$ rpki-client -vvf rpki-rsync.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.mft File: AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.mft (raw, json) Hash identifier: hhO5W+PVX9+CMfGoHxSrW7PHE9B+bkNMh9+GX3DKByw= Subject key identifier: 94:65:08:38:42:2D:D3:20:E4:85:D0:C8:6F:AD:4C:D2:7D:17:AC:99 Authority key identifier: AC:21:F3:02:F8:FE:87:98:E3:EB:EC:F7:4F:BB:4A:1A:FA:8C:0A:5A Certificate issuer: /CN=AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A Certificate serial: 0912FAB1435AAD3C6000F7A7D656D2B5AC95098C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.mft Manifest number: 6E Signing time: Fri 24 Jul 2026 06:27:15 +0000 Manifest this update: Fri 24 Jul 2026 06:22:15 +0000 Manifest next update: Sat 25 Jul 2026 07:42:15 +0000 Files and hashes: 1: AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.crl (hash: IZ09Xqdz+W9+4u149PycKhmpmXfGOHsRJ4gF3kPKzDw=) 2: 3130332e35342e3137322e302f32342d3234203d3e203538383234.roa (hash: 2hznDtF+sHEQo6Fg1DwDt2/m1fqJNRXXGLkGt1F7ms0=) 3: 3130332e3234322e3233332e302f32342d3234203d3e203538383234.roa (hash: F0odlT4U3J2I7U1EPBDoQbX8C+Jjnqt/uRif6Raoqb0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.crl rsync://rpki-rsync.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:12:fa:b1:43:5a:ad:3c:60:00:f7:a7:d6:56:d2:b5:ac:95:09:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A Validity Not Before: Jul 24 06:22:15 2026 GMT Not After : Jul 25 07:42:15 2026 GMT Subject: CN=94650838422DD320E485D0C86FAD4CD27D17AC99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b5:03:bb:89:57:50:c1:8f:32:07:2d:47:ba: b9:81:e8:c0:ec:34:8c:ae:2b:6b:ed:6c:7d:e1:26: 1e:64:22:18:4d:8e:f5:d3:97:77:d0:7a:7c:bc:99: cf:5d:77:7a:b5:12:d0:b5:a1:c3:ff:b0:d3:a8:9a: cf:23:f4:c6:9a:05:6f:d4:c4:6f:cc:9c:6d:42:69: 63:f8:d6:80:95:e3:d9:ae:20:1d:0f:ea:54:ec:76: 9e:8d:7c:3e:1c:91:d8:95:99:bf:7d:f2:c5:38:43: a8:67:1a:b7:f5:92:bd:cb:2e:29:19:3f:e0:07:5b: 41:fb:9d:8e:55:6b:61:02:4b:fc:cb:55:18:47:7b: d3:8b:c2:ca:85:f9:39:23:21:7b:66:9e:59:fe:c8: 02:55:c5:6f:7d:b7:02:a2:4d:7b:8b:c6:57:cf:f1: 25:fa:56:22:77:8e:1c:cc:d4:3c:e6:28:dd:85:f4: 32:c6:41:81:bf:bf:ef:c2:93:fa:7c:27:30:b7:2b: 72:86:b2:16:c4:4b:16:2d:ee:9a:92:68:f3:04:33: ad:55:5e:07:25:ff:b1:f3:aa:b3:f1:01:c2:c0:13: d0:0c:2e:c5:b2:ed:8b:55:8a:33:41:53:32:4c:4c: 4a:c7:b4:f2:31:da:f1:a2:05:10:60:22:e9:87:68: 66:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:65:08:38:42:2D:D3:20:E4:85:D0:C8:6F:AD:4C:D2:7D:17:AC:99 X509v3 Authority Key Identifier: keyid:AC:21:F3:02:F8:FE:87:98:E3:EB:EC:F7:4F:BB:4A:1A:FA:8C:0A:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:ff:0a:c4:3e:25:fc:10:09:28:12:8a:35:12:7d:52:43:54: ea:74:4d:ff:90:dd:0f:f7:bf:37:c8:a8:db:42:9d:ff:13:40: 2c:b3:11:13:83:ae:ca:38:dd:c5:ec:b1:2b:41:55:57:36:82: 47:08:67:09:0b:6f:76:9f:10:66:30:78:53:63:86:4c:e2:5a: 36:6a:ed:dc:1d:e4:1b:97:63:fc:ef:00:67:53:39:b5:d4:b2: 7e:80:57:d0:92:28:90:ce:8d:08:43:e8:d1:86:76:dc:2d:26: 5d:b0:d7:81:c2:bc:a1:57:8f:3f:e4:e5:c9:63:5d:b7:d1:36: ec:27:2d:07:24:b1:76:42:d5:1e:1b:d7:1e:a8:ae:c0:3e:4d: af:45:14:32:38:ac:e8:ac:69:f6:bf:14:a0:57:43:fc:12:1c: dc:e0:d7:39:ed:53:55:22:6f:29:30:34:64:4f:89:50:1a:2c: 36:9a:69:73:6d:53:26:b2:93:f3:b8:53:39:cb:49:5e:b2:11: f8:5a:7f:81:7a:e4:44:d1:8c:8d:78:db:6f:3b:e3:dd:61:47: 18:89:8d:91:05:ff:3d:6a:26:3e:a4:f7:64:28:b5:8e:0f:38: ca:f0:3e:56:98:30:d9:0b:6f:6a:71:19:43:08:e7:d2:54:0d: 23:77:1e:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCRL6sUNarTxgAPen1lbStayVCYwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUMyMUYzMDJGOEZFODc5OEUzRUJFQ0Y3NEZCQjRBMUFG QThDMEE1QTAeFw0yNjA3MjQwNjIyMTVaFw0yNjA3MjUwNzQyMTVaMDMxMTAvBgNV BAMTKDk0NjUwODM4NDIyREQzMjBFNDg1RDBDODZGQUQ0Q0QyN0QxN0FDOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTtQO7iVdQwY8yBy1HurmB6MDs NIyuK2vtbH3hJh5kIhhNjvXTl3fQeny8mc9dd3q1EtC1ocP/sNOoms8j9MaaBW/U xG/MnG1CaWP41oCV49muIB0P6lTsdp6NfD4ckdiVmb998sU4Q6hnGrf1kr3LLikZ P+AHW0H7nY5Va2ECS/zLVRhHe9OLwsqF+TkjIXtmnln+yAJVxW99twKiTXuLxlfP 8SX6ViJ3jhzM1DzmKN2F9DLGQYG/v+/Ck/p8JzC3K3KGshbESxYt7pqSaPMEM61V Xgcl/7HzqrPxAcLAE9AMLsWy7YtVijNBUzJMTErHtPIx2vGiBRBgIumHaGY5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlGUIOEIt0yDkhdDIb61M0n0XrJkwHwYDVR0j BBgwFoAUrCHzAvj+h5jj6+z3T7tKGvqMClowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTdlMGZhZjAtNzg4ZC00OTViLWFjOTgtZjM1MTYxOTVkYjYwLzAvQUMyMUYzMDJG OEZFODc5OEUzRUJFQ0Y3NEZCQjRBMUFGQThDMEE1QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzIxRjMwMkY4RkU4Nzk4RTNFQkVDRjc0RkJCNEExQUZBOEMw QTVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTdlMGZhZjAtNzg4ZC00OTViLWFj OTgtZjM1MTYxOTVkYjYwLzAvQUMyMUYzMDJGOEZFODc5OEUzRUJFQ0Y3NEZCQjRB MUFGQThDMEE1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ7/CsQ+JfwQCSgSijUSfVJDVOp0Tf+Q3Q/3 vzfIqNtCnf8TQCyzERODrso43cXssStBVVc2gkcIZwkLb3afEGYweFNjhkziWjZq 7dwd5BuXY/zvAGdTObXUsn6AV9CSKJDOjQhD6NGGdtwtJl2w14HCvKFXjz/k5clj XbfRNuwnLQcksXZC1R4b1x6orsA+Ta9FFDI4rOisafa/FKBXQ/wSHNzg1zntU1Ui bykwNGRPiVAaLDaaaXNtUyayk/O4UznLSV6yEfhaf4F65ETRjI142287491hRxiJ jZEF/z1qJj6k92QotY4POMrwPlaYMNkLb2pxGUMI59JUDSN3Htg= -----END CERTIFICATE-----Generated at Fri Jul 24 12:46:48 2026 by rpki-client