$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.mft File: ACB5F5BD4845167F55B8DBC49245C40C476C72D1.mft (raw, json) Hash identifier: sPRgarVw/1F2KHRuFYxGbpRWf9csY11zmLX8XN3BeOA= Subject key identifier: 9A:69:55:7A:A3:C6:73:2C:46:9D:CA:10:5F:7F:03:F5:BB:09:6A:EC Authority key identifier: AC:B5:F5:BD:48:45:16:7F:55:B8:DB:C4:92:45:C4:0C:47:6C:72:D1 Certificate issuer: /CN=ACB5F5BD4845167F55B8DBC49245C40C476C72D1 Certificate serial: 0D0039CD419D47A0AAFEC0A346976D7424090491 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 14:29:01 +0000 Manifest this update: Wed 23 Sep 2026 14:24:01 +0000 Manifest next update: Thu 24 Sep 2026 18:16:01 +0000 Files and hashes: 1: 323430363a313334303a3a2f33322d3332203d3e20313430343037.roa (hash: WxEwSz+sWi75wTD9LX4+TZFvBImk89xubZTfF5v2cCg=) 2: 323430363a313334303a3a2f33322d3333203d3e20313430343037.roa (hash: MI6jQTtOVHvsuWHm0uvBE0TFhtVi+xCMKjXMCSCBFDY=) 3: 3130332e3135312e33322e302f32342d3234203d3e20313430343037.roa (hash: yHKtP8J6sRjd2vBKKZ1C8jqGxnt5X4o3lstFY/wy1jg=) 4: ACB5F5BD4845167F55B8DBC49245C40C476C72D1.crl (hash: xFr1vO0EVnKXBda9fqU4Ndpo+w9crTVTfIOmd3jd+ek=) 5: 323430363a313334303a3a2f33322d3430203d3e20313430343037.roa (hash: CVFptYCjc0BlHCccW2Xncqnkcsz2aSryEWVdhnNHxQY=) 6: 3130332e3135312e33322e302f32332d3233203d3e20313430343037.roa (hash: zegPh8h8i8vXslaukZ/A0UJgubb+r4V2izsS5x1SFA0=) 7: 3130332e3135312e33332e302f32342d3234203d3e20313430343037.roa (hash: 12cGaGOgBCZ2rP3AvRmGNqqU8d1JvTtobCIZ/qRPUPE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.crl rsync://rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 18:16:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:00:39:cd:41:9d:47:a0:aa:fe:c0:a3:46:97:6d:74:24:09:04:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ACB5F5BD4845167F55B8DBC49245C40C476C72D1 Validity Not Before: Sep 23 14:24:01 2026 GMT Not After : Sep 24 18:16:01 2026 GMT Subject: CN=9A69557AA3C6732C469DCA105F7F03F5BB096AEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:07:91:1d:16:25:66:57:e2:df:e9:d3:43:eb: 40:6d:f2:13:4f:45:27:92:34:d3:85:37:14:21:c8: 9a:0a:07:a3:73:8f:47:72:8a:43:1a:25:f3:c8:b5: 9a:f8:46:cd:5f:7f:b1:ef:2e:e2:1f:9d:3d:44:5e: 00:c8:3b:42:16:50:c7:41:8a:47:25:d9:10:0f:c5: 99:d3:94:29:03:a4:83:c2:80:42:ab:0f:45:ea:fd: a6:97:e2:49:93:52:fa:50:8e:ec:ee:34:11:bc:cc: c7:cc:b5:5a:9a:4a:82:e0:c2:2f:10:df:ad:0b:49: ca:e3:b9:0f:87:b7:e7:d9:96:a5:4e:63:bf:ca:57: 9c:56:cd:2c:f6:ab:ce:72:09:81:a9:1f:10:51:9b: 7f:de:ae:eb:ef:6c:7e:b3:b5:27:97:a2:83:5a:c3: 72:6e:99:6f:ed:69:db:65:6f:76:a0:0d:98:b6:0f: c6:24:69:a4:b9:7f:a4:ce:76:10:e1:45:4b:3f:a8: 59:d7:8e:2f:48:da:ba:4b:09:2d:d9:5e:53:41:c8: 6c:0d:70:f2:9f:3d:93:e5:ea:23:e9:4c:18:ae:5e: 4e:d9:1e:7f:90:73:70:24:af:59:a2:30:1c:02:e5: ac:94:4c:30:23:85:89:dc:48:b2:fc:ad:70:f0:a2: bf:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:69:55:7A:A3:C6:73:2C:46:9D:CA:10:5F:7F:03:F5:BB:09:6A:EC X509v3 Authority Key Identifier: keyid:AC:B5:F5:BD:48:45:16:7F:55:B8:DB:C4:92:45:C4:0C:47:6C:72:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/ACB5F5BD4845167F55B8DBC49245C40C476C72D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:21:81:c3:c6:6a:9e:37:a7:7b:d6:84:b8:e9:70:f9:f5:73: 80:79:aa:55:3d:21:38:2d:a3:fe:de:73:59:ba:56:01:01:09: 66:88:2a:52:4a:e1:4a:2b:a5:b1:b9:79:61:33:93:d6:03:cd: 0f:0a:87:95:76:8a:d8:53:7b:03:79:ff:fc:43:3b:4b:0f:e2: 99:1e:ec:c3:1f:b2:2d:64:c5:5f:3f:4c:d0:d3:4e:7a:81:30: 12:c0:1a:af:61:13:ed:bc:bb:99:fa:03:d1:70:fc:03:cd:89: 3e:94:ef:85:74:8d:96:17:e8:b8:5c:b1:80:df:e0:6f:61:78: 11:da:04:50:35:39:57:93:10:82:5e:43:aa:ab:19:5a:ad:19: 27:9e:4a:83:ad:9a:a2:e7:92:fd:96:da:87:8b:3c:87:9a:bb: e1:ae:79:cc:88:81:bb:04:48:bb:ec:71:97:a5:7c:b6:3e:ac: c1:99:a6:d1:12:cd:5d:30:15:32:c2:f4:c3:96:37:8f:c2:18: ed:3e:22:ab:6d:f3:29:ee:96:07:b3:67:87:0f:95:6a:2f:99: 10:db:42:6b:72:6c:08:56:89:91:04:4f:02:ea:96:71:65:fa: d6:52:8c:a8:a1:5e:f4:a1:23:f9:00:b2:2a:42:7a:95:c9:44: 71:13:e7:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDQA5zUGdR6Cq/sCjRpdtdCQJBJEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUNCNUY1QkQ0ODQ1MTY3RjU1QjhEQkM0OTI0NUM0MEM0 NzZDNzJEMTAeFw0yNjA5MjMxNDI0MDFaFw0yNjA5MjQxODE2MDFaMDMxMTAvBgNV BAMTKDlBNjk1NTdBQTNDNjczMkM0NjlEQ0ExMDVGN0YwM0Y1QkIwOTZBRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQB5EdFiVmV+Lf6dND60Bt8hNP RSeSNNOFNxQhyJoKB6Nzj0dyikMaJfPItZr4Rs1ff7HvLuIfnT1EXgDIO0IWUMdB ikcl2RAPxZnTlCkDpIPCgEKrD0Xq/aaX4kmTUvpQjuzuNBG8zMfMtVqaSoLgwi8Q 360LScrjuQ+Ht+fZlqVOY7/KV5xWzSz2q85yCYGpHxBRm3/eruvvbH6ztSeXooNa w3JumW/tadtlb3agDZi2D8YkaaS5f6TOdhDhRUs/qFnXji9I2rpLCS3ZXlNByGwN cPKfPZPl6iPpTBiuXk7ZHn+Qc3Akr1miMBwC5ayUTDAjhYncSLL8rXDwor8VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmmlVeqPGcyxGncoQX38D9bsJauwwHwYDVR0j BBgwFoAUrLX1vUhFFn9VuNvEkkXEDEdsctEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzU5NmJjYzgtMzhjZC00NDM3LTgwYjEtNWJhZTlmODU3OTM3LzAvQUNCNUY1QkQ0 ODQ1MTY3RjU1QjhEQkM0OTI0NUM0MEM0NzZDNzJEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQ0I1RjVCRDQ4NDUxNjdGNTVCOERCQzQ5MjQ1QzQwQzQ3NkM3 MkQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzU5NmJjYzgtMzhjZC00NDM3LTgw YjEtNWJhZTlmODU3OTM3LzAvQUNCNUY1QkQ0ODQ1MTY3RjU1QjhEQkM0OTI0NUM0 MEM0NzZDNzJEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKwhgcPGap43p3vWhLjpcPn1c4B5qlU9ITgt o/7ec1m6VgEBCWaIKlJK4UorpbG5eWEzk9YDzQ8Kh5V2ithTewN5//xDO0sP4pke 7MMfsi1kxV8/TNDTTnqBMBLAGq9hE+28u5n6A9Fw/APNiT6U74V0jZYX6LhcsYDf 4G9heBHaBFA1OVeTEIJeQ6qrGVqtGSeeSoOtmqLnkv2W2oeLPIeau+GuecyIgbsE SLvscZelfLY+rMGZptESzV0wFTLC9MOWN4/CGO0+Iqtt8ynulgezZ4cPlWovmRDb QmtybAhWiZEETwLqlnFl+tZSjKihXvShI/kAsipCepXJRHET57w= -----END CERTIFICATE-----Generated at Thu Sep 24 08:55:10 2026 by rpki-client