$ rpki-client -vvf rpki-rsync.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/AC135A343D89C2715C1AA76F3314EDF91A5D7473.mft File: AC135A343D89C2715C1AA76F3314EDF91A5D7473.mft (raw, json) Hash identifier: VlPlOdHIYDAwDrx2hq36oknpGBF+++aSizqzStB+iKk= Subject key identifier: 39:DD:2B:F6:FA:E8:F1:D4:89:46:D2:AA:29:DB:B0:FF:D0:E0:7D:00 Authority key identifier: AC:13:5A:34:3D:89:C2:71:5C:1A:A7:6F:33:14:ED:F9:1A:5D:74:73 Certificate issuer: /CN=AC135A343D89C2715C1AA76F3314EDF91A5D7473 Certificate serial: 55C725B09C6BC8E16C014EAA80D0BB6D5CBB5A69 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC135A343D89C2715C1AA76F3314EDF91A5D7473.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/AC135A343D89C2715C1AA76F3314EDF91A5D7473.mft Manifest number: 0F Signing time: Tue 12 May 2026 21:29:10 +0000 Manifest this update: Tue 12 May 2026 21:24:10 +0000 Manifest next update: Thu 14 May 2026 00:32:10 +0000 Files and hashes: 1: AC135A343D89C2715C1AA76F3314EDF91A5D7473.crl (hash: HU0Rw1mF/2okf97uIKZj+Z3+mU6u08v6gwFE23jRtNs=) 2: 3130332e33312e3234312e302f32342d3234203d3e20313339393532.roa (hash: wmrO1sIlSaYPXG3uoDQ46bwtU1pWLEpz2UMTkfOKpVs=) 3: 3130332e33312e3234302e302f32342d3234203d3e20313339393532.roa (hash: MXQvxQuFfrOrlrDM0pu7aI1UUtAamLu0vBW+zEyQ+dQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/AC135A343D89C2715C1AA76F3314EDF91A5D7473.crl rsync://rpki-rsync.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/AC135A343D89C2715C1AA76F3314EDF91A5D7473.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC135A343D89C2715C1AA76F3314EDF91A5D7473.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:32:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:c7:25:b0:9c:6b:c8:e1:6c:01:4e:aa:80:d0:bb:6d:5c:bb:5a:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC135A343D89C2715C1AA76F3314EDF91A5D7473 Validity Not Before: May 12 21:24:10 2026 GMT Not After : May 14 00:32:10 2026 GMT Subject: CN=39DD2BF6FAE8F1D48946D2AA29DBB0FFD0E07D00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ce:81:b8:b0:b0:af:5a:82:04:c1:3d:28:8b: bc:05:3d:c8:2d:e2:ad:e2:c0:db:97:c8:80:2e:c3: 7d:6c:4c:ea:7f:df:a0:9d:85:91:2f:76:29:50:07: e7:f0:e4:c2:86:b4:40:39:e3:76:6b:29:0d:e7:9a: 88:2f:a6:36:b5:c4:fa:e6:db:19:c5:c6:4a:ea:6f: 99:06:9e:0a:46:70:30:69:e4:07:f5:ca:87:3d:68: 2d:b7:9d:1f:a3:4b:e4:b7:f8:18:ae:ff:92:ed:28: 18:51:1d:b1:2f:c4:ef:7e:0c:d1:98:74:38:df:5e: ad:5e:be:7b:ac:37:ea:01:70:bf:97:bf:c7:62:02: 4a:9f:63:e8:12:68:02:d9:38:af:8c:32:ee:50:e3: 94:e4:51:bc:07:e6:dd:0b:cc:c7:f8:32:b6:f6:ca: 8c:e6:15:94:1f:82:92:e1:be:66:c0:40:22:94:3b: be:6f:95:50:af:1d:c6:ed:1f:a6:4f:2b:00:23:97: 83:81:77:26:9f:e9:cd:48:a1:78:97:52:dd:58:a0: db:a7:a1:aa:5d:47:25:6f:0b:5d:19:87:d1:98:39: 66:4a:4c:ce:30:14:9a:f1:67:77:62:4f:59:72:2b: 38:14:72:47:ef:1b:a2:15:be:7c:ee:a6:3f:1c:67: bf:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:DD:2B:F6:FA:E8:F1:D4:89:46:D2:AA:29:DB:B0:FF:D0:E0:7D:00 X509v3 Authority Key Identifier: keyid:AC:13:5A:34:3D:89:C2:71:5C:1A:A7:6F:33:14:ED:F9:1A:5D:74:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/AC135A343D89C2715C1AA76F3314EDF91A5D7473.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC135A343D89C2715C1AA76F3314EDF91A5D7473.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/AC135A343D89C2715C1AA76F3314EDF91A5D7473.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:0e:6b:c6:18:e7:fd:62:38:9e:ab:e6:5e:b7:a0:37:e4:24: 1d:41:3f:8c:42:06:51:26:52:f4:88:59:20:68:c8:26:87:25: 4c:38:d9:f1:05:a4:20:37:f2:6c:d2:f6:88:c2:b8:2c:69:36: 05:e9:09:3f:2e:7f:e9:47:1f:2a:53:ed:e4:e1:c0:b0:99:7a: 1f:e5:bd:5c:b4:2b:2a:c4:4e:95:49:87:c6:4a:6b:bd:64:cd: 9c:20:9a:89:d4:45:d2:da:1d:2b:ee:d7:c6:ad:e9:5f:ec:7a: 6f:61:ce:05:74:1b:eb:dd:ec:88:1c:5e:e9:35:72:d4:4e:37: b0:66:25:64:db:97:27:f5:cf:8b:fd:86:a3:10:3e:4f:dd:90: 04:b0:1d:c6:52:91:30:41:aa:4c:aa:db:e8:79:52:22:df:8a: 98:e3:dc:ce:70:6e:a9:4c:fc:e0:2c:18:a4:33:cd:b4:b1:36: 05:b7:40:5b:db:f4:63:62:e3:32:3f:7e:3d:f4:5f:dd:6b:bc: e1:3c:3f:d2:9d:6b:2a:50:de:a6:ec:b0:2b:80:a7:e9:b6:4e: 96:d6:5a:62:6b:ec:3a:28:3b:7d:1f:96:7b:5b:4a:86:8d:67: 0f:4b:d8:9c:fd:b9:8e:22:e6:92:f0:81:4b:d1:07:24:71:41: 87:57:e4:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVcclsJxryOFsAU6qgNC7bVy7WmkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUMxMzVBMzQzRDg5QzI3MTVDMUFBNzZGMzMxNEVERjkx QTVENzQ3MzAeFw0yNjA1MTIyMTI0MTBaFw0yNjA1MTQwMDMyMTBaMDMxMTAvBgNV BAMTKDM5REQyQkY2RkFFOEYxRDQ4OTQ2RDJBQTI5REJCMEZGRDBFMDdEMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNzoG4sLCvWoIEwT0oi7wFPcgt 4q3iwNuXyIAuw31sTOp/36CdhZEvdilQB+fw5MKGtEA543ZrKQ3nmogvpja1xPrm 2xnFxkrqb5kGngpGcDBp5Af1yoc9aC23nR+jS+S3+Biu/5LtKBhRHbEvxO9+DNGY dDjfXq1evnusN+oBcL+Xv8diAkqfY+gSaALZOK+MMu5Q45TkUbwH5t0LzMf4Mrb2 yozmFZQfgpLhvmbAQCKUO75vlVCvHcbtH6ZPKwAjl4OBdyaf6c1IoXiXUt1YoNun oapdRyVvC10Zh9GYOWZKTM4wFJrxZ3diT1lyKzgUckfvG6IVvnzupj8cZ79hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOd0r9vro8dSJRtKqKduw/9DgfQAwHwYDVR0j BBgwFoAUrBNaND2JwnFcGqdvMxTt+RpddHMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjQzMDM0YWEtZjM5Yy00OGY1LTg1MmUtZDFiZDdmMTdhYTQyLzAvQUMxMzVBMzQz RDg5QzI3MTVDMUFBNzZGMzMxNEVERjkxQTVENzQ3My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzEzNUEzNDNEODlDMjcxNUMxQUE3NkYzMzE0RURGOTFBNUQ3 NDczLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjQzMDM0YWEtZjM5Yy00OGY1LTg1 MmUtZDFiZDdmMTdhYTQyLzAvQUMxMzVBMzQzRDg5QzI3MTVDMUFBNzZGMzMxNEVE RjkxQTVENzQ3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADwOa8YY5/1iOJ6r5l63oDfkJB1BP4xCBlEm UvSIWSBoyCaHJUw42fEFpCA38mzS9ojCuCxpNgXpCT8uf+lHHypT7eThwLCZeh/l vVy0KyrETpVJh8ZKa71kzZwgmonURdLaHSvu18at6V/sem9hzgV0G+vd7IgcXuk1 ctRON7BmJWTblyf1z4v9hqMQPk/dkASwHcZSkTBBqkyq2+h5UiLfipjj3M5wbqlM /OAsGKQzzbSxNgW3QFvb9GNi4zI/fj30X91rvOE8P9KdaypQ3qbssCuAp+m2TpbW WmJr7DooO30flntbSoaNZw9L2Jz9uY4i5pLwgUvRByRxQYdX5Hw= -----END CERTIFICATE-----Generated at Wed May 13 10:30:24 2026 by rpki-client