$ rpki-client -vvvf rpki-rsync.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/AC135A343D89C2715C1AA76F3314EDF91A5D7473.mft File: AC135A343D89C2715C1AA76F3314EDF91A5D7473.mft (raw, json) Hash identifier: ZqQDEmcbsa2Wkxg8vlCEhVMmvwKQtc5dRRn+iTtSKHM= Subject key identifier: B8:9B:AF:07:6E:86:0D:A7:4F:D3:CB:A6:8F:96:26:2F:73:B7:BF:67 Authority key identifier: AC:13:5A:34:3D:89:C2:71:5C:1A:A7:6F:33:14:ED:F9:1A:5D:74:73 Certificate issuer: /CN=AC135A343D89C2715C1AA76F3314EDF91A5D7473 Certificate serial: 597A70D81B0B5ED23146CB8312C9CE21D0250B1C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC135A343D89C2715C1AA76F3314EDF91A5D7473.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/AC135A343D89C2715C1AA76F3314EDF91A5D7473.mft Manifest number: C6 Signing time: Sun 27 Sep 2026 11:03:14 +0000 Manifest this update: Sun 27 Sep 2026 10:58:14 +0000 Manifest next update: Mon 28 Sep 2026 11:06:14 +0000 Files and hashes: 1: 3130332e33312e3234302e302f32342d3234203d3e20313339393532.roa (hash: MXQvxQuFfrOrlrDM0pu7aI1UUtAamLu0vBW+zEyQ+dQ=) 2: 3130332e33312e3234312e302f32342d3234203d3e20313339393532.roa (hash: wmrO1sIlSaYPXG3uoDQ46bwtU1pWLEpz2UMTkfOKpVs=) 3: AC135A343D89C2715C1AA76F3314EDF91A5D7473.crl (hash: jEyq421kb2Q90ysS3U8mlaAEdV6GnBaHISG3qU/sXXc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/AC135A343D89C2715C1AA76F3314EDF91A5D7473.crl rsync://rpki-rsync.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/AC135A343D89C2715C1AA76F3314EDF91A5D7473.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC135A343D89C2715C1AA76F3314EDF91A5D7473.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 07:55:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:7a:70:d8:1b:0b:5e:d2:31:46:cb:83:12:c9:ce:21:d0:25:0b:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC135A343D89C2715C1AA76F3314EDF91A5D7473 Validity Not Before: Sep 27 10:58:14 2026 GMT Not After : Sep 28 11:06:14 2026 GMT Subject: CN=B89BAF076E860DA74FD3CBA68F96262F73B7BF67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:cf:f9:9b:0a:79:ac:7e:b4:75:eb:aa:36:61: 13:f3:97:ab:a7:ea:8f:ef:4d:05:c8:31:30:84:c7: 8e:34:35:da:db:2a:b2:bf:21:f4:0c:af:a5:f7:06: d8:c3:02:98:d4:42:01:76:87:2e:41:28:ce:82:74: d3:2f:55:c0:de:a9:19:35:ce:e1:bf:38:60:93:7f: 3f:4f:f7:ea:65:15:f6:55:55:b8:5d:02:20:67:05: cc:02:aa:9b:7d:31:ac:87:bd:f0:47:3c:1a:af:ac: 4b:ea:e3:78:2a:1a:7b:40:4f:aa:bf:81:8d:af:74: 69:e0:6d:5f:03:b8:49:86:79:9d:d7:80:fd:67:21: c7:cd:04:5f:d4:48:e8:8d:85:95:47:f7:0c:47:bb: 30:92:44:5a:ae:25:59:2f:56:47:18:b1:b6:6f:b1: 78:bf:b4:1d:0d:ba:a6:ba:90:c8:23:db:5f:28:81: f9:be:75:2f:59:f9:a1:63:ae:14:bf:47:4d:50:aa: 07:9a:74:fb:ef:4f:22:81:4f:83:6d:fe:1d:db:31: ea:b4:14:4e:04:87:19:b7:fd:ef:39:2f:93:61:c4: c5:d8:76:a0:f0:cf:eb:d5:0d:20:20:96:64:0c:e1: 52:b7:c1:cb:0f:34:9b:f7:85:f4:fe:ac:2e:75:81: 7d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:9B:AF:07:6E:86:0D:A7:4F:D3:CB:A6:8F:96:26:2F:73:B7:BF:67 X509v3 Authority Key Identifier: keyid:AC:13:5A:34:3D:89:C2:71:5C:1A:A7:6F:33:14:ED:F9:1A:5D:74:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/AC135A343D89C2715C1AA76F3314EDF91A5D7473.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC135A343D89C2715C1AA76F3314EDF91A5D7473.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/AC135A343D89C2715C1AA76F3314EDF91A5D7473.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:11:da:ea:d3:02:da:dc:4a:a2:51:8f:fa:94:b9:0b:a6:e0: 31:fa:02:93:46:16:2f:0b:29:75:76:b8:92:32:dd:5b:54:63: 0e:f1:50:03:96:db:97:c8:fd:29:d1:82:c1:5f:ca:6c:6f:3f: 8d:30:45:7e:77:e5:44:82:2a:06:78:a9:9b:13:5e:67:78:52: 23:a9:1d:fd:c4:38:9d:6a:b1:21:45:dd:57:95:75:9c:21:0e: 03:18:9b:a5:a2:76:f6:b8:d1:89:fd:da:6f:e8:cc:db:d2:b4: 04:57:84:21:8b:53:ec:0c:6e:57:01:f3:cd:e5:f4:eb:e7:92: 3f:b3:bf:11:4b:b2:09:8b:1b:08:d2:23:ed:ae:b7:44:09:e0: c7:f2:78:0a:1c:bb:31:b6:6a:e4:02:64:e1:33:23:73:79:43: ce:e4:85:1e:cb:82:71:ba:7e:b0:67:f6:86:a7:08:66:8c:ab: 98:83:18:9f:36:5d:97:5a:db:0a:13:53:dd:30:a0:87:5d:b3: 37:fe:01:75:d7:77:54:ba:a4:3d:32:e5:8f:f9:c4:cb:e3:11: 0f:cf:9e:fe:eb:9b:3f:58:3d:ef:20:be:27:a8:62:f5:80:53: f0:ba:b6:bb:05:b5:5c:6d:c5:45:09:3a:99:38:44:c1:a3:2c: b9:02:4e:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWXpw2BsLXtIxRsuDEsnOIdAlCxwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUMxMzVBMzQzRDg5QzI3MTVDMUFBNzZGMzMxNEVERjkx QTVENzQ3MzAeFw0yNjA5MjcxMDU4MTRaFw0yNjA5MjgxMTA2MTRaMDMxMTAvBgNV BAMTKEI4OUJBRjA3NkU4NjBEQTc0RkQzQ0JBNjhGOTYyNjJGNzNCN0JGNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVz/mbCnmsfrR166o2YRPzl6un 6o/vTQXIMTCEx440NdrbKrK/IfQMr6X3BtjDApjUQgF2hy5BKM6CdNMvVcDeqRk1 zuG/OGCTfz9P9+plFfZVVbhdAiBnBcwCqpt9MayHvfBHPBqvrEvq43gqGntAT6q/ gY2vdGngbV8DuEmGeZ3XgP1nIcfNBF/USOiNhZVH9wxHuzCSRFquJVkvVkcYsbZv sXi/tB0Nuqa6kMgj218ogfm+dS9Z+aFjrhS/R01QqgeadPvvTyKBT4Nt/h3bMeq0 FE4Ehxm3/e85L5NhxMXYdqDwz+vVDSAglmQM4VK3wcsPNJv3hfT+rC51gX2tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuJuvB26GDadP08umj5YmL3O3v2cwHwYDVR0j BBgwFoAUrBNaND2JwnFcGqdvMxTt+RpddHMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjQzMDM0YWEtZjM5Yy00OGY1LTg1MmUtZDFiZDdmMTdhYTQyLzAvQUMxMzVBMzQz RDg5QzI3MTVDMUFBNzZGMzMxNEVERjkxQTVENzQ3My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzEzNUEzNDNEODlDMjcxNUMxQUE3NkYzMzE0RURGOTFBNUQ3 NDczLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjQzMDM0YWEtZjM5Yy00OGY1LTg1 MmUtZDFiZDdmMTdhYTQyLzAvQUMxMzVBMzQzRDg5QzI3MTVDMUFBNzZGMzMxNEVE RjkxQTVENzQ3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE4R2urTAtrcSqJRj/qUuQum4DH6ApNGFi8L KXV2uJIy3VtUYw7xUAOW25fI/SnRgsFfymxvP40wRX535USCKgZ4qZsTXmd4UiOp Hf3EOJ1qsSFF3VeVdZwhDgMYm6Widva40Yn92m/ozNvStARXhCGLU+wMblcB883l 9Ovnkj+zvxFLsgmLGwjSI+2ut0QJ4MfyeAocuzG2auQCZOEzI3N5Q87khR7LgnG6 frBn9oanCGaMq5iDGJ82XZda2woTU90woIddszf+AXXXd1S6pD0y5Y/5xMvjEQ/P nv7rmz9YPe8gvieoYvWAU/C6trsFtVxtxUUJOpk4RMGjLLkCTno= -----END CERTIFICATE-----Generated at Sun Sep 27 23:11:34 2026 by rpki-client