$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.mft File: AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.mft (raw, json) Hash identifier: 937DGJG1HwBNhUBv5p1sbPT2IzWrCkQclExq43TARmM= Subject key identifier: 26:02:D2:A0:C5:A5:FE:CE:BA:B5:94:D7:EB:69:AE:04:8A:C6:C9:C2 Authority key identifier: AC:9E:E5:D4:AC:F7:FD:0D:FD:66:CD:FE:D1:20:17:1D:F6:19:5E:B0 Certificate issuer: /CN=AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0 Certificate serial: 01A64ADB2E6630FF0822A5B071A19FD4E5728936 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.mft Manifest number: FF Signing time: Mon 09 Nov 2026 08:26:00 +0000 Manifest this update: Mon 09 Nov 2026 08:21:00 +0000 Manifest next update: Tue 10 Nov 2026 09:55:00 +0000 Files and hashes: 1: AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.crl (hash: PcX2hPVuo9B0DFJDPB7P8i0C9VvAC+KdhOgUjzAzA7s=) 2: 3130332e3136322e3132322e302f32332d3234203d3e203137393935.roa (hash: OLWauFfmrw2a6NVsZr060P9JMbawsYC5rFsVrmOkFCE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.crl rsync://rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a6:4a:db:2e:66:30:ff:08:22:a5:b0:71:a1:9f:d4:e5:72:89:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0 Validity Not Before: Nov 9 08:21:00 2026 GMT Not After : Nov 10 09:55:00 2026 GMT Subject: CN=2602D2A0C5A5FECEBAB594D7EB69AE048AC6C9C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9d:0b:77:f7:55:6b:a7:43:96:8d:36:ff:44: 54:71:79:f4:d5:0d:2e:41:c1:2a:a3:b4:ec:28:25: f9:4f:92:c2:15:0b:88:7b:bd:6c:fa:e8:95:54:d6: b3:75:60:ff:a9:be:d0:20:57:51:6b:60:78:17:a7: d9:b2:6e:63:83:41:83:f8:4a:71:64:e1:dc:59:54: c8:c7:01:62:46:e4:b4:a2:4c:99:0c:e2:77:50:ab: fe:0d:ab:29:24:9d:e4:7d:f5:1c:53:2d:15:d6:9d: b6:7f:4b:c8:b6:a9:59:0b:bd:a4:c6:dd:56:df:5c: f2:cb:e5:bd:a8:3e:bd:9e:a9:cd:15:8e:0f:01:c5: c0:15:cd:97:4f:af:17:fd:3a:ba:92:48:61:b0:fe: 07:a5:99:a3:d3:5a:03:99:7f:f0:e6:94:bc:a8:14: 68:7a:ec:11:5c:5d:82:f2:5e:54:a7:03:4c:ff:fb: 42:77:c7:f8:e6:77:03:b0:9b:28:f1:1f:71:33:f7: e0:b1:8f:d2:b3:3b:21:b5:64:9c:4d:08:4f:f1:2e: 8d:2e:5d:ec:21:ba:bc:cb:e9:d9:66:16:d6:ae:6e: ed:f9:4e:5d:b9:7f:3f:72:51:60:b0:67:34:b2:98: 85:00:64:50:52:e8:39:94:38:6a:51:f4:e1:da:bb: f7:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:02:D2:A0:C5:A5:FE:CE:BA:B5:94:D7:EB:69:AE:04:8A:C6:C9:C2 X509v3 Authority Key Identifier: keyid:AC:9E:E5:D4:AC:F7:FD:0D:FD:66:CD:FE:D1:20:17:1D:F6:19:5E:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:bf:40:98:d1:85:ec:e6:52:d9:00:b9:c9:21:bb:84:78:3c: 97:36:84:4a:ff:99:af:e7:6e:4f:1f:ef:51:04:fc:e4:a1:d0: 5f:63:97:9d:b7:11:b4:db:d8:29:f1:f0:9c:aa:ff:86:61:09: 89:67:6b:c3:a9:2a:6e:02:53:5d:58:39:3f:03:ae:56:a6:48: 48:80:bc:50:d3:37:b9:80:c5:83:dc:1b:60:5f:80:a5:2b:fd: 60:d6:5d:8d:a7:b4:23:72:d5:d2:42:c6:48:a0:df:c9:77:3a: b2:94:7a:48:4c:f4:2f:1f:0f:aa:7d:7a:91:76:9e:d0:dd:6c: 95:be:a7:0b:b4:08:0e:a2:ae:84:72:01:9c:10:65:31:c4:94: d3:1d:43:51:7d:00:d5:8d:84:62:4f:ae:bd:3f:3d:a2:ff:8d: 4f:f6:d8:2a:60:5f:ca:9f:e8:af:12:a1:6c:67:1a:58:c7:b2: 3c:a2:17:f8:45:de:46:b1:b1:b9:16:5e:fd:a8:d6:2c:f6:75: 7f:fc:2f:11:44:18:98:6f:00:8d:ed:e3:22:53:ed:10:21:c0: 2a:a9:bd:13:28:e8:ca:0f:51:34:1a:07:ce:44:49:2d:1e:6b: ce:32:82:b8:bb:41:a0:d5:db:2f:28:d1:a4:f1:f0:78:52:4f: 45:d6:89:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAaZK2y5mMP8IIqWwcaGf1OVyiTYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM5RUU1RDRBQ0Y3RkQwREZENjZDREZFRDEyMDE3MURG NjE5NUVCMDAeFw0yNjExMDkwODIxMDBaFw0yNjExMTAwOTU1MDBaMDMxMTAvBgNV BAMTKDI2MDJEMkEwQzVBNUZFQ0VCQUI1OTREN0VCNjlBRTA0OEFDNkM5QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKnQt391Vrp0OWjTb/RFRxefTV DS5BwSqjtOwoJflPksIVC4h7vWz66JVU1rN1YP+pvtAgV1FrYHgXp9mybmODQYP4 SnFk4dxZVMjHAWJG5LSiTJkM4ndQq/4NqykkneR99RxTLRXWnbZ/S8i2qVkLvaTG 3VbfXPLL5b2oPr2eqc0Vjg8BxcAVzZdPrxf9OrqSSGGw/gelmaPTWgOZf/DmlLyo FGh67BFcXYLyXlSnA0z/+0J3x/jmdwOwmyjxH3Ez9+Cxj9KzOyG1ZJxNCE/xLo0u XewhurzL6dlmFtaubu35Tl25fz9yUWCwZzSymIUAZFBS6DmUOGpR9OHau/erAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJgLSoMWl/s66tZTX62muBIrGycIwHwYDVR0j BBgwFoAUrJ7l1Kz3/Q39Zs3+0SAXHfYZXrAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDFiM2ZlNDUtYjU4OC00YmI3LWFlOTAtOTFmNTdmNTkzY2I1LzAvQUM5RUU1RDRB Q0Y3RkQwREZENjZDREZFRDEyMDE3MURGNjE5NUVCMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzlFRTVENEFDRjdGRDBERkQ2NkNERkVEMTIwMTcxREY2MTk1 RUIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDFiM2ZlNDUtYjU4OC00YmI3LWFl OTAtOTFmNTdmNTkzY2I1LzAvQUM5RUU1RDRBQ0Y3RkQwREZENjZDREZFRDEyMDE3 MURGNjE5NUVCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAW/QJjRhezmUtkAuckhu4R4PJc2hEr/ma/n bk8f71EE/OSh0F9jl523EbTb2Cnx8Jyq/4ZhCYlna8OpKm4CU11YOT8DrlamSEiA vFDTN7mAxYPcG2BfgKUr/WDWXY2ntCNy1dJCxkig38l3OrKUekhM9C8fD6p9epF2 ntDdbJW+pwu0CA6iroRyAZwQZTHElNMdQ1F9ANWNhGJPrr0/PaL/jU/22CpgX8qf 6K8SoWxnGljHsjyiF/hF3kaxsbkWXv2o1iz2dX/8LxFEGJhvAI3t4yJT7RAhwCqp vRMo6MoPUTQaB85ESS0ea84ygri7QaDV2y8o0aTx8HhST0XWiZ4= -----END CERTIFICATE-----Generated at Mon Nov 9 17:16:50 2026 by rpki-client