$ rpki-client -vvvf rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/AC7439239B591D2499B70C3230C1C35BE2A0104B.mft File: AC7439239B591D2499B70C3230C1C35BE2A0104B.mft (raw, json) Hash identifier: rtl+v0NS1OYbS3eKqTuOewf6DQRnVwVtK0wmPHPSl/s= Subject key identifier: 9E:5D:2B:BF:EF:0C:0E:6F:4D:56:F2:93:1F:02:6C:28:D8:74:77:D6 Authority key identifier: AC:74:39:23:9B:59:1D:24:99:B7:0C:32:30:C1:C3:5B:E2:A0:10:4B Certificate issuer: /CN=AC7439239B591D2499B70C3230C1C35BE2A0104B Certificate serial: 77532E209E8BD778E74B85C105B60EEFC46D539C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC7439239B591D2499B70C3230C1C35BE2A0104B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/AC7439239B591D2499B70C3230C1C35BE2A0104B.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 08:52:08 +0000 Manifest this update: Wed 23 Sep 2026 08:47:08 +0000 Manifest next update: Thu 24 Sep 2026 09:37:08 +0000 Files and hashes: 1: 3130332e3135372e37382e302f32332d3234203d3e20313431313134.roa (hash: w+9v1WGiMKcMfvG8PMyM732c95+KBZTi8eUiSRuPBO8=) 2: 323430363a396163303a3a2f33322d3438203d3e20313431313134.roa (hash: pTJhsbE/QsnSwa5lw6Tt2iC9wy8jG1QR42mcBhsUqfg=) 3: AC7439239B591D2499B70C3230C1C35BE2A0104B.crl (hash: F2r4wHzxEAY1YFifF++/zJEOgqJM5vULEFR3ZI5VXVs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/AC7439239B591D2499B70C3230C1C35BE2A0104B.crl rsync://rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/AC7439239B591D2499B70C3230C1C35BE2A0104B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC7439239B591D2499B70C3230C1C35BE2A0104B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 09:37:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:53:2e:20:9e:8b:d7:78:e7:4b:85:c1:05:b6:0e:ef:c4:6d:53:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC7439239B591D2499B70C3230C1C35BE2A0104B Validity Not Before: Sep 23 08:47:08 2026 GMT Not After : Sep 24 09:37:08 2026 GMT Subject: CN=9E5D2BBFEF0C0E6F4D56F2931F026C28D87477D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4c:34:22:2f:a2:2b:22:7b:2d:e4:3f:8f:9c: 1b:42:71:1e:8e:f5:e0:60:64:7d:07:07:16:64:c3: 06:c9:65:61:62:b3:d7:54:7f:3b:95:8b:58:c0:70: 19:6b:d5:73:95:61:85:b0:45:98:4b:18:03:f7:3b: eb:24:e1:4e:61:f0:2f:33:cd:8a:17:65:c6:2a:65: 39:cb:54:95:35:76:d0:0e:9c:c7:ab:61:01:ec:ce: c3:d9:10:f7:dd:98:2e:c1:0d:1f:5a:80:e2:07:cd: 61:ee:f6:d3:ff:39:95:ea:fc:31:92:31:b2:55:68: 3b:52:54:c9:09:19:f0:aa:7d:50:a0:9f:0b:55:47: 51:0a:2e:1b:f0:fa:06:8c:f3:83:1d:b5:8c:16:92: 36:a5:f3:1a:e8:ee:69:32:da:fa:e1:d4:f8:53:dd: 2f:9c:fa:6e:fc:44:d2:7f:bd:91:ab:fe:04:a9:59: 79:f9:72:9c:8d:ac:b9:6f:17:5a:b5:21:b4:26:92: d9:11:64:59:81:df:d7:ee:ad:4b:7b:80:99:0d:09: 96:64:24:fb:b9:5d:cd:70:e1:60:17:d6:0a:4b:df: fe:55:fa:68:56:80:83:1c:02:ee:aa:8e:12:c1:12: 31:cc:9c:a5:34:98:36:f6:a5:b6:22:54:f9:cd:5a: 70:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:5D:2B:BF:EF:0C:0E:6F:4D:56:F2:93:1F:02:6C:28:D8:74:77:D6 X509v3 Authority Key Identifier: keyid:AC:74:39:23:9B:59:1D:24:99:B7:0C:32:30:C1:C3:5B:E2:A0:10:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/AC7439239B591D2499B70C3230C1C35BE2A0104B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC7439239B591D2499B70C3230C1C35BE2A0104B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/AC7439239B591D2499B70C3230C1C35BE2A0104B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:a6:a9:42:4a:26:b0:9d:4a:a2:65:dc:e1:26:2c:b0:58:07: c3:1e:fe:1b:d8:e9:70:ba:25:f5:ad:78:2f:87:6a:a5:b0:78: e1:2d:13:c5:fb:a4:0d:66:ee:f2:a0:bc:9c:33:c8:05:50:7c: 9a:cd:7a:eb:a1:7f:2b:ef:76:8f:d6:aa:89:bb:2e:73:44:f5: 41:d6:48:04:d5:ca:d4:7f:f5:45:18:29:96:c2:6b:9a:c1:54: b6:f6:da:0f:ad:f5:77:99:ed:3c:aa:27:07:4a:00:71:a4:6e: 07:92:98:99:cd:7c:78:79:1a:08:cd:68:e1:85:a9:4b:82:23: c4:bd:25:1e:03:7c:af:1b:9c:23:a9:eb:51:b9:a2:ae:4c:2b: 68:c7:87:04:16:f9:3d:88:01:62:99:e2:b6:3e:77:77:07:66: da:4a:2d:c0:28:8f:f7:2a:bd:6d:05:67:a7:8e:19:30:c1:ff: 41:01:d7:e8:0b:58:90:cd:10:fa:da:97:b3:11:2d:7e:78:7a: df:5e:b8:a0:cb:f0:c4:e0:af:46:a0:ea:f5:20:38:cb:59:8b: 69:e1:b7:90:08:85:c7:bb:27:3a:ab:17:b6:aa:02:ce:8e:39: 9f:1b:fb:d8:eb:76:09:1f:e2:2b:5f:2d:59:4f:ab:99:f0:67: bd:4e:d9:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd1MuIJ6L13jnS4XBBbYO78RtU5wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM3NDM5MjM5QjU5MUQyNDk5QjcwQzMyMzBDMUMzNUJF MkEwMTA0QjAeFw0yNjA5MjMwODQ3MDhaFw0yNjA5MjQwOTM3MDhaMDMxMTAvBgNV BAMTKDlFNUQyQkJGRUYwQzBFNkY0RDU2RjI5MzFGMDI2QzI4RDg3NDc3RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRTDQiL6IrInst5D+PnBtCcR6O 9eBgZH0HBxZkwwbJZWFis9dUfzuVi1jAcBlr1XOVYYWwRZhLGAP3O+sk4U5h8C8z zYoXZcYqZTnLVJU1dtAOnMerYQHszsPZEPfdmC7BDR9agOIHzWHu9tP/OZXq/DGS MbJVaDtSVMkJGfCqfVCgnwtVR1EKLhvw+gaM84MdtYwWkjal8xro7mky2vrh1PhT 3S+c+m78RNJ/vZGr/gSpWXn5cpyNrLlvF1q1IbQmktkRZFmB39furUt7gJkNCZZk JPu5Xc1w4WAX1gpL3/5V+mhWgIMcAu6qjhLBEjHMnKU0mDb2pbYiVPnNWnDfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnl0rv+8MDm9NVvKTHwJsKNh0d9YwHwYDVR0j BBgwFoAUrHQ5I5tZHSSZtwwyMMHDW+KgEEswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjU3ZTg5ZTgtNTNhYS00NGY2LWI2ZDgtNTg3OTA3OGJmNjY0LzAvQUM3NDM5MjM5 QjU5MUQyNDk5QjcwQzMyMzBDMUMzNUJFMkEwMTA0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzc0MzkyMzlCNTkxRDI0OTlCNzBDMzIzMEMxQzM1QkUyQTAx MDRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjU3ZTg5ZTgtNTNhYS00NGY2LWI2 ZDgtNTg3OTA3OGJmNjY0LzAvQUM3NDM5MjM5QjU5MUQyNDk5QjcwQzMyMzBDMUMz NUJFMkEwMTA0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFKmqUJKJrCdSqJl3OEmLLBYB8Me/hvY6XC6 JfWteC+HaqWweOEtE8X7pA1m7vKgvJwzyAVQfJrNeuuhfyvvdo/Wqom7LnNE9UHW SATVytR/9UUYKZbCa5rBVLb22g+t9XeZ7TyqJwdKAHGkbgeSmJnNfHh5GgjNaOGF qUuCI8S9JR4DfK8bnCOp61G5oq5MK2jHhwQW+T2IAWKZ4rY+d3cHZtpKLcAoj/cq vW0FZ6eOGTDB/0EB1+gLWJDNEPral7MRLX54et9euKDL8MTgr0ag6vUgOMtZi2nh t5AIhce7JzqrF7aqAs6OOZ8b+9jrdgkf4itfLVlPq5nwZ71O2UQ= -----END CERTIFICATE-----Generated at Thu Sep 24 03:54:42 2026 by rpki-client