$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.mft File: AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.mft (raw, json) Hash identifier: RdKsMAHx/14ye5jsVUtFg3QSDRwQtC2jmyUUgzB9r34= Subject key identifier: CF:B9:11:9D:B6:58:71:54:D4:10:A0:B6:A0:B7:A1:19:05:A8:80:6F Authority key identifier: AC:23:DD:AA:2C:89:DF:C4:3F:0D:12:03:31:CD:3C:8F:1E:60:D1:CA Certificate issuer: /CN=AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA Certificate serial: 3789BD7D4AB9D3F0BBAF25B4F827D176EA2E05B8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.mft Manifest number: BC Signing time: Sun 20 Sep 2026 17:18:22 +0000 Manifest this update: Sun 20 Sep 2026 17:13:22 +0000 Manifest next update: Mon 21 Sep 2026 20:52:22 +0000 Files and hashes: 1: 3130332e3138342e31382e302f32342d3234203d3e203438343635.roa (hash: AMN816Na79PG9Dr8taQyQqg9+CtJXIVEVEtntXynyXw=) 2: 3130332e3138342e31382e302f32332d3233203d3e20313439363735.roa (hash: IKu3DMB2Lrk9WDHkDL4CNW43tnQhk2oAbk+rhH/oyA8=) 3: 3130332e3138342e31392e302f32342d3234203d3e20313439363735.roa (hash: tpylCt5CgrBx6WkyqQ/Q0MxG2lKbEyC1EbhCs0e+Yuo=) 4: 3130332e3138342e31392e302f32342d3234203d3e203438343635.roa (hash: jT66ugDcwrPPZn+FW9LcATaa7pa94IbpNMskVZmpYyA=) 5: AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.crl (hash: kD6QkavESCfsrCiMJZH4ECDrS+di4xTX1oE0uc7es+c=) 6: 3130332e3138342e31382e302f32342d3234203d3e20313439363735.roa (hash: etrhCGlRM8YYOHb6oshuOaV8mvXHwHvEf9qlp95P9kg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.crl rsync://rpki-rsync.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 20:52:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:89:bd:7d:4a:b9:d3:f0:bb:af:25:b4:f8:27:d1:76:ea:2e:05:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA Validity Not Before: Sep 20 17:13:22 2026 GMT Not After : Sep 21 20:52:22 2026 GMT Subject: CN=CFB9119DB6587154D410A0B6A0B7A11905A8806F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:87:35:de:39:af:96:4c:95:5e:54:84:4a:2f: b2:e2:cd:e3:43:0e:f1:a0:82:60:4c:18:81:e1:d0: c5:c4:6a:8f:0c:c6:e9:36:c9:67:41:ae:43:88:85: 13:bc:51:76:cc:55:48:d0:24:ed:01:f6:7f:df:32: fc:5a:62:d3:5a:71:b7:7c:c7:0d:35:84:0d:30:c8: f9:06:4e:58:7d:e8:5f:8e:a7:f2:d4:a5:34:f0:af: c3:c1:d1:ef:ad:5c:b6:e4:ae:42:e5:73:18:7d:a0: 65:ab:a2:5f:68:ec:f7:0b:e7:c9:71:22:b7:79:82: 2f:59:78:e9:63:a1:a5:2c:98:73:27:53:d1:3e:11: d3:a6:5d:c9:3f:94:54:a6:4e:cc:c4:b2:ca:38:ca: 70:6e:d8:56:f4:9c:7d:20:6f:c9:1b:9a:8b:ab:9d: 5f:d7:20:bb:ca:55:2d:cc:77:f1:fc:c2:dc:97:c4: 1d:8c:aa:29:bb:e2:62:36:43:d5:88:7e:59:e8:a1: e9:fa:06:09:f5:b5:d9:70:5c:7b:e6:8b:22:66:6c: f9:a0:62:bc:72:bb:83:aa:f4:1d:1b:96:8c:54:10: 10:15:f9:c8:15:5c:a0:d2:f0:8e:17:d3:c6:36:08: 96:00:88:45:bc:0c:c3:ca:9d:4f:ab:64:f6:4f:b2: 94:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:B9:11:9D:B6:58:71:54:D4:10:A0:B6:A0:B7:A1:19:05:A8:80:6F X509v3 Authority Key Identifier: keyid:AC:23:DD:AA:2C:89:DF:C4:3F:0D:12:03:31:CD:3C:8F:1E:60:D1:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:17:a2:18:0a:d5:fd:20:3c:16:e0:47:17:81:a4:60:1c:76: 6e:5a:b1:ca:8a:9e:39:35:ff:57:da:b2:84:4e:35:de:80:53: ee:d7:0e:81:94:79:0d:5d:d4:6a:d8:4b:5d:2c:10:4a:55:37: 90:62:49:81:66:05:82:7d:11:25:40:25:9b:ab:74:7f:0b:f0: 19:93:76:79:ba:64:b0:fc:49:a0:43:d5:a2:e2:f7:7b:ad:63: 36:01:f4:79:74:6c:8e:02:01:ba:7a:e8:62:d8:75:bd:48:bb: 72:2b:c5:fe:e6:6e:a6:d1:f9:2f:ed:3e:2b:9c:13:37:53:a0: 3a:c7:5a:11:23:c6:2f:53:e9:4e:b0:c1:6d:70:33:c3:24:1a: 36:cd:10:5e:94:dd:c7:41:f2:f3:ea:8d:8a:d8:da:89:29:d0: 58:1c:b1:6d:d3:52:57:8e:4c:9d:ba:8d:4c:a5:16:6b:df:91: 85:8c:98:ad:73:3c:6d:48:29:69:ae:81:29:83:d0:ba:71:c3: df:3e:b5:49:7c:66:2a:b6:43:a4:f6:96:b3:b7:c5:c0:2b:f1: ff:3f:c0:3a:9d:ea:cd:d5:e8:00:3c:60:a6:55:c3:90:ec:42: de:49:3f:31:09:b5:7b:4c:ac:61:db:b0:87:07:f5:ab:7a:fd: 6c:9b:56:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN4m9fUq50/C7ryW0+CfRduouBbgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUMyM0REQUEyQzg5REZDNDNGMEQxMjAzMzFDRDNDOEYx RTYwRDFDQTAeFw0yNjA5MjAxNzEzMjJaFw0yNjA5MjEyMDUyMjJaMDMxMTAvBgNV BAMTKENGQjkxMTlEQjY1ODcxNTRENDEwQTBCNkEwQjdBMTE5MDVBODgwNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVhzXeOa+WTJVeVIRKL7LizeND DvGggmBMGIHh0MXEao8Mxuk2yWdBrkOIhRO8UXbMVUjQJO0B9n/fMvxaYtNacbd8 xw01hA0wyPkGTlh96F+Op/LUpTTwr8PB0e+tXLbkrkLlcxh9oGWrol9o7PcL58lx Ird5gi9ZeOljoaUsmHMnU9E+EdOmXck/lFSmTszEsso4ynBu2Fb0nH0gb8kbmour nV/XILvKVS3Md/H8wtyXxB2Mqim74mI2Q9WIflnooen6Bgn1tdlwXHvmiyJmbPmg Yrxyu4Oq9B0bloxUEBAV+cgVXKDS8I4X08Y2CJYAiEW8DMPKnU+rZPZPspTpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz7kRnbZYcVTUEKC2oLehGQWogG8wHwYDVR0j BBgwFoAUrCPdqiyJ38Q/DRIDMc08jx5g0cowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjBkOTE0ZWYtMGIxZi00OTBiLTgwOGQtYTI3YjgzZmY5YTNlLzAvQUMyM0REQUEy Qzg5REZDNDNGMEQxMjAzMzFDRDNDOEYxRTYwRDFDQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzIzRERBQTJDODlERkM0M0YwRDEyMDMzMUNEM0M4RjFFNjBE MUNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjBkOTE0ZWYtMGIxZi00OTBiLTgw OGQtYTI3YjgzZmY5YTNlLzAvQUMyM0REQUEyQzg5REZDNDNGMEQxMjAzMzFDRDND OEYxRTYwRDFDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAsXohgK1f0gPBbgRxeBpGAcdm5ascqKnjk1 /1fasoRONd6AU+7XDoGUeQ1d1GrYS10sEEpVN5BiSYFmBYJ9ESVAJZurdH8L8BmT dnm6ZLD8SaBD1aLi93utYzYB9Hl0bI4CAbp66GLYdb1Iu3Irxf7mbqbR+S/tPiuc EzdToDrHWhEjxi9T6U6wwW1wM8MkGjbNEF6U3cdB8vPqjYrY2okp0FgcsW3TUleO TJ26jUylFmvfkYWMmK1zPG1IKWmugSmD0Lpxw98+tUl8Ziq2Q6T2lrO3xcAr8f8/ wDqd6s3V6AA8YKZVw5DsQt5JPzEJtXtMrGHbsIcH9at6/WybVoU= -----END CERTIFICATE-----Generated at Mon Sep 21 09:48:14 2026 by rpki-client