$ rpki-client -vvf rpki-rsync.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.mft File: AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.mft (raw, json) Hash identifier: 1oo2mHqDzGjQvWXHORTjJhYfEvKSEzU+guZOPyuEXTs= Subject key identifier: D0:5D:68:1F:94:AD:D3:19:B5:3C:8F:CE:30:25:65:71:1C:58:30:96 Authority key identifier: AC:23:DD:AA:2C:89:DF:C4:3F:0D:12:03:31:CD:3C:8F:1E:60:D1:CA Certificate issuer: /CN=AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA Certificate serial: 31D74DF5B1637C9D0643760FC37910780DC62519 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 15:41:00 +0000 Manifest this update: Tue 28 Jul 2026 15:36:00 +0000 Manifest next update: Wed 29 Jul 2026 19:26:00 +0000 Files and hashes: 1: 3130332e3138342e31382e302f32342d3234203d3e20313439363735.roa (hash: etrhCGlRM8YYOHb6oshuOaV8mvXHwHvEf9qlp95P9kg=) 2: 3130332e3138342e31392e302f32342d3234203d3e203438343635.roa (hash: jT66ugDcwrPPZn+FW9LcATaa7pa94IbpNMskVZmpYyA=) 3: 3130332e3138342e31382e302f32342d3234203d3e203438343635.roa (hash: AMN816Na79PG9Dr8taQyQqg9+CtJXIVEVEtntXynyXw=) 4: 3130332e3138342e31382e302f32332d3233203d3e20313439363735.roa (hash: IKu3DMB2Lrk9WDHkDL4CNW43tnQhk2oAbk+rhH/oyA8=) 5: AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.crl (hash: 70X1SuDaVqosakEU1X0QnIMena/kECMQGckWCRfY4QA=) 6: 3130332e3138342e31392e302f32342d3234203d3e20313439363735.roa (hash: tpylCt5CgrBx6WkyqQ/Q0MxG2lKbEyC1EbhCs0e+Yuo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.crl rsync://rpki-rsync.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 19:26:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:d7:4d:f5:b1:63:7c:9d:06:43:76:0f:c3:79:10:78:0d:c6:25:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA Validity Not Before: Jul 28 15:36:00 2026 GMT Not After : Jul 29 19:26:00 2026 GMT Subject: CN=D05D681F94ADD319B53C8FCE302565711C583096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:09:e0:3f:b3:21:b2:95:c0:77:f1:59:5c:07: 64:df:f4:b3:60:df:09:e9:15:3f:ba:e6:ca:a1:0e: 87:b3:d3:20:35:8a:99:af:66:c9:8f:a4:17:47:1c: 63:f9:96:46:b0:08:be:2d:cb:09:ff:1e:33:a1:b2: 93:22:7c:36:02:11:17:89:6a:d3:29:ca:a7:f2:e8: 5b:52:56:2d:ad:a9:76:c5:a7:4b:eb:89:8a:fe:13: 38:0c:c6:f4:a4:ff:f3:27:af:f9:8e:5e:3b:cf:1c: 51:57:0f:1c:c5:aa:69:4a:4f:23:19:ef:31:99:70: 3e:f1:ea:6a:18:cd:4e:16:a2:dc:ad:c6:ef:32:5d: 66:f6:7a:70:cf:5d:ad:36:13:80:48:c4:bd:02:92: fd:30:33:bd:45:15:a4:80:54:e9:60:bc:99:3c:e0: 01:e8:03:34:42:34:81:ca:22:27:df:cc:99:39:47: fb:45:bf:0e:3a:dc:24:88:33:e7:7a:b0:7c:98:7f: 11:e5:a3:5c:41:82:b6:69:9d:92:81:26:35:64:cc: 45:5e:1b:56:43:fa:e6:61:18:8e:06:c0:6c:4e:a9: 8d:61:47:66:27:86:0e:7f:a1:c2:92:35:57:8a:ba: 36:7e:a2:7d:39:a1:ee:ad:1f:b1:aa:2b:e1:ef:6d: f2:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:5D:68:1F:94:AD:D3:19:B5:3C:8F:CE:30:25:65:71:1C:58:30:96 X509v3 Authority Key Identifier: keyid:AC:23:DD:AA:2C:89:DF:C4:3F:0D:12:03:31:CD:3C:8F:1E:60:D1:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:9e:55:04:9d:1f:4b:21:bc:37:88:00:9b:24:05:43:47:21: 3a:35:09:e2:74:b0:89:23:67:f9:55:51:6b:91:45:8f:54:7f: 7f:a2:21:22:92:38:fc:f6:43:58:82:48:26:1c:ba:be:1d:18: 08:1d:c0:d0:07:8a:4f:b0:2d:01:f2:93:fa:5e:4f:21:0d:95: 76:bb:45:42:b5:e8:36:25:5e:97:ef:42:44:4e:17:51:00:11: 48:92:85:80:08:5d:9e:77:3e:5f:b9:25:0b:07:95:4c:e6:5e: 59:fa:7a:38:7e:05:78:34:b1:2c:5d:8f:ad:3f:b6:03:bd:92: fe:76:11:f8:b1:b7:1d:e2:d3:0b:ac:f2:62:50:27:30:b1:43: 0a:0f:aa:49:fb:e7:07:64:d7:f7:af:42:e8:b0:fe:4b:f8:a9: ae:80:fc:64:5b:2c:c2:1e:31:13:4e:a9:5e:8d:57:66:4c:3b: 09:5b:73:38:97:cc:a2:2f:ae:08:05:56:de:76:d9:b0:d3:73: 77:98:af:5c:6c:55:da:44:6b:bf:9d:52:01:6f:35:30:07:1a: 96:43:da:99:a1:a8:02:1f:1a:ba:66:94:ff:e6:95:d9:81:c6: e8:5e:3e:a4:3f:10:83:69:cd:f4:cf:0f:eb:58:5a:f5:0d:6a: d9:26:f3:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMddN9bFjfJ0GQ3YPw3kQeA3GJRkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUMyM0REQUEyQzg5REZDNDNGMEQxMjAzMzFDRDNDOEYx RTYwRDFDQTAeFw0yNjA3MjgxNTM2MDBaFw0yNjA3MjkxOTI2MDBaMDMxMTAvBgNV BAMTKEQwNUQ2ODFGOTRBREQzMTlCNTNDOEZDRTMwMjU2NTcxMUM1ODMwOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtCeA/syGylcB38VlcB2Tf9LNg 3wnpFT+65sqhDoez0yA1ipmvZsmPpBdHHGP5lkawCL4tywn/HjOhspMifDYCEReJ atMpyqfy6FtSVi2tqXbFp0vriYr+EzgMxvSk//Mnr/mOXjvPHFFXDxzFqmlKTyMZ 7zGZcD7x6moYzU4Wotytxu8yXWb2enDPXa02E4BIxL0Ckv0wM71FFaSAVOlgvJk8 4AHoAzRCNIHKIiffzJk5R/tFvw463CSIM+d6sHyYfxHlo1xBgrZpnZKBJjVkzEVe G1ZD+uZhGI4GwGxOqY1hR2Ynhg5/ocKSNVeKujZ+on05oe6tH7GqK+HvbfJ1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0F1oH5St0xm1PI/OMCVlcRxYMJYwHwYDVR0j BBgwFoAUrCPdqiyJ38Q/DRIDMc08jx5g0cowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjBkOTE0ZWYtMGIxZi00OTBiLTgwOGQtYTI3YjgzZmY5YTNlLzAvQUMyM0REQUEy Qzg5REZDNDNGMEQxMjAzMzFDRDNDOEYxRTYwRDFDQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzIzRERBQTJDODlERkM0M0YwRDEyMDMzMUNEM0M4RjFFNjBE MUNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjBkOTE0ZWYtMGIxZi00OTBiLTgw OGQtYTI3YjgzZmY5YTNlLzAvQUMyM0REQUEyQzg5REZDNDNGMEQxMjAzMzFDRDND OEYxRTYwRDFDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABSeVQSdH0shvDeIAJskBUNHITo1CeJ0sIkj Z/lVUWuRRY9Uf3+iISKSOPz2Q1iCSCYcur4dGAgdwNAHik+wLQHyk/peTyENlXa7 RUK16DYlXpfvQkROF1EAEUiShYAIXZ53Pl+5JQsHlUzmXln6ejh+BXg0sSxdj60/ tgO9kv52Efixtx3i0wus8mJQJzCxQwoPqkn75wdk1/evQuiw/kv4qa6A/GRbLMIe MRNOqV6NV2ZMOwlbcziXzKIvrggFVt522bDTc3eYr1xsVdpEa7+dUgFvNTAHGpZD 2pmhqAIfGrpmlP/mldmBxuhePqQ/EINpzfTPD+tYWvUNatkm850= -----END CERTIFICATE-----Generated at Wed Jul 29 08:34:59 2026 by rpki-client