
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.mft
File: B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.mft (raw, json)
Hash identifier: 2Yz8hag/ELScCJwxZkvyavFr/cCv81yIT6bmsASpBAk=
Subject key identifier: 9A:59:26:30:06:C6:02:A2:5F:7A:3A:17:EC:48:32:90:CB:A2:FC:A5
Authority key identifier: B7:AC:AC:8C:1A:6D:56:7C:70:21:67:C3:BF:5D:55:DC:A8:06:1D:09
Certificate issuer: /CN=B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09
Certificate serial: 0F402384C029E3FE4E8098D8224DA933D727ED0A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.mft
Manifest number: BD
Signing time: Mon 21 Sep 2026 04:01:30 +0000
Manifest this update: Mon 21 Sep 2026 03:56:30 +0000
Manifest next update: Tue 22 Sep 2026 04:55:30 +0000
Files and hashes: 1: 3130332e34322e3131382e302f32342d3234203d3e203234353139.roa (hash: UiQg2uhClOmxDzilityVFDsUTcFwNoOe65yL07fwsrE=)
2: B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.crl (hash: GdK8lMpBD0H7PzOiOAJD8fP5Kii1kfR8jD6Hw+wL/FA=)
3: 3130332e34322e3131372e302f32342d3234203d3e20313431393638.roa (hash: D+vBT8RjuXQRENNs+sRNnv0u+qOPPua7Ci6xauViEhY=)
4: 3130332e34322e3131362e302f32322d3232203d3e203234353139.roa (hash: iaB2BU40NYYT5gzoU2/HVHmJ1OLrV8vuDA/NUX6fKHM=)
5: 3130332e34322e3131382e302f32332d3233203d3e203234353139.roa (hash: LUmG2PnUdmtlekMQPkmF2jVlBr5BwiDl1Q3zaubpydY=)
6: 3130332e34322e3131392e302f32342d3234203d3e203234353139.roa (hash: 3thO/9yyE41CicpFLtHQ75Nw909jV+2QY8QpbmSrjas=)
7: 3130332e34322e3131362e302f32342d3234203d3e20313431393638.roa (hash: LFwbkJ+ntBwxqtVdCPUurrC+Hhb3oO3C1dGEk8iDIYc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.crl
rsync://rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 04:55:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:40:23:84:c0:29:e3:fe:4e:80:98:d8:22:4d:a9:33:d7:27:ed:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09
Validity
Not Before: Sep 21 03:56:30 2026 GMT
Not After : Sep 22 04:55:30 2026 GMT
Subject: CN=9A59263006C602A25F7A3A17EC483290CBA2FCA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:45:54:7f:25:92:2b:52:7a:a8:6f:6c:0d:e9:
87:aa:f2:47:86:a2:9e:53:36:1c:be:77:d9:52:05:
93:7a:b7:95:07:15:d9:08:2e:38:76:4f:22:82:33:
e6:18:34:a0:5b:73:94:72:6f:7d:15:1d:d9:38:f9:
d2:41:75:0c:e1:59:27:2b:76:9f:87:24:87:f4:96:
5b:3b:1d:ea:ac:6b:c7:b7:23:e1:90:fc:92:73:7b:
91:5a:64:83:d5:a4:e3:da:a3:fe:bf:0e:25:80:83:
84:a3:9f:d9:a9:70:7d:91:ac:55:88:f6:87:30:04:
e1:0b:37:73:5d:c9:6e:61:ff:67:c9:76:a7:d4:fd:
f9:5c:85:21:5e:be:e7:cf:fb:e2:d9:e5:7c:be:d5:
dc:3d:3f:f6:20:5a:f2:7b:77:b3:57:70:cc:3f:25:
95:32:e1:17:3f:05:1e:94:97:f6:e3:04:26:e4:9a:
09:48:53:1d:81:01:c5:ac:1d:bc:cb:89:ab:15:73:
ec:f9:dc:8c:4a:7d:a8:19:42:87:99:e4:14:76:e6:
21:15:d6:d1:48:83:70:f6:82:c3:49:c7:cf:2d:a5:
4b:3e:e5:2e:1d:c8:90:c5:73:fd:15:4e:69:46:8c:
c1:06:db:b7:54:64:fe:ef:7b:3d:ff:69:9f:da:bd:
55:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:59:26:30:06:C6:02:A2:5F:7A:3A:17:EC:48:32:90:CB:A2:FC:A5
X509v3 Authority Key Identifier:
keyid:B7:AC:AC:8C:1A:6D:56:7C:70:21:67:C3:BF:5D:55:DC:A8:06:1D:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/B7ACAC8C1A6D567C702167C3BF5D55DCA8061D09.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:83:5a:ba:aa:73:9f:c8:7e:7b:78:ef:9a:69:df:2e:99:96:
ac:f4:39:f2:76:2d:70:58:f1:7d:83:75:b4:74:51:2f:c4:87:
93:a6:5c:5c:fd:e6:64:b4:84:5b:0d:d8:0b:f8:63:cf:3d:45:
e0:93:84:8f:cd:69:db:9e:a5:3c:5a:07:a5:85:de:b1:ba:dc:
8b:55:a9:65:5e:f2:43:83:25:3c:39:4f:18:0e:d7:a3:b8:8c:
30:ea:46:38:4f:9e:08:ca:51:ba:53:90:fd:b9:43:78:3c:8c:
1b:cc:57:b2:dc:a0:cf:d8:54:36:41:bf:7a:a0:ec:af:57:b6:
a4:0d:90:fe:3c:e9:6e:e9:94:b8:bc:43:0f:0b:ba:1d:83:a7:
2b:87:4b:b9:51:5e:0b:da:34:5e:09:8a:69:36:52:6c:88:e4:
c2:33:87:6e:de:0e:38:0b:19:5e:0e:53:57:6e:a4:06:15:1e:
49:75:56:9e:4a:05:e4:26:4f:d9:98:71:6e:1a:fe:fa:26:e5:
07:09:d8:6b:3a:95:86:13:a4:c8:0b:a3:a3:f0:bf:38:9b:11:
aa:bd:51:17:b4:30:97:ed:a5:da:9d:13:0c:a0:2d:65:e5:fb:
83:9a:a7:d2:c1:df:29:bd:08:05:34:04:0c:65:db:aa:c2:87:
eb:b3:a4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:08:09 2026 by rpki-client