$ rpki-client -vvf rpki-rsync.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/AC135A343D89C2715C1AA76F3314EDF91A5D7473.mft File: AC135A343D89C2715C1AA76F3314EDF91A5D7473.mft (raw, json) Hash identifier: 71ISZrFxLvpAviAVs8QV7FQQkacjiV3DSQkE6ezxT1U= Subject key identifier: 7E:6A:40:BB:FB:19:39:3B:B4:CD:7A:1A:9D:CE:B9:E8:9C:6D:2B:0F Authority key identifier: AC:13:5A:34:3D:89:C2:71:5C:1A:A7:6F:33:14:ED:F9:1A:5D:74:73 Certificate issuer: /CN=AC135A343D89C2715C1AA76F3314EDF91A5D7473 Certificate serial: 59047BDCC5A872568324BAB4D3398BAB8BF98FDE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC135A343D89C2715C1AA76F3314EDF91A5D7473.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/AC135A343D89C2715C1AA76F3314EDF91A5D7473.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 16:35:11 +0000 Manifest this update: Thu 23 Jul 2026 16:30:11 +0000 Manifest next update: Fri 24 Jul 2026 19:50:11 +0000 Files and hashes: 1: 3130332e33312e3234312e302f32342d3234203d3e20313339393532.roa (hash: wmrO1sIlSaYPXG3uoDQ46bwtU1pWLEpz2UMTkfOKpVs=) 2: 3130332e33312e3234302e302f32342d3234203d3e20313339393532.roa (hash: MXQvxQuFfrOrlrDM0pu7aI1UUtAamLu0vBW+zEyQ+dQ=) 3: AC135A343D89C2715C1AA76F3314EDF91A5D7473.crl (hash: MyOvs9UwYHGW2XL3VJGSvzVQdTaX3mkLmlLcbWRXVdo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/AC135A343D89C2715C1AA76F3314EDF91A5D7473.crl rsync://rpki-rsync.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/AC135A343D89C2715C1AA76F3314EDF91A5D7473.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC135A343D89C2715C1AA76F3314EDF91A5D7473.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 19:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:04:7b:dc:c5:a8:72:56:83:24:ba:b4:d3:39:8b:ab:8b:f9:8f:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC135A343D89C2715C1AA76F3314EDF91A5D7473 Validity Not Before: Jul 23 16:30:11 2026 GMT Not After : Jul 24 19:50:11 2026 GMT Subject: CN=7E6A40BBFB19393BB4CD7A1A9DCEB9E89C6D2B0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:28:5a:f4:21:38:1e:46:dc:38:bf:a5:fb:32: 68:ac:90:ec:ab:c6:35:4f:ca:e1:e3:99:c8:cc:21: f4:92:aa:8d:b9:3e:a7:bd:c4:a5:bf:08:ac:29:89: 64:d6:18:56:e7:12:54:df:c5:d3:a8:73:84:5b:9a: b0:f1:fd:b3:c9:d8:22:4b:28:9a:0a:98:e3:7e:1e: 73:a1:b9:6d:3d:d5:07:12:14:cb:bc:e6:19:fd:d3: 63:fa:48:4f:2e:14:ef:5f:8d:1d:1d:ef:5f:83:32: 62:d3:89:21:8a:e4:07:ac:97:81:89:a7:1d:3e:c1: 54:71:76:eb:94:cb:21:db:4e:93:11:d3:d8:a3:3e: 4f:15:be:fc:61:7c:82:d4:76:58:41:bc:65:c2:95: 3a:4b:22:c8:23:db:0a:ee:41:b0:bf:3a:b4:83:6a: 73:c9:cc:6e:de:f7:42:9c:0c:f6:5b:1d:72:c1:1a: 8f:71:ed:dd:3f:38:aa:b9:2d:5c:11:7e:8d:da:4f: 6c:10:23:e0:ce:0f:a2:05:fa:12:d3:5a:0f:8b:5d: 1e:a5:38:e7:2a:b1:35:58:90:d9:07:75:ea:fd:b1: e0:e7:2b:0c:fe:6c:d0:d6:c8:ce:e9:a6:8a:f2:5b: 22:44:b5:c1:e7:c3:cb:59:39:ec:63:5e:6d:57:e9: 68:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:6A:40:BB:FB:19:39:3B:B4:CD:7A:1A:9D:CE:B9:E8:9C:6D:2B:0F X509v3 Authority Key Identifier: keyid:AC:13:5A:34:3D:89:C2:71:5C:1A:A7:6F:33:14:ED:F9:1A:5D:74:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/AC135A343D89C2715C1AA76F3314EDF91A5D7473.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC135A343D89C2715C1AA76F3314EDF91A5D7473.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/AC135A343D89C2715C1AA76F3314EDF91A5D7473.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:23:d1:6e:64:48:6f:af:84:74:5d:e0:62:c9:96:ac:b0:30: 92:55:33:51:5d:95:92:dc:34:dc:86:e5:86:27:b3:88:2c:b1: 6d:d2:8b:05:ab:7e:b3:27:76:fa:c5:f7:0e:6a:dc:ac:ea:e7: 11:da:31:18:63:5a:e8:46:93:70:8a:36:ab:72:52:0d:eb:2c: e0:55:48:ae:21:eb:fc:7b:b7:9b:78:e9:e0:6b:e8:bd:7c:06: 12:69:20:fa:70:61:4c:1a:f7:03:d3:1f:cd:97:26:22:eb:96: 68:9a:b3:74:42:e8:c7:a5:5f:36:94:7a:3d:af:d0:09:ea:11: 28:e2:ff:4e:99:62:a4:73:24:0c:94:c8:fe:6c:6e:0b:71:a3: d7:c3:1b:ec:c8:59:15:93:cd:b1:49:d2:b9:8f:b6:a2:1d:d2: 71:89:9c:fd:b0:0a:b7:70:76:2b:b2:74:40:16:bc:13:01:1d: c8:bc:e3:ba:64:52:61:32:1f:92:bd:c8:d6:65:66:36:6c:2e: 6f:3d:8a:9e:97:16:ad:4f:92:d8:60:4e:bf:a3:15:02:18:8c: 2c:28:ef:6f:f7:72:a8:30:8c:03:e5:28:0b:0c:47:b1:7b:50: 30:1e:c3:60:f7:0f:87:57:59:22:c9:71:e3:17:8a:fc:8e:68: db:03:92:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWQR73MWoclaDJLq00zmLq4v5j94wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUMxMzVBMzQzRDg5QzI3MTVDMUFBNzZGMzMxNEVERjkx QTVENzQ3MzAeFw0yNjA3MjMxNjMwMTFaFw0yNjA3MjQxOTUwMTFaMDMxMTAvBgNV BAMTKDdFNkE0MEJCRkIxOTM5M0JCNENEN0ExQTlEQ0VCOUU4OUM2RDJCMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiKFr0ITgeRtw4v6X7MmiskOyr xjVPyuHjmcjMIfSSqo25Pqe9xKW/CKwpiWTWGFbnElTfxdOoc4RbmrDx/bPJ2CJL KJoKmON+HnOhuW091QcSFMu85hn902P6SE8uFO9fjR0d71+DMmLTiSGK5Aesl4GJ px0+wVRxduuUyyHbTpMR09ijPk8VvvxhfILUdlhBvGXClTpLIsgj2wruQbC/OrSD anPJzG7e90KcDPZbHXLBGo9x7d0/OKq5LVwRfo3aT2wQI+DOD6IF+hLTWg+LXR6l OOcqsTVYkNkHder9seDnKwz+bNDWyM7pporyWyJEtcHnw8tZOexjXm1X6WiZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfmpAu/sZOTu0zXoanc656JxtKw8wHwYDVR0j BBgwFoAUrBNaND2JwnFcGqdvMxTt+RpddHMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjQzMDM0YWEtZjM5Yy00OGY1LTg1MmUtZDFiZDdmMTdhYTQyLzAvQUMxMzVBMzQz RDg5QzI3MTVDMUFBNzZGMzMxNEVERjkxQTVENzQ3My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzEzNUEzNDNEODlDMjcxNUMxQUE3NkYzMzE0RURGOTFBNUQ3 NDczLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjQzMDM0YWEtZjM5Yy00OGY1LTg1 MmUtZDFiZDdmMTdhYTQyLzAvQUMxMzVBMzQzRDg5QzI3MTVDMUFBNzZGMzMxNEVE RjkxQTVENzQ3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACcj0W5kSG+vhHRd4GLJlqywMJJVM1FdlZLc NNyG5YYns4gssW3SiwWrfrMndvrF9w5q3Kzq5xHaMRhjWuhGk3CKNqtyUg3rLOBV SK4h6/x7t5t46eBr6L18BhJpIPpwYUwa9wPTH82XJiLrlmias3RC6MelXzaUej2v 0AnqESji/06ZYqRzJAyUyP5sbgtxo9fDG+zIWRWTzbFJ0rmPtqId0nGJnP2wCrdw diuydEAWvBMBHci847pkUmEyH5K9yNZlZjZsLm89ip6XFq1PkthgTr+jFQIYjCwo 72/3cqgwjAPlKAsMR7F7UDAew2D3D4dXWSLJceMXivyOaNsDkl4= -----END CERTIFICATE-----Generated at Fri Jul 24 10:19:36 2026 by rpki-client