$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.mft File: AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.mft (raw, json) Hash identifier: 60ORLkU0fzwMt9ZHnT3GkL4lsTk/m0Vxqg1o5hcmJUQ= Subject key identifier: 17:04:80:6D:84:DB:61:63:02:59:6F:5D:85:2C:86:E0:B4:34:E9:84 Authority key identifier: AC:9E:E5:D4:AC:F7:FD:0D:FD:66:CD:FE:D1:20:17:1D:F6:19:5E:B0 Certificate issuer: /CN=AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0 Certificate serial: 68079A751808BCF2359D03E32CCDDB815E6B07A3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.mft Manifest number: C2 Signing time: Fri 25 Sep 2026 00:51:06 +0000 Manifest this update: Fri 25 Sep 2026 00:46:06 +0000 Manifest next update: Sat 26 Sep 2026 00:57:06 +0000 Files and hashes: 1: AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.crl (hash: FZtN5AK8ah4lprEHjATmq5HtmpFEcL/vzZVhZ1St6Mk=) 2: 3130332e3136322e3132322e302f32332d3234203d3e203137393935.roa (hash: OLWauFfmrw2a6NVsZr060P9JMbawsYC5rFsVrmOkFCE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.crl rsync://rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:07:9a:75:18:08:bc:f2:35:9d:03:e3:2c:cd:db:81:5e:6b:07:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0 Validity Not Before: Sep 25 00:46:06 2026 GMT Not After : Sep 26 00:57:06 2026 GMT Subject: CN=1704806D84DB616302596F5D852C86E0B434E984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6d:2d:3c:66:98:d7:ac:6f:24:53:54:c0:a7: 1a:a4:16:b6:67:3c:60:49:3f:2f:2d:00:14:b2:04: 52:03:6b:0c:99:db:98:c2:ba:2d:d8:56:71:9b:ed: e9:9e:be:30:38:48:f8:d5:1b:8f:4e:b1:7e:80:01: 1b:ff:92:13:2a:53:54:82:76:b7:49:61:0b:15:23: d4:f8:bd:43:48:77:0d:1d:12:ae:5e:63:fc:ca:ae: d2:d4:ee:d9:72:a6:28:c2:fc:87:fd:06:8a:51:3a: 4d:c7:6e:4d:a0:01:71:60:f5:66:ed:aa:62:56:91: 5d:eb:1b:41:80:52:c6:19:e1:21:02:53:47:d5:50: 4d:fb:a9:04:96:bc:ae:c0:09:fb:e3:6e:56:d7:ed: f9:01:46:05:2b:e8:e0:42:9d:9d:93:26:c5:d8:b8: 4f:e3:41:fa:71:c3:46:d0:12:79:9d:cd:51:44:a6: f8:d9:59:5d:c7:2f:e1:a0:ef:66:3e:12:b8:16:8e: 4e:84:b7:a1:47:fb:44:fd:3f:f9:87:39:dc:cf:d1: c3:7b:ab:1c:fc:38:99:e4:4e:c5:da:c7:47:c9:02: 87:b3:a1:cd:cd:94:f2:dc:59:bb:ec:81:46:12:26: 41:bf:bc:9c:c7:0d:b2:69:45:b9:72:bf:70:1a:fd: da:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:04:80:6D:84:DB:61:63:02:59:6F:5D:85:2C:86:E0:B4:34:E9:84 X509v3 Authority Key Identifier: keyid:AC:9E:E5:D4:AC:F7:FD:0D:FD:66:CD:FE:D1:20:17:1D:F6:19:5E:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:8e:76:a5:74:71:ee:5a:b3:45:66:ed:3a:e9:89:b7:f1:e0: 81:bd:ad:84:9b:25:8e:a8:35:e1:ba:00:ab:8a:d6:0a:27:05: a7:ff:93:60:20:0e:b4:7a:41:9c:5d:04:29:f6:73:b5:cc:ac: 4e:cf:ba:9f:36:be:f0:4c:66:b6:bd:f3:06:15:4b:e4:eb:a8: d6:1e:e6:29:3d:72:5c:4f:55:e2:b9:5e:4e:8e:1b:5a:17:e2: 5c:88:26:4b:8b:15:bb:12:9b:d8:62:36:0e:3d:af:59:69:39: 2f:1e:fa:eb:32:20:cb:c0:83:38:64:a0:27:02:ab:61:a0:90: 80:5c:d7:82:27:67:f6:4c:17:4d:58:f2:19:45:76:68:6d:85: 67:93:e5:02:90:0b:85:6e:43:21:d7:89:43:1c:1c:b5:ac:ea: a4:94:cd:a7:e4:b2:52:ab:6e:47:07:9c:7a:6e:62:34:f5:a6: a8:fe:fd:42:f7:9b:a0:c5:38:d9:69:f5:66:a3:4e:27:c3:e2: b4:b9:79:f3:7c:53:f6:01:4a:66:96:03:00:b7:06:a4:57:24: 0a:2d:ab:3c:30:c5:26:99:41:4a:b8:2e:f6:73:fc:33:2f:80: b2:6a:ef:c6:33:70:40:6d:89:97:1d:a5:21:08:6f:0a:30:38: 1c:0c:7d:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaAeadRgIvPI1nQPjLM3bgV5rB6MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM5RUU1RDRBQ0Y3RkQwREZENjZDREZFRDEyMDE3MURG NjE5NUVCMDAeFw0yNjA5MjUwMDQ2MDZaFw0yNjA5MjYwMDU3MDZaMDMxMTAvBgNV BAMTKDE3MDQ4MDZEODREQjYxNjMwMjU5NkY1RDg1MkM4NkUwQjQzNEU5ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDbS08ZpjXrG8kU1TApxqkFrZn PGBJPy8tABSyBFIDawyZ25jCui3YVnGb7emevjA4SPjVG49OsX6AARv/khMqU1SC drdJYQsVI9T4vUNIdw0dEq5eY/zKrtLU7tlypijC/If9BopROk3Hbk2gAXFg9Wbt qmJWkV3rG0GAUsYZ4SECU0fVUE37qQSWvK7ACfvjblbX7fkBRgUr6OBCnZ2TJsXY uE/jQfpxw0bQEnmdzVFEpvjZWV3HL+Gg72Y+ErgWjk6Et6FH+0T9P/mHOdzP0cN7 qxz8OJnkTsXax0fJAoezoc3NlPLcWbvsgUYSJkG/vJzHDbJpRblyv3Aa/dpXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFwSAbYTbYWMCWW9dhSyG4LQ06YQwHwYDVR0j BBgwFoAUrJ7l1Kz3/Q39Zs3+0SAXHfYZXrAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDFiM2ZlNDUtYjU4OC00YmI3LWFlOTAtOTFmNTdmNTkzY2I1LzAvQUM5RUU1RDRB Q0Y3RkQwREZENjZDREZFRDEyMDE3MURGNjE5NUVCMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzlFRTVENEFDRjdGRDBERkQ2NkNERkVEMTIwMTcxREY2MTk1 RUIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDFiM2ZlNDUtYjU4OC00YmI3LWFl OTAtOTFmNTdmNTkzY2I1LzAvQUM5RUU1RDRBQ0Y3RkQwREZENjZDREZFRDEyMDE3 MURGNjE5NUVCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJuOdqV0ce5as0Vm7Trpibfx4IG9rYSbJY6o NeG6AKuK1gonBaf/k2AgDrR6QZxdBCn2c7XMrE7Pup82vvBMZra98wYVS+TrqNYe 5ik9clxPVeK5Xk6OG1oX4lyIJkuLFbsSm9hiNg49r1lpOS8e+usyIMvAgzhkoCcC q2GgkIBc14InZ/ZMF01Y8hlFdmhthWeT5QKQC4VuQyHXiUMcHLWs6qSUzafkslKr bkcHnHpuYjT1pqj+/UL3m6DFONlp9WajTifD4rS5efN8U/YBSmaWAwC3BqRXJAot qzwwxSaZQUq4LvZz/DMvgLJq78YzcEBtiZcdpSEIbwowOBwMfW8= -----END CERTIFICATE-----Generated at Fri Sep 25 03:59:17 2026 by rpki-client