$ rpki-client -vvf rpki-rsync.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.mft File: AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.mft (raw, json) Hash identifier: U9q5eH6Ifk0aM/0g1ZJWCOCBApu6kPQR2VBoDgndHQk= Subject key identifier: D9:33:9F:4A:41:F6:C7:69:1B:68:0E:07:A8:96:6C:90:1B:8A:A5:0B Authority key identifier: AC:21:F3:02:F8:FE:87:98:E3:EB:EC:F7:4F:BB:4A:1A:FA:8C:0A:5A Certificate issuer: /CN=AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A Certificate serial: 15006B865ACDCFD8DBACC2FA088242E89DB616E7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.mft Manifest number: 74 Signing time: Tue 28 Jul 2026 18:29:35 +0000 Manifest this update: Tue 28 Jul 2026 18:24:35 +0000 Manifest next update: Wed 29 Jul 2026 18:52:35 +0000 Files and hashes: 1: AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.crl (hash: FLV/DAdWyOM+VFrf+a5ceF7AsQ9Q0N58rCCsxg3ZO9E=) 2: 3130332e3234322e3233332e302f32342d3234203d3e203538383234.roa (hash: F0odlT4U3J2I7U1EPBDoQbX8C+Jjnqt/uRif6Raoqb0=) 3: 3130332e35342e3137322e302f32342d3234203d3e203538383234.roa (hash: 2hznDtF+sHEQo6Fg1DwDt2/m1fqJNRXXGLkGt1F7ms0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.crl rsync://rpki-rsync.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:52:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:00:6b:86:5a:cd:cf:d8:db:ac:c2:fa:08:82:42:e8:9d:b6:16:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A Validity Not Before: Jul 28 18:24:35 2026 GMT Not After : Jul 29 18:52:35 2026 GMT Subject: CN=D9339F4A41F6C7691B680E07A8966C901B8AA50B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:02:75:f8:09:e2:fc:f2:66:1d:c2:f1:9a:7c: 30:35:f6:e2:db:e8:dd:1d:ce:86:27:16:9c:11:b8: 18:ea:52:3c:f6:13:64:11:63:a4:6a:6c:9b:8d:6c: 50:36:a8:05:54:4c:19:d8:8a:11:9b:e5:1b:11:fc: 8b:64:e1:db:a6:2e:f8:36:5b:33:e9:0f:4f:46:84: dc:9e:bd:1b:4a:0a:ec:ad:c6:01:c9:d1:f2:60:d4: 61:9a:80:12:78:13:92:c2:67:63:45:e5:f5:0d:39: 76:fa:6d:cf:a9:cd:bd:59:e5:bd:82:ec:54:a2:89: 4f:43:11:8e:4f:b7:50:78:0a:30:07:9a:82:70:be: 71:93:d0:3c:8b:b8:31:a8:a6:24:7d:9e:13:b0:76: 2e:17:6a:2f:d3:c1:89:53:18:4c:a3:5b:63:7a:66: 30:e5:05:39:0d:6c:6a:66:19:ce:d4:e1:c9:73:a5: 85:2e:78:83:68:f5:e4:a3:cf:c8:25:5c:49:97:88: 3a:51:19:d1:d3:2e:59:d4:ca:ed:ed:f1:ad:55:05: b0:73:6c:5e:35:a1:a0:dd:6a:07:88:da:15:33:c9: 84:0e:b1:bc:c0:5f:dc:63:b2:a4:00:b5:7a:51:e1: b4:9e:4f:16:d4:d1:29:08:f0:50:c3:4e:a8:ed:a7: 95:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:33:9F:4A:41:F6:C7:69:1B:68:0E:07:A8:96:6C:90:1B:8A:A5:0B X509v3 Authority Key Identifier: keyid:AC:21:F3:02:F8:FE:87:98:E3:EB:EC:F7:4F:BB:4A:1A:FA:8C:0A:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:8b:fb:17:b9:0a:d1:6a:3f:c4:19:4b:ad:ce:af:8a:07:4a: 80:a9:b4:cb:f3:1c:2a:8b:04:c1:86:a2:01:ba:c2:e9:5b:b6: ec:32:14:8f:1b:38:49:7e:c4:f4:c2:1c:a2:f5:79:25:55:23: 50:d2:54:92:32:e6:cd:3e:75:a1:3a:f0:cd:bb:52:c8:85:cb: 2d:89:d1:0c:4e:e4:19:56:8f:1f:42:26:0f:7f:a9:ae:a5:e1: a1:36:15:1d:9e:5a:56:68:25:69:2d:d3:f8:52:2d:21:ee:f6: 8a:69:12:20:be:ae:f4:6f:0f:63:01:30:d0:28:6d:b3:47:18: e1:35:9b:d4:5a:ba:18:74:ae:ca:44:e7:11:8f:00:e2:a7:74: a1:0b:8b:0f:f3:aa:d3:81:24:11:6b:88:ed:4e:d0:e8:2a:fe: 82:01:f5:58:ce:ef:93:9d:41:2c:c4:08:f1:fd:8e:a1:ba:e8: f9:4b:ab:fd:17:b0:4e:49:ed:55:53:42:46:61:cd:50:16:e2: ab:d5:7b:06:b6:87:f2:01:e1:49:44:15:e0:0e:55:87:08:73: 54:66:db:20:cb:f9:1a:8b:da:b6:ad:e0:7c:fc:9f:6d:00:f4: 71:9d:d7:ac:ed:14:f8:7d:16:41:02:69:e6:09:b9:8c:86:f7: 44:d5:06:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFQBrhlrNz9jbrML6CIJC6J22FucwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUMyMUYzMDJGOEZFODc5OEUzRUJFQ0Y3NEZCQjRBMUFG QThDMEE1QTAeFw0yNjA3MjgxODI0MzVaFw0yNjA3MjkxODUyMzVaMDMxMTAvBgNV BAMTKEQ5MzM5RjRBNDFGNkM3NjkxQjY4MEUwN0E4OTY2QzkwMUI4QUE1MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRAnX4CeL88mYdwvGafDA19uLb 6N0dzoYnFpwRuBjqUjz2E2QRY6RqbJuNbFA2qAVUTBnYihGb5RsR/Itk4dumLvg2 WzPpD09GhNyevRtKCuytxgHJ0fJg1GGagBJ4E5LCZ2NF5fUNOXb6bc+pzb1Z5b2C 7FSiiU9DEY5Pt1B4CjAHmoJwvnGT0DyLuDGopiR9nhOwdi4Xai/TwYlTGEyjW2N6 ZjDlBTkNbGpmGc7U4clzpYUueINo9eSjz8glXEmXiDpRGdHTLlnUyu3t8a1VBbBz bF41oaDdageI2hUzyYQOsbzAX9xjsqQAtXpR4bSeTxbU0SkI8FDDTqjtp5UzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2TOfSkH2x2kbaA4HqJZskBuKpQswHwYDVR0j BBgwFoAUrCHzAvj+h5jj6+z3T7tKGvqMClowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTdlMGZhZjAtNzg4ZC00OTViLWFjOTgtZjM1MTYxOTVkYjYwLzAvQUMyMUYzMDJG OEZFODc5OEUzRUJFQ0Y3NEZCQjRBMUFGQThDMEE1QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzIxRjMwMkY4RkU4Nzk4RTNFQkVDRjc0RkJCNEExQUZBOEMw QTVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTdlMGZhZjAtNzg4ZC00OTViLWFj OTgtZjM1MTYxOTVkYjYwLzAvQUMyMUYzMDJGOEZFODc5OEUzRUJFQ0Y3NEZCQjRB MUFGQThDMEE1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACaL+xe5CtFqP8QZS63Or4oHSoCptMvzHCqL BMGGogG6wulbtuwyFI8bOEl+xPTCHKL1eSVVI1DSVJIy5s0+daE68M27UsiFyy2J 0QxO5BlWjx9CJg9/qa6l4aE2FR2eWlZoJWkt0/hSLSHu9oppEiC+rvRvD2MBMNAo bbNHGOE1m9Rauhh0rspE5xGPAOKndKELiw/zqtOBJBFriO1O0Ogq/oIB9VjO75Od QSzECPH9jqG66PlLq/0XsE5J7VVTQkZhzVAW4qvVewa2h/IB4UlEFeAOVYcIc1Rm 2yDL+RqL2rat4Hz8n20A9HGd16ztFPh9FkECaeYJuYyG90TVBr8= -----END CERTIFICATE-----Generated at Wed Jul 29 09:39:54 2026 by rpki-client