$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.mft File: AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.mft (raw, json) Hash identifier: weQOhZ+dFZGsZxQbxQhT9NMv/3ea+SbzPK7i+/H8LaY= Subject key identifier: AE:DC:EC:ED:9A:1A:B2:D6:51:3F:7C:CC:66:FD:1E:38:82:F8:AA:CB Authority key identifier: AC:9E:E5:D4:AC:F7:FD:0D:FD:66:CD:FE:D1:20:17:1D:F6:19:5E:B0 Certificate issuer: /CN=AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0 Certificate serial: 65AEB85B22F70C91CDC3C64B1CCC9C6C10AFFEFD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 21:23:01 +0000 Manifest this update: Tue 28 Jul 2026 21:18:01 +0000 Manifest next update: Thu 30 Jul 2026 00:13:01 +0000 Files and hashes: 1: 3130332e3136322e3132322e302f32332d3234203d3e203137393935.roa (hash: OLWauFfmrw2a6NVsZr060P9JMbawsYC5rFsVrmOkFCE=) 2: AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.crl (hash: 4kTHstS561hE7CeONymOLv7SFN3UwD8E5nhhRTl96kQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.crl rsync://rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 00:13:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:ae:b8:5b:22:f7:0c:91:cd:c3:c6:4b:1c:cc:9c:6c:10:af:fe:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0 Validity Not Before: Jul 28 21:18:01 2026 GMT Not After : Jul 30 00:13:01 2026 GMT Subject: CN=AEDCECED9A1AB2D6513F7CCC66FD1E3882F8AACB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3c:b8:d8:35:6f:e8:fa:2c:71:83:27:0a:9d: fa:78:39:80:16:ae:ad:c7:71:1f:61:95:13:e6:21: b6:eb:e4:6f:44:98:3c:c3:87:65:83:10:9b:14:4a: a6:93:5d:43:e8:ce:fd:cf:0d:c8:22:18:a2:c1:e3: f7:df:bd:d2:c1:d5:02:7f:dc:a8:3e:4f:60:df:58: 5e:28:57:fe:18:5e:48:54:42:72:9e:e0:e4:bb:d1: a1:39:b2:a6:5f:3f:8f:bd:e2:5e:9e:f6:3b:26:11: ff:48:a2:1d:8e:29:49:dc:f5:81:2c:1b:b3:e7:61: db:7f:19:64:24:96:2f:cf:3d:b8:f9:4f:83:da:e8: 6b:f3:77:f9:cb:c8:04:8f:69:40:a1:d2:98:d0:bc: e1:bc:13:6e:95:57:40:ef:a2:bb:81:f7:22:06:0f: eb:94:5b:b3:35:0c:9a:d3:85:ba:7e:b0:37:2d:fe: 4d:ca:d5:fb:44:0b:a9:5c:4a:12:c4:5f:e7:43:8f: 29:47:8a:e2:f7:ec:6b:db:eb:33:3c:dd:dc:02:39: ca:ac:ef:69:c7:0c:97:b6:df:13:4c:6e:63:60:2b: d6:e8:fc:3b:e4:5b:db:f1:4e:21:6c:b5:86:58:44: 1b:e1:51:e0:80:45:9f:bd:be:4b:4f:62:8f:e1:0b: 8c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:DC:EC:ED:9A:1A:B2:D6:51:3F:7C:CC:66:FD:1E:38:82:F8:AA:CB X509v3 Authority Key Identifier: keyid:AC:9E:E5:D4:AC:F7:FD:0D:FD:66:CD:FE:D1:20:17:1D:F6:19:5E:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:45:59:b0:85:3d:9e:32:25:be:76:5b:aa:0f:a1:44:30:05: f6:37:fc:c9:93:f2:9e:79:1b:09:90:dd:4a:db:72:b2:90:cc: 30:f6:78:75:dc:ed:2e:b3:f1:19:34:f2:e1:b5:8e:bc:61:31: 2c:e5:18:3d:ac:9d:1a:91:33:98:31:54:41:69:96:e2:06:13: 99:74:0d:c9:66:1d:8c:ea:42:a3:14:c7:26:7d:0a:ca:68:f1: cf:ba:6a:49:cd:8f:de:50:1c:b7:13:cb:38:47:3b:f5:d3:ec: 34:28:f6:e6:ac:92:60:6a:28:99:0a:68:22:f3:f5:f7:66:00: cb:8d:03:ba:16:67:4a:5a:c4:4a:0b:05:fa:68:49:c1:9f:ca: 57:c1:8e:55:8b:4f:4c:9b:3f:e9:35:03:05:e0:23:4f:4b:0a: 73:46:8e:b8:fe:0e:cc:da:55:d2:6b:72:fe:04:4c:1c:09:fc: e2:ad:e1:8b:dd:d3:26:27:c4:c8:43:e8:18:7d:ed:78:81:38: cb:d1:2d:7c:83:a3:f2:6f:16:9f:3c:30:12:10:43:c4:6a:9e: 8c:c6:ec:a6:ff:ea:5d:f5:3f:f9:29:2c:d4:d3:69:1a:a4:f7: 37:7a:1b:3e:e4:f8:db:75:27:63:e2:42:26:d8:fa:0d:c0:de: 75:c3:ae:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZa64WyL3DJHNw8ZLHMycbBCv/v0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM5RUU1RDRBQ0Y3RkQwREZENjZDREZFRDEyMDE3MURG NjE5NUVCMDAeFw0yNjA3MjgyMTE4MDFaFw0yNjA3MzAwMDEzMDFaMDMxMTAvBgNV BAMTKEFFRENFQ0VEOUExQUIyRDY1MTNGN0NDQzY2RkQxRTM4ODJGOEFBQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuPLjYNW/o+ixxgycKnfp4OYAW rq3HcR9hlRPmIbbr5G9EmDzDh2WDEJsUSqaTXUPozv3PDcgiGKLB4/ffvdLB1QJ/ 3Kg+T2DfWF4oV/4YXkhUQnKe4OS70aE5sqZfP4+94l6e9jsmEf9Ioh2OKUnc9YEs G7PnYdt/GWQkli/PPbj5T4Pa6Gvzd/nLyASPaUCh0pjQvOG8E26VV0DvoruB9yIG D+uUW7M1DJrThbp+sDct/k3K1ftEC6lcShLEX+dDjylHiuL37Gvb6zM83dwCOcqs 72nHDJe23xNMbmNgK9bo/DvkW9vxTiFstYZYRBvhUeCARZ+9vktPYo/hC4wRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrtzs7ZoastZRP3zMZv0eOIL4qsswHwYDVR0j BBgwFoAUrJ7l1Kz3/Q39Zs3+0SAXHfYZXrAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDFiM2ZlNDUtYjU4OC00YmI3LWFlOTAtOTFmNTdmNTkzY2I1LzAvQUM5RUU1RDRB Q0Y3RkQwREZENjZDREZFRDEyMDE3MURGNjE5NUVCMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzlFRTVENEFDRjdGRDBERkQ2NkNERkVEMTIwMTcxREY2MTk1 RUIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDFiM2ZlNDUtYjU4OC00YmI3LWFl OTAtOTFmNTdmNTkzY2I1LzAvQUM5RUU1RDRBQ0Y3RkQwREZENjZDREZFRDEyMDE3 MURGNjE5NUVCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFVFWbCFPZ4yJb52W6oPoUQwBfY3/MmT8p55 GwmQ3UrbcrKQzDD2eHXc7S6z8Rk08uG1jrxhMSzlGD2snRqRM5gxVEFpluIGE5l0 DclmHYzqQqMUxyZ9Cspo8c+6aknNj95QHLcTyzhHO/XT7DQo9uaskmBqKJkKaCLz 9fdmAMuNA7oWZ0paxEoLBfpoScGfylfBjlWLT0ybP+k1AwXgI09LCnNGjrj+Dsza VdJrcv4ETBwJ/OKt4Yvd0yYnxMhD6Bh97XiBOMvRLXyDo/JvFp88MBIQQ8RqnozG 7Kb/6l31P/kpLNTTaRqk9zd6Gz7k+Nt1J2PiQibY+g3A3nXDrqY= -----END CERTIFICATE-----Generated at Wed Jul 29 09:19:07 2026 by rpki-client