$ rpki-client -vvf rpki-rsync.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.mft File: AC1D31E1C0EBAF054936EEE31001AFEBD8908274.mft (raw, json) Hash identifier: Vd/ggqdmf0HbmsD9G4NusvE3nu88CmaGXg42js/9QYY= Subject key identifier: 3D:B0:A0:B7:24:F9:80:75:63:3B:FB:F5:C1:57:FE:C9:2A:81:02:7B Authority key identifier: AC:1D:31:E1:C0:EB:AF:05:49:36:EE:E3:10:01:AF:EB:D8:90:82:74 Certificate issuer: /CN=AC1D31E1C0EBAF054936EEE31001AFEBD8908274 Certificate serial: 0101533A8B576A9E967E6280949232611F6CA279 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 09:44:45 +0000 Manifest this update: Wed 17 Jun 2026 09:39:45 +0000 Manifest next update: Thu 18 Jun 2026 11:12:45 +0000 Files and hashes: 1: 3130332e3130312e3231372e302f32342d3234203d3e20313530393431.roa (hash: mI5pJthlZy5JwJ1aBsKt5QmSIIpmL45EJ55YLJWzCQg=) 2: 3130332e3130312e3231362e302f32332d3233203d3e20313530393431.roa (hash: Tf1Q9sDwa+GlXIub485EhNzCHd5//pppNP4qkGRGD+Y=) 3: 3130332e3130312e3231362e302f32342d3234203d3e20313530393431.roa (hash: WjJ5R6RxIV+WwM7kuHxJKIcmy8NFLw826KU6Z0WZ/xY=) 4: AC1D31E1C0EBAF054936EEE31001AFEBD8908274.crl (hash: PLbRiZuEVnWAEsFHBBt1jfRdN/3UCFjmyzOwthZK40E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.crl rsync://rpki-rsync.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:01:53:3a:8b:57:6a:9e:96:7e:62:80:94:92:32:61:1f:6c:a2:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC1D31E1C0EBAF054936EEE31001AFEBD8908274 Validity Not Before: Jun 17 09:39:45 2026 GMT Not After : Jun 18 11:12:45 2026 GMT Subject: CN=3DB0A0B724F98075633BFBF5C157FEC92A81027B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:72:b1:f4:6c:1d:ae:b8:bb:87:5e:43:45:78: 92:f8:4d:5b:2f:08:5e:f9:55:b2:3b:35:f8:8b:e0: 84:9f:a4:5d:4a:3e:1b:e6:0f:cb:a9:e8:44:21:13: c7:3a:5b:c4:df:b3:9b:9d:02:5d:99:98:6d:2b:53: b8:93:c7:00:f3:55:9b:92:c6:4b:99:0c:6d:e4:82: 69:85:5d:34:a9:ba:65:1a:45:f7:94:7f:4f:4b:c2: df:4e:47:ae:a2:88:d7:6a:bb:42:31:ad:f0:df:d9: 36:95:b9:53:e2:19:97:89:5d:73:ed:ff:36:e6:3a: bb:86:29:77:00:7e:48:89:be:ac:7b:57:f2:48:c0: 93:61:80:6f:5d:6f:9f:91:11:b1:b6:1b:dd:6d:37: e1:e6:de:5e:fa:87:d1:66:ee:4d:7a:86:d9:b1:1e: d6:43:a4:80:a2:59:aa:e2:5b:3f:13:65:e5:7e:8c: 2b:58:d9:5f:61:50:e6:29:77:d0:a4:88:5d:96:d2: d1:0b:2c:9c:19:80:49:37:03:ff:f7:ea:f8:f9:be: 46:19:a7:79:56:97:c7:1c:1d:de:0d:e2:e2:b6:12: d1:67:a9:0e:ed:73:ec:df:cb:8d:fe:01:08:8d:1a: 5b:86:eb:f4:f4:33:41:c1:54:6d:48:b8:c0:c7:b8: 75:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:B0:A0:B7:24:F9:80:75:63:3B:FB:F5:C1:57:FE:C9:2A:81:02:7B X509v3 Authority Key Identifier: keyid:AC:1D:31:E1:C0:EB:AF:05:49:36:EE:E3:10:01:AF:EB:D8:90:82:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:5b:0e:79:be:50:ed:06:ce:38:cb:27:91:02:c7:78:bc:9a: e4:7a:69:32:61:dd:e3:f9:8d:5a:91:16:61:cc:c2:f8:2a:d9: 5c:0b:a9:e2:1b:1f:ea:23:7e:51:96:d8:4c:18:6c:a9:57:2c: 82:21:d8:a8:ce:c4:ab:4a:75:a5:ee:86:a0:a8:dd:74:0d:2a: ab:ae:a8:89:cb:40:67:e0:61:b2:36:3a:27:43:21:88:f5:10: ab:5e:4f:49:7a:6a:73:6a:ee:cf:d6:62:66:53:e6:c6:68:a9: 21:82:2d:cb:9f:a1:c9:23:51:fc:69:fe:82:16:d2:ad:38:29: c2:aa:10:6a:ff:01:a4:eb:fe:49:35:a4:da:90:46:88:1f:35: a3:a6:05:54:11:0f:01:db:3d:11:13:61:b6:53:a3:07:54:a5: 82:79:d5:96:55:2e:65:98:6f:1c:e3:ea:ae:e2:20:24:a5:28: 71:1f:1f:1e:5a:d6:b0:29:b3:ad:2f:04:6c:98:a0:96:86:85: b9:7a:b5:77:c3:28:8d:9b:36:78:89:81:72:cd:70:52:00:d7: 20:79:bb:49:ce:7c:9f:41:b0:fe:54:16:5f:78:be:ba:95:57: 69:12:f2:e0:9e:ff:9d:4c:1c:a4:5a:de:b7:cf:42:a9:c5:ce: ea:17:e2:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAQFTOotXap6WfmKAlJIyYR9sonkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUMxRDMxRTFDMEVCQUYwNTQ5MzZFRUUzMTAwMUFGRUJE ODkwODI3NDAeFw0yNjA2MTcwOTM5NDVaFw0yNjA2MTgxMTEyNDVaMDMxMTAvBgNV BAMTKDNEQjBBMEI3MjRGOTgwNzU2MzNCRkJGNUMxNTdGRUM5MkE4MTAyN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTcrH0bB2uuLuHXkNFeJL4TVsv CF75VbI7NfiL4ISfpF1KPhvmD8up6EQhE8c6W8Tfs5udAl2ZmG0rU7iTxwDzVZuS xkuZDG3kgmmFXTSpumUaRfeUf09Lwt9OR66iiNdqu0IxrfDf2TaVuVPiGZeJXXPt /zbmOruGKXcAfkiJvqx7V/JIwJNhgG9db5+REbG2G91tN+Hm3l76h9Fm7k16htmx HtZDpICiWariWz8TZeV+jCtY2V9hUOYpd9CkiF2W0tELLJwZgEk3A//36vj5vkYZ p3lWl8ccHd4N4uK2EtFnqQ7tc+zfy43+AQiNGluG6/T0M0HBVG1IuMDHuHWpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPbCgtyT5gHVjO/v1wVf+ySqBAnswHwYDVR0j BBgwFoAUrB0x4cDrrwVJNu7jEAGv69iQgnQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGExZjM5NzEtM2E0Ny00NTVkLWFiMzAtZTdjMjNiNjFiOWYyLzAvQUMxRDMxRTFD MEVCQUYwNTQ5MzZFRUUzMTAwMUFGRUJEODkwODI3NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzFEMzFFMUMwRUJBRjA1NDkzNkVFRTMxMDAxQUZFQkQ4OTA4 Mjc0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGExZjM5NzEtM2E0Ny00NTVkLWFi MzAtZTdjMjNiNjFiOWYyLzAvQUMxRDMxRTFDMEVCQUYwNTQ5MzZFRUUzMTAwMUFG RUJEODkwODI3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB5bDnm+UO0GzjjLJ5ECx3i8muR6aTJh3eP5 jVqRFmHMwvgq2VwLqeIbH+ojflGW2EwYbKlXLIIh2KjOxKtKdaXuhqCo3XQNKquu qInLQGfgYbI2OidDIYj1EKteT0l6anNq7s/WYmZT5sZoqSGCLcufockjUfxp/oIW 0q04KcKqEGr/AaTr/kk1pNqQRogfNaOmBVQRDwHbPRETYbZTowdUpYJ51ZZVLmWY bxzj6q7iICSlKHEfHx5a1rAps60vBGyYoJaGhbl6tXfDKI2bNniJgXLNcFIA1yB5 u0nOfJ9BsP5UFl94vrqVV2kS8uCe/51MHKRa3rfPQqnFzuoX4p0= -----END CERTIFICATE-----Generated at Wed Jun 17 13:15:16 2026 by rpki-client