$ rpki-client -vvf rpki-rsync.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.mft File: AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.mft (raw, json) Hash identifier: v4rG6YRvxPVJfXVLala/1QwTkSu/tUFm4sG2NBb8Y5c= Subject key identifier: 72:E9:67:09:48:5E:28:81:AC:C1:93:45:28:6A:F7:5B:50:91:2E:6A Authority key identifier: AC:23:DD:AA:2C:89:DF:C4:3F:0D:12:03:31:CD:3C:8F:1E:60:D1:CA Certificate issuer: /CN=AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA Certificate serial: 0C2D552EEC4E81364FEE186CDF4447CC6C89E860 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 01:10:33 +0000 Manifest this update: Fri 24 Jul 2026 01:05:33 +0000 Manifest next update: Sat 25 Jul 2026 04:53:33 +0000 Files and hashes: 1: AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.crl (hash: cAXsALeEAWRal2hiLcB+emZEhhbG3m5jBY7FQU5r3DI=) 2: 3130332e3138342e31392e302f32342d3234203d3e20313439363735.roa (hash: tpylCt5CgrBx6WkyqQ/Q0MxG2lKbEyC1EbhCs0e+Yuo=) 3: 3130332e3138342e31382e302f32332d3233203d3e20313439363735.roa (hash: IKu3DMB2Lrk9WDHkDL4CNW43tnQhk2oAbk+rhH/oyA8=) 4: 3130332e3138342e31392e302f32342d3234203d3e203438343635.roa (hash: jT66ugDcwrPPZn+FW9LcATaa7pa94IbpNMskVZmpYyA=) 5: 3130332e3138342e31382e302f32342d3234203d3e20313439363735.roa (hash: etrhCGlRM8YYOHb6oshuOaV8mvXHwHvEf9qlp95P9kg=) 6: 3130332e3138342e31382e302f32342d3234203d3e203438343635.roa (hash: AMN816Na79PG9Dr8taQyQqg9+CtJXIVEVEtntXynyXw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.crl rsync://rpki-rsync.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:2d:55:2e:ec:4e:81:36:4f:ee:18:6c:df:44:47:cc:6c:89:e8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA Validity Not Before: Jul 24 01:05:33 2026 GMT Not After : Jul 25 04:53:33 2026 GMT Subject: CN=72E96709485E2881ACC19345286AF75B50912E6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:13:11:a2:50:c7:66:da:9d:17:6b:b9:a3:2a: e2:a0:38:47:5b:c1:e9:7a:a2:b9:fb:d7:bc:51:e9: c2:d3:05:9d:ab:83:8f:86:bd:09:fa:ce:ee:da:fe: f8:9c:70:1a:72:0d:93:29:88:b3:03:f9:58:97:ba: b8:98:72:0e:62:77:b9:a6:e4:a0:0a:52:dd:df:d8: ea:e1:c7:c6:7e:d2:4c:fd:36:f4:b5:ab:82:fb:35: 0d:b8:44:6f:93:96:74:a5:a6:56:b1:e1:74:b7:9c: b9:56:a2:ec:f3:2d:a2:ea:df:54:d5:7c:6a:2f:83: 1b:cf:c0:f6:d2:53:a0:a6:50:5e:d1:6b:2b:ae:14: 85:a2:e8:fd:c0:1f:af:14:1c:cb:b2:6b:62:3f:55: 19:a3:f9:fb:29:39:14:35:e5:d1:88:d1:c1:92:ab: 1d:a4:86:16:d6:ee:00:af:a5:17:67:af:91:97:15: cb:a0:38:13:8e:92:5c:47:12:aa:3b:55:1d:dc:42: 29:5d:2b:b9:1b:30:75:d7:cb:70:d7:bb:c9:8e:db: 37:d6:4e:40:e7:4e:41:4a:fe:2d:5a:46:75:c3:74: 2f:ac:77:8d:f0:ff:63:70:30:58:a6:de:34:74:3c: af:9e:05:93:6d:98:e6:35:f7:8c:69:bb:e8:36:74: 9e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:E9:67:09:48:5E:28:81:AC:C1:93:45:28:6A:F7:5B:50:91:2E:6A X509v3 Authority Key Identifier: keyid:AC:23:DD:AA:2C:89:DF:C4:3F:0D:12:03:31:CD:3C:8F:1E:60:D1:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:c6:96:d2:3f:e5:d4:36:7e:03:0c:81:3b:23:19:cb:78:ba: 49:48:0a:60:25:8b:14:32:36:6d:c6:49:20:0a:48:76:2f:57: 32:d0:b6:f7:43:7e:1c:4f:bc:f5:6b:1a:89:50:15:14:85:4f: 18:fd:f8:4c:a4:56:97:32:e6:7b:51:e7:31:91:ba:e2:de:4b: 4a:3e:03:d7:82:67:31:44:08:47:9d:b0:bf:b1:a7:06:51:1c: 29:1a:10:9d:bf:d2:79:f6:91:cb:78:3f:5a:46:49:00:fc:8b: 4e:78:7e:4a:a7:97:f6:4d:32:fe:bc:b9:03:7d:2a:a0:c1:6e: 65:48:4f:a0:11:d3:e6:d9:94:95:29:44:8a:e7:34:0a:c5:10: f2:e6:29:54:a4:4a:e6:63:1a:51:0e:d3:87:46:77:72:fc:9c: d7:7d:29:2f:73:c8:84:e4:0e:61:74:e2:cc:17:ed:07:07:48: ef:99:5d:26:8f:a2:26:9e:f8:5b:ee:b2:70:f9:ca:dd:5e:12: 94:38:f8:67:89:fa:7b:bd:50:b9:43:4d:14:c0:c0:52:02:b2: 49:39:78:06:47:e3:d3:63:38:24:ac:92:b9:4c:87:11:40:2c: 9c:d9:6b:b6:c0:a8:d3:7f:00:3c:50:81:bf:08:1b:7e:e5:c9: 6b:9e:f1:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDC1VLuxOgTZP7hhs30RHzGyJ6GAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUMyM0REQUEyQzg5REZDNDNGMEQxMjAzMzFDRDNDOEYx RTYwRDFDQTAeFw0yNjA3MjQwMTA1MzNaFw0yNjA3MjUwNDUzMzNaMDMxMTAvBgNV BAMTKDcyRTk2NzA5NDg1RTI4ODFBQ0MxOTM0NTI4NkFGNzVCNTA5MTJFNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyExGiUMdm2p0Xa7mjKuKgOEdb wel6orn717xR6cLTBZ2rg4+GvQn6zu7a/viccBpyDZMpiLMD+ViXuriYcg5id7mm 5KAKUt3f2Orhx8Z+0kz9NvS1q4L7NQ24RG+TlnSlplax4XS3nLlWouzzLaLq31TV fGovgxvPwPbSU6CmUF7RayuuFIWi6P3AH68UHMuya2I/VRmj+fspORQ15dGI0cGS qx2khhbW7gCvpRdnr5GXFcugOBOOklxHEqo7VR3cQildK7kbMHXXy3DXu8mO2zfW TkDnTkFK/i1aRnXDdC+sd43w/2NwMFim3jR0PK+eBZNtmOY194xpu+g2dJ5PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUculnCUheKIGswZNFKGr3W1CRLmowHwYDVR0j BBgwFoAUrCPdqiyJ38Q/DRIDMc08jx5g0cowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjBkOTE0ZWYtMGIxZi00OTBiLTgwOGQtYTI3YjgzZmY5YTNlLzAvQUMyM0REQUEy Qzg5REZDNDNGMEQxMjAzMzFDRDNDOEYxRTYwRDFDQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzIzRERBQTJDODlERkM0M0YwRDEyMDMzMUNEM0M4RjFFNjBE MUNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjBkOTE0ZWYtMGIxZi00OTBiLTgw OGQtYTI3YjgzZmY5YTNlLzAvQUMyM0REQUEyQzg5REZDNDNGMEQxMjAzMzFDRDND OEYxRTYwRDFDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGbGltI/5dQ2fgMMgTsjGct4uklICmAlixQy Nm3GSSAKSHYvVzLQtvdDfhxPvPVrGolQFRSFTxj9+EykVpcy5ntR5zGRuuLeS0o+ A9eCZzFECEedsL+xpwZRHCkaEJ2/0nn2kct4P1pGSQD8i054fkqnl/ZNMv68uQN9 KqDBbmVIT6AR0+bZlJUpRIrnNArFEPLmKVSkSuZjGlEO04dGd3L8nNd9KS9zyITk DmF04swX7QcHSO+ZXSaPoiae+FvusnD5yt1eEpQ4+GeJ+nu9ULlDTRTAwFICskk5 eAZH49NjOCSskrlMhxFALJzZa7bAqNN/ADxQgb8IG37lyWue8QA= -----END CERTIFICATE-----Generated at Fri Jul 24 05:05:02 2026 by rpki-client