$ rpki-client -vvf rpki-rsync.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.mft File: AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.mft (raw, json) Hash identifier: Y956A4SEXLrZg6twHtOUG2GV3qCTLs03+uFcJIxbGjo= Subject key identifier: 2B:3A:E8:E4:88:03:BC:76:7C:22:82:02:83:31:23:79:95:0C:F2:03 Authority key identifier: AC:2C:B9:F6:C8:CB:FD:54:9E:9E:FC:E2:2F:22:F1:BC:DB:CB:73:92 Certificate issuer: /CN=AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392 Certificate serial: 4B6E1BA3FAB487851D79BDEDB4DDBF13CDE23436 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 20:59:35 +0000 Manifest this update: Tue 16 Jun 2026 20:54:35 +0000 Manifest next update: Wed 17 Jun 2026 22:49:35 +0000 Files and hashes: 1: 323030313a6466303a663963303a3a2f34382d3438203d3e20313439393037.roa (hash: GJQ+AHj2o4V89RFkllxAeKJUIy+kRG6F/hsMS14nw+s=) 2: 3130332e3139302e3131332e302f32342d3234203d3e20313439393037.roa (hash: Q95AZcZVTNNMyCA8ySPTWTlV5HgDicctdDFDNHoHuh0=) 3: AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.crl (hash: Ck38xrZ8MaQAW3KyZBNOd7nd0BgT9DSusCuQp/GJRzM=) 4: 3130332e3139302e3131322e302f32342d3234203d3e20313439393037.roa (hash: 1w+lHciz1g+OQhhivgPPNI1UUThYYbymT06vuiGhBaA=) 5: 3130332e3139302e3131322e302f32332d3234203d3e20313439393037.roa (hash: hhQovD5k6aPWCJpf1Q2RXufesBruZAyhfmoou+CUYHI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.crl rsync://rpki-rsync.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 22:49:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:6e:1b:a3:fa:b4:87:85:1d:79:bd:ed:b4:dd:bf:13:cd:e2:34:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392 Validity Not Before: Jun 16 20:54:35 2026 GMT Not After : Jun 17 22:49:35 2026 GMT Subject: CN=2B3AE8E48803BC767C22820283312379950CF203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:34:28:97:f4:d0:4d:4a:1b:80:d4:99:b3:19: 1e:44:97:41:bd:c0:00:3e:a9:63:5d:5e:ab:b4:78: 42:0c:b2:9b:5d:2e:98:1e:df:c9:87:da:21:e1:2d: 2d:11:3e:cb:6f:54:3f:6f:77:bd:79:83:8c:1f:7e: 96:5e:84:62:52:ef:30:71:5b:c7:99:60:6b:f1:09: d4:57:f6:cf:c3:64:01:4c:74:b7:30:21:80:bf:7f: c5:a2:52:85:ee:d9:5c:86:fd:a6:04:75:86:dc:ea: af:28:47:2d:d4:a4:f5:be:1a:73:29:66:d3:81:86: ab:3c:44:a1:33:41:8e:b4:6d:63:60:25:e8:09:ab: ef:e7:34:23:a3:ac:3f:e8:27:e7:74:a0:00:fb:38: 86:04:8f:9e:a3:93:8f:0e:30:75:14:29:21:8e:ff: 4a:ba:19:ee:fd:a3:1a:02:8a:29:58:bc:14:ae:86: e7:1f:c5:9c:64:95:a7:21:51:ee:03:7e:8f:f0:5c: 06:ff:4f:73:70:78:47:e4:0c:75:76:08:cc:4a:36: 7b:fe:68:32:e7:8c:dc:9b:d7:77:86:47:6b:18:67: b9:9a:9a:10:78:34:7b:43:e8:d3:bc:6d:d8:d5:13: 0e:dc:7b:2e:a9:ff:ef:5e:34:91:6f:e5:02:c4:33: f2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:3A:E8:E4:88:03:BC:76:7C:22:82:02:83:31:23:79:95:0C:F2:03 X509v3 Authority Key Identifier: keyid:AC:2C:B9:F6:C8:CB:FD:54:9E:9E:FC:E2:2F:22:F1:BC:DB:CB:73:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:e1:1f:9e:99:71:1e:45:7e:54:14:2d:64:23:2c:e1:a9:5b: 40:25:c4:72:66:65:85:8f:9f:44:07:d1:75:c7:af:16:67:e1: 7d:c0:62:6d:73:43:74:7e:9b:4f:97:cb:c6:fc:96:9c:bc:57: a4:43:5a:26:61:29:68:8b:e7:b6:e4:04:0e:c9:74:9e:a6:38: c1:8d:aa:d0:c6:da:5e:ea:34:c0:c1:6f:6d:0f:8f:5d:91:6f: f4:df:07:99:81:2b:a7:d1:3b:41:7b:08:d6:a8:d4:d1:5c:e1: a6:08:ab:a3:14:8e:9d:04:2a:12:dd:66:c8:bb:66:48:ae:b4: c0:78:6d:b2:95:79:bb:25:b9:42:ec:bc:3a:e2:75:39:72:8a: 1a:ba:e1:5c:a8:2e:35:a6:59:5e:3f:d4:b7:63:1a:c8:b6:98: 61:f3:fc:fc:be:99:a4:1f:de:dd:70:48:27:5b:05:98:08:b5: 00:32:6e:f2:75:26:bf:4c:ba:04:f9:97:c4:55:85:9b:2f:ac: 74:ca:9e:15:9a:90:d4:ac:36:83:bd:d5:3b:ed:cd:5a:92:50: 0c:18:db:55:03:ca:a8:2e:0c:7a:3a:9a:a8:e1:72:4a:b2:f8: 06:11:91:57:7a:4a:44:24:64:a8:60:18:59:d3:73:ed:d3:32: cc:33:6f:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS24bo/q0h4Udeb3ttN2/E83iNDYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUMyQ0I5RjZDOENCRkQ1NDlFOUVGQ0UyMkYyMkYxQkNE QkNCNzM5MjAeFw0yNjA2MTYyMDU0MzVaFw0yNjA2MTcyMjQ5MzVaMDMxMTAvBgNV BAMTKDJCM0FFOEU0ODgwM0JDNzY3QzIyODIwMjgzMzEyMzc5OTUwQ0YyMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuNCiX9NBNShuA1JmzGR5El0G9 wAA+qWNdXqu0eEIMsptdLpge38mH2iHhLS0RPstvVD9vd715g4wffpZehGJS7zBx W8eZYGvxCdRX9s/DZAFMdLcwIYC/f8WiUoXu2VyG/aYEdYbc6q8oRy3UpPW+GnMp ZtOBhqs8RKEzQY60bWNgJegJq+/nNCOjrD/oJ+d0oAD7OIYEj56jk48OMHUUKSGO /0q6Ge79oxoCiilYvBSuhucfxZxklachUe4Dfo/wXAb/T3NweEfkDHV2CMxKNnv+ aDLnjNyb13eGR2sYZ7mamhB4NHtD6NO8bdjVEw7cey6p/+9eNJFv5QLEM/L1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKzro5IgDvHZ8IoICgzEjeZUM8gMwHwYDVR0j BBgwFoAUrCy59sjL/VSenvziLyLxvNvLc5IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjA1MTZhN2EtNDE5NS00NGIzLWEyNGUtY2Y4ZWQ1NzhkNzkxLzAvQUMyQ0I5RjZD OENCRkQ1NDlFOUVGQ0UyMkYyMkYxQkNEQkNCNzM5Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzJDQjlGNkM4Q0JGRDU0OUU5RUZDRTIyRjIyRjFCQ0RCQ0I3 MzkyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjA1MTZhN2EtNDE5NS00NGIzLWEy NGUtY2Y4ZWQ1NzhkNzkxLzAvQUMyQ0I5RjZDOENCRkQ1NDlFOUVGQ0UyMkYyMkYx QkNEQkNCNzM5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGjhH56ZcR5FflQULWQjLOGpW0AlxHJmZYWP n0QH0XXHrxZn4X3AYm1zQ3R+m0+Xy8b8lpy8V6RDWiZhKWiL57bkBA7JdJ6mOMGN qtDG2l7qNMDBb20Pj12Rb/TfB5mBK6fRO0F7CNao1NFc4aYIq6MUjp0EKhLdZsi7 ZkiutMB4bbKVebsluULsvDridTlyihq64VyoLjWmWV4/1LdjGsi2mGHz/Py+maQf 3t1wSCdbBZgItQAybvJ1Jr9MugT5l8RVhZsvrHTKnhWakNSsNoO91TvtzVqSUAwY 21UDyqguDHo6mqjhckqy+AYRkVd6SkQkZKhgGFnTc+3TMswzb8U= -----END CERTIFICATE-----Generated at Wed Jun 17 10:45:23 2026 by rpki-client