$ rpki-client -vvf rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.mft File: ACB5F5BD4845167F55B8DBC49245C40C476C72D1.mft (raw, json) Hash identifier: RJemgUyR7BxOQXVVg+yS+No3ini0ExA9f4QTCZFQwl8= Subject key identifier: A1:06:95:A4:AE:5E:B5:B8:04:35:2F:53:D1:13:48:56:CD:38:62:DB Authority key identifier: AC:B5:F5:BD:48:45:16:7F:55:B8:DB:C4:92:45:C4:0C:47:6C:72:D1 Certificate issuer: /CN=ACB5F5BD4845167F55B8DBC49245C40C476C72D1 Certificate serial: 3DA3E6999951F3DB8DCF9D4CC6C52A849B85B14E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 20:39:08 +0000 Manifest this update: Tue 16 Jun 2026 20:34:08 +0000 Manifest next update: Wed 17 Jun 2026 22:39:08 +0000 Files and hashes: 1: 323430363a313334303a3a2f33322d3332203d3e20313430343037.roa (hash: WxEwSz+sWi75wTD9LX4+TZFvBImk89xubZTfF5v2cCg=) 2: 3130332e3135312e33332e302f32342d3234203d3e20313430343037.roa (hash: 12cGaGOgBCZ2rP3AvRmGNqqU8d1JvTtobCIZ/qRPUPE=) 3: 3130332e3135312e33322e302f32342d3234203d3e20313430343037.roa (hash: yHKtP8J6sRjd2vBKKZ1C8jqGxnt5X4o3lstFY/wy1jg=) 4: 323430363a313334303a3a2f33322d3430203d3e20313430343037.roa (hash: CVFptYCjc0BlHCccW2Xncqnkcsz2aSryEWVdhnNHxQY=) 5: ACB5F5BD4845167F55B8DBC49245C40C476C72D1.crl (hash: WycKWXwJctz+T+HCCpss4IyLjy7cZ3RuwI9tbOqeWM0=) 6: 323430363a313334303a3a2f33322d3333203d3e20313430343037.roa (hash: MI6jQTtOVHvsuWHm0uvBE0TFhtVi+xCMKjXMCSCBFDY=) 7: 3130332e3135312e33322e302f32332d3233203d3e20313430343037.roa (hash: zegPh8h8i8vXslaukZ/A0UJgubb+r4V2izsS5x1SFA0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.crl rsync://rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 22:39:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:a3:e6:99:99:51:f3:db:8d:cf:9d:4c:c6:c5:2a:84:9b:85:b1:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ACB5F5BD4845167F55B8DBC49245C40C476C72D1 Validity Not Before: Jun 16 20:34:08 2026 GMT Not After : Jun 17 22:39:08 2026 GMT Subject: CN=A10695A4AE5EB5B804352F53D1134856CD3862DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:61:5d:c7:1b:fa:7c:81:80:19:16:df:82:6d: 46:d0:2d:92:a3:a4:6f:aa:6b:13:13:41:99:b3:01: 3a:60:a2:fe:0a:b3:c3:78:7e:e7:6e:3e:4e:c3:b3: 58:22:85:02:ac:06:b4:83:bc:1d:62:8c:c6:1f:16: 0e:16:d3:d3:79:20:20:1b:41:37:2d:d0:a0:02:ec: 73:e3:64:a0:75:71:c9:69:72:95:69:a6:e5:92:97: f5:d8:9b:94:a5:1a:7a:63:a6:03:75:29:a7:ba:75: 40:94:8e:1d:6b:05:42:6b:aa:e1:6a:eb:d8:01:f8: 17:ad:b2:57:90:c0:71:db:07:2b:26:58:15:4b:8b: 5e:f8:a4:bb:96:9d:02:b4:24:86:0e:56:15:a5:14: 55:ad:05:67:30:3c:9f:17:66:42:24:0e:e8:2d:6d: 56:61:14:aa:c0:f6:8a:1d:ac:e9:83:ba:1e:00:b8: 21:d5:15:2c:3b:bc:6b:e9:39:24:57:23:81:c6:f1: 85:09:3c:f7:27:00:f4:8d:1a:c5:10:ce:f4:91:0d: b7:15:55:0a:df:d9:05:8d:f9:fb:4d:e0:8a:7b:61: d3:65:d3:da:02:ba:b6:a4:9f:24:e9:82:c3:6f:25: 25:5e:c9:de:61:6e:eb:2f:82:fd:94:05:5f:eb:0c: 77:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:06:95:A4:AE:5E:B5:B8:04:35:2F:53:D1:13:48:56:CD:38:62:DB X509v3 Authority Key Identifier: keyid:AC:B5:F5:BD:48:45:16:7F:55:B8:DB:C4:92:45:C4:0C:47:6C:72:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:3e:bd:55:63:44:74:50:cb:95:a0:28:c6:b0:ef:6f:86:04: 0e:23:2c:21:da:d0:d0:e9:73:34:ce:8c:03:fd:44:c0:a0:3a: c3:2d:ca:49:82:f8:b8:45:1c:03:b1:50:25:93:4b:ae:64:76: d3:62:62:a1:6c:3d:93:08:0f:7f:cb:bc:a6:47:19:4c:38:d9: 35:ec:a3:64:64:9c:cb:ac:46:a4:dd:b3:d4:39:33:da:62:9b: 8f:1c:50:b0:dc:dc:f7:e3:4a:f1:83:d5:cd:fa:bd:e9:5a:0f: 9f:65:5a:38:ed:af:c2:a4:f0:1e:2c:5e:85:a5:82:95:57:f8: a7:e3:4f:4f:15:30:88:b3:e1:44:dc:28:e7:36:38:45:03:e9: ef:c6:7f:c1:8e:28:6d:25:ac:ce:59:dc:62:8c:a7:16:f8:db: d3:38:ee:81:52:51:a2:ce:e3:f6:61:1c:c7:1d:cc:91:79:3b: a1:0b:15:c3:58:ab:1a:1a:08:99:01:5c:43:e2:59:03:a8:69: b9:da:90:b9:44:3f:aa:29:d5:40:74:10:82:e2:a9:3c:be:80: 34:c2:4f:02:e2:e9:fc:f3:44:d2:bf:ab:a6:84:36:9a:77:f8: 0b:2f:07:04:52:94:08:db:eb:ae:93:af:29:87:2e:c2:03:7e: bd:5e:cd:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPaPmmZlR89uNz51MxsUqhJuFsU4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUNCNUY1QkQ0ODQ1MTY3RjU1QjhEQkM0OTI0NUM0MEM0 NzZDNzJEMTAeFw0yNjA2MTYyMDM0MDhaFw0yNjA2MTcyMjM5MDhaMDMxMTAvBgNV BAMTKEExMDY5NUE0QUU1RUI1QjgwNDM1MkY1M0QxMTM0ODU2Q0QzODYyREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1YV3HG/p8gYAZFt+CbUbQLZKj pG+qaxMTQZmzATpgov4Ks8N4fuduPk7Ds1gihQKsBrSDvB1ijMYfFg4W09N5ICAb QTct0KAC7HPjZKB1cclpcpVppuWSl/XYm5SlGnpjpgN1Kae6dUCUjh1rBUJrquFq 69gB+BetsleQwHHbBysmWBVLi174pLuWnQK0JIYOVhWlFFWtBWcwPJ8XZkIkDugt bVZhFKrA9oodrOmDuh4AuCHVFSw7vGvpOSRXI4HG8YUJPPcnAPSNGsUQzvSRDbcV VQrf2QWN+ftN4Ip7YdNl09oCuraknyTpgsNvJSVeyd5hbusvgv2UBV/rDHdVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoQaVpK5etbgENS9T0RNIVs04YtswHwYDVR0j BBgwFoAUrLX1vUhFFn9VuNvEkkXEDEdsctEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzU5NmJjYzgtMzhjZC00NDM3LTgwYjEtNWJhZTlmODU3OTM3LzAvQUNCNUY1QkQ0 ODQ1MTY3RjU1QjhEQkM0OTI0NUM0MEM0NzZDNzJEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQ0I1RjVCRDQ4NDUxNjdGNTVCOERCQzQ5MjQ1QzQwQzQ3NkM3 MkQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzU5NmJjYzgtMzhjZC00NDM3LTgw YjEtNWJhZTlmODU3OTM3LzAvQUNCNUY1QkQ0ODQ1MTY3RjU1QjhEQkM0OTI0NUM0 MEM0NzZDNzJEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACc+vVVjRHRQy5WgKMaw72+GBA4jLCHa0NDp czTOjAP9RMCgOsMtykmC+LhFHAOxUCWTS65kdtNiYqFsPZMID3/LvKZHGUw42TXs o2RknMusRqTds9Q5M9pim48cULDc3PfjSvGD1c36velaD59lWjjtr8Kk8B4sXoWl gpVX+KfjT08VMIiz4UTcKOc2OEUD6e/Gf8GOKG0lrM5Z3GKMpxb429M47oFSUaLO 4/ZhHMcdzJF5O6ELFcNYqxoaCJkBXEPiWQOoabnakLlEP6op1UB0EILiqTy+gDTC TwLi6fzzRNK/q6aENpp3+AsvBwRSlAjb666TrymHLsIDfr1ezag= -----END CERTIFICATE-----Generated at Wed Jun 17 12:19:25 2026 by rpki-client