$ rpki-client -vvf rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/AC7439239B591D2499B70C3230C1C35BE2A0104B.mft File: AC7439239B591D2499B70C3230C1C35BE2A0104B.mft (raw, json) Hash identifier: 2UbJMEGW2ntl4G2TjVMj1rEvGAqR5v4bThImBZFn5Os= Subject key identifier: D7:DD:C9:CA:1F:B4:0E:31:53:CA:06:DB:B8:72:81:AC:4D:6A:FB:39 Authority key identifier: AC:74:39:23:9B:59:1D:24:99:B7:0C:32:30:C1:C3:5B:E2:A0:10:4B Certificate issuer: /CN=AC7439239B591D2499B70C3230C1C35BE2A0104B Certificate serial: 7944BFE4EED98367CBAA67988BB9D6FB8802FB46 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC7439239B591D2499B70C3230C1C35BE2A0104B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/AC7439239B591D2499B70C3230C1C35BE2A0104B.mft Manifest number: 0F Signing time: Tue 12 May 2026 14:49:28 +0000 Manifest this update: Tue 12 May 2026 14:44:28 +0000 Manifest next update: Wed 13 May 2026 18:09:28 +0000 Files and hashes: 1: AC7439239B591D2499B70C3230C1C35BE2A0104B.crl (hash: h4VXjY+VUKFb4CmccpU7rSYGmUOB0iFzYQVg0vT4LDk=) 2: 3130332e3135372e37382e302f32332d3234203d3e20313431313134.roa (hash: w+9v1WGiMKcMfvG8PMyM732c95+KBZTi8eUiSRuPBO8=) 3: 323430363a396163303a3a2f33322d3438203d3e20313431313134.roa (hash: pTJhsbE/QsnSwa5lw6Tt2iC9wy8jG1QR42mcBhsUqfg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/AC7439239B591D2499B70C3230C1C35BE2A0104B.crl rsync://rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/AC7439239B591D2499B70C3230C1C35BE2A0104B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC7439239B591D2499B70C3230C1C35BE2A0104B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:44:bf:e4:ee:d9:83:67:cb:aa:67:98:8b:b9:d6:fb:88:02:fb:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC7439239B591D2499B70C3230C1C35BE2A0104B Validity Not Before: May 12 14:44:28 2026 GMT Not After : May 13 18:09:28 2026 GMT Subject: CN=D7DDC9CA1FB40E3153CA06DBB87281AC4D6AFB39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:90:5a:1d:7a:38:1f:08:99:fb:91:59:9f:d4: 6c:67:23:f8:7c:ab:cb:67:af:b1:07:c5:da:dc:aa: 72:21:e5:d4:1e:70:1b:4a:d4:b8:56:51:6c:4c:8e: ec:1e:1a:8c:bb:77:d4:30:bb:ba:f6:dc:fe:eb:f2: da:a9:b3:95:0d:bb:0b:d1:85:a1:c8:e7:f5:11:a9: 7f:8b:b9:60:7a:b8:ab:cf:d1:30:0e:e2:1b:6f:2b: f0:fb:dc:af:e2:8b:d4:a1:a3:c3:05:fc:c3:8e:7d: dc:2d:51:01:cb:e8:69:5b:bb:b9:01:e7:72:75:7e: 80:56:fb:81:bb:17:e1:8c:4e:34:da:89:7f:67:89: 2c:7f:7e:78:e9:01:13:2c:d9:95:40:97:96:3d:bc: 99:e3:89:ea:6f:c7:30:6b:3f:bd:38:11:59:12:75: 88:e0:1a:0c:a5:05:aa:2d:09:69:ed:e2:bb:50:70: a0:7c:19:19:e1:8f:8e:80:f5:96:5c:76:38:b0:4a: ae:64:11:d6:dd:05:40:5e:5e:60:d6:0f:0f:52:02: 73:ad:5d:61:99:96:39:85:de:82:50:9a:bb:38:cf: f0:78:52:e5:67:0d:69:0d:b3:84:04:1e:87:59:b9: e2:44:8f:bf:a8:65:72:71:2d:eb:5f:91:4c:70:84: f2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:DD:C9:CA:1F:B4:0E:31:53:CA:06:DB:B8:72:81:AC:4D:6A:FB:39 X509v3 Authority Key Identifier: keyid:AC:74:39:23:9B:59:1D:24:99:B7:0C:32:30:C1:C3:5B:E2:A0:10:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/AC7439239B591D2499B70C3230C1C35BE2A0104B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC7439239B591D2499B70C3230C1C35BE2A0104B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/AC7439239B591D2499B70C3230C1C35BE2A0104B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:00:5a:bc:7d:d3:ec:56:32:be:03:65:a4:ed:d8:e5:23:0b: c4:0e:9f:d0:1e:d8:29:38:b4:a6:29:54:67:4a:5a:7e:15:b8: d9:fb:cb:c9:f8:c2:2f:fe:73:61:78:86:fe:05:35:31:27:24: c4:41:a1:c4:2e:45:0a:92:0c:27:e0:ef:2c:15:2a:4f:03:26: 19:50:86:38:d2:9f:ef:4c:27:aa:74:84:4c:72:c1:8b:d1:e1: c1:4a:c7:85:9e:63:c8:ba:8c:f2:b0:58:ba:8d:58:e0:18:1a: 3e:5a:79:58:81:1b:22:99:ab:08:d4:4d:dd:24:7f:57:68:f0: 2e:57:2d:00:42:87:6d:44:08:e6:a6:b3:2a:1c:84:4b:64:23: 2c:67:4d:8f:b5:a2:c6:1e:e2:58:65:20:54:19:26:39:50:95: 34:a2:31:50:70:b8:69:95:90:2c:de:79:02:39:ec:cc:d8:85: 8a:42:7d:ce:d7:14:97:0d:5d:17:aa:66:b5:58:42:00:2b:a3: 28:49:87:f3:4b:65:ee:29:da:c5:c4:e1:73:4d:47:17:e3:ba: 6d:97:3d:f7:f4:ef:af:e8:5f:c1:a6:f1:99:32:bb:64:70:5b: a2:fa:31:fd:49:ab:e7:5a:68:e9:69:57:1e:92:6b:04:2b:e7: cd:9c:05:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeUS/5O7Zg2fLqmeYi7nW+4gC+0YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM3NDM5MjM5QjU5MUQyNDk5QjcwQzMyMzBDMUMzNUJF MkEwMTA0QjAeFw0yNjA1MTIxNDQ0MjhaFw0yNjA1MTMxODA5MjhaMDMxMTAvBgNV BAMTKEQ3RERDOUNBMUZCNDBFMzE1M0NBMDZEQkI4NzI4MUFDNEQ2QUZCMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCskFodejgfCJn7kVmf1GxnI/h8 q8tnr7EHxdrcqnIh5dQecBtK1LhWUWxMjuweGoy7d9Qwu7r23P7r8tqps5UNuwvR haHI5/URqX+LuWB6uKvP0TAO4htvK/D73K/ii9Sho8MF/MOOfdwtUQHL6Glbu7kB 53J1foBW+4G7F+GMTjTaiX9niSx/fnjpARMs2ZVAl5Y9vJnjiepvxzBrP704EVkS dYjgGgylBaotCWnt4rtQcKB8GRnhj46A9ZZcdjiwSq5kEdbdBUBeXmDWDw9SAnOt XWGZljmF3oJQmrs4z/B4UuVnDWkNs4QEHodZueJEj7+oZXJxLetfkUxwhPL3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU193Jyh+0DjFTygbbuHKBrE1q+zkwHwYDVR0j BBgwFoAUrHQ5I5tZHSSZtwwyMMHDW+KgEEswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjU3ZTg5ZTgtNTNhYS00NGY2LWI2ZDgtNTg3OTA3OGJmNjY0LzAvQUM3NDM5MjM5 QjU5MUQyNDk5QjcwQzMyMzBDMUMzNUJFMkEwMTA0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzc0MzkyMzlCNTkxRDI0OTlCNzBDMzIzMEMxQzM1QkUyQTAx MDRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjU3ZTg5ZTgtNTNhYS00NGY2LWI2 ZDgtNTg3OTA3OGJmNjY0LzAvQUM3NDM5MjM5QjU5MUQyNDk5QjcwQzMyMzBDMUMz NUJFMkEwMTA0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANQAWrx90+xWMr4DZaTt2OUjC8QOn9Ae2Ck4 tKYpVGdKWn4VuNn7y8n4wi/+c2F4hv4FNTEnJMRBocQuRQqSDCfg7ywVKk8DJhlQ hjjSn+9MJ6p0hExywYvR4cFKx4WeY8i6jPKwWLqNWOAYGj5aeViBGyKZqwjUTd0k f1do8C5XLQBCh21ECOamsyochEtkIyxnTY+1osYe4lhlIFQZJjlQlTSiMVBwuGmV kCzeeQI57MzYhYpCfc7XFJcNXReqZrVYQgAroyhJh/NLZe4p2sXE4XNNRxfjum2X Pff076/oX8Gm8Zkyu2RwW6L6Mf1Jq+daaOlpVx6SawQr582cBd4= -----END CERTIFICATE-----Generated at Wed May 13 02:49:33 2026 by rpki-client