$ rpki-client -vvf rpki-rsync.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.mft File: AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.mft (raw, json) Hash identifier: gCf3v3KG1a1bePwABjHomyX6yX84wCHiqzRyAYMtB3k= Subject key identifier: F5:54:54:8C:71:E4:45:14:42:BF:B1:9B:3D:D9:B7:9E:F5:3F:58:E2 Authority key identifier: AC:2C:B9:F6:C8:CB:FD:54:9E:9E:FC:E2:2F:22:F1:BC:DB:CB:73:92 Certificate issuer: /CN=AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392 Certificate serial: 1BFEFE8ED01A87B8EABDEFB9D0A3EC0004CCD700 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 15:33:56 +0000 Manifest this update: Thu 23 Jul 2026 15:28:56 +0000 Manifest next update: Fri 24 Jul 2026 16:23:56 +0000 Files and hashes: 1: AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.crl (hash: 0zrBd5ofJ3dwV5DGItlcNQ0HRnMK7i2Qm4wKkem41Bo=) 2: 3130332e3139302e3131322e302f32342d3234203d3e20313439393037.roa (hash: 1w+lHciz1g+OQhhivgPPNI1UUThYYbymT06vuiGhBaA=) 3: 3130332e3139302e3131322e302f32332d3234203d3e20313439393037.roa (hash: hhQovD5k6aPWCJpf1Q2RXufesBruZAyhfmoou+CUYHI=) 4: 3130332e3139302e3131332e302f32342d3234203d3e20313439393037.roa (hash: Q95AZcZVTNNMyCA8ySPTWTlV5HgDicctdDFDNHoHuh0=) 5: 323030313a6466303a663963303a3a2f34382d3438203d3e20313439393037.roa (hash: GJQ+AHj2o4V89RFkllxAeKJUIy+kRG6F/hsMS14nw+s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.crl rsync://rpki-rsync.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 16:23:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:fe:fe:8e:d0:1a:87:b8:ea:bd:ef:b9:d0:a3:ec:00:04:cc:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392 Validity Not Before: Jul 23 15:28:56 2026 GMT Not After : Jul 24 16:23:56 2026 GMT Subject: CN=F554548C71E4451442BFB19B3DD9B79EF53F58E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:da:3c:29:6d:3a:39:15:c9:e9:be:3c:22:4d: 1a:53:01:9a:f6:47:d8:96:cd:11:41:c6:a5:eb:1f: 05:b9:db:ae:98:ee:af:e2:26:9b:c5:2b:d0:82:9b: 67:83:b7:34:e8:92:77:48:15:ac:be:c0:27:c7:e5: 13:fd:7e:2c:01:11:71:fe:37:15:b8:8f:04:9a:b8: 14:1c:3b:93:c9:57:5e:e2:18:72:b6:78:1f:60:45: 74:a2:b9:c2:95:3b:1f:29:04:7b:90:69:47:2e:aa: 5c:fd:5b:de:33:64:0d:8f:d1:26:d5:1d:ec:73:79: d3:73:32:e4:66:f9:75:45:d7:c9:8b:0c:99:69:bd: eb:6d:5d:fb:ea:96:56:79:17:d1:4d:08:20:ca:1d: b2:1f:a8:7e:5e:ab:7e:61:a4:91:9d:29:3b:31:4f: f9:6f:d0:b4:4d:a8:89:8c:f0:6d:27:95:9e:0e:76: 53:c1:47:70:fe:6c:07:67:5d:72:9d:ef:c7:58:21: 24:65:59:c8:cd:60:32:5e:57:3c:44:03:e3:b1:8c: bb:a1:7e:81:63:d5:65:66:63:21:c6:96:b6:9c:a5: 22:86:dc:3b:cb:6f:1b:1d:0d:de:e8:0d:7f:2f:a7: 72:5b:c7:6b:6c:f0:3a:68:1f:2e:88:f4:68:98:f3: 09:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:54:54:8C:71:E4:45:14:42:BF:B1:9B:3D:D9:B7:9E:F5:3F:58:E2 X509v3 Authority Key Identifier: keyid:AC:2C:B9:F6:C8:CB:FD:54:9E:9E:FC:E2:2F:22:F1:BC:DB:CB:73:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:dd:b8:95:00:a3:ef:96:ca:24:c1:14:f6:5a:b8:a2:15:e8: ce:0e:f7:c1:db:72:50:a9:f2:d7:eb:46:54:52:db:b0:f6:14: bb:c0:90:89:56:1d:4b:c5:85:3e:cb:5c:9f:31:07:6f:f5:b5: d3:b0:54:fb:09:f5:12:99:e6:6a:0c:54:df:51:be:12:5f:34: 5f:0a:03:4d:84:1b:75:67:df:6f:1a:52:ca:67:3d:e9:6d:82: 95:79:b0:45:e2:73:f6:9a:c9:27:b5:77:f0:61:da:7a:41:9d: b1:1e:43:dc:19:6e:b9:17:de:a0:5d:b3:fd:98:41:c9:ed:35: 2c:53:37:d8:c0:63:5a:6c:fc:0f:1f:26:4e:8b:b3:d5:a1:ac: 79:35:ca:b2:97:ca:75:63:5e:3b:29:d8:f6:4e:ea:6c:20:d2: f0:08:3e:9d:6e:e8:c0:b1:a5:8d:53:4d:c9:de:f8:46:1c:3f: ad:c0:37:55:d0:29:d3:07:66:cc:54:eb:df:db:6e:50:b2:a8: b4:58:7d:16:e6:b4:aa:a7:4e:e2:cd:e6:37:eb:ea:54:4b:24: 74:62:29:60:d0:ad:80:f9:0a:70:56:a1:2a:51:29:90:27:d9: 12:0c:9d:80:f7:47:87:83:24:bc:b4:44:f1:c0:07:7b:93:21: c2:e3:78:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG/7+jtAah7jqve+50KPsAATM1wAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUMyQ0I5RjZDOENCRkQ1NDlFOUVGQ0UyMkYyMkYxQkNE QkNCNzM5MjAeFw0yNjA3MjMxNTI4NTZaFw0yNjA3MjQxNjIzNTZaMDMxMTAvBgNV BAMTKEY1NTQ1NDhDNzFFNDQ1MTQ0MkJGQjE5QjNERDlCNzlFRjUzRjU4RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC62jwpbTo5FcnpvjwiTRpTAZr2 R9iWzRFBxqXrHwW5266Y7q/iJpvFK9CCm2eDtzTokndIFay+wCfH5RP9fiwBEXH+ NxW4jwSauBQcO5PJV17iGHK2eB9gRXSiucKVOx8pBHuQaUcuqlz9W94zZA2P0SbV HexzedNzMuRm+XVF18mLDJlpvettXfvqllZ5F9FNCCDKHbIfqH5eq35hpJGdKTsx T/lv0LRNqImM8G0nlZ4OdlPBR3D+bAdnXXKd78dYISRlWcjNYDJeVzxEA+OxjLuh foFj1WVmYyHGlracpSKG3DvLbxsdDd7oDX8vp3Jbx2ts8DpoHy6I9GiY8wmVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9VRUjHHkRRRCv7GbPdm3nvU/WOIwHwYDVR0j BBgwFoAUrCy59sjL/VSenvziLyLxvNvLc5IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjA1MTZhN2EtNDE5NS00NGIzLWEyNGUtY2Y4ZWQ1NzhkNzkxLzAvQUMyQ0I5RjZD OENCRkQ1NDlFOUVGQ0UyMkYyMkYxQkNEQkNCNzM5Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzJDQjlGNkM4Q0JGRDU0OUU5RUZDRTIyRjIyRjFCQ0RCQ0I3 MzkyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjA1MTZhN2EtNDE5NS00NGIzLWEy NGUtY2Y4ZWQ1NzhkNzkxLzAvQUMyQ0I5RjZDOENCRkQ1NDlFOUVGQ0UyMkYyMkYx QkNEQkNCNzM5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKnduJUAo++WyiTBFPZauKIV6M4O98HbclCp 8tfrRlRS27D2FLvAkIlWHUvFhT7LXJ8xB2/1tdOwVPsJ9RKZ5moMVN9RvhJfNF8K A02EG3Vn328aUspnPeltgpV5sEXic/aaySe1d/Bh2npBnbEeQ9wZbrkX3qBds/2Y QcntNSxTN9jAY1ps/A8fJk6Ls9WhrHk1yrKXynVjXjsp2PZO6mwg0vAIPp1u6MCx pY1TTcne+EYcP63AN1XQKdMHZsxU69/bblCyqLRYfRbmtKqnTuLN5jfr6lRLJHRi KWDQrYD5CnBWoSpRKZAn2RIMnYD3R4eDJLy0RPHAB3uTIcLjeFw= -----END CERTIFICATE-----Generated at Fri Jul 24 05:36:15 2026 by rpki-client