$ rpki-client -vvf rpki-rsync.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/AC135A343D89C2715C1AA76F3314EDF91A5D7473.mft File: AC135A343D89C2715C1AA76F3314EDF91A5D7473.mft (raw, json) Hash identifier: sIJfIfUaW9/EN7ilq3u4o79u/Ys05QPZ9Ui7XAd+AHU= Subject key identifier: CC:DE:3D:06:96:D3:C1:8E:06:FB:6F:E0:5F:24:9C:80:85:95:B3:4C Authority key identifier: AC:13:5A:34:3D:89:C2:71:5C:1A:A7:6F:33:14:ED:F9:1A:5D:74:73 Certificate issuer: /CN=AC135A343D89C2715C1AA76F3314EDF91A5D7473 Certificate serial: 3334D4CA067A551FDA7548D3784637CF34173F01 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC135A343D89C2715C1AA76F3314EDF91A5D7473.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/AC135A343D89C2715C1AA76F3314EDF91A5D7473.mft Manifest number: 3A Signing time: Sun 14 Jun 2026 00:48:49 +0000 Manifest this update: Sun 14 Jun 2026 00:43:49 +0000 Manifest next update: Mon 15 Jun 2026 04:16:49 +0000 Files and hashes: 1: AC135A343D89C2715C1AA76F3314EDF91A5D7473.crl (hash: Jl5ij1WYCxZJ9/MvCAm5L/xllXGPR17w03FWWsYw0Uo=) 2: 3130332e33312e3234302e302f32342d3234203d3e20313339393532.roa (hash: MXQvxQuFfrOrlrDM0pu7aI1UUtAamLu0vBW+zEyQ+dQ=) 3: 3130332e33312e3234312e302f32342d3234203d3e20313339393532.roa (hash: wmrO1sIlSaYPXG3uoDQ46bwtU1pWLEpz2UMTkfOKpVs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/AC135A343D89C2715C1AA76F3314EDF91A5D7473.crl rsync://rpki-rsync.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/AC135A343D89C2715C1AA76F3314EDF91A5D7473.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC135A343D89C2715C1AA76F3314EDF91A5D7473.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:34:d4:ca:06:7a:55:1f:da:75:48:d3:78:46:37:cf:34:17:3f:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC135A343D89C2715C1AA76F3314EDF91A5D7473 Validity Not Before: Jun 14 00:43:49 2026 GMT Not After : Jun 15 04:16:49 2026 GMT Subject: CN=CCDE3D0696D3C18E06FB6FE05F249C808595B34C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:47:93:a0:30:6d:bf:02:51:9b:6e:93:90:42: b5:d8:65:bf:f5:4a:ef:d5:89:a0:54:98:9b:44:81: 5f:85:2e:ae:29:be:04:9f:81:95:11:74:60:99:9d: ef:9c:ad:c9:2d:d2:c9:57:16:ac:2f:ae:34:2c:02: 9f:9c:71:5b:74:98:7a:33:c6:af:fc:c1:51:10:8e: 0c:b1:46:0c:c5:0c:bc:0e:15:f7:8e:be:8f:67:9b: 95:b0:a2:27:8f:36:90:b0:20:8a:7f:0b:95:68:21: 88:9d:18:ee:1d:b4:6d:ce:1d:84:09:3a:ac:aa:3e: ef:79:bc:f8:36:72:5d:f1:32:cc:8c:f7:db:74:fa: 7f:40:4d:67:42:13:c1:66:eb:78:61:12:ca:87:43: 3d:3b:a6:cc:48:5f:78:f7:f7:90:ce:0c:4f:9c:05: f0:5e:63:14:d0:5f:dc:6c:63:b4:6e:a1:c5:f6:95: ce:d6:9c:53:5b:a3:d4:e7:0d:cb:43:da:a8:9c:5a: 61:8c:25:32:d8:23:69:1d:ab:a1:39:55:d8:24:af: fb:31:bc:08:a4:4b:64:ef:a0:87:10:05:df:22:a2: 1e:31:e7:ba:7f:44:8c:cb:1e:da:02:06:68:72:bc: 8e:92:22:1d:32:eb:db:b6:2f:c0:6f:fe:99:38:30: 36:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:DE:3D:06:96:D3:C1:8E:06:FB:6F:E0:5F:24:9C:80:85:95:B3:4C X509v3 Authority Key Identifier: keyid:AC:13:5A:34:3D:89:C2:71:5C:1A:A7:6F:33:14:ED:F9:1A:5D:74:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/AC135A343D89C2715C1AA76F3314EDF91A5D7473.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC135A343D89C2715C1AA76F3314EDF91A5D7473.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/AC135A343D89C2715C1AA76F3314EDF91A5D7473.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:d6:87:79:ba:24:fe:e3:f2:d9:c0:46:40:dc:b3:bd:1c:31: ee:43:14:95:5d:c4:75:22:8d:63:81:88:27:8a:d6:67:75:07: 3b:c9:65:1c:43:ae:bb:2b:b2:c7:8d:07:b8:a5:e8:23:76:aa: 1f:a3:fa:96:53:6f:35:a2:c1:60:bf:ca:2a:e6:df:0e:0f:76: ce:88:01:aa:ff:bc:95:0b:3e:57:8f:96:64:26:af:71:ba:85: 41:11:e8:9b:eb:39:28:75:77:43:c5:f1:8d:1a:05:5b:39:63: bc:d1:78:97:6e:17:af:8e:68:a7:54:7e:fd:0e:98:c4:74:e5: 6e:14:3d:24:22:3c:29:a1:6f:2c:5b:b6:f7:39:00:bf:6c:85: f2:5d:9c:84:04:ac:99:15:8b:86:86:e2:c7:77:7f:57:61:b5: 6b:16:cd:e0:e7:ca:7c:9c:6b:a4:7f:ec:fa:fe:b3:eb:e4:99: 86:24:62:5f:b1:b4:87:e0:68:aa:c6:25:7b:a4:fc:4a:07:ae: 60:64:0b:98:4a:5b:e0:33:3c:d2:12:a2:e6:72:85:17:59:6c: f6:21:31:14:40:e5:31:24:4b:4f:62:90:c2:e6:fc:1a:5b:7e: de:f7:0d:7c:52:2b:3b:f3:ec:b8:34:2a:82:ef:c5:8f:b9:ea: d4:4a:b6:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMzTUygZ6VR/adUjTeEY3zzQXPwEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUMxMzVBMzQzRDg5QzI3MTVDMUFBNzZGMzMxNEVERjkx QTVENzQ3MzAeFw0yNjA2MTQwMDQzNDlaFw0yNjA2MTUwNDE2NDlaMDMxMTAvBgNV BAMTKENDREUzRDA2OTZEM0MxOEUwNkZCNkZFMDVGMjQ5QzgwODU5NUIzNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYR5OgMG2/AlGbbpOQQrXYZb/1 Su/ViaBUmJtEgV+FLq4pvgSfgZURdGCZne+crckt0slXFqwvrjQsAp+ccVt0mHoz xq/8wVEQjgyxRgzFDLwOFfeOvo9nm5WwoiePNpCwIIp/C5VoIYidGO4dtG3OHYQJ OqyqPu95vPg2cl3xMsyM99t0+n9ATWdCE8Fm63hhEsqHQz07psxIX3j395DODE+c BfBeYxTQX9xsY7RuocX2lc7WnFNbo9TnDctD2qicWmGMJTLYI2kdq6E5Vdgkr/sx vAikS2TvoIcQBd8ioh4x57p/RIzLHtoCBmhyvI6SIh0y69u2L8Bv/pk4MDajAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzN49BpbTwY4G+2/gXyScgIWVs0wwHwYDVR0j BBgwFoAUrBNaND2JwnFcGqdvMxTt+RpddHMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjQzMDM0YWEtZjM5Yy00OGY1LTg1MmUtZDFiZDdmMTdhYTQyLzAvQUMxMzVBMzQz RDg5QzI3MTVDMUFBNzZGMzMxNEVERjkxQTVENzQ3My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzEzNUEzNDNEODlDMjcxNUMxQUE3NkYzMzE0RURGOTFBNUQ3 NDczLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjQzMDM0YWEtZjM5Yy00OGY1LTg1 MmUtZDFiZDdmMTdhYTQyLzAvQUMxMzVBMzQzRDg5QzI3MTVDMUFBNzZGMzMxNEVE RjkxQTVENzQ3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIHWh3m6JP7j8tnARkDcs70cMe5DFJVdxHUi jWOBiCeK1md1BzvJZRxDrrsrsseNB7il6CN2qh+j+pZTbzWiwWC/yirm3w4Pds6I Aar/vJULPlePlmQmr3G6hUER6JvrOSh1d0PF8Y0aBVs5Y7zReJduF6+OaKdUfv0O mMR05W4UPSQiPCmhbyxbtvc5AL9shfJdnIQErJkVi4aG4sd3f1dhtWsWzeDnynyc a6R/7Pr+s+vkmYYkYl+xtIfgaKrGJXuk/EoHrmBkC5hKW+AzPNISouZyhRdZbPYh MRRA5TEkS09ikMLm/Bpbft73DXxSKzvz7Lg0KoLvxY+56tRKthc= -----END CERTIFICATE-----Generated at Sun Jun 14 02:44:36 2026 by rpki-client