$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.mft File: AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.mft (raw, json) Hash identifier: 8SMapGzci7Azrcu35vE4SjY5xfSU7cs8pIhJieFHYww= Subject key identifier: D3:9B:4E:2E:3F:6B:AA:9F:BA:45:05:EE:E0:4B:C8:1F:E6:71:B6:60 Authority key identifier: AC:96:19:8C:9E:15:9F:FA:EE:BD:01:EE:DB:4D:EC:D2:D1:25:B4:FB Certificate issuer: /CN=AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB Certificate serial: 0C4915735065965E0B0B357459B1012DDF511A0A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 05:53:03 +0000 Manifest this update: Thu 24 Sep 2026 05:48:03 +0000 Manifest next update: Fri 25 Sep 2026 06:22:03 +0000 Files and hashes: 1: 3136302e32352e33372e302f32342d3234203d3e20313532383332.roa (hash: mYODDo3xXjU46MAAdCgBohgomvh7OQ+5/NIDJ1DIeOU=) 2: AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.crl (hash: S35qlvItK7Yrkx8zh3ztWFn4QGNju5tfUPd6CNpuXrc=) 3: 3136302e32352e33362e302f32342d3234203d3e20313532383332.roa (hash: vwfxZYWrk/RSmMQGBZC+p6lAwrY6bWIJ0nylVMAf2ng=) 4: 3136302e32352e33362e302f32332d3234203d3e20313532383332.roa (hash: 9bTByo6Uq+XJTjxp6h+UyAdxQrw5r9BmwsjxhvbZ91A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.crl rsync://rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 06:22:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:49:15:73:50:65:96:5e:0b:0b:35:74:59:b1:01:2d:df:51:1a:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB Validity Not Before: Sep 24 05:48:03 2026 GMT Not After : Sep 25 06:22:03 2026 GMT Subject: CN=D39B4E2E3F6BAA9FBA4505EEE04BC81FE671B660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:2f:38:bb:1b:d6:b5:d3:2c:c1:4e:6f:5a:09: 13:b9:23:88:07:dd:d8:a8:0b:3a:9c:46:e3:41:60: ab:b3:77:69:f8:6e:20:7d:4f:e4:87:15:11:90:34: 75:d0:84:66:3c:cf:88:09:59:a3:c3:df:98:a0:85: 6f:0d:aa:6b:e7:f9:bc:d1:f7:1f:fc:69:62:74:45: 59:11:be:49:b5:df:81:3d:59:b3:c7:cc:1c:11:7b: ad:f7:67:c9:ad:56:85:7d:d6:b0:9d:01:35:7e:df: 60:65:b7:72:26:8f:4d:f1:2f:96:bd:72:0f:cf:9d: 49:b7:fb:8a:ec:a2:a2:5d:36:bf:2c:29:db:e4:70: 0b:1f:fc:48:e9:86:d2:35:c8:59:07:41:84:1a:41: f5:95:81:7f:c3:90:b6:a5:a3:4a:d3:cd:be:d9:d4: 25:d8:ed:e3:cb:86:54:5d:88:87:8c:47:91:28:22: 9d:39:83:b2:3b:03:b0:8d:2d:8d:e0:29:56:91:20: 78:a6:c5:d7:c0:ad:fa:de:bc:60:63:80:35:63:cb: 3b:8a:1d:dc:ec:5e:bc:bf:cc:26:b9:a5:7a:b2:2a: 9d:ec:d9:35:da:83:14:70:d7:6a:66:fc:28:cd:df: c4:20:ce:b1:a9:79:ed:4f:26:c8:6d:3f:26:18:b7: 0e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:9B:4E:2E:3F:6B:AA:9F:BA:45:05:EE:E0:4B:C8:1F:E6:71:B6:60 X509v3 Authority Key Identifier: keyid:AC:96:19:8C:9E:15:9F:FA:EE:BD:01:EE:DB:4D:EC:D2:D1:25:B4:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:6c:75:66:62:23:44:cb:92:ad:20:88:2e:71:26:3b:cb:d7: e9:fa:56:f3:17:74:9d:21:5b:51:11:53:c0:97:4d:53:77:9d: 4e:b7:d3:a0:b9:b5:51:fe:96:de:58:0c:0c:af:cd:11:a2:fa: 3d:b4:5a:e0:17:ac:1a:1d:33:af:a0:af:5f:b6:42:4f:bd:85: 85:f6:ee:cf:19:c5:92:a2:76:e8:6c:31:d4:8a:0e:d9:38:fd: 55:c2:bd:51:31:8d:c9:92:52:1b:50:cb:60:93:32:bc:a1:cd: 9b:2c:4b:5f:37:5d:85:c2:af:58:2d:39:88:83:ae:7c:90:1e: a6:55:1f:e9:79:15:fe:66:c4:6c:09:f4:e4:90:18:47:34:10: b6:6d:74:9a:13:cd:9a:fe:c2:b9:7d:cf:9f:3a:8b:6e:34:6c: 53:be:5e:40:93:47:c5:39:df:5c:e5:fd:df:ba:09:80:cc:b8: 18:11:61:d4:6b:fd:4f:62:f2:5e:b9:93:4b:cc:03:8f:b7:62: 90:aa:62:30:fc:aa:f3:77:63:87:c0:28:b8:ef:da:1a:49:69: e2:a3:83:33:f1:97:cf:5c:59:a7:a6:d0:df:c1:98:52:4b:04: 23:e7:ac:c1:8f:19:6e:3d:ae:9f:c7:9d:6d:3d:f8:8d:bf:f0: 74:74:52:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDEkVc1Blll4LCzV0WbEBLd9RGgowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM5NjE5OEM5RTE1OUZGQUVFQkQwMUVFREI0REVDRDJE MTI1QjRGQjAeFw0yNjA5MjQwNTQ4MDNaFw0yNjA5MjUwNjIyMDNaMDMxMTAvBgNV BAMTKEQzOUI0RTJFM0Y2QkFBOUZCQTQ1MDVFRUUwNEJDODFGRTY3MUI2NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCILzi7G9a10yzBTm9aCRO5I4gH 3dioCzqcRuNBYKuzd2n4biB9T+SHFRGQNHXQhGY8z4gJWaPD35ighW8Nqmvn+bzR 9x/8aWJ0RVkRvkm134E9WbPHzBwRe633Z8mtVoV91rCdATV+32Blt3Imj03xL5a9 cg/PnUm3+4rsoqJdNr8sKdvkcAsf/EjphtI1yFkHQYQaQfWVgX/DkLalo0rTzb7Z 1CXY7ePLhlRdiIeMR5EoIp05g7I7A7CNLY3gKVaRIHimxdfArfrevGBjgDVjyzuK HdzsXry/zCa5pXqyKp3s2TXagxRw12pm/CjN38QgzrGpee1PJshtPyYYtw5rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU05tOLj9rqp+6RQXu4EvIH+ZxtmAwHwYDVR0j BBgwFoAUrJYZjJ4Vn/ruvQHu203s0tEltPswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2Y0YjUzZDgtYjJmZi00OTczLWIxYWMtNmY4NWZhZWFkYmU1LzAvQUM5NjE5OEM5 RTE1OUZGQUVFQkQwMUVFREI0REVDRDJEMTI1QjRGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BQzk2MTk4QzlFMTU5RkZBRUVCRDAxRUVEQjRERUNEMkQxMjVC NEZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2Y0YjUzZDgtYjJmZi00OTczLWIx YWMtNmY4NWZhZWFkYmU1LzAvQUM5NjE5OEM5RTE1OUZGQUVFQkQwMUVFREI0REVD RDJEMTI1QjRGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA1sdWZiI0TLkq0giC5xJjvL1+n6VvMXdJ0h W1ERU8CXTVN3nU6306C5tVH+lt5YDAyvzRGi+j20WuAXrBodM6+gr1+2Qk+9hYX2 7s8ZxZKiduhsMdSKDtk4/VXCvVExjcmSUhtQy2CTMryhzZssS183XYXCr1gtOYiD rnyQHqZVH+l5Ff5mxGwJ9OSQGEc0ELZtdJoTzZr+wrl9z586i240bFO+XkCTR8U5 31zl/d+6CYDMuBgRYdRr/U9i8l65k0vMA4+3YpCqYjD8qvN3Y4fAKLjv2hpJaeKj gzPxl89cWaem0N/BmFJLBCPnrMGPGW49rp/HnW09+I2/8HR0Um0= -----END CERTIFICATE-----Generated at Thu Sep 24 12:18:22 2026 by rpki-client