$ rpki-client -vvf rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.mft File: AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.mft (raw, json) Hash identifier: 1pNZkU1U5Rf5YX6uWnbvnOMq1/lI48TWfg1gjvT9rMc= Subject key identifier: 9B:7C:1E:59:BF:56:45:C9:14:8C:06:82:39:91:6C:40:79:79:A1:4C Authority key identifier: AC:96:19:8C:9E:15:9F:FA:EE:BD:01:EE:DB:4D:EC:D2:D1:25:B4:FB Certificate issuer: /CN=AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB Certificate serial: 40129FD9F4C1950D67BE31A9F9FB68A45500DD5B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.mft Manifest number: 0F Signing time: Tue 12 May 2026 13:53:49 +0000 Manifest this update: Tue 12 May 2026 13:48:49 +0000 Manifest next update: Wed 13 May 2026 15:28:49 +0000 Files and hashes: 1: 3136302e32352e33362e302f32332d3234203d3e20313532383332.roa (hash: 9bTByo6Uq+XJTjxp6h+UyAdxQrw5r9BmwsjxhvbZ91A=) 2: AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.crl (hash: RQLmn+5wtv2P0ygODsoHffnkftRFvhlLolW/TMB1fbY=) 3: 3136302e32352e33362e302f32342d3234203d3e20313532383332.roa (hash: vwfxZYWrk/RSmMQGBZC+p6lAwrY6bWIJ0nylVMAf2ng=) 4: 3136302e32352e33372e302f32342d3234203d3e20313532383332.roa (hash: mYODDo3xXjU46MAAdCgBohgomvh7OQ+5/NIDJ1DIeOU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.crl rsync://rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:12:9f:d9:f4:c1:95:0d:67:be:31:a9:f9:fb:68:a4:55:00:dd:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB Validity Not Before: May 12 13:48:49 2026 GMT Not After : May 13 15:28:49 2026 GMT Subject: CN=9B7C1E59BF5645C9148C068239916C407979A14C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:dc:f2:33:51:a7:43:2f:f1:a5:4d:c0:83:71: 12:d0:25:91:91:3f:8d:74:d6:e9:69:87:dc:f1:e3: ac:fa:7b:4a:e3:9f:11:88:90:27:a0:d0:9b:5c:f3: a9:9d:58:75:72:68:e3:71:cf:78:7b:7a:df:ea:9b: d9:64:7b:17:e7:d4:a9:05:83:75:1e:21:74:2c:b7: 65:ec:0f:c9:b1:22:18:6f:c7:aa:59:ef:b2:5a:c9: db:70:68:5e:73:3f:be:7a:98:88:5f:19:65:23:84: bd:79:b3:3e:31:4b:40:ee:26:b3:b3:b2:87:24:6b: 98:f1:b2:34:6a:26:27:82:ce:ba:7f:cc:be:a0:5e: 87:06:09:af:26:ed:75:d9:6c:90:62:04:04:bd:46: dd:b8:c7:44:3a:05:40:c0:2b:de:2a:7e:44:5c:9d: 9f:54:82:2c:0b:36:e6:1e:85:f4:d1:7b:f6:cc:41: 91:f2:c9:7f:2f:ff:6c:0d:3e:79:57:d2:17:16:50: 9e:45:d7:20:29:98:a8:2c:09:97:34:64:86:ab:f0: 9f:b3:4d:b6:86:7d:d4:9d:04:bd:f5:7e:6a:d5:32: 16:5b:9f:92:71:cf:be:10:1a:67:27:84:c1:3b:5c: f0:5d:8e:1c:2a:39:37:70:ce:02:c9:bb:0b:da:28: 73:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:7C:1E:59:BF:56:45:C9:14:8C:06:82:39:91:6C:40:79:79:A1:4C X509v3 Authority Key Identifier: keyid:AC:96:19:8C:9E:15:9F:FA:EE:BD:01:EE:DB:4D:EC:D2:D1:25:B4:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:41:f6:41:cc:ee:5e:21:94:13:be:99:10:12:f7:70:c0:4d: f7:62:60:ff:d4:cc:8b:76:17:fb:72:f0:cc:ff:d8:54:fb:c9: 9e:0c:4b:e9:f8:eb:03:62:3c:8c:02:52:74:1d:af:a1:a3:af: 81:e8:9c:d7:d1:34:f0:fe:d9:32:e0:c8:00:e3:bc:4c:23:fe: 47:12:14:ec:c0:47:e4:cd:36:2b:98:3c:72:52:46:0f:bd:07: 2a:9d:9e:57:b5:9c:48:af:b3:ac:76:d4:5c:92:aa:68:9d:5c: df:a4:34:6f:47:de:6c:e7:aa:c5:67:90:e5:c5:43:78:9c:38: d5:05:09:3f:ce:fe:86:76:ed:25:1c:76:c1:ed:5b:42:1b:1f: e2:46:f2:91:97:67:c8:a1:b3:86:88:c2:3e:03:72:b0:49:94: a2:f3:cf:5d:82:56:45:56:aa:6f:6a:ee:fe:65:06:eb:2a:48: a0:1c:fb:3c:8f:eb:46:f6:49:af:13:8a:6e:41:ed:33:a6:56: 4b:c8:6f:75:61:51:41:4a:47:b4:b2:c8:f9:f6:55:45:79:8c: 51:b8:40:bd:ae:6c:5d:b9:8f:3f:e9:cb:4b:54:80:53:86:98: 81:30:22:06:75:ce:24:66:0e:36:c3:a3:89:33:1a:d7:6c:b7: 2f:35:f5:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQBKf2fTBlQ1nvjGp+ftopFUA3VswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM5NjE5OEM5RTE1OUZGQUVFQkQwMUVFREI0REVDRDJE MTI1QjRGQjAeFw0yNjA1MTIxMzQ4NDlaFw0yNjA1MTMxNTI4NDlaMDMxMTAvBgNV BAMTKDlCN0MxRTU5QkY1NjQ1QzkxNDhDMDY4MjM5OTE2QzQwNzk3OUExNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC93PIzUadDL/GlTcCDcRLQJZGR P4101ulph9zx46z6e0rjnxGIkCeg0Jtc86mdWHVyaONxz3h7et/qm9lkexfn1KkF g3UeIXQst2XsD8mxIhhvx6pZ77JaydtwaF5zP756mIhfGWUjhL15sz4xS0DuJrOz socka5jxsjRqJieCzrp/zL6gXocGCa8m7XXZbJBiBAS9Rt24x0Q6BUDAK94qfkRc nZ9UgiwLNuYehfTRe/bMQZHyyX8v/2wNPnlX0hcWUJ5F1yApmKgsCZc0ZIar8J+z TbaGfdSdBL31fmrVMhZbn5Jxz74QGmcnhME7XPBdjhwqOTdwzgLJuwvaKHPfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm3weWb9WRckUjAaCOZFsQHl5oUwwHwYDVR0j BBgwFoAUrJYZjJ4Vn/ruvQHu203s0tEltPswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2Y0YjUzZDgtYjJmZi00OTczLWIxYWMtNmY4NWZhZWFkYmU1LzAvQUM5NjE5OEM5 RTE1OUZGQUVFQkQwMUVFREI0REVDRDJEMTI1QjRGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BQzk2MTk4QzlFMTU5RkZBRUVCRDAxRUVEQjRERUNEMkQxMjVC NEZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2Y0YjUzZDgtYjJmZi00OTczLWIx YWMtNmY4NWZhZWFkYmU1LzAvQUM5NjE5OEM5RTE1OUZGQUVFQkQwMUVFREI0REVD RDJEMTI1QjRGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKVB9kHM7l4hlBO+mRAS93DATfdiYP/UzIt2 F/ty8Mz/2FT7yZ4MS+n46wNiPIwCUnQdr6Gjr4HonNfRNPD+2TLgyADjvEwj/kcS FOzAR+TNNiuYPHJSRg+9Byqdnle1nEivs6x21FySqmidXN+kNG9H3mznqsVnkOXF Q3icONUFCT/O/oZ27SUcdsHtW0IbH+JG8pGXZ8ihs4aIwj4DcrBJlKLzz12CVkVW qm9q7v5lBusqSKAc+zyP60b2Sa8Tim5B7TOmVkvIb3VhUUFKR7SyyPn2VUV5jFG4 QL2ubF25jz/py0tUgFOGmIEwIgZ1ziRmDjbDo4kzGtdsty819Us= -----END CERTIFICATE-----Generated at Wed May 13 00:44:51 2026 by rpki-client