$ rpki-client -vvf rpki-rsync.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/AC135A343D89C2715C1AA76F3314EDF91A5D7473.mft File: AC135A343D89C2715C1AA76F3314EDF91A5D7473.mft (raw, json) Hash identifier: s7aVA39ZV6JI2IU9+YyeGqo9nFIEpdN2toSQOOZ3XqE= Subject key identifier: 72:DB:7C:83:A7:C1:47:FA:35:3C:6F:5A:98:2D:19:77:BD:B4:91:73 Authority key identifier: AC:13:5A:34:3D:89:C2:71:5C:1A:A7:6F:33:14:ED:F9:1A:5D:74:73 Certificate issuer: /CN=AC135A343D89C2715C1AA76F3314EDF91A5D7473 Certificate serial: 6D4F3C0FD607C3B0FF78CD5B97B2CD092706D148 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC135A343D89C2715C1AA76F3314EDF91A5D7473.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/AC135A343D89C2715C1AA76F3314EDF91A5D7473.mft Manifest number: 75 Signing time: Wed 29 Jul 2026 02:18:52 +0000 Manifest this update: Wed 29 Jul 2026 02:13:52 +0000 Manifest next update: Thu 30 Jul 2026 02:32:52 +0000 Files and hashes: 1: 3130332e33312e3234312e302f32342d3234203d3e20313339393532.roa (hash: wmrO1sIlSaYPXG3uoDQ46bwtU1pWLEpz2UMTkfOKpVs=) 2: AC135A343D89C2715C1AA76F3314EDF91A5D7473.crl (hash: Qv4ho7nlLC1kJx2XquBmEKZcnCQGmc3NkelMurIA2uE=) 3: 3130332e33312e3234302e302f32342d3234203d3e20313339393532.roa (hash: MXQvxQuFfrOrlrDM0pu7aI1UUtAamLu0vBW+zEyQ+dQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/AC135A343D89C2715C1AA76F3314EDF91A5D7473.crl rsync://rpki-rsync.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/AC135A343D89C2715C1AA76F3314EDF91A5D7473.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC135A343D89C2715C1AA76F3314EDF91A5D7473.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 02:32:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:4f:3c:0f:d6:07:c3:b0:ff:78:cd:5b:97:b2:cd:09:27:06:d1:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC135A343D89C2715C1AA76F3314EDF91A5D7473 Validity Not Before: Jul 29 02:13:52 2026 GMT Not After : Jul 30 02:32:52 2026 GMT Subject: CN=72DB7C83A7C147FA353C6F5A982D1977BDB49173 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:af:d8:f6:94:ae:28:84:0e:0a:aa:c7:aa:96: 76:63:3f:6d:5f:c5:47:f7:96:76:fa:08:63:ac:a0: 0b:9f:f8:35:67:31:49:8d:73:f8:2b:6e:c7:ab:88: 88:30:42:ce:19:4a:28:46:95:2d:22:83:d9:50:e8: e3:83:93:d3:91:31:41:d9:ba:ff:ea:5d:df:b7:fe: 83:13:5d:3e:17:66:07:c6:04:c4:66:31:39:6d:e6: 04:05:81:ba:7f:9c:53:74:92:48:0e:94:3a:58:4a: 1e:de:e0:b7:08:8a:31:80:c9:a7:a5:20:0a:e4:8a: f2:e5:e6:97:67:cb:ac:25:f9:ad:59:6a:d2:bf:fb: e6:88:3c:49:32:b3:31:24:5e:0c:1c:1d:71:72:56: 05:0b:9e:1a:5c:14:26:a9:7c:b6:be:3b:13:72:22: c6:df:61:a6:49:34:40:83:df:41:24:1d:28:89:3b: 84:1b:d7:47:37:9c:d1:fe:3c:d1:af:11:da:67:3e: be:6e:a2:4d:a1:37:10:c2:95:3d:76:27:7b:d6:c9: a5:93:de:ae:a1:0e:df:ce:81:32:72:24:d4:f6:9d: b9:7b:e6:77:55:85:86:54:66:8f:13:5e:d6:fb:90: 98:c9:7d:8e:33:ca:2e:f0:8f:8c:58:3a:da:9e:42: a7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:DB:7C:83:A7:C1:47:FA:35:3C:6F:5A:98:2D:19:77:BD:B4:91:73 X509v3 Authority Key Identifier: keyid:AC:13:5A:34:3D:89:C2:71:5C:1A:A7:6F:33:14:ED:F9:1A:5D:74:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/AC135A343D89C2715C1AA76F3314EDF91A5D7473.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC135A343D89C2715C1AA76F3314EDF91A5D7473.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/AC135A343D89C2715C1AA76F3314EDF91A5D7473.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:a9:fb:2c:56:50:d0:09:7e:be:40:14:18:d7:c3:e3:94:76: 0c:b2:62:dd:8a:73:1e:ef:77:5a:b5:9e:9b:7a:cd:51:7b:45: 02:b2:81:fe:53:b5:bf:62:e2:8f:40:ce:87:9b:06:f6:15:82: 02:e6:68:bf:a3:2d:d3:56:6a:fa:b5:2e:83:1a:60:26:ae:0d: b9:1a:2a:b0:55:6d:a0:6c:47:25:2d:c8:f6:72:c4:e2:11:b0: 94:24:84:40:c2:6f:27:f2:64:74:f1:b9:81:43:22:43:c9:89: 3d:03:56:ad:f4:cc:40:5b:97:56:f1:84:a2:d5:df:1e:71:ff: eb:50:45:be:5f:59:5c:83:b7:85:c1:78:58:42:94:36:ab:7b: d1:b7:d8:63:71:8a:dd:b5:04:4f:c6:a9:a5:a4:ce:32:d7:24: 2b:87:68:df:b6:95:fa:36:c3:7d:5d:23:81:29:9a:1e:d1:54: 2b:f1:03:ce:46:9c:94:eb:19:5e:7f:6c:75:1d:84:80:23:9e: 85:ea:a3:8e:ed:68:7c:c1:a8:95:dc:9c:d8:b3:e5:f1:19:46: 4f:11:96:84:3f:e2:2c:82:59:67:2a:49:4d:c9:97:01:c6:8b: 99:f7:33:95:cb:40:6c:cc:1c:df:5f:f2:6e:01:59:49:45:e0: 0f:b7:62:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbU88D9YHw7D/eM1bl7LNCScG0UgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUMxMzVBMzQzRDg5QzI3MTVDMUFBNzZGMzMxNEVERjkx QTVENzQ3MzAeFw0yNjA3MjkwMjEzNTJaFw0yNjA3MzAwMjMyNTJaMDMxMTAvBgNV BAMTKDcyREI3QzgzQTdDMTQ3RkEzNTNDNkY1QTk4MkQxOTc3QkRCNDkxNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCor9j2lK4ohA4KqseqlnZjP21f xUf3lnb6CGOsoAuf+DVnMUmNc/grbseriIgwQs4ZSihGlS0ig9lQ6OODk9ORMUHZ uv/qXd+3/oMTXT4XZgfGBMRmMTlt5gQFgbp/nFN0kkgOlDpYSh7e4LcIijGAyael IArkivLl5pdny6wl+a1ZatK/++aIPEkyszEkXgwcHXFyVgULnhpcFCapfLa+OxNy IsbfYaZJNECD30EkHSiJO4Qb10c3nNH+PNGvEdpnPr5uok2hNxDClT12J3vWyaWT 3q6hDt/OgTJyJNT2nbl75ndVhYZUZo8TXtb7kJjJfY4zyi7wj4xYOtqeQqdJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUctt8g6fBR/o1PG9amC0Zd720kXMwHwYDVR0j BBgwFoAUrBNaND2JwnFcGqdvMxTt+RpddHMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjQzMDM0YWEtZjM5Yy00OGY1LTg1MmUtZDFiZDdmMTdhYTQyLzAvQUMxMzVBMzQz RDg5QzI3MTVDMUFBNzZGMzMxNEVERjkxQTVENzQ3My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzEzNUEzNDNEODlDMjcxNUMxQUE3NkYzMzE0RURGOTFBNUQ3 NDczLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjQzMDM0YWEtZjM5Yy00OGY1LTg1 MmUtZDFiZDdmMTdhYTQyLzAvQUMxMzVBMzQzRDg5QzI3MTVDMUFBNzZGMzMxNEVE RjkxQTVENzQ3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACqp+yxWUNAJfr5AFBjXw+OUdgyyYt2Kcx7v d1q1npt6zVF7RQKygf5Ttb9i4o9AzoebBvYVggLmaL+jLdNWavq1LoMaYCauDbka KrBVbaBsRyUtyPZyxOIRsJQkhEDCbyfyZHTxuYFDIkPJiT0DVq30zEBbl1bxhKLV 3x5x/+tQRb5fWVyDt4XBeFhClDare9G32GNxit21BE/GqaWkzjLXJCuHaN+2lfo2 w31dI4Epmh7RVCvxA85GnJTrGV5/bHUdhIAjnoXqo47taHzBqJXcnNiz5fEZRk8R loQ/4iyCWWcqSU3JlwHGi5n3M5XLQGzMHN9f8m4BWUlF4A+3YjE= -----END CERTIFICATE-----Generated at Wed Jul 29 13:13:02 2026 by rpki-client