$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.mft File: AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.mft (raw, json) Hash identifier: 5fuFcuOMK7lQkbM7wrTdwUl+KsJouiF3Wh2te57WWhw= Subject key identifier: A0:C4:77:82:16:3B:BB:3A:BC:8D:7C:D9:5B:08:BB:B4:58:0B:DD:40 Authority key identifier: AC:23:DD:AA:2C:89:DF:C4:3F:0D:12:03:31:CD:3C:8F:1E:60:D1:CA Certificate issuer: /CN=AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA Certificate serial: 6C01196F5AFF7EE795FBD7D0814043FDA1D349F3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 19:40:15 +0000 Manifest this update: Wed 23 Sep 2026 19:35:15 +0000 Manifest next update: Thu 24 Sep 2026 21:36:15 +0000 Files and hashes: 1: 3130332e3138342e31392e302f32342d3234203d3e203438343635.roa (hash: jT66ugDcwrPPZn+FW9LcATaa7pa94IbpNMskVZmpYyA=) 2: 3130332e3138342e31382e302f32332d3233203d3e20313439363735.roa (hash: IKu3DMB2Lrk9WDHkDL4CNW43tnQhk2oAbk+rhH/oyA8=) 3: 3130332e3138342e31382e302f32342d3234203d3e20313439363735.roa (hash: etrhCGlRM8YYOHb6oshuOaV8mvXHwHvEf9qlp95P9kg=) 4: 3130332e3138342e31392e302f32342d3234203d3e20313439363735.roa (hash: tpylCt5CgrBx6WkyqQ/Q0MxG2lKbEyC1EbhCs0e+Yuo=) 5: 3130332e3138342e31382e302f32342d3234203d3e203438343635.roa (hash: AMN816Na79PG9Dr8taQyQqg9+CtJXIVEVEtntXynyXw=) 6: AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.crl (hash: CljeL5el4NpDXF0RzZv8hc0rd+BPqnQO8nJ+ERkDA1M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.crl rsync://rpki-rsync.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 21:36:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:01:19:6f:5a:ff:7e:e7:95:fb:d7:d0:81:40:43:fd:a1:d3:49:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA Validity Not Before: Sep 23 19:35:15 2026 GMT Not After : Sep 24 21:36:15 2026 GMT Subject: CN=A0C47782163BBB3ABC8D7CD95B08BBB4580BDD40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:42:5e:a1:a3:67:88:da:e4:54:62:4e:5c:90: 37:4f:bb:cf:08:75:9b:f2:46:ae:42:a7:9a:f4:72: 66:8d:6b:72:fb:46:96:86:bf:a0:07:77:30:a3:b3: f2:0b:5f:4e:df:30:4f:0c:6f:4a:48:00:19:bb:d8: ea:6a:fb:b1:a3:35:a9:ca:84:fe:66:ff:a2:f8:a4: 11:ae:5a:2e:e8:7a:bd:84:76:40:29:cf:95:ad:d1: 00:f4:75:df:2e:4f:56:a1:af:f3:54:ea:55:4c:c0: f7:5b:4f:18:85:5c:88:d8:37:62:91:08:1c:c6:d9: 54:f1:79:c2:42:cf:4b:93:14:b0:2e:de:4d:92:e1: 74:f6:33:76:f7:f7:df:e0:14:b3:02:56:ec:f3:1a: a2:51:1a:10:54:23:46:6f:8f:14:44:aa:0c:11:a6: 22:30:f7:8b:2d:f9:c5:78:a0:d1:3d:e1:f7:b8:15: aa:da:91:1b:9a:f2:1d:bf:4a:b0:cf:6f:59:dd:40: 32:4e:93:68:6c:c3:80:99:b0:b2:46:e4:fc:a9:37: 28:7c:96:bc:46:16:82:6d:21:08:94:b3:e0:7c:3e: b2:5f:94:90:86:13:17:b8:d9:fc:bf:c5:93:47:35: ee:9e:b3:b1:05:e2:87:3d:f6:22:be:00:d6:57:1f: 0f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:C4:77:82:16:3B:BB:3A:BC:8D:7C:D9:5B:08:BB:B4:58:0B:DD:40 X509v3 Authority Key Identifier: keyid:AC:23:DD:AA:2C:89:DF:C4:3F:0D:12:03:31:CD:3C:8F:1E:60:D1:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:44:26:d5:5c:79:94:87:d8:58:06:35:da:87:94:77:e8:2e: 3b:ec:03:30:4a:b7:f7:93:bd:98:60:87:de:5a:09:f6:92:46: 1f:1d:ea:c9:79:49:bb:74:96:c5:c6:59:1c:4d:04:77:b3:09: 81:61:c3:5a:c4:65:93:e0:47:9d:0d:44:91:92:95:d2:d5:71: e6:94:c0:46:56:04:80:7e:ed:8c:a3:c0:17:3c:b0:cc:00:2a: ba:d7:80:a4:78:4f:d1:c1:eb:d1:1d:23:c2:44:f6:49:a1:11: 74:f2:a6:16:48:d5:55:59:5b:f1:d9:62:7f:75:09:41:6b:e3: 72:c3:a6:37:40:76:04:1a:c1:4a:35:e4:2e:11:c0:52:e9:1c: 8e:fc:6e:7d:0e:38:fd:80:27:eb:ea:bc:6d:81:22:d3:ce:86: ce:7c:ce:26:ac:14:2c:d8:b5:eb:c0:8e:55:c2:05:5a:7b:5c: 26:70:93:47:a9:a4:38:7d:61:d8:61:d6:27:e2:f4:ef:ea:69: 08:de:9d:f4:38:f1:1f:0a:dd:84:eb:c0:c7:c9:f3:00:bb:94: 61:a9:8f:e7:5c:87:21:e2:53:e5:53:ed:1b:ec:cb:4e:2f:f5: 69:23:de:4d:1a:3f:fa:ea:b7:43:5b:c4:3c:97:72:96:69:0f: 8b:b4:02:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbAEZb1r/fueV+9fQgUBD/aHTSfMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUMyM0REQUEyQzg5REZDNDNGMEQxMjAzMzFDRDNDOEYx RTYwRDFDQTAeFw0yNjA5MjMxOTM1MTVaFw0yNjA5MjQyMTM2MTVaMDMxMTAvBgNV BAMTKEEwQzQ3NzgyMTYzQkJCM0FCQzhEN0NEOTVCMDhCQkI0NTgwQkRENDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Ql6ho2eI2uRUYk5ckDdPu88I dZvyRq5Cp5r0cmaNa3L7RpaGv6AHdzCjs/ILX07fME8Mb0pIABm72Opq+7GjNanK hP5m/6L4pBGuWi7oer2EdkApz5Wt0QD0dd8uT1ahr/NU6lVMwPdbTxiFXIjYN2KR CBzG2VTxecJCz0uTFLAu3k2S4XT2M3b399/gFLMCVuzzGqJRGhBUI0ZvjxREqgwR piIw94st+cV4oNE94fe4FarakRua8h2/SrDPb1ndQDJOk2hsw4CZsLJG5PypNyh8 lrxGFoJtIQiUs+B8PrJflJCGExe42fy/xZNHNe6es7EF4oc99iK+ANZXHw/xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoMR3ghY7uzq8jXzZWwi7tFgL3UAwHwYDVR0j BBgwFoAUrCPdqiyJ38Q/DRIDMc08jx5g0cowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjBkOTE0ZWYtMGIxZi00OTBiLTgwOGQtYTI3YjgzZmY5YTNlLzAvQUMyM0REQUEy Qzg5REZDNDNGMEQxMjAzMzFDRDNDOEYxRTYwRDFDQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzIzRERBQTJDODlERkM0M0YwRDEyMDMzMUNEM0M4RjFFNjBE MUNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjBkOTE0ZWYtMGIxZi00OTBiLTgw OGQtYTI3YjgzZmY5YTNlLzAvQUMyM0REQUEyQzg5REZDNDNGMEQxMjAzMzFDRDND OEYxRTYwRDFDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIpEJtVceZSH2FgGNdqHlHfoLjvsAzBKt/eT vZhgh95aCfaSRh8d6sl5Sbt0lsXGWRxNBHezCYFhw1rEZZPgR50NRJGSldLVceaU wEZWBIB+7YyjwBc8sMwAKrrXgKR4T9HB69EdI8JE9kmhEXTyphZI1VVZW/HZYn91 CUFr43LDpjdAdgQawUo15C4RwFLpHI78bn0OOP2AJ+vqvG2BItPOhs58ziasFCzY tevAjlXCBVp7XCZwk0eppDh9Ydhh1ifi9O/qaQjenfQ48R8K3YTrwMfJ8wC7lGGp j+dchyHiU+VT7Rvsy04v9Wkj3k0aP/rqt0NbxDyXcpZpD4u0AgY= -----END CERTIFICATE-----Generated at Thu Sep 24 12:47:34 2026 by rpki-client