d:c9:41:aa:2e:88:a2:99:6d:b6:69:df:8b:84:
8a:4e:f5:0e:0c:0f:e1:61:d3:01:00:01:6a:74:09:
1e:28:94:15:b1:3d:e7:b1:d0:53:d5:05:ac:87:d2:
eb:13:ba:28:1b:44:9b:35:77:6b:fd:55:39:1c:92:
3e:8a:2b:83:19:20:00:b5:25:11:82:dc:13:ca:43:
3c:18:0e:ff:1b:60:72:fb:9c:a7:55:4e:8c:16:c7:
60:6f:cb:74:b6:8d:e7:a0:20:7e:06:15:eb:a5:1c:
8f:6a:b7:f6:c2:ed:ec:95:a9:a7:0e:cd:8a:8d:dd:
41:b4:16:94:1a:39:77:d9:9f:23:4e:9a:cc:a0:44:
c4:b4:98:70:ce:f1:dd:68:8a:c7:bc:9a:21:82:c3:
ee:23:c4:6b:3a:64:81:90:b3:7d:ef:73:fc:8d:bc:
a4:53:2f:ac:fd:39:8f:2b:82:7a:d2:e9:68:1e:24:
d6:72:d7:55:dc:83:dd:9a:b6:fe:0d:a0:01:bd:d0:
e3:ef:0f:4b:1a:9d:fe:80:16:0a:50:fc:0c:bc:ff:
f0:f8:e7:2a:f6:6f:36:53:36:6d:18:91:82:fe:b5:
69:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:09:6E:A7:F4:9F:5E:68:B9:8D:5F:ED:45:F3:EF:60:FD:12:F4:84
X509v3 Authority Key Identifier:
keyid:AC:FB:1A:5D:99:38:A6:4B:3B:54:A8:32:D5:B7:9C:03:24:86:A7:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ACFB1A5D9938A64B3B54A832D5B79C032486A759.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:f9:0a:fb:70:76:96:02:ac:18:cd:73:1e:84:57:9f:94:87:
1b:49:8e:de:08:26:27:fa:9d:95:24:9e:54:66:35:07:92:6d:
34:fc:2b:86:f6:53:7d:60:c7:da:2d:81:b0:91:ab:56:de:26:
a9:84:c1:78:dd:09:78:9b:03:c6:7c:01:c9:14:5b:79:5f:8f:
91:e6:a9:41:81:18:3a:46:02:f0:a3:ba:d0:8b:12:da:23:2a:
31:24:c6:74:0c:6d:21:42:6c:6e:62:04:20:66:56:e7:35:0f:
e4:3f:55:4d:cf:7c:72:ce:3d:72:0d:92:02:7a:73:4e:4c:4a:
78:f4:ab:4a:39:cc:b8:e0:6f:c4:71:5a:aa:c4:e9:ec:22:bd:
d4:31:f0:95:b5:40:6d:08:4e:bd:25:62:a9:21:e3:c6:ff:45:
7a:1f:a8:28:22:75:a3:2b:d7:96:ba:33:66:5c:1b:17:ff:cd:
bc:d3:89:79:c7:06:57:1f:60:eb:1f:7b:d4:88:77:57:dc:0a:
f9:86:f3:2e:dd:05:ad:3f:e6:d0:b6:c5:5b:03:9f:f1:b0:c2:
2a:f3:a9:ca:51:ac:1f:65:c4:61:52:67:e0:6b:04:ed:62:a3:
f7:b7:7e:fd:9a:51:a1:4a:a1:21:09:bf:21:f9:45:f0:1e:b3:
d6:bf:d1:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:48:27 2026 by rpki-client