$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/ACF266E9010F46F691CC6A492EB1EAC623155D6B.mft File: ACF266E9010F46F691CC6A492EB1EAC623155D6B.mft (raw, json) Hash identifier: 4O44S17X6Shd5N/f2L3QN1HSyXp0yQ0/bbDHkBqcSZs= Subject key identifier: F3:BC:C7:56:77:04:9E:80:6C:9C:C7:DE:26:50:66:D8:02:A2:00:71 Authority key identifier: AC:F2:66:E9:01:0F:46:F6:91:CC:6A:49:2E:B1:EA:C6:23:15:5D:6B Certificate issuer: /CN=ACF266E9010F46F691CC6A492EB1EAC623155D6B Certificate serial: 5C48CC91150CEEFADB1BD3EEE08BB16524E942F2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ACF266E9010F46F691CC6A492EB1EAC623155D6B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/ACF266E9010F46F691CC6A492EB1EAC623155D6B.mft Manifest number: BE Signing time: Sun 20 Sep 2026 20:57:52 +0000 Manifest this update: Sun 20 Sep 2026 20:52:52 +0000 Manifest next update: Mon 21 Sep 2026 23:21:52 +0000 Files and hashes: 1: ACF266E9010F46F691CC6A492EB1EAC623155D6B.crl (hash: uMLv232FPl263WRvwHYBopdEDjyNqYlBry3oQRX4WBc=) 2: 3230332e3137312e3232312e302f32342d3234203d3e203435323938.roa (hash: MUcpE9ISijiu2jmaCVn/Sl4d64Wp2iYm3FrbZk8E76Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/ACF266E9010F46F691CC6A492EB1EAC623155D6B.crl rsync://rpki-rsync.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/ACF266E9010F46F691CC6A492EB1EAC623155D6B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ACF266E9010F46F691CC6A492EB1EAC623155D6B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:48:cc:91:15:0c:ee:fa:db:1b:d3:ee:e0:8b:b1:65:24:e9:42:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ACF266E9010F46F691CC6A492EB1EAC623155D6B Validity Not Before: Sep 20 20:52:52 2026 GMT Not After : Sep 21 23:21:52 2026 GMT Subject: CN=F3BCC75677049E806C9CC7DE265066D802A20071 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ed:ee:77:f1:8f:98:36:31:95:be:d5:e8:c7: b9:ba:6e:cc:03:cb:62:d5:97:cf:8c:e9:40:c5:b0: 93:82:10:e5:42:96:95:8a:3c:f7:09:bc:d5:1d:22: 33:d0:91:41:2c:07:3c:aa:6c:ec:ae:54:c1:e6:06: ae:b4:a9:4e:5b:c5:12:92:5b:a7:d3:1f:b8:f6:1b: 63:a2:b0:9c:ea:d8:df:11:d2:d0:19:f7:fe:d6:ac: fc:ee:76:5d:96:67:f8:6f:8a:47:73:b7:2e:61:5d: a7:4b:69:c0:23:f1:85:21:1a:43:64:2d:ce:1c:47: 07:1b:a5:94:29:03:ee:d7:66:ea:83:63:17:01:6b: c4:7c:e2:72:08:60:9d:64:03:07:09:1b:0a:c6:8d: 62:24:3e:64:13:72:1a:09:02:0b:5e:35:53:eb:17: 04:fd:af:46:34:ca:5d:17:5b:93:61:49:f2:dd:9e: c9:c2:1b:66:7a:93:df:7e:f1:16:28:f4:ce:5e:59: 15:1c:a6:a1:31:be:8f:eb:42:36:80:dd:c9:8e:bc: ee:6f:52:3b:a6:40:77:6b:f8:70:fd:4b:3a:34:db: 59:8b:81:7a:8e:5e:d2:70:36:46:29:06:e0:9e:73: 8c:d5:57:14:81:c2:1e:b2:66:8a:c0:16:8c:78:1e: c1:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:BC:C7:56:77:04:9E:80:6C:9C:C7:DE:26:50:66:D8:02:A2:00:71 X509v3 Authority Key Identifier: keyid:AC:F2:66:E9:01:0F:46:F6:91:CC:6A:49:2E:B1:EA:C6:23:15:5D:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/ACF266E9010F46F691CC6A492EB1EAC623155D6B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ACF266E9010F46F691CC6A492EB1EAC623155D6B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/ACF266E9010F46F691CC6A492EB1EAC623155D6B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:38:00:ed:d3:ed:ce:5b:3f:1d:ee:75:fd:6b:91:ce:bf:ae: 99:87:4f:4f:18:d5:48:f7:cd:b1:4a:86:04:a5:97:58:fd:72: 07:a4:c0:02:7d:b3:4b:5c:7b:1e:27:a1:bc:ae:62:8d:f2:27: 5d:68:b9:b8:e3:97:45:3c:01:87:1f:c6:02:0b:80:87:e3:c0: 52:1a:33:67:0c:2b:d0:54:ce:f4:a6:27:2b:12:60:41:cc:d9: 35:e8:81:14:4c:59:90:ec:b6:9d:49:69:d3:68:4a:fd:4e:e9: d4:af:99:bd:59:49:18:27:73:3e:0c:7b:61:bc:c0:2e:0c:f3: ce:c3:6f:9a:c6:ba:72:8a:b1:77:53:68:96:ea:1e:92:4a:b5: 10:a3:08:9a:d4:2b:2d:46:dc:39:4e:ad:fb:c8:07:4d:ad:35: a8:c4:9c:50:e2:33:4d:cb:88:fc:96:2f:e5:a0:ed:6b:2f:b3: dd:2b:00:9b:e7:a7:c8:29:51:fe:98:80:35:b4:f3:75:55:e6: 76:38:92:a8:66:30:88:fc:ab:fa:28:29:48:f6:5c:6d:5d:eb: 64:99:aa:11:63:46:05:b6:80:aa:99:18:43:46:ac:8a:f8:97: 42:d3:ca:ae:8e:6b:7d:ad:50:13:79:76:da:37:b3:5a:cb:f5: df:5b:02:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXEjMkRUM7vrbG9Pu4IuxZSTpQvIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUNGMjY2RTkwMTBGNDZGNjkxQ0M2QTQ5MkVCMUVBQzYy MzE1NUQ2QjAeFw0yNjA5MjAyMDUyNTJaFw0yNjA5MjEyMzIxNTJaMDMxMTAvBgNV BAMTKEYzQkNDNzU2NzcwNDlFODA2QzlDQzdERTI2NTA2NkQ4MDJBMjAwNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCH7e538Y+YNjGVvtXox7m6bswD y2LVl8+M6UDFsJOCEOVClpWKPPcJvNUdIjPQkUEsBzyqbOyuVMHmBq60qU5bxRKS W6fTH7j2G2OisJzq2N8R0tAZ9/7WrPzudl2WZ/hvikdzty5hXadLacAj8YUhGkNk Lc4cRwcbpZQpA+7XZuqDYxcBa8R84nIIYJ1kAwcJGwrGjWIkPmQTchoJAgteNVPr FwT9r0Y0yl0XW5NhSfLdnsnCG2Z6k99+8RYo9M5eWRUcpqExvo/rQjaA3cmOvO5v UjumQHdr+HD9Szo021mLgXqOXtJwNkYpBuCec4zVVxSBwh6yZorAFox4HsGPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU87zHVncEnoBsnMfeJlBm2AKiAHEwHwYDVR0j BBgwFoAUrPJm6QEPRvaRzGpJLrHqxiMVXWswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGJmMmFkNGYtYTcyYS00NmQxLWJkN2QtYTU2MGMzMWVmY2FkLzAvQUNGMjY2RTkw MTBGNDZGNjkxQ0M2QTQ5MkVCMUVBQzYyMzE1NUQ2Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQ0YyNjZFOTAxMEY0NkY2OTFDQzZBNDkyRUIxRUFDNjIzMTU1 RDZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGJmMmFkNGYtYTcyYS00NmQxLWJk N2QtYTU2MGMzMWVmY2FkLzAvQUNGMjY2RTkwMTBGNDZGNjkxQ0M2QTQ5MkVCMUVB QzYyMzE1NUQ2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJk4AO3T7c5bPx3udf1rkc6/rpmHT08Y1Uj3 zbFKhgSll1j9cgekwAJ9s0tcex4nobyuYo3yJ11oubjjl0U8AYcfxgILgIfjwFIa M2cMK9BUzvSmJysSYEHM2TXogRRMWZDstp1JadNoSv1O6dSvmb1ZSRgncz4Me2G8 wC4M887Db5rGunKKsXdTaJbqHpJKtRCjCJrUKy1G3DlOrfvIB02tNajEnFDiM03L iPyWL+Wg7Wsvs90rAJvnp8gpUf6YgDW083VV5nY4kqhmMIj8q/ooKUj2XG1d62SZ qhFjRgW2gKqZGENGrIr4l0LTyq6Oa32tUBN5dto3s1rL9d9bAvU= -----END CERTIFICATE-----Generated at Mon Sep 21 06:10:38 2026 by rpki-client