$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.mft File: AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.mft (raw, json) Hash identifier: /3uc6VcJgefvTLqwOzZR7AS+UKuCvfOBqVXfyQeGY50= Subject key identifier: 3A:CA:75:D2:07:77:58:C1:FB:88:1E:63:CE:B8:6E:4E:A1:7B:EA:1A Authority key identifier: AC:7E:AF:B0:07:F3:DD:9B:32:32:7F:16:3D:AF:2A:92:B5:CE:EC:47 Certificate issuer: /CN=AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47 Certificate serial: 03C247342EE7FE1AA289DEC4E593FB7C9DCA3AC2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.mft Manifest number: C0 Signing time: Mon 21 Sep 2026 02:34:39 +0000 Manifest this update: Mon 21 Sep 2026 02:29:39 +0000 Manifest next update: Tue 22 Sep 2026 03:08:39 +0000 Files and hashes: 1: 3130332e3131302e34312e302f32342d3234203d3e20313530343734.roa (hash: obnag6K+/PYNxyPn5mnr74fqA7ofmhwpwaEP4tBMPxc=) 2: AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.crl (hash: 5q39Ab6ZPRo+ukr/pUuFOYBvZ43rzy0QvLfEnjP6dY0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.crl rsync://rpki-rsync.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:c2:47:34:2e:e7:fe:1a:a2:89:de:c4:e5:93:fb:7c:9d:ca:3a:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47 Validity Not Before: Sep 21 02:29:39 2026 GMT Not After : Sep 22 03:08:39 2026 GMT Subject: CN=3ACA75D2077758C1FB881E63CEB86E4EA17BEA1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:fd:52:5c:a8:a8:bb:57:9b:12:18:6f:46:95: 54:a8:e4:ee:1a:ba:b8:6f:67:a9:ba:26:da:48:00: 65:22:bb:bb:de:45:02:fd:e3:61:6e:ef:f2:e6:d7: e1:54:31:28:ea:f6:b4:9f:66:61:18:7d:40:68:d8: 89:bc:d9:a8:10:95:de:1d:94:21:93:f5:ed:13:a7: 8f:e8:d3:32:0c:48:4a:69:b1:61:71:1d:54:38:8e: 7e:09:9d:f0:f9:85:3f:b7:f2:35:c1:ac:a3:e6:d2: ff:0b:75:22:81:10:d8:d7:81:02:73:1c:55:af:a9: b1:a4:b7:d2:e9:95:2d:03:37:14:7e:6d:f0:63:47: 8d:ac:70:e2:2d:da:a7:ec:af:31:31:19:6b:1c:a6: ba:42:e0:e3:8e:26:8f:bb:65:41:16:fb:64:7a:83: ca:0b:54:61:2e:2f:73:38:6a:09:4a:11:07:de:37: 78:8d:83:48:76:df:e0:c7:ca:d8:68:ff:b3:af:ec: 39:5d:b0:14:27:4a:11:99:8c:57:07:56:f7:0d:f2: 5d:3e:9f:65:1c:29:23:a1:5b:34:30:d5:aa:25:ce: 5c:d9:0f:00:03:0c:a6:6a:6d:80:70:9a:e4:85:01: f4:6b:b4:2d:3f:9d:cf:9d:7a:da:23:ef:32:81:46: 62:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:CA:75:D2:07:77:58:C1:FB:88:1E:63:CE:B8:6E:4E:A1:7B:EA:1A X509v3 Authority Key Identifier: keyid:AC:7E:AF:B0:07:F3:DD:9B:32:32:7F:16:3D:AF:2A:92:B5:CE:EC:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:b8:06:2f:17:1a:68:c4:4e:dd:e4:d2:1d:b5:b3:93:1d:a0: a3:93:8d:c3:5b:28:99:bb:74:6f:48:63:6b:a9:5a:e8:63:97: ad:f4:11:39:be:d6:52:00:f0:d4:9e:ad:eb:16:5e:34:1d:07: 87:08:0d:13:d0:8e:5a:65:b0:e2:8d:d1:78:f9:4f:85:92:21: 9e:7a:9c:bb:c7:4a:45:bd:b8:f8:76:02:29:47:1b:26:f5:43: 8e:03:30:60:e1:77:61:45:06:f9:fe:0a:6b:91:6e:c2:c7:14: c8:7f:f2:32:72:a3:fe:15:b3:95:80:e8:50:80:fa:73:56:43: 6a:be:9c:f7:c7:aa:f0:f1:d6:08:83:d0:e8:3a:91:ff:02:70: e4:56:4e:d0:bb:7c:5f:26:87:02:53:32:14:51:b7:6e:5c:db: e2:28:b6:f3:b2:bf:27:5f:bf:2a:a5:73:1e:c1:4a:b7:4c:a4: 41:ad:e7:cd:97:14:b4:ae:9d:e7:6c:44:75:f5:31:e0:bb:a2: b3:30:24:38:5c:f5:9c:6f:77:4f:da:ac:29:98:b4:78:a9:d3: 86:b1:61:08:3c:98:06:a4:66:b4:af:ee:cf:5e:18:f6:e9:4e: e7:3e:52:a0:e9:c2:ad:c4:8d:17:95:11:db:e1:5a:a4:99:8d: ca:03:61:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA8JHNC7n/hqiid7E5ZP7fJ3KOsIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM3RUFGQjAwN0YzREQ5QjMyMzI3RjE2M0RBRjJBOTJC NUNFRUM0NzAeFw0yNjA5MjEwMjI5MzlaFw0yNjA5MjIwMzA4MzlaMDMxMTAvBgNV BAMTKDNBQ0E3NUQyMDc3NzU4QzFGQjg4MUU2M0NFQjg2RTRFQTE3QkVBMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCO/VJcqKi7V5sSGG9GlVSo5O4a urhvZ6m6JtpIAGUiu7veRQL942Fu7/Lm1+FUMSjq9rSfZmEYfUBo2Im82agQld4d lCGT9e0Tp4/o0zIMSEppsWFxHVQ4jn4JnfD5hT+38jXBrKPm0v8LdSKBENjXgQJz HFWvqbGkt9LplS0DNxR+bfBjR42scOIt2qfsrzExGWscprpC4OOOJo+7ZUEW+2R6 g8oLVGEuL3M4aglKEQfeN3iNg0h23+DHytho/7Ov7DldsBQnShGZjFcHVvcN8l0+ n2UcKSOhWzQw1aolzlzZDwADDKZqbYBwmuSFAfRrtC0/nc+detoj7zKBRmLnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOsp10gd3WMH7iB5jzrhuTqF76howHwYDVR0j BBgwFoAUrH6vsAfz3ZsyMn8WPa8qkrXO7EcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDA5ODE5N2MtYTUyNi00NWJkLTljZTktMTUzODNjNWQ5NTM2LzAvQUM3RUFGQjAw N0YzREQ5QjMyMzI3RjE2M0RBRjJBOTJCNUNFRUM0Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzdFQUZCMDA3RjNERDlCMzIzMjdGMTYzREFGMkE5MkI1Q0VF QzQ3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDA5ODE5N2MtYTUyNi00NWJkLTlj ZTktMTUzODNjNWQ5NTM2LzAvQUM3RUFGQjAwN0YzREQ5QjMyMzI3RjE2M0RBRjJB OTJCNUNFRUM0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGe4Bi8XGmjETt3k0h21s5MdoKOTjcNbKJm7 dG9IY2upWuhjl630ETm+1lIA8NSeresWXjQdB4cIDRPQjlplsOKN0Xj5T4WSIZ56 nLvHSkW9uPh2AilHGyb1Q44DMGDhd2FFBvn+CmuRbsLHFMh/8jJyo/4Vs5WA6FCA +nNWQ2q+nPfHqvDx1giD0Og6kf8CcORWTtC7fF8mhwJTMhRRt25c2+IotvOyvydf vyqlcx7BSrdMpEGt582XFLSunedsRHX1MeC7orMwJDhc9Zxvd0/arCmYtHip04ax YQg8mAakZrSv7s9eGPbpTuc+UqDpwq3EjReVEdvhWqSZjcoDYX0= -----END CERTIFICATE-----Generated at Mon Sep 21 17:00:07 2026 by rpki-client