
$ rpki-client -vvf rpki-rsync.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/7ACC57BA3042B007AA1613352A73FFD3162E565F.mft
File: 7ACC57BA3042B007AA1613352A73FFD3162E565F.mft (raw, json)
Hash identifier: sYV5M1p9AVcS+iDwWHxRwr+6ABsTY+sgT+JfTe30O10=
Subject key identifier: 3D:53:91:2B:29:BE:A4:A3:85:CC:1F:AD:F1:96:01:B2:2B:5B:A4:FD
Authority key identifier: 7A:CC:57:BA:30:42:B0:07:AA:16:13:35:2A:73:FF:D3:16:2E:56:5F
Certificate issuer: /CN=7ACC57BA3042B007AA1613352A73FFD3162E565F
Certificate serial: 3C2CD55498F6247E7AC41D1F10A8B1648DE3B8A5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7ACC57BA3042B007AA1613352A73FFD3162E565F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/7ACC57BA3042B007AA1613352A73FFD3162E565F.mft
Manifest number: 39
Signing time: Sat 13 Jun 2026 02:37:15 +0000
Manifest this update: Sat 13 Jun 2026 02:32:15 +0000
Manifest next update: Sun 14 Jun 2026 05:41:15 +0000
Files and hashes: 1: 3130332e3136302e3137382e302f32332d3233203d3e20313431353932.roa (hash: EE9ymycRiG5es8LdeuDyt4ZBgyII9pYHMLKeHbtmxMg=)
2: 7ACC57BA3042B007AA1613352A73FFD3162E565F.crl (hash: vuP5h0KtwK3mohCRVsy6Y5Fnbop3aiS+UP5Y5tsJOTI=)
3: 3130332e3136302e3137382e302f32342d3234203d3e20313431353932.roa (hash: jo8zHFeqe3LGwp2AuxTgHU+gmdWY0CJTnZZ7WU6u+5k=)
4: 3130332e3136302e3137392e302f32342d3234203d3e20313431353932.roa (hash: z0ApomisoqwQnhgmCVulOkc7tSSTjZgNZBL2SV/mK8w=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/7ACC57BA3042B007AA1613352A73FFD3162E565F.crl
rsync://rpki-rsync.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/7ACC57BA3042B007AA1613352A73FFD3162E565F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7ACC57BA3042B007AA1613352A73FFD3162E565F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 05:41:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:2c:d5:54:98:f6:24:7e:7a:c4:1d:1f:10:a8:b1:64:8d:e3:b8:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ACC57BA3042B007AA1613352A73FFD3162E565F
Validity
Not Before: Jun 13 02:32:15 2026 GMT
Not After : Jun 14 05:41:15 2026 GMT
Subject: CN=3D53912B29BEA4A385CC1FADF19601B22B5BA4FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:24:29:54:49:19:cf:14:fa:ca:7d:ed:e7:30:
ef:79:05:13:61:de:c3:04:30:0f:fe:cc:31:ec:1e:
8f:13:c8:9c:d6:a3:28:b1:f3:8f:d9:cb:ec:a4:dd:
17:23:6e:78:07:cf:06:32:15:03:57:21:19:e6:c1:
da:98:67:39:70:3f:f5:45:1e:93:74:ee:bb:96:97:
8f:e7:f0:04:15:dd:2a:94:b6:44:35:dd:1b:b8:52:
88:57:69:89:c9:43:71:02:cb:98:41:0d:31:c4:2c:
86:f7:b0:78:e7:a9:c0:95:4b:82:38:d7:11:3e:f0:
da:3b:c4:a4:74:47:8d:61:e8:6b:3d:2f:00:48:6b:
73:a0:cc:cd:a4:ef:80:b3:8e:95:f0:89:e9:c2:78:
79:a0:f0:08:b9:80:d5:1b:68:d3:66:be:4c:37:9f:
0a:8f:87:1f:ab:ef:40:18:3b:c3:35:46:b2:eb:08:
3f:77:b7:85:41:6e:a9:47:95:8d:9f:f0:a1:81:19:
4e:ca:9b:78:9e:60:03:37:d2:75:d3:cb:5c:d2:fd:
3f:c9:20:95:77:0b:03:4c:8c:17:4f:96:81:f8:c7:
d6:3c:38:15:8c:96:1c:8c:96:97:8e:31:78:6d:31:
bc:d6:36:a1:ec:c2:bc:d1:e2:ac:2b:9c:f9:d6:4f:
1a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:53:91:2B:29:BE:A4:A3:85:CC:1F:AD:F1:96:01:B2:2B:5B:A4:FD
X509v3 Authority Key Identifier:
keyid:7A:CC:57:BA:30:42:B0:07:AA:16:13:35:2A:73:FF:D3:16:2E:56:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/7ACC57BA3042B007AA1613352A73FFD3162E565F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7ACC57BA3042B007AA1613352A73FFD3162E565F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/7ACC57BA3042B007AA1613352A73FFD3162E565F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:ca:f4:ce:40:ab:32:63:17:f4:49:96:7a:11:8f:36:ab:f7:
6b:28:d5:ed:fe:f0:c2:b0:1d:10:40:b2:51:c5:92:09:4a:09:
16:5f:dd:d3:a3:08:59:30:c1:44:ae:97:b2:55:9c:4f:a6:bd:
f4:7d:c2:24:c3:a4:1f:79:8d:14:8f:e9:11:a1:fc:7a:35:f8:
51:1c:16:6e:e0:dd:c4:b7:10:df:cc:1c:62:20:f4:9a:14:8c:
e4:a8:4b:58:45:5c:f4:a8:2b:6f:36:66:56:00:a1:39:4f:f8:
2a:6c:97:18:74:4b:db:f7:44:f1:04:c9:16:52:bd:f5:23:ea:
06:80:b6:20:b1:f4:e8:90:bd:f5:ff:eb:f5:e2:52:87:9e:95:
98:f4:9b:38:19:a8:bd:05:f7:50:89:80:e1:eb:a9:59:f5:50:
65:0e:1f:c8:43:e5:94:6b:2f:f7:6d:6c:b0:b5:0e:51:3b:b2:
7c:dd:f9:46:aa:9c:85:99:ff:09:4a:c2:ea:05:c4:77:6b:78:
d3:ee:96:cf:a6:78:b1:8a:ed:03:99:e7:9a:8b:09:54:3e:c8:
e5:e4:be:78:f0:97:22:75:54:98:4c:30:89:f9:28:f4:cc:80:
a2:70:44:45:f7:e4:35:bc:b8:0f:a5:21:5a:6c:5d:18:16:f8:
42:77:6a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:28:24 2026 by rpki-client