$ rpki-client -vvf rpki-rsync.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/AC861103DDC024E3BEB681351D66B027A8BA785A.mft File: AC861103DDC024E3BEB681351D66B027A8BA785A.mft (raw, json) Hash identifier: p6iFs4BFL/IVYiTQufj2jurLfUjD26tMspbORpTu8d8= Subject key identifier: E8:30:79:8A:E3:78:A1:E0:AF:04:2C:B0:C8:A8:4C:D2:E2:08:DE:CE Authority key identifier: AC:86:11:03:DD:C0:24:E3:BE:B6:81:35:1D:66:B0:27:A8:BA:78:5A Certificate issuer: /CN=AC861103DDC024E3BEB681351D66B027A8BA785A Certificate serial: 1377C8759EB22C27DF91B15BA30CEF5BA5C770CA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC861103DDC024E3BEB681351D66B027A8BA785A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/AC861103DDC024E3BEB681351D66B027A8BA785A.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:17:03 +0000 Manifest this update: Tue 12 May 2026 20:12:03 +0000 Manifest next update: Wed 13 May 2026 21:02:03 +0000 Files and hashes: 1: 3130332e3135382e3235322e302f32332d3233203d3e20313431313337.roa (hash: J7StUV2ZODyDnpl4H6qRmHDEDNeYTV1qNMuPRyc9WyE=) 2: 3130332e3135382e3235332e302f32342d3234203d3e20313431313337.roa (hash: Cxuw8utleC956EhbVyK4h8tr3eWPWdRF27VOeiD3sxU=) 3: 3130332e3135382e3235322e302f32342d3234203d3e20313431313337.roa (hash: SW4deFwDdRpgisaH7RqLBMHR3upFCn0yA60y2S1M1VI=) 4: 323430363a633634303a323a3a2f34382d3438203d3e20313431313337.roa (hash: qh5eFZWjtfs6SGeMUmGMmglBO26iaZvOjL82WMbtwVc=) 5: AC861103DDC024E3BEB681351D66B027A8BA785A.crl (hash: eLfu+addIDGN7vziPOaXJJiY2N7/PM7ZC+GUaPr0pFw=) 6: 323430363a633634303a3a2f33322d3332203d3e20313431313337.roa (hash: pE41vn8Dt1qZrL/6IKcEElho8GXY6UXGVa22Zlk5Klg=) 7: 323430363a633634303a313a3a2f34382d3438203d3e20313431313337.roa (hash: SC/sM91Mj29qp/7MnNyzUUwPkBeQTEbv2cnvmQBFqIM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/AC861103DDC024E3BEB681351D66B027A8BA785A.crl rsync://rpki-rsync.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/AC861103DDC024E3BEB681351D66B027A8BA785A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC861103DDC024E3BEB681351D66B027A8BA785A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:77:c8:75:9e:b2:2c:27:df:91:b1:5b:a3:0c:ef:5b:a5:c7:70:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC861103DDC024E3BEB681351D66B027A8BA785A Validity Not Before: May 12 20:12:03 2026 GMT Not After : May 13 21:02:03 2026 GMT Subject: CN=E830798AE378A1E0AF042CB0C8A84CD2E208DECE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:66:15:36:23:59:fd:26:51:82:8c:7b:fb:1d: 64:c4:09:f0:f1:18:67:a1:85:82:81:8a:8e:be:e3: b2:55:af:2a:c1:f2:80:1b:8d:56:ca:0e:5f:c6:b4: a2:c8:8d:65:5d:63:0f:26:13:7b:d6:40:30:f8:c0: a9:23:de:53:4a:48:3a:9c:f8:8a:e5:8d:40:55:54: 61:fd:b4:55:96:ad:16:cb:df:e0:64:42:57:c6:12: 7f:63:69:08:6d:98:5f:7d:95:d4:3b:b0:4b:b1:65: 90:8e:b2:f5:47:05:30:ae:b4:dc:09:00:9c:43:dd: fc:04:d8:0e:a5:16:50:ec:09:64:2e:49:26:a7:22: a2:c1:61:5a:13:f3:96:9f:09:ae:ed:de:1a:2f:a1: ca:84:3f:be:b5:62:98:38:d4:0c:fe:07:1f:81:b7: 44:fc:3c:8a:b6:74:9a:26:43:b7:5b:4f:77:fd:55: 44:dc:4f:01:76:f9:9b:85:b6:f5:de:f3:20:84:53: 32:01:e6:f8:92:8e:86:7f:c6:5a:72:e7:be:78:4e: f2:89:89:cb:75:a1:81:ac:c1:1c:a7:c5:7b:0b:a1: e9:a0:97:15:8b:b1:e4:25:4b:d0:e2:67:c4:4c:32: 42:21:26:d5:12:2b:0c:e8:86:7a:c9:e2:8b:85:24: cf:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:30:79:8A:E3:78:A1:E0:AF:04:2C:B0:C8:A8:4C:D2:E2:08:DE:CE X509v3 Authority Key Identifier: keyid:AC:86:11:03:DD:C0:24:E3:BE:B6:81:35:1D:66:B0:27:A8:BA:78:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/AC861103DDC024E3BEB681351D66B027A8BA785A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC861103DDC024E3BEB681351D66B027A8BA785A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/AC861103DDC024E3BEB681351D66B027A8BA785A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:6e:e8:bc:a9:41:5a:c3:3a:82:0c:f4:f0:84:c9:4a:88:bf: 35:d9:18:23:61:9d:e7:81:f3:b9:68:21:d9:79:71:32:b0:35: 17:e2:04:7e:11:f1:f5:83:5a:a0:df:16:e9:8e:c8:37:b6:4e: 87:51:b9:f3:4c:9a:c2:3f:9c:28:ce:70:71:ec:79:d7:54:ab: f4:b9:53:ff:47:c4:f2:e0:56:ba:56:6d:5c:3f:11:44:75:77: ef:ea:b8:4c:d9:c2:62:d3:8e:9f:3a:e5:bd:14:b3:e8:40:e3: e1:a8:b7:97:e2:ea:70:e8:0c:54:e6:d0:52:bf:2f:84:76:b5: 0a:7a:4b:d4:13:1e:0a:22:ef:c7:74:ff:83:ef:66:4b:75:ac: 05:1d:88:de:45:44:44:61:26:46:4f:e8:fc:77:cc:b3:28:7b: 9f:5d:53:c9:c5:9c:36:0c:01:f7:a9:0a:9c:8c:ee:16:fe:34: dc:e2:24:be:c8:98:68:0f:c6:7d:92:98:80:81:9a:e5:d8:cf: 3c:c2:4f:77:e9:34:b2:91:ec:4f:ca:6f:f1:fb:ee:78:88:48: 72:b5:1d:a5:b9:7d:4d:ff:d3:68:9f:b5:75:3b:ba:07:23:70: e6:7e:55:6b:52:b9:93:07:19:de:5b:86:6e:a0:cd:cb:56:9b: 43:9b:d8:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE3fIdZ6yLCffkbFbowzvW6XHcMowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM4NjExMDNEREMwMjRFM0JFQjY4MTM1MUQ2NkIwMjdB OEJBNzg1QTAeFw0yNjA1MTIyMDEyMDNaFw0yNjA1MTMyMTAyMDNaMDMxMTAvBgNV BAMTKEU4MzA3OThBRTM3OEExRTBBRjA0MkNCMEM4QTg0Q0QyRTIwOERFQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+ZhU2I1n9JlGCjHv7HWTECfDx GGehhYKBio6+47JVryrB8oAbjVbKDl/GtKLIjWVdYw8mE3vWQDD4wKkj3lNKSDqc +IrljUBVVGH9tFWWrRbL3+BkQlfGEn9jaQhtmF99ldQ7sEuxZZCOsvVHBTCutNwJ AJxD3fwE2A6lFlDsCWQuSSanIqLBYVoT85afCa7t3hovocqEP761Ypg41Az+Bx+B t0T8PIq2dJomQ7dbT3f9VUTcTwF2+ZuFtvXe8yCEUzIB5viSjoZ/xlpy5754TvKJ ict1oYGswRynxXsLoemglxWLseQlS9DiZ8RMMkIhJtUSKwzohnrJ4ouFJM+9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6DB5iuN4oeCvBCywyKhM0uII3s4wHwYDVR0j BBgwFoAUrIYRA93AJOO+toE1HWawJ6i6eFowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjQ5MDM0NWUtMmQ1Ny00MzQ5LWI3OGYtYzhiMThhNDQyNDQ1LzAvQUM4NjExMDNE REMwMjRFM0JFQjY4MTM1MUQ2NkIwMjdBOEJBNzg1QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzg2MTEwM0REQzAyNEUzQkVCNjgxMzUxRDY2QjAyN0E4QkE3 ODVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjQ5MDM0NWUtMmQ1Ny00MzQ5LWI3 OGYtYzhiMThhNDQyNDQ1LzAvQUM4NjExMDNEREMwMjRFM0JFQjY4MTM1MUQ2NkIw MjdBOEJBNzg1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHxu6LypQVrDOoIM9PCEyUqIvzXZGCNhneeB 87loIdl5cTKwNRfiBH4R8fWDWqDfFumOyDe2TodRufNMmsI/nCjOcHHseddUq/S5 U/9HxPLgVrpWbVw/EUR1d+/quEzZwmLTjp865b0Us+hA4+Got5fi6nDoDFTm0FK/ L4R2tQp6S9QTHgoi78d0/4PvZkt1rAUdiN5FRERhJkZP6Px3zLMoe59dU8nFnDYM AfepCpyM7hb+NNziJL7ImGgPxn2SmICBmuXYzzzCT3fpNLKR7E/Kb/H77niISHK1 HaW5fU3/02iftXU7ugcjcOZ+VWtSuZMHGd5bhm6gzctWm0Ob2LU= -----END CERTIFICATE-----Generated at Wed May 13 01:36:42 2026 by rpki-client