$ rpki-client -vvf rpki-rsync.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.mft File: AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.mft (raw, json) Hash identifier: BJe8WSEAinZioqIgpnP2viteUPjeEh272nfdlRFCADc= Subject key identifier: EE:0F:07:C5:25:7E:F6:98:2B:C7:7A:0F:22:38:48:80:85:F5:0A:1C Authority key identifier: AC:7E:AF:B0:07:F3:DD:9B:32:32:7F:16:3D:AF:2A:92:B5:CE:EC:47 Certificate issuer: /CN=AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47 Certificate serial: 5B1B4DB8F79DA0FAA42C1C8D818C021A5C4629FB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.mft Manifest number: 3F Signing time: Wed 17 Jun 2026 07:11:35 +0000 Manifest this update: Wed 17 Jun 2026 07:06:35 +0000 Manifest next update: Thu 18 Jun 2026 08:23:35 +0000 Files and hashes: 1: 3130332e3131302e34312e302f32342d3234203d3e20313530343734.roa (hash: obnag6K+/PYNxyPn5mnr74fqA7ofmhwpwaEP4tBMPxc=) 2: AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.crl (hash: Ljyigw1sj7YfluT4zOXAX9p1VQ7w4sNkZbJZNxUFubc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.crl rsync://rpki-rsync.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:1b:4d:b8:f7:9d:a0:fa:a4:2c:1c:8d:81:8c:02:1a:5c:46:29:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47 Validity Not Before: Jun 17 07:06:35 2026 GMT Not After : Jun 18 08:23:35 2026 GMT Subject: CN=EE0F07C5257EF6982BC77A0F2238488085F50A1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c6:87:ed:bf:e8:11:bb:f1:17:d9:da:37:5e: c1:23:40:e0:21:01:a4:20:9e:7b:72:ce:f3:46:01: 9b:97:9d:6f:fd:a7:b1:dd:43:a1:57:76:1e:36:66: ce:4b:da:26:94:54:b8:a9:6b:a3:33:1b:08:71:39: bd:a2:e5:d3:eb:56:70:e5:33:6d:b6:d6:01:f4:e9: 2c:d2:3c:74:5c:ae:84:33:53:7c:b3:ed:d9:5e:f5: b3:b0:85:d5:73:c5:57:88:90:cc:da:f0:50:1b:bd: 4a:5f:8a:d2:48:42:a8:22:ae:08:54:fe:b2:36:d5: 3a:5f:97:c4:f2:ef:a5:95:fb:e6:d2:a4:5a:46:c6: c7:db:c4:9b:7f:06:36:30:d1:46:5b:a3:d3:a9:88: 17:fa:31:49:4c:8b:04:47:cb:3f:0a:aa:d1:cd:01: c6:8b:a6:6d:66:05:1f:5c:c3:c3:ed:31:7b:f1:99: 0a:ff:66:a4:db:28:21:48:ad:db:49:97:5b:f7:30: 78:5f:47:aa:1f:7d:b9:ca:92:8c:ad:5e:aa:6c:d5: 68:78:a0:8c:db:72:73:14:e0:35:81:18:34:2f:8d: 94:dc:5b:fa:f2:8e:76:8e:3d:22:34:d4:a9:7e:ff: 2e:90:b5:9d:50:5a:38:dc:66:1a:7d:f5:e3:6a:5e: 72:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:0F:07:C5:25:7E:F6:98:2B:C7:7A:0F:22:38:48:80:85:F5:0A:1C X509v3 Authority Key Identifier: keyid:AC:7E:AF:B0:07:F3:DD:9B:32:32:7F:16:3D:AF:2A:92:B5:CE:EC:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:36:cc:d4:bc:14:73:60:54:2a:0a:46:95:fd:16:a9:08:f3: 75:94:1c:13:ef:9a:b2:82:e9:ca:55:29:f4:3a:af:4a:13:e2: 12:89:75:11:c3:1c:6e:d3:45:80:1f:49:f7:d4:da:a6:0a:93: fd:9e:6f:69:9c:c5:76:21:9a:10:6f:db:3e:e4:51:07:cb:92: cc:70:a9:35:6a:7d:97:5e:e2:8b:db:f2:3d:34:19:b6:72:b3: 45:8e:1f:9b:ae:02:e3:80:e5:a6:8d:1e:44:f7:e7:a9:8d:9a: c7:05:52:b6:10:d6:e8:e4:52:f0:e3:b6:c2:e5:43:d5:81:21: b8:34:ba:14:28:b6:4d:46:57:58:6f:6b:1a:b6:ed:36:9c:b6: 59:5c:f0:26:2f:51:31:65:6d:9d:b4:88:2c:77:6e:db:cf:0b: ed:e4:ba:cd:1f:58:13:6a:53:ff:10:6a:0b:a2:09:90:6e:dc: 77:85:db:a8:63:99:47:c8:9e:77:b4:66:60:ea:7e:12:7e:97: e9:24:ba:35:21:81:53:42:b4:35:d9:c3:ee:49:1d:1d:07:0a: 32:32:a1:ae:a5:bb:81:d9:f0:56:be:64:59:b3:fd:f8:ee:ea: 84:22:1d:03:14:49:8d:fd:85:ec:b3:de:42:93:f9:66:a7:bd: b1:7f:76:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWxtNuPedoPqkLByNgYwCGlxGKfswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM3RUFGQjAwN0YzREQ5QjMyMzI3RjE2M0RBRjJBOTJC NUNFRUM0NzAeFw0yNjA2MTcwNzA2MzVaFw0yNjA2MTgwODIzMzVaMDMxMTAvBgNV BAMTKEVFMEYwN0M1MjU3RUY2OTgyQkM3N0EwRjIyMzg0ODgwODVGNTBBMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqxoftv+gRu/EX2do3XsEjQOAh AaQgnntyzvNGAZuXnW/9p7HdQ6FXdh42Zs5L2iaUVLipa6MzGwhxOb2i5dPrVnDl M2221gH06SzSPHRcroQzU3yz7dle9bOwhdVzxVeIkMza8FAbvUpfitJIQqgirghU /rI21Tpfl8Ty76WV++bSpFpGxsfbxJt/BjYw0UZbo9OpiBf6MUlMiwRHyz8KqtHN AcaLpm1mBR9cw8PtMXvxmQr/ZqTbKCFIrdtJl1v3MHhfR6offbnKkoytXqps1Wh4 oIzbcnMU4DWBGDQvjZTcW/ryjnaOPSI01Kl+/y6QtZ1QWjjcZhp99eNqXnI/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7g8HxSV+9pgrx3oPIjhIgIX1ChwwHwYDVR0j BBgwFoAUrH6vsAfz3ZsyMn8WPa8qkrXO7EcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDA5ODE5N2MtYTUyNi00NWJkLTljZTktMTUzODNjNWQ5NTM2LzAvQUM3RUFGQjAw N0YzREQ5QjMyMzI3RjE2M0RBRjJBOTJCNUNFRUM0Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzdFQUZCMDA3RjNERDlCMzIzMjdGMTYzREFGMkE5MkI1Q0VF QzQ3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDA5ODE5N2MtYTUyNi00NWJkLTlj ZTktMTUzODNjNWQ5NTM2LzAvQUM3RUFGQjAwN0YzREQ5QjMyMzI3RjE2M0RBRjJB OTJCNUNFRUM0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIs2zNS8FHNgVCoKRpX9FqkI83WUHBPvmrKC 6cpVKfQ6r0oT4hKJdRHDHG7TRYAfSffU2qYKk/2eb2mcxXYhmhBv2z7kUQfLksxw qTVqfZde4ovb8j00GbZys0WOH5uuAuOA5aaNHkT356mNmscFUrYQ1ujkUvDjtsLl Q9WBIbg0uhQotk1GV1hvaxq27Tactllc8CYvUTFlbZ20iCx3btvPC+3kus0fWBNq U/8QaguiCZBu3HeF26hjmUfInne0ZmDqfhJ+l+kkujUhgVNCtDXZw+5JHR0HCjIy oa6lu4HZ8Fa+ZFmz/fju6oQiHQMUSY39heyz3kKT+WanvbF/dsg= -----END CERTIFICATE-----Generated at Wed Jun 17 09:20:39 2026 by rpki-client