$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/AC861103DDC024E3BEB681351D66B027A8BA785A.mft File: AC861103DDC024E3BEB681351D66B027A8BA785A.mft (raw, json) Hash identifier: sGfvNiygShrcYZAzyMQMLgwg5btRRCTOTjTLek8HmsY= Subject key identifier: 4F:A9:CD:BA:50:08:44:8F:A7:BB:AD:75:98:AE:39:1B:E6:DF:81:1A Authority key identifier: AC:86:11:03:DD:C0:24:E3:BE:B6:81:35:1D:66:B0:27:A8:BA:78:5A Certificate issuer: /CN=AC861103DDC024E3BEB681351D66B027A8BA785A Certificate serial: 6D761021AF37C4FEA663E09F7D01F13E7B32FBA8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC861103DDC024E3BEB681351D66B027A8BA785A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/AC861103DDC024E3BEB681351D66B027A8BA785A.mft Manifest number: BB Signing time: Sat 19 Sep 2026 23:05:46 +0000 Manifest this update: Sat 19 Sep 2026 23:00:46 +0000 Manifest next update: Mon 21 Sep 2026 03:04:46 +0000 Files and hashes: 1: AC861103DDC024E3BEB681351D66B027A8BA785A.crl (hash: aNtN6RsU1VR/a/Frg4T5LQiO3C60XO0BTqRloyZmtjg=) 2: 3130332e3135382e3235322e302f32342d3234203d3e20313431313337.roa (hash: SW4deFwDdRpgisaH7RqLBMHR3upFCn0yA60y2S1M1VI=) 3: 3130332e3135382e3235322e302f32332d3233203d3e20313431313337.roa (hash: J7StUV2ZODyDnpl4H6qRmHDEDNeYTV1qNMuPRyc9WyE=) 4: 3130332e3135382e3235332e302f32342d3234203d3e20313431313337.roa (hash: Cxuw8utleC956EhbVyK4h8tr3eWPWdRF27VOeiD3sxU=) 5: 323430363a633634303a323a3a2f34382d3438203d3e20313431313337.roa (hash: qh5eFZWjtfs6SGeMUmGMmglBO26iaZvOjL82WMbtwVc=) 6: 323430363a633634303a3a2f33322d3332203d3e20313431313337.roa (hash: pE41vn8Dt1qZrL/6IKcEElho8GXY6UXGVa22Zlk5Klg=) 7: 323430363a633634303a313a3a2f34382d3438203d3e20313431313337.roa (hash: SC/sM91Mj29qp/7MnNyzUUwPkBeQTEbv2cnvmQBFqIM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/AC861103DDC024E3BEB681351D66B027A8BA785A.crl rsync://rpki-rsync.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/AC861103DDC024E3BEB681351D66B027A8BA785A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC861103DDC024E3BEB681351D66B027A8BA785A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 03:04:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:76:10:21:af:37:c4:fe:a6:63:e0:9f:7d:01:f1:3e:7b:32:fb:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC861103DDC024E3BEB681351D66B027A8BA785A Validity Not Before: Sep 19 23:00:46 2026 GMT Not After : Sep 21 03:04:46 2026 GMT Subject: CN=4FA9CDBA5008448FA7BBAD7598AE391BE6DF811A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ab:3a:ad:72:2a:dd:9e:39:cf:c6:0e:4b:7b: a8:dc:b2:5b:97:1a:a6:f1:8f:28:f9:b4:54:59:0a: 1f:52:39:df:0a:19:65:35:b7:3e:d2:c6:a3:2c:c6: 90:ad:96:dc:fb:63:76:68:53:8c:f3:1c:8e:a5:32: 7c:bc:90:45:06:8e:8e:82:a7:a6:c8:4e:55:07:96: 9e:af:da:ce:b6:5b:7c:27:d8:19:6f:c6:2e:5d:90: 44:1b:2d:39:0a:c7:ef:fd:ba:e0:f0:62:93:08:4c: c7:a5:a5:7e:bc:98:05:e1:92:7d:36:9e:f5:b4:5c: 20:8c:31:3e:6e:74:9b:af:de:9b:09:52:8c:7c:43: 50:8c:f5:29:e5:2b:7a:a0:fd:f6:97:21:59:62:23: 70:40:e8:80:a4:00:4b:62:d3:66:9d:23:54:06:c8: 3f:a2:6d:5c:67:43:f2:ed:0c:f6:e6:99:5a:81:36: 5f:30:0a:2c:fd:fa:71:1d:4e:f7:5f:11:54:7b:19: 6e:ed:20:e4:ec:3a:4e:19:62:72:19:d7:b8:44:2f: e9:a2:ee:73:7d:d1:f2:9e:ef:74:4a:0d:bf:01:fc: 69:59:7c:04:a9:91:d7:46:90:ad:1f:70:9c:28:9f: 8a:19:53:18:2a:10:27:ed:d9:2f:8b:0b:70:86:31: 00:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:A9:CD:BA:50:08:44:8F:A7:BB:AD:75:98:AE:39:1B:E6:DF:81:1A X509v3 Authority Key Identifier: keyid:AC:86:11:03:DD:C0:24:E3:BE:B6:81:35:1D:66:B0:27:A8:BA:78:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/AC861103DDC024E3BEB681351D66B027A8BA785A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC861103DDC024E3BEB681351D66B027A8BA785A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/AC861103DDC024E3BEB681351D66B027A8BA785A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:1a:7f:97:db:ae:c9:ab:5b:ae:c4:12:45:6d:b8:d2:86:ca: c4:38:4f:20:97:d0:b3:5d:ec:c6:b6:39:29:32:a5:b4:e9:7c: 7d:fc:0f:34:9a:8b:f2:03:b4:af:81:7f:b0:f2:c2:84:21:17: 6d:9c:fe:22:3e:c3:11:d0:a2:ba:8f:32:10:62:f3:2d:74:21: 37:ba:80:df:07:04:4e:2c:f1:d4:ac:d7:a4:b6:80:dd:d8:e6: 45:3f:16:b6:22:7c:05:6d:2d:1f:61:39:8f:25:cf:1b:35:19: b7:d3:ee:cf:df:60:62:bf:96:f6:7f:c1:0d:16:13:04:41:c9: 63:42:75:2d:ea:f4:2c:26:a5:13:ec:55:c8:4c:f4:1d:73:f7: 09:16:e5:bf:57:7e:a6:a5:ad:6a:35:d9:62:28:a4:a5:c1:29: bc:ce:02:91:2d:04:65:28:3b:ac:80:95:37:4c:50:a4:21:6e: 59:8f:6e:93:ba:1d:99:2c:9e:bb:1d:1a:32:5e:6f:0e:bd:ab: 39:b9:20:cf:e7:d7:b1:76:5d:ee:1a:2c:b4:e7:bf:9d:4f:80: b0:1c:aa:ae:d9:b3:83:47:86:a8:28:f8:fe:5c:3c:b5:98:50: e8:6c:e0:2a:74:79:a9:35:b7:4c:53:e6:61:a6:4e:ae:c5:46: 7b:39:5c:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbXYQIa83xP6mY+CffQHxPnsy+6gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM4NjExMDNEREMwMjRFM0JFQjY4MTM1MUQ2NkIwMjdB OEJBNzg1QTAeFw0yNjA5MTkyMzAwNDZaFw0yNjA5MjEwMzA0NDZaMDMxMTAvBgNV BAMTKDRGQTlDREJBNTAwODQ0OEZBN0JCQUQ3NTk4QUUzOTFCRTZERjgxMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1qzqtcirdnjnPxg5Le6jcsluX Gqbxjyj5tFRZCh9SOd8KGWU1tz7SxqMsxpCtltz7Y3ZoU4zzHI6lMny8kEUGjo6C p6bITlUHlp6v2s62W3wn2Blvxi5dkEQbLTkKx+/9uuDwYpMITMelpX68mAXhkn02 nvW0XCCMMT5udJuv3psJUox8Q1CM9SnlK3qg/faXIVliI3BA6ICkAEti02adI1QG yD+ibVxnQ/LtDPbmmVqBNl8wCiz9+nEdTvdfEVR7GW7tIOTsOk4ZYnIZ17hEL+mi 7nN90fKe73RKDb8B/GlZfASpkddGkK0fcJwon4oZUxgqECft2S+LC3CGMQBFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT6nNulAIRI+nu611mK45G+bfgRowHwYDVR0j BBgwFoAUrIYRA93AJOO+toE1HWawJ6i6eFowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjQ5MDM0NWUtMmQ1Ny00MzQ5LWI3OGYtYzhiMThhNDQyNDQ1LzAvQUM4NjExMDNE REMwMjRFM0JFQjY4MTM1MUQ2NkIwMjdBOEJBNzg1QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzg2MTEwM0REQzAyNEUzQkVCNjgxMzUxRDY2QjAyN0E4QkE3 ODVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjQ5MDM0NWUtMmQ1Ny00MzQ5LWI3 OGYtYzhiMThhNDQyNDQ1LzAvQUM4NjExMDNEREMwMjRFM0JFQjY4MTM1MUQ2NkIw MjdBOEJBNzg1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIYaf5fbrsmrW67EEkVtuNKGysQ4TyCX0LNd 7Ma2OSkypbTpfH38DzSai/IDtK+Bf7DywoQhF22c/iI+wxHQorqPMhBi8y10ITe6 gN8HBE4s8dSs16S2gN3Y5kU/FrYifAVtLR9hOY8lzxs1GbfT7s/fYGK/lvZ/wQ0W EwRByWNCdS3q9CwmpRPsVchM9B1z9wkW5b9XfqalrWo12WIopKXBKbzOApEtBGUo O6yAlTdMUKQhblmPbpO6HZksnrsdGjJebw69qzm5IM/n17F2Xe4aLLTnv51PgLAc qq7Zs4NHhqgo+P5cPLWYUOhs4Cp0eak1t0xT5mGmTq7FRns5XLo= -----END CERTIFICATE-----Generated at Sun Sep 20 21:13:26 2026 by rpki-client