$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.mft File: AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.mft (raw, json) Hash identifier: jGpCgGiklEy50uCUWHg8VVZKL/WliBrU/NbNQwE58aQ= Subject key identifier: 7A:67:5B:1C:6F:0A:72:6D:1B:31:BC:F4:82:EE:5B:9B:39:47:18:9E Authority key identifier: AC:7E:AF:B0:07:F3:DD:9B:32:32:7F:16:3D:AF:2A:92:B5:CE:EC:47 Certificate issuer: /CN=AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47 Certificate serial: 42F8916D16A2283A57D5A0C57F6C784C93CFB223 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.mft Manifest number: C4 Signing time: Thu 24 Sep 2026 01:58:13 +0000 Manifest this update: Thu 24 Sep 2026 01:53:13 +0000 Manifest next update: Fri 25 Sep 2026 03:04:13 +0000 Files and hashes: 1: AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.crl (hash: 2HpQdcsHbABFpjIyeU1wUqzEWGeeLDcK7+xuvWQHb1Q=) 2: 3130332e3131302e34312e302f32342d3234203d3e20313530343734.roa (hash: obnag6K+/PYNxyPn5mnr74fqA7ofmhwpwaEP4tBMPxc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.crl rsync://rpki-rsync.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 03:04:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:f8:91:6d:16:a2:28:3a:57:d5:a0:c5:7f:6c:78:4c:93:cf:b2:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47 Validity Not Before: Sep 24 01:53:13 2026 GMT Not After : Sep 25 03:04:13 2026 GMT Subject: CN=7A675B1C6F0A726D1B31BCF482EE5B9B3947189E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:f4:1a:ae:65:c5:5e:1c:bf:80:c9:23:2d:a2: 68:56:20:00:80:1d:3e:1d:d7:c6:26:2a:3a:a6:9c: 6c:99:b9:28:d7:60:2f:5a:ca:e3:9e:54:62:fe:d9: 4f:b9:6a:24:88:05:6b:8c:60:35:dd:5c:b2:7c:6c: 4c:bd:f3:e6:0c:99:b6:50:44:8b:0b:d6:87:77:23: b2:14:f5:a4:33:9d:0b:bc:7a:54:9c:97:0a:1c:87: 1a:07:56:54:4f:7f:d4:ae:89:25:8d:48:64:bd:3b: 66:07:61:fb:be:85:44:6d:c3:bd:bf:f7:ec:77:34: 97:a7:fe:d5:db:34:6b:39:51:57:37:97:bb:c3:41: 73:4a:9a:3f:7f:a7:95:18:85:7b:4b:aa:46:50:a3: 2a:d2:f6:16:06:52:6d:8a:7b:70:31:92:c6:15:58: 5b:e6:28:0a:e0:a5:bb:78:e4:5a:14:06:a4:d8:9d: fa:41:e6:14:b5:97:60:5c:3e:48:b5:0b:df:1f:3c: 5d:20:3a:ef:a2:26:b6:93:ad:6d:b7:d0:0f:15:78: bb:90:8a:d0:58:0d:ff:3e:a4:3d:9e:84:f5:f4:bb: 02:99:31:9d:50:60:00:42:41:66:b9:1e:e3:9f:e5: 57:0d:20:c1:31:6f:54:de:cf:75:9d:0a:5c:e0:ad: 10:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:67:5B:1C:6F:0A:72:6D:1B:31:BC:F4:82:EE:5B:9B:39:47:18:9E X509v3 Authority Key Identifier: keyid:AC:7E:AF:B0:07:F3:DD:9B:32:32:7F:16:3D:AF:2A:92:B5:CE:EC:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:a7:4b:6b:61:0e:63:2e:87:da:49:63:3f:24:38:66:af:72: be:4d:b2:14:3e:f3:1b:9b:b7:a3:d0:24:55:b8:68:5d:69:50: 1c:ad:0b:bf:85:e3:05:64:de:87:10:5f:d9:80:80:58:23:4d: 58:1c:4e:7b:24:fe:c1:d7:01:41:9c:4a:1b:a4:49:a5:08:54: 1f:68:43:1f:34:f2:be:81:2c:98:11:38:69:e5:90:91:e7:01: 7d:e3:50:ab:72:25:38:4a:cc:84:9e:f3:44:8e:cc:13:a7:41: 33:32:c9:25:8d:d0:7e:34:c3:5e:13:e4:b4:15:c2:1a:5c:54: b9:36:28:f4:b1:8b:b1:44:3e:fa:64:81:2f:f1:53:bd:36:d4: ec:a7:10:12:aa:a5:e6:56:28:2d:48:23:c9:90:a7:ea:5c:3d: 71:f7:ab:28:83:2d:37:de:08:99:58:25:a0:f6:15:82:58:19: 7a:0c:0b:7f:0e:14:8b:48:76:2b:99:3a:06:27:5d:89:c4:68: 9e:0a:a6:cf:40:ff:e5:8c:b4:6b:a7:38:fa:27:3b:16:df:a9: d9:a7:c8:31:7c:32:31:8f:d5:fe:9b:83:7e:c1:98:d2:39:12: 77:80:5e:93:bf:da:51:9c:27:62:96:10:c7:c9:49:75:ce:fb: 45:e5:ce:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQviRbRaiKDpX1aDFf2x4TJPPsiMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM3RUFGQjAwN0YzREQ5QjMyMzI3RjE2M0RBRjJBOTJC NUNFRUM0NzAeFw0yNjA5MjQwMTUzMTNaFw0yNjA5MjUwMzA0MTNaMDMxMTAvBgNV BAMTKDdBNjc1QjFDNkYwQTcyNkQxQjMxQkNGNDgyRUU1QjlCMzk0NzE4OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm9BquZcVeHL+AySMtomhWIACA HT4d18YmKjqmnGyZuSjXYC9ayuOeVGL+2U+5aiSIBWuMYDXdXLJ8bEy98+YMmbZQ RIsL1od3I7IU9aQznQu8elSclwochxoHVlRPf9SuiSWNSGS9O2YHYfu+hURtw72/ 9+x3NJen/tXbNGs5UVc3l7vDQXNKmj9/p5UYhXtLqkZQoyrS9hYGUm2Ke3AxksYV WFvmKArgpbt45FoUBqTYnfpB5hS1l2BcPki1C98fPF0gOu+iJraTrW230A8VeLuQ itBYDf8+pD2ehPX0uwKZMZ1QYABCQWa5HuOf5VcNIMExb1Tez3WdClzgrRBtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUemdbHG8Kcm0bMbz0gu5bmzlHGJ4wHwYDVR0j BBgwFoAUrH6vsAfz3ZsyMn8WPa8qkrXO7EcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDA5ODE5N2MtYTUyNi00NWJkLTljZTktMTUzODNjNWQ5NTM2LzAvQUM3RUFGQjAw N0YzREQ5QjMyMzI3RjE2M0RBRjJBOTJCNUNFRUM0Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzdFQUZCMDA3RjNERDlCMzIzMjdGMTYzREFGMkE5MkI1Q0VF QzQ3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDA5ODE5N2MtYTUyNi00NWJkLTlj ZTktMTUzODNjNWQ5NTM2LzAvQUM3RUFGQjAwN0YzREQ5QjMyMzI3RjE2M0RBRjJB OTJCNUNFRUM0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHKnS2thDmMuh9pJYz8kOGavcr5NshQ+8xub t6PQJFW4aF1pUBytC7+F4wVk3ocQX9mAgFgjTVgcTnsk/sHXAUGcShukSaUIVB9o Qx808r6BLJgROGnlkJHnAX3jUKtyJThKzISe80SOzBOnQTMyySWN0H40w14T5LQV whpcVLk2KPSxi7FEPvpkgS/xU7021OynEBKqpeZWKC1II8mQp+pcPXH3qyiDLTfe CJlYJaD2FYJYGXoMC38OFItIdiuZOgYnXYnEaJ4Kps9A/+WMtGunOPonOxbfqdmn yDF8MjGP1f6bg37BmNI5EneAXpO/2lGcJ2KWEMfJSXXO+0XlzpM= -----END CERTIFICATE-----Generated at Thu Sep 24 13:59:27 2026 by rpki-client