$ rpki-client -vvf rpki-rsync.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.mft File: AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.mft (raw, json) Hash identifier: /eS0eTSwnYg5fu1Oqwb++HYmf/SC7Og5Hy2XRDd0DYM= Subject key identifier: 8F:B4:F1:CA:E8:FF:B3:45:66:59:0F:DF:DE:26:87:4E:A5:09:D9:D3 Authority key identifier: AC:7E:AF:B0:07:F3:DD:9B:32:32:7F:16:3D:AF:2A:92:B5:CE:EC:47 Certificate issuer: /CN=AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47 Certificate serial: 03FC49D541BF98F59C62AEC6E20E4AE72D950707 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.mft Manifest number: 0F Signing time: Tue 12 May 2026 15:30:04 +0000 Manifest this update: Tue 12 May 2026 15:25:04 +0000 Manifest next update: Wed 13 May 2026 18:32:04 +0000 Files and hashes: 1: AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.crl (hash: 5sURylDys4dloVgwZS0dgRWwsfvNEQhXxRO0lPDJmHI=) 2: 3130332e3131302e34312e302f32342d3234203d3e20313530343734.roa (hash: obnag6K+/PYNxyPn5mnr74fqA7ofmhwpwaEP4tBMPxc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.crl rsync://rpki-rsync.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:fc:49:d5:41:bf:98:f5:9c:62:ae:c6:e2:0e:4a:e7:2d:95:07:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47 Validity Not Before: May 12 15:25:04 2026 GMT Not After : May 13 18:32:04 2026 GMT Subject: CN=8FB4F1CAE8FFB34566590FDFDE26874EA509D9D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:cd:e0:e8:1c:fe:64:89:8f:22:16:a9:12:54: be:5b:d4:ee:59:f2:e6:14:04:27:9d:cc:1d:72:d4: 4f:43:c7:8b:6a:f2:0e:d2:6b:97:87:6f:59:9b:47: 03:af:35:85:e0:45:d5:53:96:84:35:ff:28:f7:05: c9:a2:0f:d9:66:52:54:d4:ed:2f:fa:fb:f4:dc:95: 6b:fa:ef:ac:41:41:ab:82:35:69:40:1d:bd:9f:f3: ad:12:69:6c:51:d9:50:8f:77:71:30:57:5f:8e:c6: 14:25:e6:2c:de:28:f8:37:e8:64:4a:20:5e:05:7a: 7f:2a:99:a4:36:c4:d8:ac:d7:39:49:8e:6f:51:8a: 6d:5a:c0:d3:57:cc:48:df:9c:10:ef:a5:e2:19:f6: cd:26:08:8e:e4:c5:8c:ab:9a:68:63:94:ba:b0:3d: c7:c7:8c:e5:9f:20:69:2e:ac:8e:e0:7b:48:aa:d6: e9:9a:f0:f6:10:d9:a9:fd:be:4e:1a:75:96:57:1e: 91:7c:75:f6:65:c9:d3:6c:43:ad:ff:a2:a4:37:85: 4f:22:45:59:a2:56:94:c6:62:93:c3:72:6f:d9:cc: b6:70:0f:01:a0:4b:4c:61:2a:5a:65:47:50:c6:0a: fc:e6:e8:6c:0d:a6:4a:b7:be:e9:90:f6:93:d8:66: 48:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:B4:F1:CA:E8:FF:B3:45:66:59:0F:DF:DE:26:87:4E:A5:09:D9:D3 X509v3 Authority Key Identifier: keyid:AC:7E:AF:B0:07:F3:DD:9B:32:32:7F:16:3D:AF:2A:92:B5:CE:EC:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:c8:07:09:09:47:58:76:49:50:05:08:3e:0d:2d:9a:00:a7: a3:36:95:92:63:06:92:68:79:b7:66:e8:79:03:a6:3b:92:75: 9a:40:35:ac:e1:2a:9f:e3:15:ed:99:2c:36:b8:e3:d0:af:33: 68:ab:f8:9b:c2:6c:45:a5:1e:27:9f:b2:be:c3:0c:01:76:cd: c6:0a:ad:67:52:2b:8d:dd:d6:07:f1:c5:b0:46:22:a0:72:c9: a2:32:1e:5b:63:d9:c8:00:34:44:64:cd:cf:3f:f6:b8:d8:3b: 4d:dd:20:36:a7:62:56:a3:de:a7:51:49:03:9b:5b:52:50:ad: 8c:66:0f:b7:ef:0e:e4:40:25:02:b8:09:ef:90:71:ad:c3:d4: 9a:bf:53:2a:04:ef:a1:f4:13:fa:e5:01:42:d2:c0:14:73:4d: 33:ff:da:89:2d:1c:4a:d1:b4:41:5d:aa:62:75:d2:63:c9:e5: 2b:82:5f:bc:58:e4:7a:1d:94:36:f8:0d:1e:82:f8:32:f5:27: 25:fc:42:d6:8b:06:a8:a0:3a:7b:6f:dd:96:e1:07:f1:e2:50: 6e:79:68:56:b0:e4:dd:2b:96:4f:fb:ab:81:57:4e:f5:cd:24: 7a:2c:00:7f:09:2e:92:f6:43:f0:15:95:99:30:8d:90:0d:c5: 15:6e:59:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA/xJ1UG/mPWcYq7G4g5K5y2VBwcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM3RUFGQjAwN0YzREQ5QjMyMzI3RjE2M0RBRjJBOTJC NUNFRUM0NzAeFw0yNjA1MTIxNTI1MDRaFw0yNjA1MTMxODMyMDRaMDMxMTAvBgNV BAMTKDhGQjRGMUNBRThGRkIzNDU2NjU5MEZERkRFMjY4NzRFQTUwOUQ5RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2zeDoHP5kiY8iFqkSVL5b1O5Z 8uYUBCedzB1y1E9Dx4tq8g7Sa5eHb1mbRwOvNYXgRdVTloQ1/yj3BcmiD9lmUlTU 7S/6+/TclWv676xBQauCNWlAHb2f860SaWxR2VCPd3EwV1+OxhQl5izeKPg36GRK IF4Fen8qmaQ2xNis1zlJjm9Rim1awNNXzEjfnBDvpeIZ9s0mCI7kxYyrmmhjlLqw PcfHjOWfIGkurI7ge0iq1uma8PYQ2an9vk4adZZXHpF8dfZlydNsQ63/oqQ3hU8i RVmiVpTGYpPDcm/ZzLZwDwGgS0xhKlplR1DGCvzm6GwNpkq3vumQ9pPYZkiNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj7Txyuj/s0VmWQ/f3iaHTqUJ2dMwHwYDVR0j BBgwFoAUrH6vsAfz3ZsyMn8WPa8qkrXO7EcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDA5ODE5N2MtYTUyNi00NWJkLTljZTktMTUzODNjNWQ5NTM2LzAvQUM3RUFGQjAw N0YzREQ5QjMyMzI3RjE2M0RBRjJBOTJCNUNFRUM0Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzdFQUZCMDA3RjNERDlCMzIzMjdGMTYzREFGMkE5MkI1Q0VF QzQ3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDA5ODE5N2MtYTUyNi00NWJkLTlj ZTktMTUzODNjNWQ5NTM2LzAvQUM3RUFGQjAwN0YzREQ5QjMyMzI3RjE2M0RBRjJB OTJCNUNFRUM0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE7IBwkJR1h2SVAFCD4NLZoAp6M2lZJjBpJo ebdm6HkDpjuSdZpANazhKp/jFe2ZLDa449CvM2ir+JvCbEWlHiefsr7DDAF2zcYK rWdSK43d1gfxxbBGIqByyaIyHltj2cgANERkzc8/9rjYO03dIDanYlaj3qdRSQOb W1JQrYxmD7fvDuRAJQK4Ce+Qca3D1Jq/UyoE76H0E/rlAULSwBRzTTP/2oktHErR tEFdqmJ10mPJ5SuCX7xY5HodlDb4DR6C+DL1JyX8QtaLBqigOntv3ZbhB/HiUG55 aFaw5N0rlk/7q4FXTvXNJHosAH8JLpL2Q/AVlZkwjZANxRVuWUE= -----END CERTIFICATE-----Generated at Tue May 12 22:20:11 2026 by rpki-client