
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/A2CA2636D90ECEE03080294F58D8AB8A1B349996.mft
File: A2CA2636D90ECEE03080294F58D8AB8A1B349996.mft (raw, json)
Hash identifier: pqxSkbr2wWLnz1jfr3FZIb9p7VM6jTr630ZmSWC0bcY=
Subject key identifier: 51:EB:A7:65:66:76:A0:E5:05:85:0D:4A:77:D2:42:83:00:60:1A:7F
Authority key identifier: A2:CA:26:36:D9:0E:CE:E0:30:80:29:4F:58:D8:AB:8A:1B:34:99:96
Certificate issuer: /CN=A2CA2636D90ECEE03080294F58D8AB8A1B349996
Certificate serial: 630C42AB9818F26C9927615D4E5A9FE0F261F9BA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2CA2636D90ECEE03080294F58D8AB8A1B349996.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/A2CA2636D90ECEE03080294F58D8AB8A1B349996.mft
Manifest number: C2
Signing time: Thu 24 Sep 2026 06:03:17 +0000
Manifest this update: Thu 24 Sep 2026 05:58:17 +0000
Manifest next update: Fri 25 Sep 2026 07:36:17 +0000
Files and hashes: 1: A2CA2636D90ECEE03080294F58D8AB8A1B349996.crl (hash: v1QbXkYWBrnxlbee4RDuj7DwWSsuNcgSi9I7CNmP9hc=)
2: 3135372e32302e3233362e302f32342d3234203d3e203538333639.roa (hash: BrEAiFV+dHptCn088oRLw0yFHBOD29YxvGJgz6+xTEs=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/A2CA2636D90ECEE03080294F58D8AB8A1B349996.crl
rsync://rpki-rsync.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/A2CA2636D90ECEE03080294F58D8AB8A1B349996.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2CA2636D90ECEE03080294F58D8AB8A1B349996.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 07:36:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:0c:42:ab:98:18:f2:6c:99:27:61:5d:4e:5a:9f:e0:f2:61:f9:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A2CA2636D90ECEE03080294F58D8AB8A1B349996
Validity
Not Before: Sep 24 05:58:17 2026 GMT
Not After : Sep 25 07:36:17 2026 GMT
Subject: CN=51EBA7656676A0E505850D4A77D2428300601A7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ee:25:61:1d:3b:8f:3a:c3:fd:af:39:47:a1:
c6:8d:87:e2:d6:20:df:a0:6e:a0:25:d4:71:03:c4:
5f:10:7f:f9:42:3d:2f:60:2b:1e:b0:90:c6:eb:a2:
8e:1d:b3:49:7c:0d:0b:15:ca:9a:71:28:08:52:3d:
bc:23:e0:fa:21:0a:e6:f0:dc:c7:aa:80:51:8b:97:
c3:f5:17:77:a1:18:ec:bd:72:84:82:40:f3:e5:29:
f3:08:38:53:83:7e:25:b5:39:40:55:ef:37:53:66:
7b:15:fb:c2:e3:45:b9:4e:34:df:fd:3e:e7:2a:cd:
41:5e:56:dd:04:43:3b:34:46:81:42:a2:8a:b5:dd:
8a:f0:1b:11:68:9c:26:ad:2f:26:57:15:37:fe:0c:
03:6e:07:79:ea:95:57:67:6f:02:5c:8f:d7:82:f2:
c7:96:f5:1b:b6:10:61:d7:43:14:81:35:b9:79:85:
cb:6a:dc:a2:61:6f:73:19:a2:71:66:89:0e:7d:b4:
a3:44:3e:cb:92:c2:8d:a4:78:ea:5e:97:31:2b:ef:
43:cd:f6:ea:ce:91:f7:d2:27:38:63:e6:a0:6a:21:
aa:0e:72:73:91:12:0d:b8:fb:ce:99:7e:d2:ee:c8:
73:eb:25:83:34:13:8b:b6:44:dd:da:6f:22:e5:d9:
b1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:EB:A7:65:66:76:A0:E5:05:85:0D:4A:77:D2:42:83:00:60:1A:7F
X509v3 Authority Key Identifier:
keyid:A2:CA:26:36:D9:0E:CE:E0:30:80:29:4F:58:D8:AB:8A:1B:34:99:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/A2CA2636D90ECEE03080294F58D8AB8A1B349996.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2CA2636D90ECEE03080294F58D8AB8A1B349996.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/A2CA2636D90ECEE03080294F58D8AB8A1B349996.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:fa:dc:eb:6f:67:0a:85:6b:13:db:4f:e1:48:95:f4:83:21:
2d:9b:7c:77:fb:01:50:7b:d1:1f:d9:c6:a6:28:f3:a1:05:ae:
7a:c0:b2:6e:ba:6c:78:3a:ff:85:cb:af:02:e6:20:b5:ea:c7:
4a:57:49:7b:00:b3:88:9b:cf:ee:ff:79:f6:56:7e:00:75:cf:
ee:4b:c8:96:e5:c5:19:84:da:86:e3:89:7e:5e:50:a6:7a:3d:
c8:78:86:2a:db:89:6a:74:1b:71:a7:84:96:71:49:83:31:16:
28:ea:de:bf:16:7e:83:03:64:10:a8:26:ae:32:69:9f:35:b4:
0a:25:6d:b2:da:69:2f:7d:80:b3:73:c6:fb:00:e7:51:fd:72:
b5:21:cc:5b:cc:22:4b:8f:06:a6:83:96:70:4e:45:2f:99:34:
3c:4b:42:9f:12:b7:c4:34:94:d3:3a:af:43:9d:e1:80:ec:ec:
b9:13:af:76:63:f0:de:38:0d:41:ab:92:55:c4:d3:a7:a4:fe:
6f:94:63:d8:78:d2:14:3e:da:07:2c:e1:e5:4f:31:ff:37:0a:
dd:a4:df:52:5f:22:91:5a:9d:d5:89:07:f4:01:63:70:69:fc:
e1:c4:e6:7e:e7:36:37:cb:20:ef:fd:09:a0:d8:9d:66:24:a2:
23:79:1a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:31:21 2026 by rpki-client