$ rpki-client -vvvf rpki-rsync.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/AC135A343D89C2715C1AA76F3314EDF91A5D7473.mft File: AC135A343D89C2715C1AA76F3314EDF91A5D7473.mft (raw, json) Hash identifier: Mh4T4z+Qe8inVZ2Bi6tAptGm4MPX/Sk1L0Ohi4zeLxc= Subject key identifier: CE:ED:E5:3D:A7:B8:A8:A9:BB:A7:6E:49:D8:44:6E:0E:3C:A1:CB:B3 Authority key identifier: AC:13:5A:34:3D:89:C2:71:5C:1A:A7:6F:33:14:ED:F9:1A:5D:74:73 Certificate issuer: /CN=AC135A343D89C2715C1AA76F3314EDF91A5D7473 Certificate serial: 7E409F642D5165CA10C877E8EAD65C2F7E5369C0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC135A343D89C2715C1AA76F3314EDF91A5D7473.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/AC135A343D89C2715C1AA76F3314EDF91A5D7473.mft Manifest number: C5 Signing time: Sat 26 Sep 2026 15:54:34 +0000 Manifest this update: Sat 26 Sep 2026 15:49:34 +0000 Manifest next update: Sun 27 Sep 2026 18:58:34 +0000 Files and hashes: 1: 3130332e33312e3234312e302f32342d3234203d3e20313339393532.roa (hash: wmrO1sIlSaYPXG3uoDQ46bwtU1pWLEpz2UMTkfOKpVs=) 2: AC135A343D89C2715C1AA76F3314EDF91A5D7473.crl (hash: 9taDnAVb+6kjqzphMLh0FXb20mKK6l5xBMoR2a60kEg=) 3: 3130332e33312e3234302e302f32342d3234203d3e20313339393532.roa (hash: MXQvxQuFfrOrlrDM0pu7aI1UUtAamLu0vBW+zEyQ+dQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/AC135A343D89C2715C1AA76F3314EDF91A5D7473.crl rsync://rpki-rsync.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/AC135A343D89C2715C1AA76F3314EDF91A5D7473.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC135A343D89C2715C1AA76F3314EDF91A5D7473.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 12:52:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:40:9f:64:2d:51:65:ca:10:c8:77:e8:ea:d6:5c:2f:7e:53:69:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC135A343D89C2715C1AA76F3314EDF91A5D7473 Validity Not Before: Sep 26 15:49:34 2026 GMT Not After : Sep 27 18:58:34 2026 GMT Subject: CN=CEEDE53DA7B8A8A9BBA76E49D8446E0E3CA1CBB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:be:2f:a7:6f:15:d4:12:ae:2e:10:ab:05:b8: 2e:a9:0a:9f:f3:b3:60:2d:49:32:c0:c6:84:86:0a: 30:03:8b:34:4b:58:ee:a2:17:9d:18:55:ec:a3:96: a3:44:6e:6e:0b:0d:a3:da:4f:c2:15:06:e9:da:26: 70:b6:f4:a6:4c:69:04:66:bf:4e:28:6e:d0:e7:30: d6:fc:3f:f1:27:ec:8d:eb:5d:aa:87:19:d8:a4:6b: a8:40:be:8d:1f:62:bf:af:ea:40:09:b5:25:a9:bb: ef:35:fd:c3:90:f1:19:27:21:b1:8a:f5:d2:18:9e: 47:a0:ed:08:c3:d1:b9:ff:04:e4:5f:50:7c:f5:1a: 8c:3a:69:b5:55:29:33:bf:da:69:27:dc:12:6b:77: 20:c3:6e:74:64:19:b2:a4:23:8e:f5:89:7e:4d:48: de:fd:ed:9d:5d:3a:18:7e:ed:30:d3:5e:5c:e8:d7: ff:6e:a9:50:0a:97:f6:a6:60:3b:1c:c4:40:84:36: c6:88:5f:02:63:fa:ea:2f:58:74:bb:13:fd:28:a3: b0:17:55:55:0a:b6:ea:45:44:d4:b4:3e:2a:b3:45: d6:2d:47:94:96:92:8b:81:8b:dd:47:6a:c7:70:73: 8b:9d:43:88:1f:40:8f:21:d0:ec:3f:17:58:17:a1: 0e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:ED:E5:3D:A7:B8:A8:A9:BB:A7:6E:49:D8:44:6E:0E:3C:A1:CB:B3 X509v3 Authority Key Identifier: keyid:AC:13:5A:34:3D:89:C2:71:5C:1A:A7:6F:33:14:ED:F9:1A:5D:74:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/AC135A343D89C2715C1AA76F3314EDF91A5D7473.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC135A343D89C2715C1AA76F3314EDF91A5D7473.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/AC135A343D89C2715C1AA76F3314EDF91A5D7473.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:8a:df:b8:97:0c:1f:55:5a:7c:31:5a:d5:2f:91:fe:42:11: 23:d1:ee:29:d0:ba:c2:43:a2:8c:21:01:a1:79:32:51:17:ef: 21:87:22:a3:4c:83:e4:c8:86:68:a4:a3:30:78:08:83:27:b1: eb:65:a9:e6:e8:d4:21:b8:1c:b0:9a:39:08:12:4f:20:5b:bf: 01:78:0a:05:ea:61:90:b4:c6:04:71:59:d2:8d:48:4b:8e:15: 95:ce:68:0b:92:f7:67:78:91:2f:f2:0d:68:3c:e0:b8:89:d4: b7:63:11:11:38:45:b8:b2:e8:f4:0d:48:70:87:ef:6a:9a:98: 1f:6c:29:11:7b:13:8c:87:f0:0a:26:89:2f:81:38:8c:95:8f: 93:70:de:3b:e7:cd:7b:9c:09:a5:f1:b1:31:ac:29:03:a4:62: 83:88:b4:fd:d0:5b:98:68:20:0d:97:0b:48:01:9a:84:ba:3f: 57:62:3c:f1:55:d3:4f:fd:69:51:74:17:ff:b6:45:ab:f9:1b: d6:a4:61:4b:ef:5f:90:35:d8:be:d2:b8:f4:11:17:10:b3:d7: d1:b7:6d:7d:42:56:0c:9b:03:91:14:d9:7a:f3:2f:38:1d:27: f6:e3:80:e4:37:4b:27:42:c1:2f:c2:ad:a9:82:9e:b7:9a:95: 4e:32:75:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfkCfZC1RZcoQyHfo6tZcL35TacAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUMxMzVBMzQzRDg5QzI3MTVDMUFBNzZGMzMxNEVERjkx QTVENzQ3MzAeFw0yNjA5MjYxNTQ5MzRaFw0yNjA5MjcxODU4MzRaMDMxMTAvBgNV BAMTKENFRURFNTNEQTdCOEE4QTlCQkE3NkU0OUQ4NDQ2RTBFM0NBMUNCQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBvi+nbxXUEq4uEKsFuC6pCp/z s2AtSTLAxoSGCjADizRLWO6iF50YVeyjlqNEbm4LDaPaT8IVBunaJnC29KZMaQRm v04obtDnMNb8P/En7I3rXaqHGdika6hAvo0fYr+v6kAJtSWpu+81/cOQ8RknIbGK 9dIYnkeg7QjD0bn/BORfUHz1Gow6abVVKTO/2mkn3BJrdyDDbnRkGbKkI471iX5N SN797Z1dOhh+7TDTXlzo1/9uqVAKl/amYDscxECENsaIXwJj+uovWHS7E/0oo7AX VVUKtupFRNS0PiqzRdYtR5SWkouBi91Hasdwc4udQ4gfQI8h0Ow/F1gXoQ4PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzu3lPae4qKm7p25J2ERuDjyhy7MwHwYDVR0j BBgwFoAUrBNaND2JwnFcGqdvMxTt+RpddHMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjQzMDM0YWEtZjM5Yy00OGY1LTg1MmUtZDFiZDdmMTdhYTQyLzAvQUMxMzVBMzQz RDg5QzI3MTVDMUFBNzZGMzMxNEVERjkxQTVENzQ3My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzEzNUEzNDNEODlDMjcxNUMxQUE3NkYzMzE0RURGOTFBNUQ3 NDczLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjQzMDM0YWEtZjM5Yy00OGY1LTg1 MmUtZDFiZDdmMTdhYTQyLzAvQUMxMzVBMzQzRDg5QzI3MTVDMUFBNzZGMzMxNEVE RjkxQTVENzQ3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABSK37iXDB9VWnwxWtUvkf5CESPR7inQusJD oowhAaF5MlEX7yGHIqNMg+TIhmikozB4CIMnsetlqebo1CG4HLCaOQgSTyBbvwF4 CgXqYZC0xgRxWdKNSEuOFZXOaAuS92d4kS/yDWg84LiJ1LdjERE4Rbiy6PQNSHCH 72qamB9sKRF7E4yH8AomiS+BOIyVj5Nw3jvnzXucCaXxsTGsKQOkYoOItP3QW5ho IA2XC0gBmoS6P1diPPFV00/9aVF0F/+2Rav5G9akYUvvX5A12L7SuPQRFxCz19G3 bX1CVgybA5EU2XrzLzgdJ/bjgOQ3SydCwS/CramCnrealU4ydYo= -----END CERTIFICATE-----Generated at Sun Sep 27 00:18:06 2026 by rpki-client