$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.mft File: AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.mft (raw, json) Hash identifier: Xon7enoXelwMD3qQy+0lVgS0HjTJC5FWz5sb2Jarn6k= Subject key identifier: A3:26:CD:61:49:EB:95:0B:21:7F:94:4A:9A:12:20:F1:D7:61:8D:DE Authority key identifier: AC:9E:E5:D4:AC:F7:FD:0D:FD:66:CD:FE:D1:20:17:1D:F6:19:5E:B0 Certificate issuer: /CN=AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0 Certificate serial: 499EDD6661857F0130A780BD42B525B3F355F856 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.mft Manifest number: BC Signing time: Sun 20 Sep 2026 11:36:33 +0000 Manifest this update: Sun 20 Sep 2026 11:31:33 +0000 Manifest next update: Mon 21 Sep 2026 13:26:33 +0000 Files and hashes: 1: 3130332e3136322e3132322e302f32332d3234203d3e203137393935.roa (hash: OLWauFfmrw2a6NVsZr060P9JMbawsYC5rFsVrmOkFCE=) 2: AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.crl (hash: 3ZFTuVb/mDRe4lFkLaJcvHwMzy5LaGVbeTCasofAVXs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.crl rsync://rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 13:26:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:9e:dd:66:61:85:7f:01:30:a7:80:bd:42:b5:25:b3:f3:55:f8:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0 Validity Not Before: Sep 20 11:31:33 2026 GMT Not After : Sep 21 13:26:33 2026 GMT Subject: CN=A326CD6149EB950B217F944A9A1220F1D7618DDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fd:99:b6:70:89:59:06:f3:c8:d5:53:f2:f9: 39:c8:a8:68:cb:8c:be:16:ae:7a:ca:4c:8d:cd:b0: 60:67:cd:db:4c:52:d6:44:93:64:7d:72:15:59:10: 9e:05:2f:dd:16:e8:0d:8c:cb:08:20:c7:13:14:61: 12:12:53:11:f7:27:6a:99:09:ea:1e:b1:48:26:16: 09:7b:29:51:32:ff:e1:56:40:5f:98:d9:b9:0b:08: ac:71:0b:df:1b:46:43:e6:c1:a1:9a:0c:e3:25:ae: ff:ac:d7:1e:24:28:96:5b:b7:39:ee:ff:61:2c:d7: 1f:3d:22:9f:73:04:a9:27:e7:4f:58:01:a3:a2:cd: 41:66:db:49:9a:6d:2c:fd:60:c2:0c:0e:b4:44:00: 29:10:f3:68:d0:eb:c3:2c:17:81:65:9f:ed:51:ef: 34:96:79:55:a5:18:9f:17:eb:7e:6b:1f:aa:f6:22: f4:47:ef:f7:ec:3a:74:83:68:02:c2:80:47:4b:44: 9f:fa:c4:1a:ad:d0:62:97:22:f2:cc:25:06:42:bb: ce:a7:ab:a7:fc:dd:96:cf:9e:f7:32:d0:3b:1c:a7: f0:d4:11:0e:28:33:8f:29:02:51:ee:3e:52:c5:3b: 1a:38:f5:5b:a1:65:9f:59:95:f1:2a:38:d7:0d:c0: 64:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:26:CD:61:49:EB:95:0B:21:7F:94:4A:9A:12:20:F1:D7:61:8D:DE X509v3 Authority Key Identifier: keyid:AC:9E:E5:D4:AC:F7:FD:0D:FD:66:CD:FE:D1:20:17:1D:F6:19:5E:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:39:a8:2c:ce:45:31:b4:b4:3c:bd:3d:d9:6b:1a:05:e5:bd: fe:35:15:c4:41:b7:1c:0d:e0:f4:a8:2a:17:2e:38:aa:8e:26: 37:be:ce:2f:5d:5b:0f:95:e0:80:dc:ce:09:8b:da:57:a3:4f: 96:85:69:1f:5c:5e:6b:1b:5a:e1:15:7a:86:cb:40:80:90:d6: ca:71:a1:97:14:8c:70:f5:cf:e1:db:45:64:71:c6:55:57:48: 43:cd:e2:93:02:0c:3a:4c:29:0b:f2:30:8f:98:27:bf:80:8a: 57:a6:0b:60:e5:52:11:2e:12:91:80:95:db:97:0e:a0:77:37: 09:b0:d3:b7:89:cb:11:ed:32:99:d5:36:8a:21:c8:d4:49:e2: 69:c5:5d:2f:2b:d6:2b:dd:64:a0:b5:1f:6b:8a:a3:c1:be:36: 05:c8:5b:0c:bd:cc:83:57:dd:e5:9b:f7:cb:d4:62:c3:ff:b9: bb:fd:ad:b2:0a:2a:01:94:15:56:41:3d:83:d6:90:a9:6f:7c: fe:f7:91:2d:0a:ad:8a:c4:29:d4:84:d0:5d:20:7b:9e:7b:d1: b8:3a:d7:cd:42:60:79:da:18:c2:7a:33:14:50:8c:e0:0b:74: 7c:79:aa:1f:e9:93:dd:60:b1:93:0a:ba:ea:d6:ea:cc:c9:45: dd:10:bd:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSZ7dZmGFfwEwp4C9QrUls/NV+FYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM5RUU1RDRBQ0Y3RkQwREZENjZDREZFRDEyMDE3MURG NjE5NUVCMDAeFw0yNjA5MjAxMTMxMzNaFw0yNjA5MjExMzI2MzNaMDMxMTAvBgNV BAMTKEEzMjZDRDYxNDlFQjk1MEIyMTdGOTQ0QTlBMTIyMEYxRDc2MThEREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG/Zm2cIlZBvPI1VPy+TnIqGjL jL4WrnrKTI3NsGBnzdtMUtZEk2R9chVZEJ4FL90W6A2MywggxxMUYRISUxH3J2qZ CeoesUgmFgl7KVEy/+FWQF+Y2bkLCKxxC98bRkPmwaGaDOMlrv+s1x4kKJZbtznu /2Es1x89Ip9zBKkn509YAaOizUFm20mabSz9YMIMDrREACkQ82jQ68MsF4Fln+1R 7zSWeVWlGJ8X635rH6r2IvRH7/fsOnSDaALCgEdLRJ/6xBqt0GKXIvLMJQZCu86n q6f83ZbPnvcy0Dscp/DUEQ4oM48pAlHuPlLFOxo49VuhZZ9ZlfEqONcNwGRnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoybNYUnrlQshf5RKmhIg8ddhjd4wHwYDVR0j BBgwFoAUrJ7l1Kz3/Q39Zs3+0SAXHfYZXrAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDFiM2ZlNDUtYjU4OC00YmI3LWFlOTAtOTFmNTdmNTkzY2I1LzAvQUM5RUU1RDRB Q0Y3RkQwREZENjZDREZFRDEyMDE3MURGNjE5NUVCMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzlFRTVENEFDRjdGRDBERkQ2NkNERkVEMTIwMTcxREY2MTk1 RUIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDFiM2ZlNDUtYjU4OC00YmI3LWFl OTAtOTFmNTdmNTkzY2I1LzAvQUM5RUU1RDRBQ0Y3RkQwREZENjZDREZFRDEyMDE3 MURGNjE5NUVCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJY5qCzORTG0tDy9PdlrGgXlvf41FcRBtxwN 4PSoKhcuOKqOJje+zi9dWw+V4IDczgmL2lejT5aFaR9cXmsbWuEVeobLQICQ1spx oZcUjHD1z+HbRWRxxlVXSEPN4pMCDDpMKQvyMI+YJ7+AilemC2DlUhEuEpGAlduX DqB3Nwmw07eJyxHtMpnVNoohyNRJ4mnFXS8r1ivdZKC1H2uKo8G+NgXIWwy9zINX 3eWb98vUYsP/ubv9rbIKKgGUFVZBPYPWkKlvfP73kS0KrYrEKdSE0F0ge5570bg6 181CYHnaGMJ6MxRQjOALdHx5qh/pk91gsZMKuurW6szJRd0QvV8= -----END CERTIFICATE-----Generated at Mon Sep 21 02:44:34 2026 by rpki-client