$ rpki-client -vvf rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/AC7439239B591D2499B70C3230C1C35BE2A0104B.mft File: AC7439239B591D2499B70C3230C1C35BE2A0104B.mft (raw, json) Hash identifier: SAtm6u2Fa0fNf79vNic+UY2cFctxnmxDd+0ml+m+Kvw= Subject key identifier: 0F:E6:FA:E9:EB:00:63:55:E5:33:5F:37:1F:3C:A4:AB:2A:79:D6:23 Authority key identifier: AC:74:39:23:9B:59:1D:24:99:B7:0C:32:30:C1:C3:5B:E2:A0:10:4B Certificate issuer: /CN=AC7439239B591D2499B70C3230C1C35BE2A0104B Certificate serial: 3FF85DA0430358E77C77D70E3B270E62C0E47E3C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC7439239B591D2499B70C3230C1C35BE2A0104B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/AC7439239B591D2499B70C3230C1C35BE2A0104B.mft Manifest number: 70 Signing time: Thu 23 Jul 2026 22:47:38 +0000 Manifest this update: Thu 23 Jul 2026 22:42:38 +0000 Manifest next update: Sat 25 Jul 2026 01:36:38 +0000 Files and hashes: 1: AC7439239B591D2499B70C3230C1C35BE2A0104B.crl (hash: 504OafoAsED24CQRoTvGNaxYg9B+oi+B33rMrsuM738=) 2: 3130332e3135372e37382e302f32332d3234203d3e20313431313134.roa (hash: w+9v1WGiMKcMfvG8PMyM732c95+KBZTi8eUiSRuPBO8=) 3: 323430363a396163303a3a2f33322d3438203d3e20313431313134.roa (hash: pTJhsbE/QsnSwa5lw6Tt2iC9wy8jG1QR42mcBhsUqfg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/AC7439239B591D2499B70C3230C1C35BE2A0104B.crl rsync://rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/AC7439239B591D2499B70C3230C1C35BE2A0104B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC7439239B591D2499B70C3230C1C35BE2A0104B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 01:36:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:f8:5d:a0:43:03:58:e7:7c:77:d7:0e:3b:27:0e:62:c0:e4:7e:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC7439239B591D2499B70C3230C1C35BE2A0104B Validity Not Before: Jul 23 22:42:38 2026 GMT Not After : Jul 25 01:36:38 2026 GMT Subject: CN=0FE6FAE9EB006355E5335F371F3CA4AB2A79D623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:30:f6:39:38:07:38:fc:14:be:9a:b7:4c:c2: e7:05:4f:cc:22:4e:6f:40:4f:3b:75:22:22:5a:4a: 2d:bc:41:4d:f5:0e:cb:b8:98:65:a5:c2:c6:bf:9d: 80:dc:6c:cb:5a:76:3b:e8:bf:3a:f3:c3:d9:84:43: 1d:f5:d5:af:c2:ed:78:52:51:ce:69:c5:90:f4:90: a9:64:70:be:02:23:70:b6:69:e3:cb:e6:5b:7c:29: 24:9b:b8:bf:5b:23:c8:b1:fe:73:97:f8:d5:f0:26: 50:49:d4:38:74:64:96:d7:9e:90:98:a2:3b:90:cb: 5b:6f:c1:0f:99:fe:e4:3b:4c:f9:20:bc:76:ae:85: ea:af:11:98:25:6e:e1:8d:d5:2a:62:b5:1b:1d:5f: 13:7a:7b:d7:75:dc:5e:e1:df:ed:a8:66:54:ba:18: 11:38:22:f6:a1:be:9a:52:a5:ef:10:7d:04:8f:0a: 4c:b7:28:4c:11:1a:57:e4:aa:a6:35:3a:e0:ce:18: e0:9e:0e:75:c9:1e:81:14:8b:67:78:f2:70:01:e4: 9d:22:41:8e:e5:4a:49:c0:62:f2:01:91:7c:20:87: af:3b:e7:bb:90:fc:82:3b:d7:3d:b6:b6:a4:a2:dc: 34:8f:91:93:e8:3e:8c:18:84:0d:9a:32:02:76:1c: 15:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:E6:FA:E9:EB:00:63:55:E5:33:5F:37:1F:3C:A4:AB:2A:79:D6:23 X509v3 Authority Key Identifier: keyid:AC:74:39:23:9B:59:1D:24:99:B7:0C:32:30:C1:C3:5B:E2:A0:10:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/AC7439239B591D2499B70C3230C1C35BE2A0104B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC7439239B591D2499B70C3230C1C35BE2A0104B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/AC7439239B591D2499B70C3230C1C35BE2A0104B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:b0:c0:9d:31:18:f0:f7:cc:af:05:34:a5:41:cc:b8:aa:91: 77:9a:85:2b:0d:1c:a2:9a:ab:06:10:e5:72:7e:91:15:a2:c1: c9:75:dd:09:23:e5:a8:b8:47:a2:8c:78:f8:1f:1e:5c:cc:6f: 16:b2:5b:bd:e4:e3:4a:f6:f6:34:82:78:9e:3b:e9:b1:5d:92: 07:41:0a:76:25:ab:1d:50:f1:f6:e5:31:cc:2e:9b:1c:77:d2: 60:19:79:f1:d9:e4:8a:6b:78:48:00:ee:4f:d7:01:8b:03:f5: b6:75:23:58:c3:46:c7:44:2e:8e:bd:f7:91:e3:eb:b6:7f:76: 90:0a:f2:fb:9a:05:7a:24:1b:2b:b1:cb:6c:2c:67:34:c8:0d: e3:20:a8:c5:62:67:ff:6e:eb:f3:d6:76:84:d8:f3:ac:20:ee: 72:77:c2:d2:51:ed:1a:f0:ca:91:82:a7:21:be:e4:c8:93:7a: 53:e8:7e:1a:00:50:d0:b1:6b:f4:02:1c:6a:c1:e3:59:2e:89: 1b:16:2f:a3:74:4f:f3:c5:b5:f4:24:28:70:14:ef:8b:c0:93: b6:54:75:a3:9c:56:ce:96:2e:20:f9:4a:bb:64:71:c1:88:34: f6:34:30:44:99:e2:36:f5:3e:2a:33:64:f8:35:5c:ab:6e:92: 68:5d:5e:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP/hdoEMDWOd8d9cOOycOYsDkfjwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM3NDM5MjM5QjU5MUQyNDk5QjcwQzMyMzBDMUMzNUJF MkEwMTA0QjAeFw0yNjA3MjMyMjQyMzhaFw0yNjA3MjUwMTM2MzhaMDMxMTAvBgNV BAMTKDBGRTZGQUU5RUIwMDYzNTVFNTMzNUYzNzFGM0NBNEFCMkE3OUQ2MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvMPY5OAc4/BS+mrdMwucFT8wi Tm9ATzt1IiJaSi28QU31Dsu4mGWlwsa/nYDcbMtadjvovzrzw9mEQx311a/C7XhS Uc5pxZD0kKlkcL4CI3C2aePL5lt8KSSbuL9bI8ix/nOX+NXwJlBJ1Dh0ZJbXnpCY ojuQy1tvwQ+Z/uQ7TPkgvHauheqvEZglbuGN1SpitRsdXxN6e9d13F7h3+2oZlS6 GBE4IvahvppSpe8QfQSPCky3KEwRGlfkqqY1OuDOGOCeDnXJHoEUi2d48nAB5J0i QY7lSknAYvIBkXwgh68757uQ/II71z22tqSi3DSPkZPoPowYhA2aMgJ2HBX5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD+b66esAY1XlM183Hzykqyp51iMwHwYDVR0j BBgwFoAUrHQ5I5tZHSSZtwwyMMHDW+KgEEswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjU3ZTg5ZTgtNTNhYS00NGY2LWI2ZDgtNTg3OTA3OGJmNjY0LzAvQUM3NDM5MjM5 QjU5MUQyNDk5QjcwQzMyMzBDMUMzNUJFMkEwMTA0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzc0MzkyMzlCNTkxRDI0OTlCNzBDMzIzMEMxQzM1QkUyQTAx MDRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjU3ZTg5ZTgtNTNhYS00NGY2LWI2 ZDgtNTg3OTA3OGJmNjY0LzAvQUM3NDM5MjM5QjU5MUQyNDk5QjcwQzMyMzBDMUMz NUJFMkEwMTA0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE+wwJ0xGPD3zK8FNKVBzLiqkXeahSsNHKKa qwYQ5XJ+kRWiwcl13Qkj5ai4R6KMePgfHlzMbxayW73k40r29jSCeJ476bFdkgdB CnYlqx1Q8fblMcwumxx30mAZefHZ5IpreEgA7k/XAYsD9bZ1I1jDRsdELo6995Hj 67Z/dpAK8vuaBXokGyuxy2wsZzTIDeMgqMViZ/9u6/PWdoTY86wg7nJ3wtJR7Rrw ypGCpyG+5MiTelPofhoAUNCxa/QCHGrB41kuiRsWL6N0T/PFtfQkKHAU74vAk7ZU daOcVs6WLiD5SrtkccGINPY0MESZ4jb1PiozZPg1XKtukmhdXjU= -----END CERTIFICATE-----Generated at Fri Jul 24 10:03:54 2026 by rpki-client