$ rpki-client -vvf rpki-rsync.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.mft File: AC1D31E1C0EBAF054936EEE31001AFEBD8908274.mft (raw, json) Hash identifier: N/vLK6x0oSIilRBwPqUFfMM49wAKpQFYYDzMMYvXBpk= Subject key identifier: E7:D7:87:3E:31:CD:CE:7F:E4:3A:A6:47:45:51:78:E2:0A:B5:23:08 Authority key identifier: AC:1D:31:E1:C0:EB:AF:05:49:36:EE:E3:10:01:AF:EB:D8:90:82:74 Certificate issuer: /CN=AC1D31E1C0EBAF054936EEE31001AFEBD8908274 Certificate serial: 2C829146731CA6E4331A041C49B47E9A58B35C2F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.mft Manifest number: 0E Signing time: Tue 12 May 2026 11:57:30 +0000 Manifest this update: Tue 12 May 2026 11:52:30 +0000 Manifest next update: Wed 13 May 2026 15:21:30 +0000 Files and hashes: 1: AC1D31E1C0EBAF054936EEE31001AFEBD8908274.crl (hash: 0WoXl5FqSk3Mw4gTzhZtt21IiLd7Y1jARB8OJ9rznDU=) 2: 3130332e3130312e3231362e302f32332d3233203d3e20313530393431.roa (hash: Tf1Q9sDwa+GlXIub485EhNzCHd5//pppNP4qkGRGD+Y=) 3: 3130332e3130312e3231372e302f32342d3234203d3e20313530393431.roa (hash: mI5pJthlZy5JwJ1aBsKt5QmSIIpmL45EJ55YLJWzCQg=) 4: 3130332e3130312e3231362e302f32342d3234203d3e20313530393431.roa (hash: WjJ5R6RxIV+WwM7kuHxJKIcmy8NFLw826KU6Z0WZ/xY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.crl rsync://rpki-rsync.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:82:91:46:73:1c:a6:e4:33:1a:04:1c:49:b4:7e:9a:58:b3:5c:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC1D31E1C0EBAF054936EEE31001AFEBD8908274 Validity Not Before: May 12 11:52:30 2026 GMT Not After : May 13 15:21:30 2026 GMT Subject: CN=E7D7873E31CDCE7FE43AA647455178E20AB52308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f6:58:dd:af:0d:78:49:21:2d:85:bc:3e:00: 65:97:db:94:3f:59:45:7b:47:bd:82:72:85:1d:ea: a5:fd:66:89:7b:9c:cd:48:ba:86:96:ac:36:68:d7: 79:97:97:f7:0e:cf:b6:24:4c:88:9f:f2:52:ea:83: e5:04:3e:50:7a:68:66:bd:27:68:d5:b0:df:a6:e3: 7e:af:4a:1e:d5:66:fe:b4:cd:5d:a7:5d:cc:82:0e: 3e:ba:1a:d9:a7:e8:10:c7:6b:ac:9f:b3:4e:91:e9: f5:65:a9:50:2f:6b:01:27:9d:17:50:02:4f:2e:c4: 71:c6:39:00:05:a1:d0:83:f1:4b:f6:56:ed:9d:ae: ad:c8:d1:c2:4e:47:79:7f:88:61:51:07:9c:48:aa: ac:f8:65:8d:0a:df:40:a3:0c:6d:c2:27:e7:2d:bf: dd:c2:37:22:fb:93:c2:bc:cf:ca:7d:ab:a5:ba:73: 26:8f:25:a0:c5:b3:98:a3:08:b0:27:bc:c6:c3:2c: 07:a8:41:ca:e2:45:a0:16:d4:16:30:e3:6d:d2:13: 85:a6:5b:55:80:aa:b5:31:41:44:bf:7e:fb:90:49: d0:13:e2:f2:ba:31:ef:31:31:62:c6:58:e7:f0:5e: a2:b3:59:0b:05:51:94:5f:c1:73:7e:ae:e1:ab:97: 81:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:D7:87:3E:31:CD:CE:7F:E4:3A:A6:47:45:51:78:E2:0A:B5:23:08 X509v3 Authority Key Identifier: keyid:AC:1D:31:E1:C0:EB:AF:05:49:36:EE:E3:10:01:AF:EB:D8:90:82:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:9d:2a:82:61:53:89:b4:31:c2:14:43:61:ea:68:70:05:76: ad:ac:5c:65:dd:71:f3:bb:86:89:89:5c:87:c4:6e:7d:7d:4d: 80:f9:c1:ae:fd:5e:5a:a0:79:b9:a2:86:e4:3d:73:0c:2b:60: d0:b3:44:b7:1d:93:c0:e6:3f:da:61:98:d6:3c:e4:01:56:83: e5:db:51:ec:c0:01:94:9e:6c:31:c2:68:1c:06:2d:87:8c:93: e4:2c:29:49:7c:5d:bb:d2:6d:d3:3e:09:7f:eb:a3:18:33:60: 69:b5:8d:00:4f:6b:79:56:35:db:e1:fa:6b:34:85:ab:b6:d3: 4f:39:55:42:21:7a:ac:0c:14:a3:73:5f:1b:2c:86:29:46:b8: 25:c1:ad:47:57:b2:f8:1d:70:f8:35:bd:4c:5f:8d:80:15:a9: 29:37:64:8c:6a:e3:3d:b9:12:9c:a2:f8:4d:65:cf:22:65:f8: 3a:68:3e:98:6e:28:6a:b2:4e:5a:da:1e:7b:08:85:24:a7:8c: c8:12:6d:19:4c:84:ef:00:1a:c1:6f:b3:67:23:1e:e7:ce:5f: e2:7a:a9:32:8b:29:a6:46:fc:32:2e:5b:14:6a:b9:b4:ff:fd: 46:ad:49:b6:8f:6a:52:ba:dc:93:b1:20:44:ea:e1:de:a4:29: 78:d1:06:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULIKRRnMcpuQzGgQcSbR+mlizXC8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUMxRDMxRTFDMEVCQUYwNTQ5MzZFRUUzMTAwMUFGRUJE ODkwODI3NDAeFw0yNjA1MTIxMTUyMzBaFw0yNjA1MTMxNTIxMzBaMDMxMTAvBgNV BAMTKEU3RDc4NzNFMzFDRENFN0ZFNDNBQTY0NzQ1NTE3OEUyMEFCNTIzMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV9ljdrw14SSEthbw+AGWX25Q/ WUV7R72CcoUd6qX9Zol7nM1IuoaWrDZo13mXl/cOz7YkTIif8lLqg+UEPlB6aGa9 J2jVsN+m436vSh7VZv60zV2nXcyCDj66Gtmn6BDHa6yfs06R6fVlqVAvawEnnRdQ Ak8uxHHGOQAFodCD8Uv2Vu2drq3I0cJOR3l/iGFRB5xIqqz4ZY0K30CjDG3CJ+ct v93CNyL7k8K8z8p9q6W6cyaPJaDFs5ijCLAnvMbDLAeoQcriRaAW1BYw423SE4Wm W1WAqrUxQUS/fvuQSdAT4vK6Me8xMWLGWOfwXqKzWQsFUZRfwXN+ruGrl4FjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU59eHPjHNzn/kOqZHRVF44gq1IwgwHwYDVR0j BBgwFoAUrB0x4cDrrwVJNu7jEAGv69iQgnQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGExZjM5NzEtM2E0Ny00NTVkLWFiMzAtZTdjMjNiNjFiOWYyLzAvQUMxRDMxRTFD MEVCQUYwNTQ5MzZFRUUzMTAwMUFGRUJEODkwODI3NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzFEMzFFMUMwRUJBRjA1NDkzNkVFRTMxMDAxQUZFQkQ4OTA4 Mjc0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGExZjM5NzEtM2E0Ny00NTVkLWFi MzAtZTdjMjNiNjFiOWYyLzAvQUMxRDMxRTFDMEVCQUYwNTQ5MzZFRUUzMTAwMUFG RUJEODkwODI3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEmdKoJhU4m0McIUQ2HqaHAFdq2sXGXdcfO7 homJXIfEbn19TYD5wa79XlqgebmihuQ9cwwrYNCzRLcdk8DmP9phmNY85AFWg+Xb UezAAZSebDHCaBwGLYeMk+QsKUl8XbvSbdM+CX/roxgzYGm1jQBPa3lWNdvh+ms0 hau20085VUIheqwMFKNzXxsshilGuCXBrUdXsvgdcPg1vUxfjYAVqSk3ZIxq4z25 Epyi+E1lzyJl+DpoPphuKGqyTlraHnsIhSSnjMgSbRlMhO8AGsFvs2cjHufOX+J6 qTKLKaZG/DIuWxRqubT//UatSbaPalK63JOxIETq4d6kKXjRBr8= -----END CERTIFICATE-----Generated at Tue May 12 22:13:01 2026 by rpki-client