$ rpki-client -vvf rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/AC7439239B591D2499B70C3230C1C35BE2A0104B.mft File: AC7439239B591D2499B70C3230C1C35BE2A0104B.mft (raw, json) Hash identifier: UtO3eiNF6YaiDm5NaBXJRvxIbLtdxD+/xcdJ3ntD92A= Subject key identifier: B1:F0:DB:12:39:A2:9B:DB:81:6C:40:54:1D:9D:C2:64:3C:49:05:25 Authority key identifier: AC:74:39:23:9B:59:1D:24:99:B7:0C:32:30:C1:C3:5B:E2:A0:10:4B Certificate issuer: /CN=AC7439239B591D2499B70C3230C1C35BE2A0104B Certificate serial: 7A4CD9B292D821CA8CC663C7DCA31416BF4CC358 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC7439239B591D2499B70C3230C1C35BE2A0104B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/AC7439239B591D2499B70C3230C1C35BE2A0104B.mft Manifest number: 77 Signing time: Wed 29 Jul 2026 05:52:58 +0000 Manifest this update: Wed 29 Jul 2026 05:47:58 +0000 Manifest next update: Thu 30 Jul 2026 07:31:58 +0000 Files and hashes: 1: AC7439239B591D2499B70C3230C1C35BE2A0104B.crl (hash: TgN958bGtsTrhWGagWypbFXpCJE49BkshWxPJjpnjsU=) 2: 323430363a396163303a3a2f33322d3438203d3e20313431313134.roa (hash: pTJhsbE/QsnSwa5lw6Tt2iC9wy8jG1QR42mcBhsUqfg=) 3: 3130332e3135372e37382e302f32332d3234203d3e20313431313134.roa (hash: w+9v1WGiMKcMfvG8PMyM732c95+KBZTi8eUiSRuPBO8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/AC7439239B591D2499B70C3230C1C35BE2A0104B.crl rsync://rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/AC7439239B591D2499B70C3230C1C35BE2A0104B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC7439239B591D2499B70C3230C1C35BE2A0104B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 07:31:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:4c:d9:b2:92:d8:21:ca:8c:c6:63:c7:dc:a3:14:16:bf:4c:c3:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC7439239B591D2499B70C3230C1C35BE2A0104B Validity Not Before: Jul 29 05:47:58 2026 GMT Not After : Jul 30 07:31:58 2026 GMT Subject: CN=B1F0DB1239A29BDB816C40541D9DC2643C490525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:11:db:29:45:28:24:ad:0d:d1:11:0e:bc:be: bf:11:7f:24:f5:ac:a2:e5:ff:16:91:ba:86:e3:e0: ec:d2:f7:1d:ee:1c:ca:95:39:40:ea:6a:d6:cb:85: 7e:b5:21:ba:d2:7f:cf:c3:74:10:91:db:64:eb:02: f4:2f:14:e6:be:a2:35:46:5d:0e:9b:56:fd:a0:53: 3a:af:62:16:8f:9d:d6:3b:8f:16:df:65:2f:8c:7c: a2:41:ba:50:93:c4:61:9d:05:1e:45:16:0b:da:e0: 8b:b3:15:a8:22:f4:98:67:02:7f:e5:ea:ca:d6:71: c5:34:4d:b2:29:2f:ce:26:d4:3d:44:62:5d:5c:1c: 0f:0f:f1:b3:89:65:fb:ea:80:34:41:84:b5:8d:a1: b6:a0:ec:7f:32:60:e9:e7:e5:4c:c7:1e:fd:41:ca: 4c:d5:5c:17:c5:6a:ce:16:8b:87:48:c6:dc:87:e0: b0:04:57:96:72:1f:2a:b4:ab:ea:cd:3f:69:5f:1a: 08:91:dd:09:fb:cd:af:d0:8d:95:32:56:03:53:b4: 02:7d:f0:08:e9:00:67:0f:af:c7:15:85:47:d3:2f: 51:d8:7c:3d:95:0e:63:4c:24:e6:be:53:88:b7:fc: 4c:4b:02:8c:06:53:49:41:39:b6:b5:d9:74:42:8b: cb:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:F0:DB:12:39:A2:9B:DB:81:6C:40:54:1D:9D:C2:64:3C:49:05:25 X509v3 Authority Key Identifier: keyid:AC:74:39:23:9B:59:1D:24:99:B7:0C:32:30:C1:C3:5B:E2:A0:10:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/AC7439239B591D2499B70C3230C1C35BE2A0104B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC7439239B591D2499B70C3230C1C35BE2A0104B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/AC7439239B591D2499B70C3230C1C35BE2A0104B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:fb:3c:f8:37:f6:5f:26:03:5a:f0:9a:3a:80:17:80:3a:6a: 18:6c:76:c8:87:6e:b8:0b:40:06:fd:00:e8:57:f8:b0:0b:bd: e1:f9:44:2e:53:f0:1f:f3:f6:7f:2d:a4:a5:2f:5f:0b:0d:08: c2:e6:64:07:29:50:c9:ed:97:94:34:4e:a4:08:31:43:20:c3: c4:8c:a9:92:74:0b:65:5b:02:22:72:9d:39:c8:e9:21:9c:5e: ea:2e:0e:d8:d5:d6:ab:85:cb:3a:ef:64:2a:31:4d:97:78:c5: 09:0b:35:2a:4b:d8:90:e3:ef:7b:5c:83:64:02:58:fb:51:37: 90:ca:54:ab:45:d4:b0:a7:c1:29:03:ca:42:fe:48:b1:6d:14: 71:a6:3f:dd:11:62:5f:4e:d8:ae:dc:4a:a5:d2:fa:85:3a:3d: 78:2f:8e:01:86:39:2f:56:3b:5f:bd:ba:fd:6d:70:d2:9c:4d: 89:e6:30:0e:4b:86:17:17:d5:f9:fd:40:00:d8:8d:a7:6f:e1: b8:67:37:5c:8b:b9:8c:cd:6a:14:19:27:0d:d5:f3:ca:70:f6: 1a:e0:ab:a2:34:bf:bd:4f:0d:f1:5f:ed:60:e4:86:1b:d4:31: 5c:66:ac:48:48:62:8e:89:5d:7c:73:d4:52:da:f9:a8:5b:f7: ea:b0:0d:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUekzZspLYIcqMxmPH3KMUFr9Mw1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM3NDM5MjM5QjU5MUQyNDk5QjcwQzMyMzBDMUMzNUJF MkEwMTA0QjAeFw0yNjA3MjkwNTQ3NThaFw0yNjA3MzAwNzMxNThaMDMxMTAvBgNV BAMTKEIxRjBEQjEyMzlBMjlCREI4MTZDNDA1NDFEOURDMjY0M0M0OTA1MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9EdspRSgkrQ3REQ68vr8RfyT1 rKLl/xaRuobj4OzS9x3uHMqVOUDqatbLhX61IbrSf8/DdBCR22TrAvQvFOa+ojVG XQ6bVv2gUzqvYhaPndY7jxbfZS+MfKJBulCTxGGdBR5FFgva4IuzFagi9JhnAn/l 6srWccU0TbIpL84m1D1EYl1cHA8P8bOJZfvqgDRBhLWNobag7H8yYOnn5UzHHv1B ykzVXBfFas4Wi4dIxtyH4LAEV5ZyHyq0q+rNP2lfGgiR3Qn7za/QjZUyVgNTtAJ9 8AjpAGcPr8cVhUfTL1HYfD2VDmNMJOa+U4i3/ExLAowGU0lBOba12XRCi8uxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsfDbEjmim9uBbEBUHZ3CZDxJBSUwHwYDVR0j BBgwFoAUrHQ5I5tZHSSZtwwyMMHDW+KgEEswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjU3ZTg5ZTgtNTNhYS00NGY2LWI2ZDgtNTg3OTA3OGJmNjY0LzAvQUM3NDM5MjM5 QjU5MUQyNDk5QjcwQzMyMzBDMUMzNUJFMkEwMTA0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzc0MzkyMzlCNTkxRDI0OTlCNzBDMzIzMEMxQzM1QkUyQTAx MDRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjU3ZTg5ZTgtNTNhYS00NGY2LWI2 ZDgtNTg3OTA3OGJmNjY0LzAvQUM3NDM5MjM5QjU5MUQyNDk5QjcwQzMyMzBDMUMz NUJFMkEwMTA0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI/7PPg39l8mA1rwmjqAF4A6ahhsdsiHbrgL QAb9AOhX+LALveH5RC5T8B/z9n8tpKUvXwsNCMLmZAcpUMntl5Q0TqQIMUMgw8SM qZJ0C2VbAiJynTnI6SGcXuouDtjV1quFyzrvZCoxTZd4xQkLNSpL2JDj73tcg2QC WPtRN5DKVKtF1LCnwSkDykL+SLFtFHGmP90RYl9O2K7cSqXS+oU6PXgvjgGGOS9W O1+9uv1tcNKcTYnmMA5LhhcX1fn9QADYjadv4bhnN1yLuYzNahQZJw3V88pw9hrg q6I0v71PDfFf7WDkhhvUMVxmrEhIYo6JXXxz1FLa+ahb9+qwDZ0= -----END CERTIFICATE-----Generated at Wed Jul 29 22:20:32 2026 by rpki-client