$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.mft File: AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.mft (raw, json) Hash identifier: LkCm+V60ulLU9VhtnQPQZ2BokiJiKoiDCTLW69zOjLc= Subject key identifier: 7F:86:64:B9:18:50:A2:4D:4E:28:B3:9F:9A:61:CD:C5:15:B2:EC:9D Authority key identifier: AC:2C:B9:F6:C8:CB:FD:54:9E:9E:FC:E2:2F:22:F1:BC:DB:CB:73:92 Certificate issuer: /CN=AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392 Certificate serial: 72702C6F87391D60B9FBF380498BD65030739016 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 05:48:38 +0000 Manifest this update: Tue 22 Sep 2026 05:43:38 +0000 Manifest next update: Wed 23 Sep 2026 08:59:38 +0000 Files and hashes: 1: 3130332e3139302e3131322e302f32342d3234203d3e20313439393037.roa (hash: 1w+lHciz1g+OQhhivgPPNI1UUThYYbymT06vuiGhBaA=) 2: AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.crl (hash: EX/n36/uw2UbPWObMKaAWzQnHiAhfehSxLtGFZb1rTM=) 3: 3130332e3139302e3131332e302f32342d3234203d3e20313439393037.roa (hash: Q95AZcZVTNNMyCA8ySPTWTlV5HgDicctdDFDNHoHuh0=) 4: 323030313a6466303a663963303a3a2f34382d3438203d3e20313439393037.roa (hash: GJQ+AHj2o4V89RFkllxAeKJUIy+kRG6F/hsMS14nw+s=) 5: 3130332e3139302e3131322e302f32332d3234203d3e20313439393037.roa (hash: hhQovD5k6aPWCJpf1Q2RXufesBruZAyhfmoou+CUYHI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.crl rsync://rpki-rsync.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 08:59:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:70:2c:6f:87:39:1d:60:b9:fb:f3:80:49:8b:d6:50:30:73:90:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392 Validity Not Before: Sep 22 05:43:38 2026 GMT Not After : Sep 23 08:59:38 2026 GMT Subject: CN=7F8664B91850A24D4E28B39F9A61CDC515B2EC9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f8:c9:a5:ec:a3:13:bb:3b:72:9b:a1:8f:ff: 69:c3:d5:d2:76:db:4d:e3:59:73:9b:7b:f6:c8:58: 94:6c:43:00:8c:32:71:2e:87:34:77:7f:ec:87:6b: f1:e6:5c:0e:e0:18:e8:a0:0e:3b:0f:e5:7f:06:e3: 2e:d2:e9:62:81:63:e7:1b:c7:58:e8:36:54:12:30: 2d:b1:44:7c:3c:bb:a1:d1:6f:9f:bb:e1:49:a6:0f: db:cf:c4:e4:89:fc:7d:21:30:c0:e6:31:4a:b3:76: ae:78:10:00:e9:cf:bd:03:e4:da:7c:63:de:97:da: e8:46:9b:54:d5:f4:b7:d3:54:03:5d:8b:32:e2:e6: cb:da:35:7f:db:b6:35:df:34:8d:49:ca:d8:22:73: 30:67:3d:3f:53:60:25:fe:2a:c3:53:05:95:e6:5e: 15:da:97:91:48:3b:dd:84:9a:93:c0:f4:7b:0e:77: f7:ee:fb:ba:1e:23:b5:76:14:d6:ae:dd:7e:05:43: cb:7a:56:13:f3:17:81:2e:d3:6e:2c:5b:ad:29:47: a1:db:b4:d3:9c:45:ec:ab:33:6a:e8:e5:f5:14:b7: 6b:5c:7d:10:10:27:bd:45:f4:cf:41:d4:25:52:2d: f8:37:ce:06:4a:f4:41:23:52:b3:72:32:44:09:08: b2:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:86:64:B9:18:50:A2:4D:4E:28:B3:9F:9A:61:CD:C5:15:B2:EC:9D X509v3 Authority Key Identifier: keyid:AC:2C:B9:F6:C8:CB:FD:54:9E:9E:FC:E2:2F:22:F1:BC:DB:CB:73:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:11:7b:64:bc:8f:bf:ee:f4:c0:40:51:49:29:fa:bb:bb:03: 6e:6e:e5:7f:c6:fe:fc:22:e9:01:8a:47:09:08:67:61:62:78: 2d:0d:85:20:d4:f3:1c:a3:ac:68:10:f2:a3:72:6d:15:66:43: 02:0d:63:05:38:d5:22:88:c6:11:1f:37:6c:59:4b:3e:1b:b4: bb:df:26:00:d5:fc:3f:61:b1:45:24:21:60:11:bd:50:ef:d6: c0:9e:f3:9b:8e:15:1c:db:64:b4:11:f5:ec:42:12:c4:5f:2d: 43:a5:a3:81:2f:9e:ef:2e:3f:eb:ab:cf:a2:2c:12:f8:48:91: e3:3b:31:14:e8:04:95:c0:e7:6d:5f:31:75:74:09:c0:c3:67: 75:03:0a:98:57:a1:d5:ad:bc:6c:b7:c5:c2:e9:8c:d8:b5:ad: b7:6b:ab:89:96:a0:38:1f:19:f1:fd:5e:31:b3:67:26:ae:11: 66:12:56:af:38:1b:93:92:b2:a0:59:5f:51:1e:fc:9b:cb:97: 64:37:93:68:fa:d0:3f:3f:24:66:c0:fb:c3:db:f7:22:f3:dc: c1:f6:5b:de:16:f6:9c:ba:11:49:23:68:29:cf:be:fd:10:86: 8c:56:0d:20:8b:5f:74:e8:36:67:f6:f8:17:f7:05:5b:c3:48: 36:34:97:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcnAsb4c5HWC5+/OASYvWUDBzkBYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUMyQ0I5RjZDOENCRkQ1NDlFOUVGQ0UyMkYyMkYxQkNE QkNCNzM5MjAeFw0yNjA5MjIwNTQzMzhaFw0yNjA5MjMwODU5MzhaMDMxMTAvBgNV BAMTKDdGODY2NEI5MTg1MEEyNEQ0RTI4QjM5RjlBNjFDREM1MTVCMkVDOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd+Mml7KMTuztym6GP/2nD1dJ2 203jWXObe/bIWJRsQwCMMnEuhzR3f+yHa/HmXA7gGOigDjsP5X8G4y7S6WKBY+cb x1joNlQSMC2xRHw8u6HRb5+74UmmD9vPxOSJ/H0hMMDmMUqzdq54EADpz70D5Np8 Y96X2uhGm1TV9LfTVANdizLi5svaNX/btjXfNI1JytgiczBnPT9TYCX+KsNTBZXm XhXal5FIO92EmpPA9HsOd/fu+7oeI7V2FNau3X4FQ8t6VhPzF4Eu024sW60pR6Hb tNOcReyrM2ro5fUUt2tcfRAQJ71F9M9B1CVSLfg3zgZK9EEjUrNyMkQJCLKJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf4ZkuRhQok1OKLOfmmHNxRWy7J0wHwYDVR0j BBgwFoAUrCy59sjL/VSenvziLyLxvNvLc5IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjA1MTZhN2EtNDE5NS00NGIzLWEyNGUtY2Y4ZWQ1NzhkNzkxLzAvQUMyQ0I5RjZD OENCRkQ1NDlFOUVGQ0UyMkYyMkYxQkNEQkNCNzM5Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzJDQjlGNkM4Q0JGRDU0OUU5RUZDRTIyRjIyRjFCQ0RCQ0I3 MzkyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjA1MTZhN2EtNDE5NS00NGIzLWEy NGUtY2Y4ZWQ1NzhkNzkxLzAvQUMyQ0I5RjZDOENCRkQ1NDlFOUVGQ0UyMkYyMkYx QkNEQkNCNzM5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK0Re2S8j7/u9MBAUUkp+ru7A25u5X/G/vwi 6QGKRwkIZ2FieC0NhSDU8xyjrGgQ8qNybRVmQwINYwU41SKIxhEfN2xZSz4btLvf JgDV/D9hsUUkIWARvVDv1sCe85uOFRzbZLQR9exCEsRfLUOlo4Evnu8uP+urz6Is EvhIkeM7MRToBJXA521fMXV0CcDDZ3UDCphXodWtvGy3xcLpjNi1rbdrq4mWoDgf GfH9XjGzZyauEWYSVq84G5OSsqBZX1Ee/JvLl2Q3k2j60D8/JGbA+8Pb9yLz3MH2 W94W9py6EUkjaCnPvv0QhoxWDSCLX3ToNmf2+Bf3BVvDSDY0l74= -----END CERTIFICATE-----Generated at Tue Sep 22 16:04:59 2026 by rpki-client