
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.mft
File: AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.mft (raw, json)
Hash identifier: iXzZqeCMeesLAhcd9SiR0HvEwmYJN1Xx4ajH879WaZ0=
Subject key identifier: 4F:1E:D2:F8:A9:DB:F4:E5:06:69:2A:E8:15:03:8E:21:DD:F9:39:12
Authority key identifier: AC:9E:E5:D4:AC:F7:FD:0D:FD:66:CD:FE:D1:20:17:1D:F6:19:5E:B0
Certificate issuer: /CN=AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0
Certificate serial: 38105B95B65F9DF2B94E51086AD82D045DB8063E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.mft
Manifest number: 39
Signing time: Sat 13 Jun 2026 14:52:38 +0000
Manifest this update: Sat 13 Jun 2026 14:47:38 +0000
Manifest next update: Sun 14 Jun 2026 16:05:38 +0000
Files and hashes: 1: 3130332e3136322e3132322e302f32332d3234203d3e203137393935.roa (hash: OLWauFfmrw2a6NVsZr060P9JMbawsYC5rFsVrmOkFCE=)
2: AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.crl (hash: hf75yjBbmkRazEsOGvyArM5wUMGG/gsO3M0b44dsWZ4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.crl
rsync://rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:10:5b:95:b6:5f:9d:f2:b9:4e:51:08:6a:d8:2d:04:5d:b8:06:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0
Validity
Not Before: Jun 13 14:47:38 2026 GMT
Not After : Jun 14 16:05:38 2026 GMT
Subject: CN=4F1ED2F8A9DBF4E506692AE815038E21DDF93912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:82:a3:30:40:fc:ac:9b:b5:05:3a:cf:14:97:
5c:f8:12:53:b6:00:2a:d2:ed:e7:5e:8d:91:44:c2:
2d:e0:ab:55:a8:0d:c9:bd:9c:f9:7e:14:41:21:fb:
62:9c:4c:f9:f4:2d:81:eb:39:42:44:7e:76:48:98:
96:a4:3a:df:f0:83:2e:14:24:ed:b0:ec:31:2d:7f:
a2:ca:ae:22:1f:b2:6f:15:6e:ba:2e:6c:bc:fa:e2:
28:4d:da:0f:b0:03:19:28:2c:f2:23:69:42:da:9b:
0a:bc:10:7a:1c:cc:9b:dd:e6:1d:8c:cf:0c:5a:0e:
09:ae:f6:fc:67:f7:84:36:46:66:99:f2:ab:30:a5:
f3:d3:a8:bc:7d:e4:bc:a7:0c:cd:cd:41:b9:58:3b:
6d:fd:1b:64:92:09:e2:ef:ca:7d:d8:7f:7a:8f:58:
83:e4:3e:e8:6a:f2:c1:6a:1d:d9:23:a8:b1:19:1c:
9d:61:b3:44:51:49:12:ea:04:18:46:9c:f8:e8:8f:
3b:d1:2b:b5:ca:a4:71:19:c3:6c:06:d8:56:39:f1:
7c:d3:bd:3f:4b:aa:20:fd:41:05:54:45:59:70:ab:
6e:62:57:20:5c:c7:9f:cd:81:bf:9d:e1:bd:88:93:
38:00:36:d6:f4:2a:3b:e9:60:c5:35:e4:80:4b:86:
60:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:1E:D2:F8:A9:DB:F4:E5:06:69:2A:E8:15:03:8E:21:DD:F9:39:12
X509v3 Authority Key Identifier:
keyid:AC:9E:E5:D4:AC:F7:FD:0D:FD:66:CD:FE:D1:20:17:1D:F6:19:5E:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:d8:b2:3b:1d:d1:fe:cb:a2:8b:a2:21:4e:b4:90:9a:b1:74:
4f:2f:f4:96:c5:e3:e9:af:9f:06:74:bb:26:07:0c:99:d7:8c:
33:78:3e:ae:28:8e:cb:26:a3:17:16:01:a4:d6:45:0a:6d:44:
15:c9:8d:1d:80:af:d8:a2:80:ce:ff:6e:63:29:be:f5:39:19:
d4:13:f1:5e:9c:c8:ee:25:a3:3d:36:6c:6c:31:3c:54:0a:4d:
d7:f8:c8:d1:72:82:0a:d5:8d:2f:50:86:f2:08:37:34:81:46:
a7:ea:59:3f:1b:aa:f4:4f:6e:55:d8:6f:b3:c7:88:30:1e:5b:
2c:51:e5:9d:dc:f4:db:c3:08:5a:87:57:70:66:96:3d:65:e4:
5e:5b:50:8c:a8:59:eb:f1:eb:b4:02:bc:44:68:39:52:bd:32:
a2:d6:49:36:56:40:93:77:3a:8c:e6:79:8f:40:27:eb:6f:c9:
c2:58:e1:04:3d:7e:71:e9:0d:96:09:a9:8b:85:96:ee:7a:be:
29:6a:cb:79:dd:73:44:f3:ef:94:ae:09:f0:b9:10:a9:1c:66:
b9:8c:61:97:cb:1a:b1:50:ab:e7:1d:35:37:bb:00:ee:33:89:
90:97:9f:65:7d:43:75:ab:c9:72:7a:34:2b:26:a0:07:25:75:
3f:35:5e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:43:22 2026 by rpki-client