$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/AC861103DDC024E3BEB681351D66B027A8BA785A.mft File: AC861103DDC024E3BEB681351D66B027A8BA785A.mft (raw, json) Hash identifier: RrRzPkK+Zc1811wZqhhPL6+FzrlLr4NdLKtqos1SnKE= Subject key identifier: 7A:93:25:39:ED:84:BA:09:AE:EB:A2:70:76:3A:95:0D:C2:3D:75:6D Authority key identifier: AC:86:11:03:DD:C0:24:E3:BE:B6:81:35:1D:66:B0:27:A8:BA:78:5A Certificate issuer: /CN=AC861103DDC024E3BEB681351D66B027A8BA785A Certificate serial: 4750518DE7B0C0FCF34EE37109A6C49D1D371C15 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC861103DDC024E3BEB681351D66B027A8BA785A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/AC861103DDC024E3BEB681351D66B027A8BA785A.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 16:41:23 +0000 Manifest this update: Thu 24 Sep 2026 16:36:23 +0000 Manifest next update: Fri 25 Sep 2026 19:53:23 +0000 Files and hashes: 1: 323430363a633634303a3a2f33322d3332203d3e20313431313337.roa (hash: pE41vn8Dt1qZrL/6IKcEElho8GXY6UXGVa22Zlk5Klg=) 2: AC861103DDC024E3BEB681351D66B027A8BA785A.crl (hash: CST4Y+7/zNZxPvtIM8DsB9QAMuPznuD3N/aBoaFqfKY=) 3: 3130332e3135382e3235332e302f32342d3234203d3e20313431313337.roa (hash: Cxuw8utleC956EhbVyK4h8tr3eWPWdRF27VOeiD3sxU=) 4: 323430363a633634303a323a3a2f34382d3438203d3e20313431313337.roa (hash: qh5eFZWjtfs6SGeMUmGMmglBO26iaZvOjL82WMbtwVc=) 5: 3130332e3135382e3235322e302f32332d3233203d3e20313431313337.roa (hash: J7StUV2ZODyDnpl4H6qRmHDEDNeYTV1qNMuPRyc9WyE=) 6: 3130332e3135382e3235322e302f32342d3234203d3e20313431313337.roa (hash: SW4deFwDdRpgisaH7RqLBMHR3upFCn0yA60y2S1M1VI=) 7: 323430363a633634303a313a3a2f34382d3438203d3e20313431313337.roa (hash: SC/sM91Mj29qp/7MnNyzUUwPkBeQTEbv2cnvmQBFqIM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/AC861103DDC024E3BEB681351D66B027A8BA785A.crl rsync://rpki-rsync.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/AC861103DDC024E3BEB681351D66B027A8BA785A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC861103DDC024E3BEB681351D66B027A8BA785A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:50:51:8d:e7:b0:c0:fc:f3:4e:e3:71:09:a6:c4:9d:1d:37:1c:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC861103DDC024E3BEB681351D66B027A8BA785A Validity Not Before: Sep 24 16:36:23 2026 GMT Not After : Sep 25 19:53:23 2026 GMT Subject: CN=7A932539ED84BA09AEEBA270763A950DC23D756D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:40:1d:44:07:76:3e:0f:2e:0d:83:5d:64:01: 74:1f:e3:96:b5:7c:28:b1:95:55:8e:ae:12:29:30: 58:8f:fe:c5:a9:7d:8f:fc:47:fa:c6:54:23:01:d9: 33:80:2d:99:e5:c4:c4:0f:c8:2f:3e:50:c9:74:f0: f0:94:50:58:df:03:a5:f5:3f:96:00:60:a1:09:df: 6b:f6:76:7c:ee:73:bd:35:26:b0:8d:28:19:c2:af: bb:c0:a8:14:3d:ca:c5:b9:09:d6:3a:37:12:46:69: 2e:66:a5:b6:f8:7c:b3:29:81:54:63:07:68:3a:9e: 84:e8:8a:54:03:26:63:fe:79:33:b7:13:cc:e4:62: f0:3c:c5:8a:d8:95:bf:14:41:73:83:93:e6:b6:ea: ef:ca:77:76:8e:5d:46:cd:94:0c:c1:32:3f:f5:c2: 23:5f:18:38:43:7f:8c:4b:6d:44:9a:68:85:b3:12: c7:e6:29:63:6e:31:51:6f:9e:9d:84:48:33:19:01: c9:f1:ec:77:51:58:7f:cd:8e:8f:0a:94:2d:68:a0: 7d:59:c0:ce:06:62:88:4d:8f:f0:8f:3b:b3:44:ff: 2e:2f:0b:bb:5f:60:e8:d0:6a:85:51:d2:88:3e:75: ce:33:1a:fe:75:84:72:f4:2c:30:bf:3b:68:2e:0d: 62:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:93:25:39:ED:84:BA:09:AE:EB:A2:70:76:3A:95:0D:C2:3D:75:6D X509v3 Authority Key Identifier: keyid:AC:86:11:03:DD:C0:24:E3:BE:B6:81:35:1D:66:B0:27:A8:BA:78:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/AC861103DDC024E3BEB681351D66B027A8BA785A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC861103DDC024E3BEB681351D66B027A8BA785A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/AC861103DDC024E3BEB681351D66B027A8BA785A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:37:82:af:5c:48:55:ad:02:59:45:6d:0f:1f:8a:96:ec:56: dd:12:12:e5:7e:18:6a:ae:1e:65:f4:8c:8f:40:73:b5:f0:78: ac:2e:b7:88:02:88:ab:ba:71:0c:2c:59:31:a4:0e:06:71:65: 60:32:2d:c3:cb:6f:b5:c9:dd:17:98:0b:4b:d6:7e:44:17:83: 4e:95:6d:bd:29:72:a8:36:34:89:6f:13:7b:d2:b7:47:b0:d8: 6c:4b:03:b1:04:f6:f5:eb:c1:f3:8e:22:3f:9f:c5:a4:f9:3b: 81:b1:11:e3:9e:51:39:95:53:4b:01:af:61:d6:8b:a2:67:6c: e5:42:95:a6:f3:42:70:4a:fb:21:b2:04:e0:e9:22:00:e0:49: f0:b1:44:7c:bd:c0:da:fb:87:13:e0:3f:1c:94:a9:81:43:9e: 6b:4b:48:9b:0f:06:0b:ed:0a:1f:6d:f4:c7:19:d7:7d:51:7f: e9:83:7f:53:ec:bb:d9:77:44:37:0f:03:a2:95:50:f1:f9:8f: 10:5f:50:a2:d6:39:30:18:07:32:4d:c1:53:da:f9:30:c5:9e: 3a:85:7a:19:c3:5f:bf:0a:fa:ff:71:e2:ad:6a:35:56:be:a3: 0f:ae:cb:43:46:10:19:43:9c:30:5d:d9:33:be:5b:40:75:0d: 82:66:af:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR1BRjeewwPzzTuNxCabEnR03HBUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM4NjExMDNEREMwMjRFM0JFQjY4MTM1MUQ2NkIwMjdB OEJBNzg1QTAeFw0yNjA5MjQxNjM2MjNaFw0yNjA5MjUxOTUzMjNaMDMxMTAvBgNV BAMTKDdBOTMyNTM5RUQ4NEJBMDlBRUVCQTI3MDc2M0E5NTBEQzIzRDc1NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPQB1EB3Y+Dy4Ng11kAXQf45a1 fCixlVWOrhIpMFiP/sWpfY/8R/rGVCMB2TOALZnlxMQPyC8+UMl08PCUUFjfA6X1 P5YAYKEJ32v2dnzuc701JrCNKBnCr7vAqBQ9ysW5CdY6NxJGaS5mpbb4fLMpgVRj B2g6noToilQDJmP+eTO3E8zkYvA8xYrYlb8UQXODk+a26u/Kd3aOXUbNlAzBMj/1 wiNfGDhDf4xLbUSaaIWzEsfmKWNuMVFvnp2ESDMZAcnx7HdRWH/Njo8KlC1ooH1Z wM4GYohNj/CPO7NE/y4vC7tfYOjQaoVR0og+dc4zGv51hHL0LDC/O2guDWJFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUepMlOe2Eugmu66JwdjqVDcI9dW0wHwYDVR0j BBgwFoAUrIYRA93AJOO+toE1HWawJ6i6eFowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjQ5MDM0NWUtMmQ1Ny00MzQ5LWI3OGYtYzhiMThhNDQyNDQ1LzAvQUM4NjExMDNE REMwMjRFM0JFQjY4MTM1MUQ2NkIwMjdBOEJBNzg1QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzg2MTEwM0REQzAyNEUzQkVCNjgxMzUxRDY2QjAyN0E4QkE3 ODVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjQ5MDM0NWUtMmQ1Ny00MzQ5LWI3 OGYtYzhiMThhNDQyNDQ1LzAvQUM4NjExMDNEREMwMjRFM0JFQjY4MTM1MUQ2NkIw MjdBOEJBNzg1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAA3gq9cSFWtAllFbQ8fipbsVt0SEuV+GGqu HmX0jI9Ac7XweKwut4gCiKu6cQwsWTGkDgZxZWAyLcPLb7XJ3ReYC0vWfkQXg06V bb0pcqg2NIlvE3vSt0ew2GxLA7EE9vXrwfOOIj+fxaT5O4GxEeOeUTmVU0sBr2HW i6JnbOVClabzQnBK+yGyBODpIgDgSfCxRHy9wNr7hxPgPxyUqYFDnmtLSJsPBgvt Ch9t9McZ131Rf+mDf1Psu9l3RDcPA6KVUPH5jxBfUKLWOTAYBzJNwVPa+TDFnjqF ehnDX78K+v9x4q1qNVa+ow+uy0NGEBlDnDBd2TO+W0B1DYJmr+c= -----END CERTIFICATE-----Generated at Fri Sep 25 03:32:40 2026 by rpki-client