
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/AC7439239B591D2499B70C3230C1C35BE2A0104B.mft
File: AC7439239B591D2499B70C3230C1C35BE2A0104B.mft (raw, json)
Hash identifier: LUgN9HDgQUObPPyy9wvgrJlb68T7cIZqrdrVYrRXi/M=
Subject key identifier: 07:53:63:26:6F:90:B3:8B:6B:24:9A:C3:40:4F:16:E6:90:12:2D:C2
Authority key identifier: AC:74:39:23:9B:59:1D:24:99:B7:0C:32:30:C1:C3:5B:E2:A0:10:4B
Certificate issuer: /CN=AC7439239B591D2499B70C3230C1C35BE2A0104B
Certificate serial: 5F192D22C43485802372CEAD2B7BE50818326FDB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC7439239B591D2499B70C3230C1C35BE2A0104B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/AC7439239B591D2499B70C3230C1C35BE2A0104B.mft
Manifest number: C0
Signing time: Mon 21 Sep 2026 20:11:21 +0000
Manifest this update: Mon 21 Sep 2026 20:06:21 +0000
Manifest next update: Wed 23 Sep 2026 00:03:21 +0000
Files and hashes: 1: 3130332e3135372e37382e302f32332d3234203d3e20313431313134.roa (hash: w+9v1WGiMKcMfvG8PMyM732c95+KBZTi8eUiSRuPBO8=)
2: 323430363a396163303a3a2f33322d3438203d3e20313431313134.roa (hash: pTJhsbE/QsnSwa5lw6Tt2iC9wy8jG1QR42mcBhsUqfg=)
3: AC7439239B591D2499B70C3230C1C35BE2A0104B.crl (hash: RxJrdBTYXb8cfesE0VpEkg3CtM+km/MVc0xLy8/h3jo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/AC7439239B591D2499B70C3230C1C35BE2A0104B.crl
rsync://rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/AC7439239B591D2499B70C3230C1C35BE2A0104B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC7439239B591D2499B70C3230C1C35BE2A0104B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 00:03:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:19:2d:22:c4:34:85:80:23:72:ce:ad:2b:7b:e5:08:18:32:6f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC7439239B591D2499B70C3230C1C35BE2A0104B
Validity
Not Before: Sep 21 20:06:21 2026 GMT
Not After : Sep 23 00:03:21 2026 GMT
Subject: CN=075363266F90B38B6B249AC3404F16E690122DC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a0:2c:e2:c1:cc:7c:6a:05:77:ee:0a:8e:b6:
57:b3:ea:ff:1b:17:3f:06:1b:0d:a3:bb:d4:89:c2:
63:0f:08:19:b0:c9:99:57:39:c7:ad:db:4d:7a:8d:
ab:ae:42:59:91:4c:60:1f:db:17:62:89:07:38:d3:
10:b5:ed:cb:2b:d5:b5:9d:5c:d3:9b:31:9d:a3:4c:
36:7e:f1:11:39:5f:3b:d9:f2:c5:6d:82:32:85:55:
17:c1:7f:05:0d:42:6b:da:e9:c3:4e:09:c6:fc:60:
18:f8:a0:1e:9c:7d:e4:7d:49:7f:87:c7:6e:9a:2e:
02:44:2c:a8:75:4e:28:d8:ad:f2:c7:f7:6f:78:84:
da:ab:61:60:2d:e3:9f:9e:fd:df:b0:53:7a:f1:42:
22:46:ee:5d:9d:63:0d:1c:56:d2:e4:19:a9:38:09:
af:7f:24:08:01:36:be:e7:fa:75:94:07:f6:e7:3a:
ee:bc:41:f9:39:bc:15:88:72:94:a7:52:47:6e:6d:
c8:bf:24:1e:49:a2:54:a1:cb:e7:28:74:b7:71:8a:
3d:09:c1:bd:bc:ec:55:9f:91:6b:3a:df:a1:56:e5:
e8:c0:47:d6:1b:ab:cc:79:6c:75:46:0d:04:3a:14:
cf:cf:4d:7f:0f:06:5e:01:02:0d:10:09:ab:3d:ee:
d8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:53:63:26:6F:90:B3:8B:6B:24:9A:C3:40:4F:16:E6:90:12:2D:C2
X509v3 Authority Key Identifier:
keyid:AC:74:39:23:9B:59:1D:24:99:B7:0C:32:30:C1:C3:5B:E2:A0:10:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/AC7439239B591D2499B70C3230C1C35BE2A0104B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC7439239B591D2499B70C3230C1C35BE2A0104B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/AC7439239B591D2499B70C3230C1C35BE2A0104B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:ed:5f:c1:dc:ba:26:3e:24:4b:66:7e:f8:2e:15:cb:2f:43:
70:67:de:17:56:ed:20:73:3f:4d:bf:82:73:97:57:61:6a:f1:
b7:95:6b:05:21:57:b8:23:ea:4d:be:02:a6:3e:e3:18:5f:ed:
eb:b7:f1:6c:35:4f:dc:63:40:d5:a9:77:00:d5:04:88:0d:42:
c6:36:cb:db:be:bc:86:65:8d:70:96:16:57:23:6f:e1:46:a6:
c1:1d:99:7f:de:a6:63:01:3d:57:31:40:c4:16:68:18:81:09:
e4:c4:4e:aa:87:c8:39:fb:a8:f7:98:b3:37:59:5a:07:98:3c:
35:91:c7:b2:2f:2c:09:3f:cf:6a:5c:67:4f:42:84:37:1b:ce:
14:3b:cf:dd:f3:e0:33:8f:85:52:9f:fa:25:7d:47:eb:88:b2:
d7:96:f4:92:7e:dd:d0:5c:d0:c9:8f:c9:06:ba:6b:cd:56:da:
11:e7:d5:f3:e7:35:ea:df:10:c1:f2:76:45:62:58:52:1a:63:
86:a0:ee:c9:f4:b7:f0:a3:a6:e0:e4:cd:6b:82:dc:32:34:fa:
de:36:19:cd:9f:93:c0:99:03:7c:a8:18:c6:9b:16:7c:20:5f:
0d:40:79:c0:6e:e1:3a:40:55:ff:3c:87:d4:79:44:50:e5:0f:
cc:63:e3:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:36:17 2026 by rpki-client