$ rpki-client -vvf rpki-rsync.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.mft File: AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.mft (raw, json) Hash identifier: I0fXsAGxduX+0Z1Hgsmmes9Ck2R7+PI88rCm+SDC4cQ= Subject key identifier: 30:58:80:AA:F2:90:40:34:D0:37:F2:FE:29:A0:19:1F:A6:D2:C7:0D Authority key identifier: AC:2C:B9:F6:C8:CB:FD:54:9E:9E:FC:E2:2F:22:F1:BC:DB:CB:73:92 Certificate issuer: /CN=AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392 Certificate serial: 0D6CF0B84ADB9E52E4240C9F4F85A4AD555454A9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:06:43 +0000 Manifest this update: Tue 12 May 2026 20:01:43 +0000 Manifest next update: Wed 13 May 2026 20:59:43 +0000 Files and hashes: 1: AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.crl (hash: Y8KyAT6DNMQr0pdYdr8I4eB954AUl/ZeeHUJUBDdpqw=) 2: 3130332e3139302e3131332e302f32342d3234203d3e20313439393037.roa (hash: Q95AZcZVTNNMyCA8ySPTWTlV5HgDicctdDFDNHoHuh0=) 3: 323030313a6466303a663963303a3a2f34382d3438203d3e20313439393037.roa (hash: GJQ+AHj2o4V89RFkllxAeKJUIy+kRG6F/hsMS14nw+s=) 4: 3130332e3139302e3131322e302f32342d3234203d3e20313439393037.roa (hash: 1w+lHciz1g+OQhhivgPPNI1UUThYYbymT06vuiGhBaA=) 5: 3130332e3139302e3131322e302f32332d3234203d3e20313439393037.roa (hash: hhQovD5k6aPWCJpf1Q2RXufesBruZAyhfmoou+CUYHI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.crl rsync://rpki-rsync.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:6c:f0:b8:4a:db:9e:52:e4:24:0c:9f:4f:85:a4:ad:55:54:54:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392 Validity Not Before: May 12 20:01:43 2026 GMT Not After : May 13 20:59:43 2026 GMT Subject: CN=305880AAF2904034D037F2FE29A0191FA6D2C70D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:ab:7e:f8:cb:95:70:5b:4d:a6:52:ec:eb:4e: e8:f6:52:3d:b8:70:b7:dd:ff:e2:6a:a2:ea:b6:15: 4f:95:13:a3:2c:02:98:a6:e8:37:c1:03:ed:09:7d: df:a3:51:2a:00:a5:00:41:3b:cf:58:48:22:16:36: d6:e2:c8:6e:58:7c:9f:0d:85:94:4a:44:bf:d9:0f: a8:d3:27:82:ce:65:67:1c:98:e0:ff:57:ce:22:dc: ec:32:2d:40:c0:3b:0a:9c:80:bd:f2:7f:35:6e:eb: 03:50:6c:ab:50:1b:b3:15:85:0e:83:4b:eb:98:7e: ef:d1:75:2a:47:ec:3e:8f:e0:c9:fc:98:9f:64:dc: 39:63:58:3d:08:59:fc:6f:03:e8:89:bb:63:c5:d8: 86:dd:35:39:69:47:6c:d5:f3:00:5b:2d:82:80:3b: 4e:c4:ce:e0:6d:7c:cf:b6:fe:36:9f:90:e4:e0:90: aa:ea:44:8d:35:98:14:09:b0:ca:f2:3b:f0:2c:54: a7:04:58:a1:d3:ea:d4:96:a9:17:44:1b:64:15:0b: e6:0f:ee:a0:31:f9:c8:23:1b:4e:8a:d0:f6:00:29: 50:e9:54:c0:bf:0e:86:2b:76:fa:3e:66:96:f9:70: 57:70:63:3a:cb:63:37:4a:f0:f0:b8:47:a2:07:44: 83:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:58:80:AA:F2:90:40:34:D0:37:F2:FE:29:A0:19:1F:A6:D2:C7:0D X509v3 Authority Key Identifier: keyid:AC:2C:B9:F6:C8:CB:FD:54:9E:9E:FC:E2:2F:22:F1:BC:DB:CB:73:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:5e:59:d1:62:71:2a:0c:c2:9b:d8:ff:64:b6:c9:0e:5f:2c: e2:a0:a1:28:11:a2:b8:14:c6:bb:35:3a:8d:c1:65:3e:06:39: 19:2f:57:80:5d:d5:12:a2:d8:c7:1d:08:1c:ed:bb:21:85:46: 7a:64:3e:e1:95:95:b4:ae:56:04:40:94:70:72:19:55:97:7a: 83:49:d0:04:c4:d6:3d:b0:72:7f:9d:c8:1f:d6:24:62:98:db: 53:84:f5:ac:8d:51:3d:7c:1b:ad:0d:d4:66:17:63:98:81:a0: 8a:28:c9:d7:ee:9d:9e:1b:0d:51:7f:a4:99:58:c9:40:41:6f: 21:cb:0d:79:46:1e:53:5d:58:a7:af:61:10:42:4e:4c:1b:10: 40:6d:24:4a:7f:a1:b9:77:cc:c5:5b:90:e8:61:49:a2:2c:ae: af:91:0b:81:97:ad:cf:d2:b1:39:e6:aa:e0:0b:7f:0f:a4:ca: 39:71:69:4a:59:78:32:77:3a:3c:58:c1:96:4f:ba:f9:5d:86: c0:44:54:67:7e:11:2a:a2:11:10:e9:63:8e:7c:24:a9:37:6a: 56:22:b1:19:a4:a0:ab:62:71:a9:48:7c:c7:23:9f:ff:6b:8b: 0d:64:5b:17:93:84:7f:71:9e:9a:22:ff:62:ec:33:e2:12:41: ea:ed:63:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDWzwuErbnlLkJAyfT4WkrVVUVKkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUMyQ0I5RjZDOENCRkQ1NDlFOUVGQ0UyMkYyMkYxQkNE QkNCNzM5MjAeFw0yNjA1MTIyMDAxNDNaFw0yNjA1MTMyMDU5NDNaMDMxMTAvBgNV BAMTKDMwNTg4MEFBRjI5MDQwMzREMDM3RjJGRTI5QTAxOTFGQTZEMkM3MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvq374y5VwW02mUuzrTuj2Uj24 cLfd/+Jqouq2FU+VE6MsApim6DfBA+0Jfd+jUSoApQBBO89YSCIWNtbiyG5YfJ8N hZRKRL/ZD6jTJ4LOZWccmOD/V84i3OwyLUDAOwqcgL3yfzVu6wNQbKtQG7MVhQ6D S+uYfu/RdSpH7D6P4Mn8mJ9k3DljWD0IWfxvA+iJu2PF2IbdNTlpR2zV8wBbLYKA O07EzuBtfM+2/jafkOTgkKrqRI01mBQJsMryO/AsVKcEWKHT6tSWqRdEG2QVC+YP 7qAx+cgjG06K0PYAKVDpVMC/DoYrdvo+Zpb5cFdwYzrLYzdK8PC4R6IHRINPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMFiAqvKQQDTQN/L+KaAZH6bSxw0wHwYDVR0j BBgwFoAUrCy59sjL/VSenvziLyLxvNvLc5IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjA1MTZhN2EtNDE5NS00NGIzLWEyNGUtY2Y4ZWQ1NzhkNzkxLzAvQUMyQ0I5RjZD OENCRkQ1NDlFOUVGQ0UyMkYyMkYxQkNEQkNCNzM5Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzJDQjlGNkM4Q0JGRDU0OUU5RUZDRTIyRjIyRjFCQ0RCQ0I3 MzkyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjA1MTZhN2EtNDE5NS00NGIzLWEy NGUtY2Y4ZWQ1NzhkNzkxLzAvQUMyQ0I5RjZDOENCRkQ1NDlFOUVGQ0UyMkYyMkYx QkNEQkNCNzM5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALleWdFicSoMwpvY/2S2yQ5fLOKgoSgRorgU xrs1Oo3BZT4GORkvV4Bd1RKi2McdCBztuyGFRnpkPuGVlbSuVgRAlHByGVWXeoNJ 0ATE1j2wcn+dyB/WJGKY21OE9ayNUT18G60N1GYXY5iBoIooydfunZ4bDVF/pJlY yUBBbyHLDXlGHlNdWKevYRBCTkwbEEBtJEp/obl3zMVbkOhhSaIsrq+RC4GXrc/S sTnmquALfw+kyjlxaUpZeDJ3OjxYwZZPuvldhsBEVGd+ESqiERDpY458JKk3alYi sRmkoKticalIfMcjn/9riw1kWxeThH9xnpoi/2LsM+ISQertY8k= -----END CERTIFICATE-----Generated at Wed May 13 00:54:14 2026 by rpki-client