$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.mft File: AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.mft (raw, json) Hash identifier: J1v07uebCXVyefcMAmAlQOhFGal6xzDOUvBiDYHjU7M= Subject key identifier: BB:E2:61:C8:BF:0A:A9:70:49:32:49:F1:4E:7C:37:DA:1F:45:A7:33 Authority key identifier: AC:96:19:8C:9E:15:9F:FA:EE:BD:01:EE:DB:4D:EC:D2:D1:25:B4:FB Certificate issuer: /CN=AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB Certificate serial: 193CF7544595B4931E00336E671E37643E26246E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.mft Manifest number: BE Signing time: Mon 21 Sep 2026 09:17:56 +0000 Manifest this update: Mon 21 Sep 2026 09:12:56 +0000 Manifest next update: Tue 22 Sep 2026 10:32:56 +0000 Files and hashes: 1: 3136302e32352e33362e302f32342d3234203d3e20313532383332.roa (hash: vwfxZYWrk/RSmMQGBZC+p6lAwrY6bWIJ0nylVMAf2ng=) 2: 3136302e32352e33372e302f32342d3234203d3e20313532383332.roa (hash: mYODDo3xXjU46MAAdCgBohgomvh7OQ+5/NIDJ1DIeOU=) 3: AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.crl (hash: BtMkrlaV69XvmxxL8p/eVHJMFifi9QgNzeyfJr912S4=) 4: 3136302e32352e33362e302f32332d3234203d3e20313532383332.roa (hash: 9bTByo6Uq+XJTjxp6h+UyAdxQrw5r9BmwsjxhvbZ91A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.crl rsync://rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:3c:f7:54:45:95:b4:93:1e:00:33:6e:67:1e:37:64:3e:26:24:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB Validity Not Before: Sep 21 09:12:56 2026 GMT Not After : Sep 22 10:32:56 2026 GMT Subject: CN=BBE261C8BF0AA970493249F14E7C37DA1F45A733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:17:1f:18:0d:17:ed:71:ad:c3:e7:64:93:cc: c1:7d:43:9a:9d:bf:ec:7e:9c:e1:ae:43:3f:41:30: d3:3a:7e:90:19:f7:0c:39:f3:ab:1b:50:af:bf:e4: 08:38:f9:2a:70:60:e5:2c:8a:29:5e:dc:a2:cd:c7: c5:1d:4b:3e:a7:48:ea:98:2b:c5:74:6a:da:42:7e: c8:be:0d:33:12:e9:20:47:d2:1c:37:f6:e8:6a:08: fc:ac:63:9a:ca:77:03:4a:84:92:2a:b2:66:ef:08: 64:d2:5f:d5:1f:c8:2b:64:d8:6f:04:f8:67:b9:4a: 92:1d:0a:fc:46:0e:12:70:53:de:af:1c:81:df:8f: 90:02:f3:b4:db:cf:3d:b2:7d:0c:64:43:85:da:41: 91:93:4a:a5:45:32:eb:0b:5e:e6:a3:2a:7c:88:b4: 49:66:22:78:b4:fe:45:bd:2a:63:8b:26:0e:c1:3e: a0:70:93:84:9b:f2:86:9a:dc:ad:b5:4c:cf:3f:a5: da:96:ff:49:a3:d7:2c:a1:9e:74:a2:48:8a:e5:22: 97:e8:e9:28:1b:7c:05:fc:23:b8:c6:93:16:d5:6f: 84:17:c9:18:a3:1f:66:87:61:1e:61:9e:c8:e2:5f: c2:d7:ef:e4:a9:4c:af:cb:88:e2:cd:aa:2a:01:ba: 8e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:E2:61:C8:BF:0A:A9:70:49:32:49:F1:4E:7C:37:DA:1F:45:A7:33 X509v3 Authority Key Identifier: keyid:AC:96:19:8C:9E:15:9F:FA:EE:BD:01:EE:DB:4D:EC:D2:D1:25:B4:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:55:04:74:0d:a5:4d:e0:8a:23:2d:fb:b1:59:07:24:8c:54: d9:c9:34:c5:77:75:16:de:55:99:55:5e:6e:78:18:d3:db:3d: 21:b7:21:b5:29:cc:6e:90:e3:41:75:95:48:e0:ee:d2:11:5b: e7:87:fc:05:04:d2:b5:39:a0:23:62:85:e1:59:ef:ff:33:25: ba:e3:ab:c0:bc:79:34:d8:71:f6:2c:91:8b:67:73:a0:5c:b2: 6c:d3:dd:8e:3a:6b:19:18:8e:58:b3:49:c6:78:bf:ab:70:bd: 4b:bf:83:4e:fe:c7:a9:4f:89:5c:3d:f0:3c:20:b6:44:b2:0d: bb:5e:43:51:e0:9d:80:a7:7c:57:3c:ee:2f:f6:5e:4c:48:e2: 79:c3:0a:7d:48:35:41:bc:42:48:7d:be:cf:c9:d5:d7:fe:45: 17:ed:d7:0e:52:af:fd:fb:92:a3:c8:66:61:b9:32:02:b0:db: 16:c3:7e:bf:78:7d:6d:95:f1:fd:f1:07:b7:e6:b5:7d:ef:11: 47:ba:5e:6b:3c:ae:20:47:ed:a2:6f:e1:d1:29:f8:14:46:50: 80:8e:82:ea:82:f9:99:f2:cf:52:5c:16:92:51:0c:e8:d1:1e: 56:b6:7a:46:81:b6:d8:6b:e0:22:80:1a:66:32:c4:a7:3b:35: 0c:4c:78:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGTz3VEWVtJMeADNuZx43ZD4mJG4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM5NjE5OEM5RTE1OUZGQUVFQkQwMUVFREI0REVDRDJE MTI1QjRGQjAeFw0yNjA5MjEwOTEyNTZaFw0yNjA5MjIxMDMyNTZaMDMxMTAvBgNV BAMTKEJCRTI2MUM4QkYwQUE5NzA0OTMyNDlGMTRFN0MzN0RBMUY0NUE3MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnFx8YDRftca3D52STzMF9Q5qd v+x+nOGuQz9BMNM6fpAZ9ww586sbUK+/5Ag4+SpwYOUsiile3KLNx8UdSz6nSOqY K8V0atpCfsi+DTMS6SBH0hw39uhqCPysY5rKdwNKhJIqsmbvCGTSX9UfyCtk2G8E +Ge5SpIdCvxGDhJwU96vHIHfj5AC87Tbzz2yfQxkQ4XaQZGTSqVFMusLXuajKnyI tElmIni0/kW9KmOLJg7BPqBwk4Sb8oaa3K21TM8/pdqW/0mj1yyhnnSiSIrlIpfo 6SgbfAX8I7jGkxbVb4QXyRijH2aHYR5hnsjiX8LX7+SpTK/LiOLNqioBuo7VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu+JhyL8KqXBJMknxTnw32h9FpzMwHwYDVR0j BBgwFoAUrJYZjJ4Vn/ruvQHu203s0tEltPswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2Y0YjUzZDgtYjJmZi00OTczLWIxYWMtNmY4NWZhZWFkYmU1LzAvQUM5NjE5OEM5 RTE1OUZGQUVFQkQwMUVFREI0REVDRDJEMTI1QjRGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BQzk2MTk4QzlFMTU5RkZBRUVCRDAxRUVEQjRERUNEMkQxMjVC NEZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2Y0YjUzZDgtYjJmZi00OTczLWIx YWMtNmY4NWZhZWFkYmU1LzAvQUM5NjE5OEM5RTE1OUZGQUVFQkQwMUVFREI0REVD RDJEMTI1QjRGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABlVBHQNpU3giiMt+7FZBySMVNnJNMV3dRbe VZlVXm54GNPbPSG3IbUpzG6Q40F1lUjg7tIRW+eH/AUE0rU5oCNiheFZ7/8zJbrj q8C8eTTYcfYskYtnc6BcsmzT3Y46axkYjlizScZ4v6twvUu/g07+x6lPiVw98Dwg tkSyDbteQ1HgnYCnfFc87i/2XkxI4nnDCn1INUG8Qkh9vs/J1df+RRft1w5Sr/37 kqPIZmG5MgKw2xbDfr94fW2V8f3xB7fmtX3vEUe6Xms8riBH7aJv4dEp+BRGUICO guqC+Znyz1JcFpJRDOjRHla2ekaBtthr4CKAGmYyxKc7NQxMeEE= -----END CERTIFICATE-----Generated at Mon Sep 21 14:27:46 2026 by rpki-client