$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.mft File: AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.mft (raw, json) Hash identifier: uOatfnPF8WQdGZvyhzFdsADnzEuh7Kxxsseu6zXuD0g= Subject key identifier: 42:44:FD:0E:23:99:78:D2:1F:A4:20:AD:BB:B5:BA:AF:7C:AA:C5:9A Authority key identifier: AC:21:F3:02:F8:FE:87:98:E3:EB:EC:F7:4F:BB:4A:1A:FA:8C:0A:5A Certificate issuer: /CN=AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A Certificate serial: 09EF6E6FC33666911DE7F29F1292C9AAB558201A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.mft Manifest number: BF Signing time: Tue 22 Sep 2026 01:23:09 +0000 Manifest this update: Tue 22 Sep 2026 01:18:09 +0000 Manifest next update: Wed 23 Sep 2026 03:15:09 +0000 Files and hashes: 1: AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.crl (hash: NiCCdTNONa0rnCHHjw5vCJniOSGsaIatpqWfKQ4Sq/8=) 2: 3130332e3234322e3233332e302f32342d3234203d3e203538383234.roa (hash: F0odlT4U3J2I7U1EPBDoQbX8C+Jjnqt/uRif6Raoqb0=) 3: 3130332e35342e3137322e302f32342d3234203d3e203538383234.roa (hash: 2hznDtF+sHEQo6Fg1DwDt2/m1fqJNRXXGLkGt1F7ms0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.crl rsync://rpki-rsync.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 03:15:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:ef:6e:6f:c3:36:66:91:1d:e7:f2:9f:12:92:c9:aa:b5:58:20:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A Validity Not Before: Sep 22 01:18:09 2026 GMT Not After : Sep 23 03:15:09 2026 GMT Subject: CN=4244FD0E239978D21FA420ADBBB5BAAF7CAAC59A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2d:c5:e8:41:fd:a3:8c:da:d8:53:0c:22:52: 40:d6:66:67:7c:79:96:ed:c0:37:31:54:3d:12:16: f6:44:c2:56:7a:31:17:a9:59:f9:95:4a:0a:d3:71: ae:e1:f2:92:75:c4:2e:68:b6:b4:d3:c5:fa:1f:fc: 0e:a3:ee:15:87:b2:fb:52:67:29:ff:ea:ff:9f:1e: 91:34:7c:0d:5f:94:3b:e3:56:71:57:20:0b:9e:8e: b5:07:7b:8f:d6:4e:36:c4:82:ec:f1:51:c9:ac:ea: 32:9f:85:15:e9:c7:75:bb:3d:95:0b:50:40:a5:0e: a4:4a:df:6d:60:90:ce:5c:2e:6b:e9:b9:85:d3:95: aa:be:32:49:95:56:68:47:86:2b:9c:54:30:d3:a5: 95:b5:f7:d0:38:ab:95:85:a2:dc:34:22:6e:55:95: c0:eb:b0:66:fd:df:47:e5:b5:ce:04:76:d9:c3:34: fb:b3:0a:61:9f:70:b6:a8:cb:c4:4a:61:57:34:b9: e7:83:9b:3c:a0:4a:95:29:36:e5:cb:d8:95:62:64: 32:5e:55:a1:59:06:07:fa:29:3f:cb:fe:32:e0:c1: e9:7c:6a:9b:21:bb:8c:ef:ee:9d:ae:60:7e:1b:50: 5c:c2:fa:9e:e2:c8:37:1b:2d:29:65:c5:61:b3:f8: 86:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:44:FD:0E:23:99:78:D2:1F:A4:20:AD:BB:B5:BA:AF:7C:AA:C5:9A X509v3 Authority Key Identifier: keyid:AC:21:F3:02:F8:FE:87:98:E3:EB:EC:F7:4F:BB:4A:1A:FA:8C:0A:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:68:98:6d:b5:54:32:d4:6e:4c:f1:08:4d:45:5a:07:af:38: 50:46:9a:e5:19:bc:87:4c:2c:f9:5b:bb:ba:59:dc:4d:64:5f: be:97:f3:91:22:59:3a:b1:a9:39:fa:03:0e:a4:8b:62:47:4a: 5e:d4:75:ef:a3:f7:30:69:fd:a3:aa:cc:a4:a2:05:9b:ab:5e: 0b:a9:89:7b:8d:21:b2:70:c2:e6:ff:e9:37:ae:8e:7e:a9:02: 9f:38:24:1f:78:93:47:28:03:b6:91:df:33:c2:3b:14:9b:37: 04:7f:85:96:da:48:bd:b3:85:de:3b:c1:ec:56:91:52:ae:84: 5d:69:70:44:42:55:8f:00:b5:05:69:ea:2c:65:94:49:d9:2e: d7:46:00:5c:12:8e:51:23:54:d5:af:9b:2e:71:f2:aa:ab:b1: 17:6f:78:ef:a0:95:18:b9:ae:e7:44:ae:26:d4:59:e4:41:ca: 20:ec:da:3e:7d:9a:4c:ae:82:15:5a:2f:f9:c5:1c:9b:d5:1f: 58:61:c9:4e:78:e0:4f:55:09:05:e8:d3:d6:ed:3d:99:11:b6: b7:7b:94:32:69:2d:e9:d8:79:4d:e9:d3:07:54:65:9a:86:1d: a8:a8:37:8e:de:78:8f:8a:75:a5:2a:d1:65:a9:6e:8b:cc:06: 50:a8:89:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCe9ub8M2ZpEd5/KfEpLJqrVYIBowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUMyMUYzMDJGOEZFODc5OEUzRUJFQ0Y3NEZCQjRBMUFG QThDMEE1QTAeFw0yNjA5MjIwMTE4MDlaFw0yNjA5MjMwMzE1MDlaMDMxMTAvBgNV BAMTKDQyNDRGRDBFMjM5OTc4RDIxRkE0MjBBREJCQjVCQUFGN0NBQUM1OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdLcXoQf2jjNrYUwwiUkDWZmd8 eZbtwDcxVD0SFvZEwlZ6MRepWfmVSgrTca7h8pJ1xC5otrTTxfof/A6j7hWHsvtS Zyn/6v+fHpE0fA1flDvjVnFXIAuejrUHe4/WTjbEguzxUcms6jKfhRXpx3W7PZUL UEClDqRK321gkM5cLmvpuYXTlaq+MkmVVmhHhiucVDDTpZW199A4q5WFotw0Im5V lcDrsGb930fltc4EdtnDNPuzCmGfcLaoy8RKYVc0ueeDmzygSpUpNuXL2JViZDJe VaFZBgf6KT/L/jLgwel8apshu4zv7p2uYH4bUFzC+p7iyDcbLSllxWGz+IZfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQkT9DiOZeNIfpCCtu7W6r3yqxZowHwYDVR0j BBgwFoAUrCHzAvj+h5jj6+z3T7tKGvqMClowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTdlMGZhZjAtNzg4ZC00OTViLWFjOTgtZjM1MTYxOTVkYjYwLzAvQUMyMUYzMDJG OEZFODc5OEUzRUJFQ0Y3NEZCQjRBMUFGQThDMEE1QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzIxRjMwMkY4RkU4Nzk4RTNFQkVDRjc0RkJCNEExQUZBOEMw QTVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTdlMGZhZjAtNzg4ZC00OTViLWFj OTgtZjM1MTYxOTVkYjYwLzAvQUMyMUYzMDJGOEZFODc5OEUzRUJFQ0Y3NEZCQjRB MUFGQThDMEE1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFhomG21VDLUbkzxCE1FWgevOFBGmuUZvIdM LPlbu7pZ3E1kX76X85EiWTqxqTn6Aw6ki2JHSl7Ude+j9zBp/aOqzKSiBZurXgup iXuNIbJwwub/6Teujn6pAp84JB94k0coA7aR3zPCOxSbNwR/hZbaSL2zhd47wexW kVKuhF1pcERCVY8AtQVp6ixllEnZLtdGAFwSjlEjVNWvmy5x8qqrsRdveO+glRi5 rudEribUWeRByiDs2j59mkyughVaL/nFHJvVH1hhyU544E9VCQXo09btPZkRtrd7 lDJpLenYeU3p0wdUZZqGHaioN47eeI+KdaUq0WWpbovMBlCoiVk= -----END CERTIFICATE-----Generated at Tue Sep 22 17:02:31 2026 by rpki-client