$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.mft File: AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.mft (raw, json) Hash identifier: hOeB3+d2vZUtT/Mw7V9qTUT4issvUXpoSZMpkNyeWA0= Subject key identifier: 08:75:23:B6:7B:55:6D:21:17:CB:21:53:A8:E4:01:71:C8:E9:A8:33 Authority key identifier: AC:23:DD:AA:2C:89:DF:C4:3F:0D:12:03:31:CD:3C:8F:1E:60:D1:CA Certificate issuer: /CN=AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA Certificate serial: 3B12198F0D3C93B5E01E8ED4F89B811DFACB73AE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.mft Manifest number: FE Signing time: Mon 09 Nov 2026 18:38:56 +0000 Manifest this update: Mon 09 Nov 2026 18:33:56 +0000 Manifest next update: Tue 10 Nov 2026 19:38:56 +0000 Files and hashes: 1: AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.crl (hash: KpUIYvNiLJ1ab7v1UPPBNw4E3FfRLW5UombJvr1FpLk=) 2: 3130332e3138342e31392e302f32342d3234203d3e203438343635.roa (hash: jT66ugDcwrPPZn+FW9LcATaa7pa94IbpNMskVZmpYyA=) 3: 3130332e3138342e31382e302f32332d3233203d3e20313439363735.roa (hash: IKu3DMB2Lrk9WDHkDL4CNW43tnQhk2oAbk+rhH/oyA8=) 4: 3130332e3138342e31382e302f32342d3234203d3e203438343635.roa (hash: AMN816Na79PG9Dr8taQyQqg9+CtJXIVEVEtntXynyXw=) 5: 3130332e3138342e31382e302f32342d3234203d3e20313439363735.roa (hash: etrhCGlRM8YYOHb6oshuOaV8mvXHwHvEf9qlp95P9kg=) 6: 3130332e3138342e31392e302f32342d3234203d3e20313439363735.roa (hash: tpylCt5CgrBx6WkyqQ/Q0MxG2lKbEyC1EbhCs0e+Yuo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.crl rsync://rpki-rsync.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:12:19:8f:0d:3c:93:b5:e0:1e:8e:d4:f8:9b:81:1d:fa:cb:73:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA Validity Not Before: Nov 9 18:33:56 2026 GMT Not After : Nov 10 19:38:56 2026 GMT Subject: CN=087523B67B556D2117CB2153A8E40171C8E9A833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:90:3f:9f:11:4e:ab:98:48:58:cf:12:65:ab: ed:0d:8d:f5:98:1a:b8:3f:ac:7c:a4:95:25:f2:01: f3:c6:d8:f3:84:4b:b0:9f:57:c9:22:06:56:11:f1: 2c:8a:21:f5:ab:a9:85:b3:55:4a:d2:2a:1a:d8:00: 6e:4b:1e:be:2f:a7:27:1b:14:c5:b5:d1:81:ce:06: 24:56:32:4e:c8:af:1d:56:ab:eb:98:55:57:5b:1d: 79:28:b2:ae:0c:a2:44:04:87:06:e6:ae:4d:66:b9: 67:b9:14:a5:39:3d:13:09:3c:e2:d5:3d:74:74:2e: 1d:1d:f5:fa:52:b8:95:75:33:80:71:07:a3:23:0c: 15:01:cf:4c:5c:ff:4e:3e:37:38:b0:c5:91:08:ad: 8a:79:b5:9d:b5:47:bf:8e:8d:54:a1:dd:43:cd:14: 4c:ca:09:e1:84:dc:df:74:be:69:51:61:2d:72:81: a0:9d:02:dc:ec:03:0f:15:82:a9:a3:6f:4d:0c:59: cf:4e:59:b9:bf:ea:63:fc:7b:37:de:53:5a:7b:5c: 51:df:4d:5f:24:65:f6:58:a6:4f:10:63:0d:2f:fb: 83:30:e9:b6:2a:59:33:e0:c6:45:e4:9a:c1:91:65: 0c:09:79:37:7d:6e:f5:e6:6a:bb:40:9c:68:58:7b: b6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:75:23:B6:7B:55:6D:21:17:CB:21:53:A8:E4:01:71:C8:E9:A8:33 X509v3 Authority Key Identifier: keyid:AC:23:DD:AA:2C:89:DF:C4:3F:0D:12:03:31:CD:3C:8F:1E:60:D1:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:0c:b6:ba:c3:0b:7e:5a:87:fb:42:71:28:b6:6c:70:ef:bc: 06:0f:9b:d2:f2:35:0e:e6:79:0d:9e:22:cc:1d:ff:04:87:81: 15:b2:0a:4d:f0:2c:54:b5:f1:7d:5e:c3:d5:b5:7b:93:96:38: bb:8c:91:93:4f:92:92:5b:68:81:c7:f4:2d:b7:ce:fc:80:0c: 1a:b1:02:32:66:97:ed:3c:99:dc:0d:0b:88:6d:69:61:c5:cc: 88:12:4e:57:45:3e:ef:aa:f2:e3:4e:bd:7b:f1:ae:3e:fa:23: 3d:8e:c8:44:4d:85:ee:61:b5:f9:b0:e2:64:30:06:9d:7f:9b: 9d:57:d6:44:0f:51:d5:76:78:ef:5a:69:4a:2e:e2:8d:7f:70: 1f:e3:ef:e7:50:fb:3e:ad:00:e9:7b:bc:6b:00:b8:3c:c7:5a: 94:ce:96:e3:66:85:4b:fb:78:09:f9:b9:64:4b:51:d6:a0:87: 97:5d:49:bb:7c:e9:b7:6f:f0:83:43:95:65:f9:80:be:c5:23: 82:78:46:e5:db:41:d4:e4:6e:54:36:36:8c:7e:ef:7d:c6:d5: de:7a:8d:df:48:ce:e1:fc:a7:f0:f1:c6:1d:ed:ae:89:81:3a: 95:15:72:e9:61:a0:b7:47:39:cb:de:11:57:b2:da:99:53:07: 7d:c5:09:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOxIZjw08k7XgHo7U+JuBHfrLc64wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUMyM0REQUEyQzg5REZDNDNGMEQxMjAzMzFDRDNDOEYx RTYwRDFDQTAeFw0yNjExMDkxODMzNTZaFw0yNjExMTAxOTM4NTZaMDMxMTAvBgNV BAMTKDA4NzUyM0I2N0I1NTZEMjExN0NCMjE1M0E4RTQwMTcxQzhFOUE4MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYkD+fEU6rmEhYzxJlq+0NjfWY Grg/rHyklSXyAfPG2POES7CfV8kiBlYR8SyKIfWrqYWzVUrSKhrYAG5LHr4vpycb FMW10YHOBiRWMk7Irx1Wq+uYVVdbHXkosq4MokQEhwbmrk1muWe5FKU5PRMJPOLV PXR0Lh0d9fpSuJV1M4BxB6MjDBUBz0xc/04+NziwxZEIrYp5tZ21R7+OjVSh3UPN FEzKCeGE3N90vmlRYS1ygaCdAtzsAw8Vgqmjb00MWc9OWbm/6mP8ezfeU1p7XFHf TV8kZfZYpk8QYw0v+4Mw6bYqWTPgxkXkmsGRZQwJeTd9bvXmartAnGhYe7ZDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCHUjtntVbSEXyyFTqOQBccjpqDMwHwYDVR0j BBgwFoAUrCPdqiyJ38Q/DRIDMc08jx5g0cowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjBkOTE0ZWYtMGIxZi00OTBiLTgwOGQtYTI3YjgzZmY5YTNlLzAvQUMyM0REQUEy Qzg5REZDNDNGMEQxMjAzMzFDRDNDOEYxRTYwRDFDQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzIzRERBQTJDODlERkM0M0YwRDEyMDMzMUNEM0M4RjFFNjBE MUNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjBkOTE0ZWYtMGIxZi00OTBiLTgw OGQtYTI3YjgzZmY5YTNlLzAvQUMyM0REQUEyQzg5REZDNDNGMEQxMjAzMzFDRDND OEYxRTYwRDFDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAQMtrrDC35ah/tCcSi2bHDvvAYPm9LyNQ7m eQ2eIswd/wSHgRWyCk3wLFS18X1ew9W1e5OWOLuMkZNPkpJbaIHH9C23zvyADBqx AjJml+08mdwNC4htaWHFzIgSTldFPu+q8uNOvXvxrj76Iz2OyERNhe5htfmw4mQw Bp1/m51X1kQPUdV2eO9aaUou4o1/cB/j7+dQ+z6tAOl7vGsAuDzHWpTOluNmhUv7 eAn5uWRLUdagh5ddSbt86bdv8INDlWX5gL7FI4J4RuXbQdTkblQ2Nox+733G1d56 jd9IzuH8p/Dxxh3tromBOpUVculhoLdHOcveEVey2plTB33FCcY= -----END CERTIFICATE-----Generated at Tue Nov 10 02:04:48 2026 by rpki-client