$ rpki-client -vvf rpki-rsync.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.mft File: AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.mft (raw, json) Hash identifier: I6a/KzRGPwCl69t8QLNQtD513GE8t8+Gg8nxRoOCTYQ= Subject key identifier: 25:DF:5B:A6:DF:90:B9:C5:24:93:F9:A4:12:1B:EE:14:12:79:CA:D2 Authority key identifier: AC:21:F3:02:F8:FE:87:98:E3:EB:EC:F7:4F:BB:4A:1A:FA:8C:0A:5A Certificate issuer: /CN=AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A Certificate serial: 63663D370524C8BDDC2BCECD31DC260B6548D991 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 13:00:22 +0000 Manifest this update: Sat 13 Jun 2026 12:55:22 +0000 Manifest next update: Sun 14 Jun 2026 14:23:22 +0000 Files and hashes: 1: 3130332e3234322e3233332e302f32342d3234203d3e203538383234.roa (hash: F0odlT4U3J2I7U1EPBDoQbX8C+Jjnqt/uRif6Raoqb0=) 2: 3130332e35342e3137322e302f32342d3234203d3e203538383234.roa (hash: 2hznDtF+sHEQo6Fg1DwDt2/m1fqJNRXXGLkGt1F7ms0=) 3: AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.crl (hash: isLIJA67io154rUNVq8k1tyFT51IfHt2nVlAtgUYnDs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.crl rsync://rpki-rsync.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:66:3d:37:05:24:c8:bd:dc:2b:ce:cd:31:dc:26:0b:65:48:d9:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A Validity Not Before: Jun 13 12:55:22 2026 GMT Not After : Jun 14 14:23:22 2026 GMT Subject: CN=25DF5BA6DF90B9C52493F9A4121BEE141279CAD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:88:18:42:3c:51:c6:67:11:dc:39:9a:f6:e7: 6b:a4:f9:e9:51:9e:2e:cc:d9:0a:9b:ed:35:f7:7b: bd:74:94:f7:00:d1:60:05:b7:d8:4a:a9:0d:44:c3: bc:36:c3:16:b7:1b:0e:f4:3c:23:2a:cb:bc:7f:ae: 24:9c:f3:59:6d:02:31:80:98:d8:c7:a4:7f:f5:28: 9b:82:11:c9:58:81:a2:cd:b3:43:66:09:2b:36:35: f2:b2:73:dd:7e:78:a9:fb:c2:f8:11:3f:8c:14:d1: 82:cf:f1:a5:16:32:6c:a1:f5:8f:3d:5e:23:57:c9: 08:81:89:05:9f:75:ee:e1:e3:68:ab:40:cd:99:d9: f5:7c:4e:30:0e:06:f2:64:ce:31:24:cc:a2:b9:8d: e4:16:d5:44:37:bf:d0:5f:ad:90:5f:2c:00:4a:7b: 87:b1:b5:f8:4c:f8:e6:2f:b9:fa:a9:23:e8:6e:e7: 02:83:e5:27:b9:60:f8:b3:0a:ea:ac:f6:32:38:5e: 09:bc:e4:67:e4:f6:21:ba:8e:3a:d1:21:f7:83:7c: cd:1d:c8:d6:22:a0:49:10:be:fe:95:b6:59:12:c5: a9:38:96:a5:ad:6f:2a:49:ff:64:22:56:38:92:90: 00:e5:ff:a1:d0:3a:78:07:97:74:06:73:5a:ff:c9: de:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:DF:5B:A6:DF:90:B9:C5:24:93:F9:A4:12:1B:EE:14:12:79:CA:D2 X509v3 Authority Key Identifier: keyid:AC:21:F3:02:F8:FE:87:98:E3:EB:EC:F7:4F:BB:4A:1A:FA:8C:0A:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:14:fb:cc:9b:51:bc:20:a3:84:f1:3e:d4:1c:8b:da:25:fb: 21:b7:55:8b:94:1d:31:98:50:26:c0:89:1e:cf:ac:3a:c3:5b: f0:72:be:98:a2:88:42:dd:00:74:77:f9:3d:90:e1:e9:16:44: d0:8c:5e:c6:57:60:a6:13:ea:85:d3:c4:30:07:04:2f:e7:44: 84:00:ec:d5:1c:8e:18:e4:4b:7f:fa:d7:20:f2:23:4f:d4:f0: e0:e7:94:4b:91:29:f0:99:62:04:19:70:87:37:e8:d4:41:eb: 78:93:8e:e3:b3:56:75:24:33:23:8d:9c:5b:fb:1c:ef:44:cc: a6:d8:ce:b3:55:e9:29:61:f2:8c:d5:e4:5b:32:23:33:fb:7b: 2c:92:28:f1:4e:1a:34:d1:fd:88:b0:a6:4f:91:5e:dd:eb:e7: 53:58:cf:d0:fc:d3:48:76:c0:e9:07:d3:31:65:17:9c:34:a9: c3:44:c7:44:c5:d7:5d:fb:32:03:93:75:35:9f:dd:1f:35:b1: 10:2c:92:45:2e:6f:b9:38:cc:fb:63:5a:d2:5d:7a:6d:c9:74: fc:58:4d:cf:35:8a:c6:81:82:ba:ec:5c:a9:3c:a9:c1:41:b6: 22:94:81:6d:38:2c:8c:39:cb:73:4e:3c:46:9a:e7:2d:e0:30: 35:fa:17:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY2Y9NwUkyL3cK87NMdwmC2VI2ZEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUMyMUYzMDJGOEZFODc5OEUzRUJFQ0Y3NEZCQjRBMUFG QThDMEE1QTAeFw0yNjA2MTMxMjU1MjJaFw0yNjA2MTQxNDIzMjJaMDMxMTAvBgNV BAMTKDI1REY1QkE2REY5MEI5QzUyNDkzRjlBNDEyMUJFRTE0MTI3OUNBRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGiBhCPFHGZxHcOZr252uk+elR ni7M2Qqb7TX3e710lPcA0WAFt9hKqQ1Ew7w2wxa3Gw70PCMqy7x/riSc81ltAjGA mNjHpH/1KJuCEclYgaLNs0NmCSs2NfKyc91+eKn7wvgRP4wU0YLP8aUWMmyh9Y89 XiNXyQiBiQWfde7h42irQM2Z2fV8TjAOBvJkzjEkzKK5jeQW1UQ3v9BfrZBfLABK e4extfhM+OYvufqpI+hu5wKD5Se5YPizCuqs9jI4Xgm85Gfk9iG6jjrRIfeDfM0d yNYioEkQvv6VtlkSxak4lqWtbypJ/2QiVjiSkADl/6HQOngHl3QGc1r/yd5tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJd9bpt+QucUkk/mkEhvuFBJ5ytIwHwYDVR0j BBgwFoAUrCHzAvj+h5jj6+z3T7tKGvqMClowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTdlMGZhZjAtNzg4ZC00OTViLWFjOTgtZjM1MTYxOTVkYjYwLzAvQUMyMUYzMDJG OEZFODc5OEUzRUJFQ0Y3NEZCQjRBMUFGQThDMEE1QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzIxRjMwMkY4RkU4Nzk4RTNFQkVDRjc0RkJCNEExQUZBOEMw QTVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTdlMGZhZjAtNzg4ZC00OTViLWFj OTgtZjM1MTYxOTVkYjYwLzAvQUMyMUYzMDJGOEZFODc5OEUzRUJFQ0Y3NEZCQjRB MUFGQThDMEE1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJQU+8ybUbwgo4TxPtQci9ol+yG3VYuUHTGY UCbAiR7PrDrDW/ByvpiiiELdAHR3+T2Q4ekWRNCMXsZXYKYT6oXTxDAHBC/nRIQA 7NUcjhjkS3/61yDyI0/U8ODnlEuRKfCZYgQZcIc36NRB63iTjuOzVnUkMyONnFv7 HO9EzKbYzrNV6Slh8ozV5FsyIzP7eyySKPFOGjTR/Yiwpk+RXt3r51NYz9D800h2 wOkH0zFlF5w0qcNEx0TF1137MgOTdTWf3R81sRAskkUub7k4zPtjWtJdem3JdPxY Tc81isaBgrrsXKk8qcFBtiKUgW04LIw5y3NOPEaa5y3gMDX6F6E= -----END CERTIFICATE-----Generated at Sun Jun 14 05:31:03 2026 by rpki-client