$ rpki-client -vvf rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.mft File: AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.mft (raw, json) Hash identifier: DYuTqM1fPc7eNU3k2Epbkvla3SYSOT3zvVJ6UfMt5Go= Subject key identifier: 07:6F:55:DD:FC:F6:2F:3F:FC:86:66:5B:FF:63:36:75:18:43:AD:25 Authority key identifier: AC:96:19:8C:9E:15:9F:FA:EE:BD:01:EE:DB:4D:EC:D2:D1:25:B4:FB Certificate issuer: /CN=AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB Certificate serial: 7BE6D22FFBC0431F4525EC5CB67770B25661F1D9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 03:42:15 +0000 Manifest this update: Wed 17 Jun 2026 03:37:15 +0000 Manifest next update: Thu 18 Jun 2026 05:03:15 +0000 Files and hashes: 1: 3136302e32352e33362e302f32332d3234203d3e20313532383332.roa (hash: 9bTByo6Uq+XJTjxp6h+UyAdxQrw5r9BmwsjxhvbZ91A=) 2: 3136302e32352e33372e302f32342d3234203d3e20313532383332.roa (hash: mYODDo3xXjU46MAAdCgBohgomvh7OQ+5/NIDJ1DIeOU=) 3: 3136302e32352e33362e302f32342d3234203d3e20313532383332.roa (hash: vwfxZYWrk/RSmMQGBZC+p6lAwrY6bWIJ0nylVMAf2ng=) 4: AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.crl (hash: VEXQmfsZNVXi2eRz4FOmkZgp/U4Z6m2VN55Wq9QkIzk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.crl rsync://rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 04:55:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:e6:d2:2f:fb:c0:43:1f:45:25:ec:5c:b6:77:70:b2:56:61:f1:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB Validity Not Before: Jun 17 03:37:15 2026 GMT Not After : Jun 18 05:03:15 2026 GMT Subject: CN=076F55DDFCF62F3FFC86665BFF6336751843AD25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:54:c7:68:53:a3:f6:8e:2e:89:7e:34:a5:be: cb:1b:d3:60:9b:64:61:ea:26:26:af:9d:b6:85:85: d7:06:30:2f:c0:0a:87:0d:5e:ac:12:f9:a1:d3:fb: 9f:95:6c:dd:5e:24:2d:5c:fc:62:b7:a9:f4:00:ab: a9:5c:ab:c9:3c:90:d7:54:c3:ee:25:6e:1b:f8:89: 0a:26:1d:cb:ea:ac:cc:3c:a9:42:0c:7a:e9:94:ac: e6:e9:c1:c7:fa:45:d6:8d:42:a0:a3:29:12:84:8a: 27:07:5a:38:a8:a2:76:ab:74:1f:27:36:fb:83:0c: c7:4f:c8:9b:39:b7:1f:40:eb:45:60:fe:c7:bb:b5: bc:c6:88:19:2c:26:71:55:c1:12:fa:7c:1d:ce:19: 67:f2:11:a6:b8:37:dc:cc:2e:2f:aa:e4:87:b5:eb: fe:d0:e6:88:f3:44:a2:42:83:e8:b6:44:dd:70:22: c9:6d:21:36:7b:b2:51:81:30:94:59:87:1e:00:1a: 8c:65:d4:77:a2:e6:29:2f:22:d4:8e:65:fa:8c:0a: d7:5a:d2:13:44:1c:a3:5d:66:27:6c:d1:8d:5f:67: 3e:ac:d3:48:b9:2e:59:5d:99:eb:5d:b5:1c:c3:77: 2b:a4:28:13:f5:82:8c:82:6d:00:9f:ae:e1:2d:8d: 62:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:6F:55:DD:FC:F6:2F:3F:FC:86:66:5B:FF:63:36:75:18:43:AD:25 X509v3 Authority Key Identifier: keyid:AC:96:19:8C:9E:15:9F:FA:EE:BD:01:EE:DB:4D:EC:D2:D1:25:B4:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:35:1d:69:b5:bd:f1:d4:9e:8e:14:67:55:a2:d8:7d:29:4a: ff:bb:38:db:43:48:fd:24:f2:d1:18:6a:d8:fc:bf:27:c4:f4: 52:4f:9f:54:80:1d:c1:fd:ba:58:2d:4b:3b:bb:30:ab:bc:f0: d9:22:b9:b8:70:47:0b:55:35:6d:80:1f:cc:0f:43:85:9f:9c: b0:7b:66:e7:2a:8d:60:9d:c4:7a:71:ef:98:8a:6d:43:f1:51: 40:be:93:33:6f:2f:49:dd:e2:55:4d:6c:16:a6:96:dc:c7:78: d7:0b:58:59:6c:80:d0:42:77:e8:1d:38:35:34:6f:08:6b:e3: b8:81:08:1a:e4:d6:35:21:35:d4:8d:51:8f:9d:da:f5:c7:88: 68:17:72:04:a6:47:83:86:ae:93:4c:aa:99:4c:76:d5:16:a9: ba:c6:e3:20:e5:1e:c2:bf:37:b0:ff:12:31:48:f0:c4:44:f4: 27:be:ed:00:e3:36:19:68:df:48:b4:21:0e:0a:bb:6f:33:37: 53:92:5a:ee:26:4b:cb:73:04:cf:2e:63:54:64:43:72:df:29: 68:b0:1d:60:c2:19:f6:61:59:dc:71:bb:88:ce:e4:e1:96:8c: 60:2c:26:36:86:07:26:f4:13:05:5b:28:d5:95:56:84:87:d3: 7a:52:4a:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe+bSL/vAQx9FJexctndwslZh8dkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM5NjE5OEM5RTE1OUZGQUVFQkQwMUVFREI0REVDRDJE MTI1QjRGQjAeFw0yNjA2MTcwMzM3MTVaFw0yNjA2MTgwNTAzMTVaMDMxMTAvBgNV BAMTKDA3NkY1NURERkNGNjJGM0ZGQzg2NjY1QkZGNjMzNjc1MTg0M0FEMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeVMdoU6P2ji6JfjSlvssb02Cb ZGHqJiavnbaFhdcGMC/ACocNXqwS+aHT+5+VbN1eJC1c/GK3qfQAq6lcq8k8kNdU w+4lbhv4iQomHcvqrMw8qUIMeumUrObpwcf6RdaNQqCjKRKEiicHWjioonardB8n NvuDDMdPyJs5tx9A60Vg/se7tbzGiBksJnFVwRL6fB3OGWfyEaa4N9zMLi+q5Ie1 6/7Q5ojzRKJCg+i2RN1wIsltITZ7slGBMJRZhx4AGoxl1Hei5ikvItSOZfqMCtda 0hNEHKNdZids0Y1fZz6s00i5LlldmetdtRzDdyukKBP1goyCbQCfruEtjWKRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB29V3fz2Lz/8hmZb/2M2dRhDrSUwHwYDVR0j BBgwFoAUrJYZjJ4Vn/ruvQHu203s0tEltPswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2Y0YjUzZDgtYjJmZi00OTczLWIxYWMtNmY4NWZhZWFkYmU1LzAvQUM5NjE5OEM5 RTE1OUZGQUVFQkQwMUVFREI0REVDRDJEMTI1QjRGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BQzk2MTk4QzlFMTU5RkZBRUVCRDAxRUVEQjRERUNEMkQxMjVC NEZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2Y0YjUzZDgtYjJmZi00OTczLWIx YWMtNmY4NWZhZWFkYmU1LzAvQUM5NjE5OEM5RTE1OUZGQUVFQkQwMUVFREI0REVD RDJEMTI1QjRGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIo1HWm1vfHUno4UZ1Wi2H0pSv+7ONtDSP0k 8tEYatj8vyfE9FJPn1SAHcH9ulgtSzu7MKu88NkiubhwRwtVNW2AH8wPQ4WfnLB7 ZucqjWCdxHpx75iKbUPxUUC+kzNvL0nd4lVNbBamltzHeNcLWFlsgNBCd+gdODU0 bwhr47iBCBrk1jUhNdSNUY+d2vXHiGgXcgSmR4OGrpNMqplMdtUWqbrG4yDlHsK/ N7D/EjFI8MRE9Ce+7QDjNhlo30i0IQ4Ku28zN1OSWu4mS8tzBM8uY1RkQ3LfKWiw HWDCGfZhWdxxu4jO5OGWjGAsJjaGByb0EwVbKNWVVoSH03pSSlM= -----END CERTIFICATE-----Generated at Wed Jun 17 10:37:00 2026 by rpki-client