$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.mft File: AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.mft (raw, json) Hash identifier: zbvUQm/Ji/Uu64DSoObsaZmCX+K8xdOc2XzmRRvA8yI= Subject key identifier: 50:0C:A6:1C:30:99:C8:4B:6E:64:30:F4:07:7C:55:DB:26:AF:7B:F0 Authority key identifier: AC:96:19:8C:9E:15:9F:FA:EE:BD:01:EE:DB:4D:EC:D2:D1:25:B4:FB Certificate issuer: /CN=AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB Certificate serial: 7841954F4E22861053A0ED6159A176D2CA51C6C6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.mft Manifest number: 0105 Signing time: Sat 14 Nov 2026 13:51:41 +0000 Manifest this update: Sat 14 Nov 2026 13:46:41 +0000 Manifest next update: Sun 15 Nov 2026 13:59:41 +0000 Files and hashes: 1: 3136302e32352e33362e302f32342d3234203d3e20313532383332.roa (hash: vwfxZYWrk/RSmMQGBZC+p6lAwrY6bWIJ0nylVMAf2ng=) 2: 3136302e32352e33362e302f32332d3234203d3e20313532383332.roa (hash: 9bTByo6Uq+XJTjxp6h+UyAdxQrw5r9BmwsjxhvbZ91A=) 3: 3136302e32352e33372e302f32342d3234203d3e20313532383332.roa (hash: mYODDo3xXjU46MAAdCgBohgomvh7OQ+5/NIDJ1DIeOU=) 4: AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.crl (hash: v0KNEcnzMU7YY2oJJ1AjJM6j8Ufhy3Ln7RAR9h4o0pc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.crl rsync://rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 13:59:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:41:95:4f:4e:22:86:10:53:a0:ed:61:59:a1:76:d2:ca:51:c6:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB Validity Not Before: Nov 14 13:46:41 2026 GMT Not After : Nov 15 13:59:41 2026 GMT Subject: CN=500CA61C3099C84B6E6430F4077C55DB26AF7BF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fe:5f:03:4d:87:1a:1a:a6:84:11:e9:71:7c: 56:a0:c2:60:4f:c7:db:7f:d4:a5:54:fa:65:05:3c: a0:a6:f2:71:34:9d:0c:24:94:84:3c:48:f5:e9:20: 37:43:54:d6:58:29:2f:18:04:c0:29:4b:a4:64:4b: 1b:0f:3e:cc:5f:82:61:eb:e7:90:79:07:c0:21:74: b1:1d:16:2a:5a:f1:8e:fc:e6:54:5e:1d:a9:ca:c9: ae:bd:73:f6:96:da:3c:a0:cd:2d:0d:3b:dd:e5:47: 91:35:90:f8:cf:20:e1:bb:99:b2:55:73:15:44:6d: 68:52:c9:70:d5:16:03:8a:31:ff:2d:65:c1:5d:24: 0f:9d:1d:99:0e:1a:9b:1d:53:b4:a6:d4:67:b6:4b: a7:31:a3:c1:e1:2e:4a:c6:cf:43:30:b2:0e:32:2d: 70:6a:18:49:61:10:f7:19:71:9c:5b:ce:ec:9a:1d: e9:3f:cc:17:47:39:0e:f7:69:5c:ed:1a:31:fd:04: 25:18:76:23:09:e8:c6:37:59:d6:56:3f:04:96:26: 9b:b5:cf:33:c4:a1:43:33:30:2f:26:04:92:8c:84: 33:fa:65:ff:fa:9a:8e:14:87:20:a4:92:8f:c9:bb: d2:09:a4:70:2d:81:55:87:98:93:0f:c1:1c:dd:df: c9:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:0C:A6:1C:30:99:C8:4B:6E:64:30:F4:07:7C:55:DB:26:AF:7B:F0 X509v3 Authority Key Identifier: keyid:AC:96:19:8C:9E:15:9F:FA:EE:BD:01:EE:DB:4D:EC:D2:D1:25:B4:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:d8:e9:0c:69:4d:7a:f7:d6:2a:eb:cd:81:34:f4:31:a4:31: d0:d6:4c:a3:2d:c4:db:17:fc:cf:d4:8a:d3:30:9b:f3:45:94: a0:5b:2c:8f:52:cf:25:b5:84:ab:6d:cd:18:9b:d5:44:b9:c0: 8c:cf:a9:80:dc:f7:70:ae:5d:08:0a:af:61:31:80:e2:40:f4: 39:04:6f:70:cb:b2:b7:86:f0:53:27:93:f7:4b:e3:48:29:55: 07:e8:36:26:09:24:0e:51:a1:61:f2:26:11:a8:e2:a0:30:b9: ad:91:a2:db:67:43:90:c5:75:3b:80:ab:54:98:82:30:b2:72: fa:3f:5f:d2:3b:4e:51:0a:3a:70:35:6b:4c:6e:54:31:d6:50: ce:8d:19:a2:56:7d:c4:0f:87:e2:8c:5f:fa:55:ba:d9:1b:f5: a9:aa:45:c6:e6:7c:7d:28:1d:0e:ab:df:9d:f3:9a:d9:11:c3: 5c:68:f4:61:97:78:e6:a7:b5:30:86:18:7a:12:5b:45:8e:e5: 29:c5:30:0d:d3:7e:8b:9a:0d:e5:ed:31:21:59:0c:43:ec:9f: b2:98:bf:26:29:1e:2d:81:06:c1:c9:69:62:49:ce:86:99:c6: 05:3a:97:81:bd:85:ed:ea:76:b7:48:3a:28:32:c3:57:f1:12: 28:b3:49:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeEGVT04ihhBToO1hWaF20spRxsYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM5NjE5OEM5RTE1OUZGQUVFQkQwMUVFREI0REVDRDJE MTI1QjRGQjAeFw0yNjExMTQxMzQ2NDFaFw0yNjExMTUxMzU5NDFaMDMxMTAvBgNV BAMTKDUwMENBNjFDMzA5OUM4NEI2RTY0MzBGNDA3N0M1NURCMjZBRjdCRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq/l8DTYcaGqaEEelxfFagwmBP x9t/1KVU+mUFPKCm8nE0nQwklIQ8SPXpIDdDVNZYKS8YBMApS6RkSxsPPsxfgmHr 55B5B8AhdLEdFipa8Y785lReHanKya69c/aW2jygzS0NO93lR5E1kPjPIOG7mbJV cxVEbWhSyXDVFgOKMf8tZcFdJA+dHZkOGpsdU7Sm1Ge2S6cxo8HhLkrGz0Mwsg4y LXBqGElhEPcZcZxbzuyaHek/zBdHOQ73aVztGjH9BCUYdiMJ6MY3WdZWPwSWJpu1 zzPEoUMzMC8mBJKMhDP6Zf/6mo4UhyCkko/Ju9IJpHAtgVWHmJMPwRzd38mFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUAymHDCZyEtuZDD0B3xV2yave/AwHwYDVR0j BBgwFoAUrJYZjJ4Vn/ruvQHu203s0tEltPswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2Y0YjUzZDgtYjJmZi00OTczLWIxYWMtNmY4NWZhZWFkYmU1LzAvQUM5NjE5OEM5 RTE1OUZGQUVFQkQwMUVFREI0REVDRDJEMTI1QjRGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BQzk2MTk4QzlFMTU5RkZBRUVCRDAxRUVEQjRERUNEMkQxMjVC NEZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2Y0YjUzZDgtYjJmZi00OTczLWIx YWMtNmY4NWZhZWFkYmU1LzAvQUM5NjE5OEM5RTE1OUZGQUVFQkQwMUVFREI0REVD RDJEMTI1QjRGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEfY6QxpTXr31irrzYE09DGkMdDWTKMtxNsX /M/UitMwm/NFlKBbLI9SzyW1hKttzRib1US5wIzPqYDc93CuXQgKr2ExgOJA9DkE b3DLsreG8FMnk/dL40gpVQfoNiYJJA5RoWHyJhGo4qAwua2RottnQ5DFdTuAq1SY gjCycvo/X9I7TlEKOnA1a0xuVDHWUM6NGaJWfcQPh+KMX/pVutkb9amqRcbmfH0o HQ6r353zmtkRw1xo9GGXeOantTCGGHoSW0WO5SnFMA3TfouaDeXtMSFZDEPsn7KY vyYpHi2BBsHJaWJJzoaZxgU6l4G9he3qdrdIOigyw1fxEiizSVk= -----END CERTIFICATE-----Generated at Sun Nov 15 00:09:05 2026 by rpki-client