$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/ACAD703216F20DD2C17C8C4B496C15FB8A97E0C4.mft File: ACAD703216F20DD2C17C8C4B496C15FB8A97E0C4.mft (raw, json) Hash identifier: 2IwpxbDHFpUB3r7IX//bhBEmzMGXp9ZWcdrXjWRHttI= Subject key identifier: 6F:F8:71:B4:AB:9A:9B:FB:30:B2:66:FB:1E:C8:A1:4B:30:6C:E4:47 Authority key identifier: AC:AD:70:32:16:F2:0D:D2:C1:7C:8C:4B:49:6C:15:FB:8A:97:E0:C4 Certificate issuer: /CN=ACAD703216F20DD2C17C8C4B496C15FB8A97E0C4 Certificate serial: 049E5255001E7C83744F0A7CF58FE251AFCCC1FD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ACAD703216F20DD2C17C8C4B496C15FB8A97E0C4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/ACAD703216F20DD2C17C8C4B496C15FB8A97E0C4.mft Manifest number: BE Signing time: Mon 21 Sep 2026 13:28:13 +0000 Manifest this update: Mon 21 Sep 2026 13:23:13 +0000 Manifest next update: Tue 22 Sep 2026 14:48:13 +0000 Files and hashes: 1: 3130332e3135322e3233322e302f32332d3234203d3e20313430343436.roa (hash: dwLR/sZJjCsYmWuW/mu1Dsf/vpmK+IkG4xbR1BkuvJo=) 2: ACAD703216F20DD2C17C8C4B496C15FB8A97E0C4.crl (hash: BcZyvmgXrptmwpnynMtnEtiXDatOHdzZSCeT4HN6xI4=) 3: 323030313a6466343a323038303a3a2f34382d3438203d3e20313430343436.roa (hash: 1k96+Wotm4Ir6kCd4Ellmv2UfwUxlr7lNnq7NxmV9aE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/ACAD703216F20DD2C17C8C4B496C15FB8A97E0C4.crl rsync://rpki-rsync.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/ACAD703216F20DD2C17C8C4B496C15FB8A97E0C4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ACAD703216F20DD2C17C8C4B496C15FB8A97E0C4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 14:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:9e:52:55:00:1e:7c:83:74:4f:0a:7c:f5:8f:e2:51:af:cc:c1:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ACAD703216F20DD2C17C8C4B496C15FB8A97E0C4 Validity Not Before: Sep 21 13:23:13 2026 GMT Not After : Sep 22 14:48:13 2026 GMT Subject: CN=6FF871B4AB9A9BFB30B266FB1EC8A14B306CE447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0a:97:18:95:a8:93:19:86:bc:fe:ae:77:f9: ca:6d:3d:ab:cb:e3:46:61:a0:20:cd:bb:47:3d:25: f1:33:7a:4f:3c:29:93:06:26:1d:2a:b7:45:3a:09: 67:f5:c6:e7:71:e5:0c:55:68:f2:06:25:ea:d7:3f: c9:d2:eb:21:27:1d:28:56:d3:06:2c:2e:8c:d2:87: 29:bc:7b:33:7d:dc:59:cb:73:59:04:b5:20:75:d9: 8c:50:79:44:57:17:4e:c4:e1:b9:38:83:9b:f8:9d: c9:c9:fb:81:4a:45:e2:0d:42:ef:6d:13:48:0d:2c: 32:9a:15:3c:65:7b:8a:77:ee:65:1f:44:2e:2f:b3: b0:5d:ff:2d:07:38:3f:86:ca:78:2e:2c:b1:3a:07: 14:17:12:51:c6:7d:84:70:9a:8d:4d:88:68:30:b6: 0f:fa:cc:b2:fc:7b:66:56:f4:80:18:7d:42:99:98: 91:35:0a:5e:c4:ba:a0:c1:66:34:c6:a3:83:c4:87: 2d:f8:a8:27:bf:95:b0:1c:16:dc:71:ba:11:00:2f: dc:42:94:c6:6a:9d:91:f4:35:22:3d:6f:42:2e:ce: 68:3e:e2:5c:e3:2d:bf:77:5d:ff:cf:d6:04:e5:b8: 48:0b:3a:16:ed:12:68:c2:c9:ec:71:25:ac:82:ed: 9a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:F8:71:B4:AB:9A:9B:FB:30:B2:66:FB:1E:C8:A1:4B:30:6C:E4:47 X509v3 Authority Key Identifier: keyid:AC:AD:70:32:16:F2:0D:D2:C1:7C:8C:4B:49:6C:15:FB:8A:97:E0:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/ACAD703216F20DD2C17C8C4B496C15FB8A97E0C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ACAD703216F20DD2C17C8C4B496C15FB8A97E0C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/ACAD703216F20DD2C17C8C4B496C15FB8A97E0C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:1e:16:73:9e:8f:68:64:93:f9:b3:61:0a:78:e0:2b:63:d7: fd:b2:1d:91:e8:ce:1b:ae:af:10:2a:4e:8a:d2:e1:92:2e:4c: 32:7b:a4:ac:e2:fc:fe:0c:e3:d8:41:42:21:63:03:c4:74:c9: a8:d8:c3:97:12:3d:d5:6d:13:e0:4a:59:a9:6f:10:64:16:9c: 03:cf:7e:08:5b:f9:b7:93:dd:10:fe:3a:b7:26:39:18:87:02: b5:8b:22:0e:41:1d:34:e6:df:37:f6:bf:4b:f4:c5:c4:1c:d0: 8c:33:b6:35:95:c8:a5:aa:1d:67:18:41:1b:ef:24:9f:da:82: 38:55:27:cb:53:67:04:21:a9:d7:a1:7c:a6:c3:97:ac:3e:df: b4:76:f4:f0:a0:9e:8b:eb:a5:1a:59:06:f5:5e:ee:e7:54:f2: 60:e9:ce:97:35:16:2a:f3:b0:dc:53:39:1a:1c:f3:86:a4:36: cd:76:12:4c:1f:1c:44:3a:25:6b:5d:1b:ac:7c:ba:70:5d:7f: 5b:bc:ab:ec:a0:04:40:d8:ca:ea:81:70:8a:d2:09:4d:81:4a: 70:77:73:e0:86:03:05:d7:ce:56:ea:a6:84:6c:18:14:e1:80: 71:a6:aa:ba:07:ba:92:9b:5e:6b:ae:de:16:c6:de:8c:a9:2d: 84:9b:1a:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBJ5SVQAefIN0Twp89Y/iUa/Mwf0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUNBRDcwMzIxNkYyMEREMkMxN0M4QzRCNDk2QzE1RkI4 QTk3RTBDNDAeFw0yNjA5MjExMzIzMTNaFw0yNjA5MjIxNDQ4MTNaMDMxMTAvBgNV BAMTKDZGRjg3MUI0QUI5QTlCRkIzMEIyNjZGQjFFQzhBMTRCMzA2Q0U0NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9CpcYlaiTGYa8/q53+cptPavL 40ZhoCDNu0c9JfEzek88KZMGJh0qt0U6CWf1xudx5QxVaPIGJerXP8nS6yEnHShW 0wYsLozShym8ezN93FnLc1kEtSB12YxQeURXF07E4bk4g5v4ncnJ+4FKReINQu9t E0gNLDKaFTxle4p37mUfRC4vs7Bd/y0HOD+GynguLLE6BxQXElHGfYRwmo1NiGgw tg/6zLL8e2ZW9IAYfUKZmJE1Cl7EuqDBZjTGo4PEhy34qCe/lbAcFtxxuhEAL9xC lMZqnZH0NSI9b0Iuzmg+4lzjLb93Xf/P1gTluEgLOhbtEmjCyexxJayC7ZqJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb/hxtKuam/swsmb7HsihSzBs5EcwHwYDVR0j BBgwFoAUrK1wMhbyDdLBfIxLSWwV+4qX4MQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzRmMDc5ODctYjhlYy00NDRhLTliNDQtMjkxMDExZmY0NmE2LzAvQUNBRDcwMzIx NkYyMEREMkMxN0M4QzRCNDk2QzE1RkI4QTk3RTBDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQ0FENzAzMjE2RjIwREQyQzE3QzhDNEI0OTZDMTVGQjhBOTdF MEM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzRmMDc5ODctYjhlYy00NDRhLTli NDQtMjkxMDExZmY0NmE2LzAvQUNBRDcwMzIxNkYyMEREMkMxN0M4QzRCNDk2QzE1 RkI4QTk3RTBDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFUeFnOej2hkk/mzYQp44Ctj1/2yHZHozhuu rxAqTorS4ZIuTDJ7pKzi/P4M49hBQiFjA8R0yajYw5cSPdVtE+BKWalvEGQWnAPP fghb+beT3RD+OrcmORiHArWLIg5BHTTm3zf2v0v0xcQc0IwztjWVyKWqHWcYQRvv JJ/agjhVJ8tTZwQhqdehfKbDl6w+37R29PCgnovrpRpZBvVe7udU8mDpzpc1Firz sNxTORoc84akNs12EkwfHEQ6JWtdG6x8unBdf1u8q+ygBEDYyuqBcIrSCU2BSnB3 c+CGAwXXzlbqpoRsGBThgHGmqroHupKbXmuu3hbG3oypLYSbGoo= -----END CERTIFICATE-----Generated at Tue Sep 22 07:00:47 2026 by rpki-client