$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.mft File: AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.mft (raw, json) Hash identifier: f/G/+3YrJOZccyEdPSwbmX/tMc4TgDlzmK1zfs5MIZw= Subject key identifier: 44:75:A2:A7:5F:55:E1:F9:B6:D0:4D:42:F2:38:15:A6:1B:B4:EF:E1 Authority key identifier: AC:21:F3:02:F8:FE:87:98:E3:EB:EC:F7:4F:BB:4A:1A:FA:8C:0A:5A Certificate issuer: /CN=AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A Certificate serial: 11C2148D60BD4BCB945BEBF2C10E66B224131123 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 00:25:36 +0000 Manifest this update: Fri 25 Sep 2026 00:20:36 +0000 Manifest next update: Sat 26 Sep 2026 03:19:36 +0000 Files and hashes: 1: 3130332e35342e3137322e302f32342d3234203d3e203538383234.roa (hash: 2hznDtF+sHEQo6Fg1DwDt2/m1fqJNRXXGLkGt1F7ms0=) 2: AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.crl (hash: CU4gxK8nQBfMNapsXBaElozJuJrgjneRRUlc4dLGbvM=) 3: 3130332e3234322e3233332e302f32342d3234203d3e203538383234.roa (hash: F0odlT4U3J2I7U1EPBDoQbX8C+Jjnqt/uRif6Raoqb0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.crl rsync://rpki-rsync.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 03:19:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:c2:14:8d:60:bd:4b:cb:94:5b:eb:f2:c1:0e:66:b2:24:13:11:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A Validity Not Before: Sep 25 00:20:36 2026 GMT Not After : Sep 26 03:19:36 2026 GMT Subject: CN=4475A2A75F55E1F9B6D04D42F23815A61BB4EFE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8e:63:33:85:1e:48:7c:9f:fb:bd:67:e7:aa: ab:68:6e:f2:4c:1b:3f:d9:f9:80:7f:6f:9a:7e:0f: 05:f0:c0:ca:9b:4f:91:99:db:cc:88:23:5a:d8:0c: bb:f8:6c:43:c8:90:ae:df:11:73:2b:b8:9d:34:35: 8f:60:ea:27:21:19:98:ad:f1:c9:24:a5:1c:e3:ee: 01:b0:45:1e:15:78:2a:51:79:92:2f:fa:e9:3c:56: e2:22:63:33:ad:da:79:6d:e9:71:5c:98:e4:f7:4e: 15:1c:9b:47:db:f7:7d:8d:9f:2d:22:0b:7e:d1:6a: 78:ba:97:83:78:a7:ed:58:78:5f:90:f7:2a:eb:6c: ba:81:7a:a8:05:fa:fb:3e:83:ca:ee:6f:b0:ed:bb: cd:fa:e8:c5:8a:fe:84:52:94:29:70:79:66:c3:31: 55:64:fb:47:6c:38:e2:04:17:57:37:27:29:71:3c: 54:83:d9:8a:8b:77:92:85:6b:89:8b:f1:34:df:e0: 9b:f3:c8:8f:d1:48:92:03:ce:5a:41:0c:63:ec:5f: ec:be:07:06:30:a2:c7:d6:44:39:ee:b9:e7:37:cf: b8:57:6b:75:08:8c:40:88:1b:b8:7c:8e:2e:b6:7c: 01:09:85:53:e1:71:6f:eb:fe:f0:61:6b:06:81:04: 2e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:75:A2:A7:5F:55:E1:F9:B6:D0:4D:42:F2:38:15:A6:1B:B4:EF:E1 X509v3 Authority Key Identifier: keyid:AC:21:F3:02:F8:FE:87:98:E3:EB:EC:F7:4F:BB:4A:1A:FA:8C:0A:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:6c:22:78:df:ea:33:9e:a9:16:30:29:17:23:b2:8c:3a:dc: a1:bd:17:5a:dd:75:26:a4:fa:1f:a0:73:65:91:59:fb:78:51: 2c:af:45:6c:2e:9b:00:78:dd:a6:dc:ba:18:7a:bb:5c:b8:01: b4:a2:bb:ae:14:c2:f2:1e:f7:98:8e:94:d8:ba:d7:fd:de:47: 87:a2:61:d6:85:7c:32:1e:fe:e8:3a:09:a9:13:3f:ba:2e:ad: b1:08:53:58:28:45:00:60:bd:a4:e7:55:d6:cd:12:70:27:e4: 1d:cf:12:f4:3b:f0:27:c3:44:7a:b4:7d:d6:df:1d:96:f4:a8: 85:5c:67:0d:d2:82:8a:75:76:c5:69:9c:af:fe:bf:31:cd:fb: 26:e6:b0:1c:70:05:b1:4c:e6:68:90:f0:45:7e:5c:01:47:75: 20:22:62:68:5c:c0:46:9e:0f:b7:53:54:7e:64:fc:d9:aa:fd: 67:44:1e:66:c7:21:0d:4d:ab:10:b8:65:d2:e5:59:ee:9d:c5: 12:92:0b:a6:1a:7b:aa:4d:e0:d2:c4:12:a9:0f:5c:d6:fd:9b: f2:ad:4c:63:c2:f4:8f:f2:00:e0:13:fd:77:2e:72:9b:b4:fe: e3:f0:ad:30:61:39:0e:97:c6:06:26:84:9d:6d:5a:e6:3e:f0: b9:0c:d4:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEcIUjWC9S8uUW+vywQ5msiQTESMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUMyMUYzMDJGOEZFODc5OEUzRUJFQ0Y3NEZCQjRBMUFG QThDMEE1QTAeFw0yNjA5MjUwMDIwMzZaFw0yNjA5MjYwMzE5MzZaMDMxMTAvBgNV BAMTKDQ0NzVBMkE3NUY1NUUxRjlCNkQwNEQ0MkYyMzgxNUE2MUJCNEVGRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyjmMzhR5IfJ/7vWfnqqtobvJM Gz/Z+YB/b5p+DwXwwMqbT5GZ28yII1rYDLv4bEPIkK7fEXMruJ00NY9g6ichGZit 8ckkpRzj7gGwRR4VeCpReZIv+uk8VuIiYzOt2nlt6XFcmOT3ThUcm0fb932Nny0i C37Rani6l4N4p+1YeF+Q9yrrbLqBeqgF+vs+g8rub7Dtu8366MWK/oRSlClweWbD MVVk+0dsOOIEF1c3JylxPFSD2YqLd5KFa4mL8TTf4JvzyI/RSJIDzlpBDGPsX+y+ BwYwosfWRDnuuec3z7hXa3UIjECIG7h8ji62fAEJhVPhcW/r/vBhawaBBC5XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURHWip19V4fm20E1C8jgVphu07+EwHwYDVR0j BBgwFoAUrCHzAvj+h5jj6+z3T7tKGvqMClowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTdlMGZhZjAtNzg4ZC00OTViLWFjOTgtZjM1MTYxOTVkYjYwLzAvQUMyMUYzMDJG OEZFODc5OEUzRUJFQ0Y3NEZCQjRBMUFGQThDMEE1QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzIxRjMwMkY4RkU4Nzk4RTNFQkVDRjc0RkJCNEExQUZBOEMw QTVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTdlMGZhZjAtNzg4ZC00OTViLWFj OTgtZjM1MTYxOTVkYjYwLzAvQUMyMUYzMDJGOEZFODc5OEUzRUJFQ0Y3NEZCQjRB MUFGQThDMEE1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADRsInjf6jOeqRYwKRcjsow63KG9F1rddSak +h+gc2WRWft4USyvRWwumwB43abcuhh6u1y4AbSiu64UwvIe95iOlNi61/3eR4ei YdaFfDIe/ug6CakTP7ourbEIU1goRQBgvaTnVdbNEnAn5B3PEvQ78CfDRHq0fdbf HZb0qIVcZw3Sgop1dsVpnK/+vzHN+ybmsBxwBbFM5miQ8EV+XAFHdSAiYmhcwEae D7dTVH5k/Nmq/WdEHmbHIQ1NqxC4ZdLlWe6dxRKSC6Yae6pN4NLEEqkPXNb9m/Kt TGPC9I/yAOAT/Xcucpu0/uPwrTBhOQ6XxgYmhJ1tWuY+8LkM1BU= -----END CERTIFICATE-----Generated at Fri Sep 25 14:07:37 2026 by rpki-client