$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.mft File: AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.mft (raw, json) Hash identifier: BqHIGa0aoGONGHJZbKB8I8UJpSbEL2NCEs6KRLpzg4s= Subject key identifier: 91:37:79:C1:CA:9D:0E:79:B1:22:21:FE:5C:E8:58:4E:F1:1F:06:28 Authority key identifier: AC:2C:B9:F6:C8:CB:FD:54:9E:9E:FC:E2:2F:22:F1:BC:DB:CB:73:92 Certificate issuer: /CN=AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392 Certificate serial: 2FD1C8E8E3C5450D11A9CE8336DBDF1ECF2EA41F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 01:02:28 +0000 Manifest this update: Wed 23 Sep 2026 00:57:28 +0000 Manifest next update: Thu 24 Sep 2026 03:36:28 +0000 Files and hashes: 1: AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.crl (hash: e9CwXZUl2PhRqxdBfgeWbC4bTZmD4LegnMhKnDORbUQ=) 2: 323030313a6466303a663963303a3a2f34382d3438203d3e20313439393037.roa (hash: GJQ+AHj2o4V89RFkllxAeKJUIy+kRG6F/hsMS14nw+s=) 3: 3130332e3139302e3131322e302f32332d3234203d3e20313439393037.roa (hash: hhQovD5k6aPWCJpf1Q2RXufesBruZAyhfmoou+CUYHI=) 4: 3130332e3139302e3131322e302f32342d3234203d3e20313439393037.roa (hash: 1w+lHciz1g+OQhhivgPPNI1UUThYYbymT06vuiGhBaA=) 5: 3130332e3139302e3131332e302f32342d3234203d3e20313439393037.roa (hash: Q95AZcZVTNNMyCA8ySPTWTlV5HgDicctdDFDNHoHuh0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.crl rsync://rpki-rsync.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 03:36:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:d1:c8:e8:e3:c5:45:0d:11:a9:ce:83:36:db:df:1e:cf:2e:a4:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392 Validity Not Before: Sep 23 00:57:28 2026 GMT Not After : Sep 24 03:36:28 2026 GMT Subject: CN=913779C1CA9D0E79B12221FE5CE8584EF11F0628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9a:6b:d0:6b:f2:fc:5a:e1:26:ac:7e:03:3f: 83:52:4f:b1:a8:64:5e:71:dd:4f:3e:26:a0:50:53: 7f:4b:63:6f:84:ef:0c:8f:b7:a6:10:7d:1a:18:e8: 6d:a5:85:06:04:8e:f7:d1:a7:ae:ee:bf:8d:00:a3: d0:06:e1:3d:6b:7c:db:12:20:9b:fa:3f:b3:07:f1: 4e:2a:17:bd:d8:c1:bb:65:f2:48:97:f0:2b:d5:a5: c8:4d:91:bf:bc:4c:53:7c:39:7c:ee:72:ba:9c:6c: 81:07:33:55:7f:d5:3a:cf:bf:7b:4c:3b:ad:64:ce: 45:cf:cd:45:2e:81:fc:2b:89:e9:de:e8:f9:5b:13: 28:65:58:fd:df:e9:c9:15:f3:cd:c5:e4:b0:ab:67: 91:62:a9:79:6b:3c:2d:b5:3d:46:b5:d4:48:a1:37: 1a:5e:54:59:3e:96:a7:27:bd:e3:68:a6:b7:03:f9: 11:09:c8:a7:36:b5:90:7c:15:43:c1:e8:6c:b8:09: af:24:69:cd:3b:18:0d:66:31:fe:7c:e5:20:64:f0: 96:2f:25:9a:67:1b:f1:3f:f2:94:d5:01:61:c4:a5: af:e5:48:6f:eb:a6:7e:08:98:49:55:9c:f6:50:d7: 77:9f:3b:1a:e9:07:97:75:a5:18:7e:57:e3:d8:06: 82:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:37:79:C1:CA:9D:0E:79:B1:22:21:FE:5C:E8:58:4E:F1:1F:06:28 X509v3 Authority Key Identifier: keyid:AC:2C:B9:F6:C8:CB:FD:54:9E:9E:FC:E2:2F:22:F1:BC:DB:CB:73:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:50:72:4f:60:b5:b0:66:40:cb:3f:51:65:f3:d7:19:cc:ce: d4:b8:0b:02:15:27:ac:84:93:41:6a:ca:2e:60:e5:94:83:0b: 44:b4:7a:37:b2:35:7f:4e:8d:d2:0c:cd:a4:76:02:73:e2:0a: fa:95:4b:05:a9:f5:2b:71:d0:6d:5a:e6:a7:90:72:a3:59:7f: d1:19:19:5b:8e:49:a0:29:ed:ea:26:99:83:c4:97:90:9e:b5: 2d:13:4a:aa:53:77:75:ff:39:11:3f:70:e7:36:04:80:8d:f0: 29:bf:07:7d:ca:5a:85:b3:c2:92:a7:dc:91:38:ca:2d:c2:17: c3:6b:17:f4:65:ad:41:52:99:ce:18:30:31:8b:d4:de:8f:e2: 3e:c3:c7:93:4b:fd:06:91:3c:05:20:24:78:46:0c:4d:88:ac: 43:dd:f2:7d:39:00:d8:51:9f:0e:a8:20:69:a5:7d:87:78:36: 11:a6:7c:83:a2:3c:85:1c:87:90:2a:55:ac:11:e1:bc:40:ef: 95:18:38:b8:9b:42:76:f8:1f:cc:a5:bd:40:c0:52:0f:4e:86: 75:73:0f:04:46:4a:80:3c:4b:83:29:be:da:c8:08:56:94:1b: 82:24:18:3d:02:0f:a9:e4:64:9a:63:be:52:3e:17:49:29:f8: 8b:24:bd:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL9HI6OPFRQ0Rqc6DNtvfHs8upB8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUMyQ0I5RjZDOENCRkQ1NDlFOUVGQ0UyMkYyMkYxQkNE QkNCNzM5MjAeFw0yNjA5MjMwMDU3MjhaFw0yNjA5MjQwMzM2MjhaMDMxMTAvBgNV BAMTKDkxMzc3OUMxQ0E5RDBFNzlCMTIyMjFGRTVDRTg1ODRFRjExRjA2MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCommvQa/L8WuEmrH4DP4NST7Go ZF5x3U8+JqBQU39LY2+E7wyPt6YQfRoY6G2lhQYEjvfRp67uv40Ao9AG4T1rfNsS IJv6P7MH8U4qF73Ywbtl8kiX8CvVpchNkb+8TFN8OXzucrqcbIEHM1V/1TrPv3tM O61kzkXPzUUugfwriene6PlbEyhlWP3f6ckV883F5LCrZ5FiqXlrPC21PUa11Eih NxpeVFk+lqcnveNoprcD+REJyKc2tZB8FUPB6Gy4Ca8kac07GA1mMf585SBk8JYv JZpnG/E/8pTVAWHEpa/lSG/rpn4ImElVnPZQ13efOxrpB5d1pRh+V+PYBoIvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkTd5wcqdDnmxIiH+XOhYTvEfBigwHwYDVR0j BBgwFoAUrCy59sjL/VSenvziLyLxvNvLc5IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjA1MTZhN2EtNDE5NS00NGIzLWEyNGUtY2Y4ZWQ1NzhkNzkxLzAvQUMyQ0I5RjZD OENCRkQ1NDlFOUVGQ0UyMkYyMkYxQkNEQkNCNzM5Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzJDQjlGNkM4Q0JGRDU0OUU5RUZDRTIyRjIyRjFCQ0RCQ0I3 MzkyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjA1MTZhN2EtNDE5NS00NGIzLWEy NGUtY2Y4ZWQ1NzhkNzkxLzAvQUMyQ0I5RjZDOENCRkQ1NDlFOUVGQ0UyMkYyMkYx QkNEQkNCNzM5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFRQck9gtbBmQMs/UWXz1xnMztS4CwIVJ6yE k0Fqyi5g5ZSDC0S0ejeyNX9OjdIMzaR2AnPiCvqVSwWp9Stx0G1a5qeQcqNZf9EZ GVuOSaAp7eommYPEl5CetS0TSqpTd3X/ORE/cOc2BICN8Cm/B33KWoWzwpKn3JE4 yi3CF8NrF/RlrUFSmc4YMDGL1N6P4j7Dx5NL/QaRPAUgJHhGDE2IrEPd8n05ANhR nw6oIGmlfYd4NhGmfIOiPIUch5AqVawR4bxA75UYOLibQnb4H8ylvUDAUg9OhnVz DwRGSoA8S4MpvtrICFaUG4IkGD0CD6nkZJpjvlI+F0kp+IskvSc= -----END CERTIFICATE-----Generated at Wed Sep 23 20:21:34 2026 by rpki-client