
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/ACF266E9010F46F691CC6A492EB1EAC623155D6B.mft
File: ACF266E9010F46F691CC6A492EB1EAC623155D6B.mft (raw, json)
Hash identifier: DjVNG/zRw8h3IS1MWWppbtQoY9pXYeD6g39Pgfzy4/o=
Subject key identifier: A7:15:92:91:73:A8:83:D3:49:AA:CA:C6:FC:0F:7B:88:B4:F7:63:C5
Authority key identifier: AC:F2:66:E9:01:0F:46:F6:91:CC:6A:49:2E:B1:EA:C6:23:15:5D:6B
Certificate issuer: /CN=ACF266E9010F46F691CC6A492EB1EAC623155D6B
Certificate serial: 21E099613548250FE853586F972AB8E6BBAB1A79
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ACF266E9010F46F691CC6A492EB1EAC623155D6B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/ACF266E9010F46F691CC6A492EB1EAC623155D6B.mft
Manifest number: 3A
Signing time: Sun 14 Jun 2026 04:43:37 +0000
Manifest this update: Sun 14 Jun 2026 04:38:37 +0000
Manifest next update: Mon 15 Jun 2026 04:50:37 +0000
Files and hashes: 1: ACF266E9010F46F691CC6A492EB1EAC623155D6B.crl (hash: NjP8R1pR2YZ7KmXqeSa+U+zStpokrwFgOLj6pD/4uJ8=)
2: 3230332e3137312e3232312e302f32342d3234203d3e203435323938.roa (hash: MUcpE9ISijiu2jmaCVn/Sl4d64Wp2iYm3FrbZk8E76Q=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/ACF266E9010F46F691CC6A492EB1EAC623155D6B.crl
rsync://rpki-rsync.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/ACF266E9010F46F691CC6A492EB1EAC623155D6B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ACF266E9010F46F691CC6A492EB1EAC623155D6B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 15 Jun 2026 04:50:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:e0:99:61:35:48:25:0f:e8:53:58:6f:97:2a:b8:e6:bb:ab:1a:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ACF266E9010F46F691CC6A492EB1EAC623155D6B
Validity
Not Before: Jun 14 04:38:37 2026 GMT
Not After : Jun 15 04:50:37 2026 GMT
Subject: CN=A715929173A883D349AACAC6FC0F7B88B4F763C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:8a:37:b3:23:f7:20:67:26:ce:8b:61:b9:e1:
82:18:ee:7e:a2:ca:4d:96:4f:e3:91:e3:2d:d9:80:
50:86:2b:9b:d2:59:7d:76:06:ba:f4:6d:b9:10:39:
a8:b4:5e:d9:78:4d:0a:30:ba:92:0a:d6:3f:c0:cc:
b4:5e:93:6d:24:fc:1c:e5:62:8b:e2:76:5c:35:80:
0e:69:f1:52:51:7c:5f:a3:89:77:dc:74:94:4e:76:
06:13:2d:02:87:1b:91:48:c4:68:b8:bf:77:ec:ad:
a3:b3:11:1e:2a:7b:53:a1:08:3c:06:74:55:59:d8:
0e:e8:e1:9a:6e:5b:fa:d3:ed:e2:b5:86:65:c7:70:
fe:b4:86:d4:0e:b7:38:c6:08:8d:6b:9e:8a:0b:95:
e6:9a:35:b9:c1:e4:20:45:81:74:ff:82:72:33:06:
b6:76:fe:43:08:cf:d5:ae:59:1b:6b:04:bc:a3:8f:
1a:76:ce:0a:b2:2d:e4:18:09:df:f7:6e:9a:fa:21:
74:2e:30:44:56:c8:f8:ef:2f:94:59:8a:33:db:fb:
7e:c6:3e:eb:59:a5:f0:69:e5:5d:44:af:48:af:3e:
3f:b0:23:f2:70:af:d2:e8:d9:fa:50:16:8c:36:8b:
92:72:5c:5d:56:8f:f5:6b:f6:2c:3c:b2:61:3b:1a:
6a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:15:92:91:73:A8:83:D3:49:AA:CA:C6:FC:0F:7B:88:B4:F7:63:C5
X509v3 Authority Key Identifier:
keyid:AC:F2:66:E9:01:0F:46:F6:91:CC:6A:49:2E:B1:EA:C6:23:15:5D:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/ACF266E9010F46F691CC6A492EB1EAC623155D6B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ACF266E9010F46F691CC6A492EB1EAC623155D6B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/ACF266E9010F46F691CC6A492EB1EAC623155D6B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:1e:53:86:a3:a7:69:a6:a9:f2:1c:68:76:de:b2:78:e3:1b:
b1:c1:f6:7e:93:d8:54:99:55:73:fb:73:3d:57:55:97:21:1f:
5c:69:91:7f:88:04:dd:ba:cd:ea:5b:e6:c6:dd:d6:aa:a0:29:
96:84:97:fb:56:20:75:7d:ef:dd:f9:4e:e1:df:d4:82:de:ac:
c9:0d:cf:65:3d:48:dc:23:b1:4d:99:c7:b5:90:38:26:4a:02:
40:7c:59:b4:95:a9:71:df:33:43:41:ff:c7:1a:5b:ae:12:9b:
27:d0:01:78:11:3e:ed:ad:d1:69:a6:0e:8a:ae:1b:15:90:63:
82:14:ca:a8:d4:c8:5e:e1:0e:07:9f:f9:cd:2a:c4:c9:ec:59:
b9:8d:ab:3a:a2:25:01:82:d2:19:0c:3b:6f:67:30:02:aa:49:
98:a3:f8:02:3c:05:fb:2e:6b:32:db:55:a2:40:bf:7b:7f:0b:
ff:ae:d5:55:25:79:ae:49:bc:31:e8:30:a2:31:2a:29:72:21:
7f:9d:56:e1:d2:d4:c2:a9:da:37:28:74:0e:55:51:53:90:e3:
84:0d:d4:df:8d:ab:2d:d0:1b:68:cf:25:9e:f4:e9:0c:84:50:
64:fd:f2:ba:cb:a3:ff:fa:62:77:e5:c9:f9:7c:85:95:49:f8:
8e:76:6c:d9
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUIeCZYTVIJQ/oU1hvlyq45rurGnkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUNGMjY2RTkwMTBGNDZGNjkxQ0M2QTQ5MkVCMUVBQzYy
MzE1NUQ2QjAeFw0yNjA2MTQwNDM4MzdaFw0yNjA2MTUwNDUwMzdaMDMxMTAvBgNV
BAMTKEE3MTU5MjkxNzNBODgzRDM0OUFBQ0FDNkZDMEY3Qjg4QjRGNzYzQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzijezI/cgZybOi2G54YIY7n6i
yk2WT+OR4y3ZgFCGK5vSWX12Brr0bbkQOai0Xtl4TQowupIK1j/AzLRek20k/Bzl
Yovidlw1gA5p8VJRfF+jiXfcdJROdgYTLQKHG5FIxGi4v3fsraOzER4qe1OhCDwG
dFVZ2A7o4ZpuW/rT7eK1hmXHcP60htQOtzjGCI1rnooLleaaNbnB5CBFgXT/gnIz
BrZ2/kMIz9WuWRtrBLyjjxp2zgqyLeQYCd/3bpr6IXQuMERWyPjvL5RZijPb+37G
PutZpfBp5V1Er0ivPj+wI/Jwr9Lo2fpQFow2i5JyXF1Wj/Vr9iw8smE7GmoXAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUpxWSkXOog9NJqsrG/A97iLT3Y8UwHwYDVR0j
BBgwFoAUrPJm6QEPRvaRzGpJLrHqxiMVXWswDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NGJmMmFkNGYtYTcyYS00NmQxLWJkN2QtYTU2MGMzMWVmY2FkLzAvQUNGMjY2RTkw
MTBGNDZGNjkxQ0M2QTQ5MkVCMUVBQzYyMzE1NUQ2Qi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BQ0YyNjZFOTAxMEY0NkY2OTFDQzZBNDkyRUIxRUFDNjIzMTU1
RDZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGJmMmFkNGYtYTcyYS00NmQxLWJk
N2QtYTU2MGMzMWVmY2FkLzAvQUNGMjY2RTkwMTBGNDZGNjkxQ0M2QTQ5MkVCMUVB
QzYyMzE1NUQ2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACgeU4ajp2mmqfIcaHbesnjjG7HB9n6T2FSZ
VXP7cz1XVZchH1xpkX+IBN26zepb5sbd1qqgKZaEl/tWIHV97935TuHf1ILerMkN
z2U9SNwjsU2Zx7WQOCZKAkB8WbSVqXHfM0NB/8caW64SmyfQAXgRPu2t0WmmDoqu
GxWQY4IUyqjUyF7hDgef+c0qxMnsWbmNqzqiJQGC0hkMO29nMAKqSZij+AI8Bfsu
azLbVaJAv3t/C/+u1VUlea5JvDHoMKIxKilyIX+dVuHS1MKp2jcodA5VUVOQ44QN
1N+Nqy3QG2jPJZ706QyEUGT98rrLo//6Ynflyfl8hZVJ+I52bNk=
-----END CERTIFICATE-----
Generated at Sun Jun 14 12:03:34 2026 by rpki-client