$ rpki-client -vvf rpki-rsync.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.mft File: AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.mft (raw, json) Hash identifier: MZMalLPzBKp9KDa9jaFaoRSPK16iMQRbNLuIpxffoXo= Subject key identifier: 0E:57:8E:70:AB:85:1D:77:EF:A7:D4:39:2A:FB:76:AE:B9:A9:FC:01 Authority key identifier: AC:21:F3:02:F8:FE:87:98:E3:EB:EC:F7:4F:BB:4A:1A:FA:8C:0A:5A Certificate issuer: /CN=AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A Certificate serial: 2938EF599A42D0230A0F084325C7574999C74D05 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.mft Manifest number: 0F Signing time: Wed 13 May 2026 00:03:22 +0000 Manifest this update: Tue 12 May 2026 23:58:22 +0000 Manifest next update: Thu 14 May 2026 00:31:22 +0000 Files and hashes: 1: 3130332e35342e3137322e302f32342d3234203d3e203538383234.roa (hash: 2hznDtF+sHEQo6Fg1DwDt2/m1fqJNRXXGLkGt1F7ms0=) 2: AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.crl (hash: hn6NUcUd0zQsIjRzat/2VQf7gJUOWwhCf9OIsnUeMns=) 3: 3130332e3234322e3233332e302f32342d3234203d3e203538383234.roa (hash: F0odlT4U3J2I7U1EPBDoQbX8C+Jjnqt/uRif6Raoqb0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.crl rsync://rpki-rsync.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:31:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:38:ef:59:9a:42:d0:23:0a:0f:08:43:25:c7:57:49:99:c7:4d:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A Validity Not Before: May 12 23:58:22 2026 GMT Not After : May 14 00:31:22 2026 GMT Subject: CN=0E578E70AB851D77EFA7D4392AFB76AEB9A9FC01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:17:cb:b7:92:93:96:ea:be:61:a4:62:05:73: 7b:e7:f2:c9:37:be:be:4d:92:3f:3b:18:8e:ad:b8: b1:3c:9a:dd:4a:05:82:be:02:4f:85:72:b8:e1:30: 1f:41:6f:1e:89:82:11:b5:88:56:22:66:23:70:0b: 86:93:0a:dc:11:0f:a1:53:3c:b4:e8:4c:57:a6:b2: c5:0a:59:c3:29:c5:ec:6f:fb:2a:c0:e4:cd:0b:de: 90:7e:c5:a3:a3:b5:92:92:ef:1b:a2:cc:e6:35:ec: d9:b0:f4:90:11:2d:8e:94:99:20:e8:ba:ef:22:b9: cf:de:8f:f5:14:ee:79:20:f8:7a:2e:bf:b3:2e:21: 34:76:99:8e:aa:7a:f3:c5:63:0c:59:bb:d8:aa:4e: 7b:57:42:ac:93:11:37:ab:42:8f:8d:ee:6f:9e:a5: 93:31:ea:f6:66:bc:c8:6a:67:0d:e2:2b:b6:fa:ef: 12:d7:91:85:24:a3:ed:82:ea:a8:56:0f:f5:fa:bc: ff:e5:f9:f2:b9:74:ec:db:0d:e3:a2:95:48:f5:1f: 87:d3:20:0a:34:a9:d6:5a:15:c6:c8:4a:1b:5b:36: 42:df:11:f6:78:2c:ad:0d:3a:7f:d0:30:c1:90:8e: c2:12:3c:85:e9:a9:17:b0:9c:48:e7:94:df:2f:b5: ad:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:57:8E:70:AB:85:1D:77:EF:A7:D4:39:2A:FB:76:AE:B9:A9:FC:01 X509v3 Authority Key Identifier: keyid:AC:21:F3:02:F8:FE:87:98:E3:EB:EC:F7:4F:BB:4A:1A:FA:8C:0A:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:24:30:42:65:18:d0:f8:47:20:f6:46:09:50:9f:f5:be:42: c0:0b:76:eb:22:80:47:3a:ce:44:09:00:e2:7d:c3:f7:4b:18: fb:1b:ca:81:e9:29:86:d8:83:8b:93:ef:38:ab:be:87:8a:3e: ec:ae:d3:28:21:cf:21:ed:66:de:ae:b3:7e:59:70:76:bf:6d: 11:97:3c:b8:be:03:8f:6b:a6:d0:c1:90:e1:86:e6:1d:ee:6a: 78:0e:83:07:c4:a6:f4:86:1a:d4:fc:47:76:b9:36:25:df:84: 06:1b:c3:62:ed:41:29:d6:d2:35:04:d4:70:c8:29:cf:52:a2: b9:ce:23:7e:f4:e3:49:8a:dd:61:e9:9f:4b:93:9a:9b:2f:24: 0c:8a:63:54:78:5d:81:45:5d:e9:00:a8:70:5a:04:bd:b6:85: e1:bf:07:db:61:8f:e5:6b:03:7e:17:d4:26:e8:1c:69:7d:04: 97:37:a7:fd:51:51:c0:c7:7c:46:b7:ab:41:47:22:6d:a4:18: f7:53:15:7a:e2:ab:28:aa:9d:7f:81:ca:4e:ef:63:04:46:37: d4:3d:06:6c:f6:a4:f3:e4:5a:e9:27:b2:6e:b3:81:83:4c:c3: 89:16:82:7c:4b:ca:4e:66:1d:77:89:5a:f8:b9:31:3b:55:ea: 13:dc:85:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKTjvWZpC0CMKDwhDJcdXSZnHTQUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUMyMUYzMDJGOEZFODc5OEUzRUJFQ0Y3NEZCQjRBMUFG QThDMEE1QTAeFw0yNjA1MTIyMzU4MjJaFw0yNjA1MTQwMDMxMjJaMDMxMTAvBgNV BAMTKDBFNTc4RTcwQUI4NTFENzdFRkE3RDQzOTJBRkI3NkFFQjlBOUZDMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVF8u3kpOW6r5hpGIFc3vn8sk3 vr5Nkj87GI6tuLE8mt1KBYK+Ak+FcrjhMB9Bbx6JghG1iFYiZiNwC4aTCtwRD6FT PLToTFemssUKWcMpxexv+yrA5M0L3pB+xaOjtZKS7xuizOY17Nmw9JARLY6UmSDo uu8iuc/ej/UU7nkg+Houv7MuITR2mY6qevPFYwxZu9iqTntXQqyTETerQo+N7m+e pZMx6vZmvMhqZw3iK7b67xLXkYUko+2C6qhWD/X6vP/l+fK5dOzbDeOilUj1H4fT IAo0qdZaFcbIShtbNkLfEfZ4LK0NOn/QMMGQjsISPIXpqRewnEjnlN8vta3tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDleOcKuFHXfvp9Q5Kvt2rrmp/AEwHwYDVR0j BBgwFoAUrCHzAvj+h5jj6+z3T7tKGvqMClowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTdlMGZhZjAtNzg4ZC00OTViLWFjOTgtZjM1MTYxOTVkYjYwLzAvQUMyMUYzMDJG OEZFODc5OEUzRUJFQ0Y3NEZCQjRBMUFGQThDMEE1QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzIxRjMwMkY4RkU4Nzk4RTNFQkVDRjc0RkJCNEExQUZBOEMw QTVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTdlMGZhZjAtNzg4ZC00OTViLWFj OTgtZjM1MTYxOTVkYjYwLzAvQUMyMUYzMDJGOEZFODc5OEUzRUJFQ0Y3NEZCQjRB MUFGQThDMEE1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAgkMEJlGND4RyD2RglQn/W+QsALdusigEc6 zkQJAOJ9w/dLGPsbyoHpKYbYg4uT7zirvoeKPuyu0yghzyHtZt6us35ZcHa/bRGX PLi+A49rptDBkOGG5h3uangOgwfEpvSGGtT8R3a5NiXfhAYbw2LtQSnW0jUE1HDI Kc9SornOI37040mK3WHpn0uTmpsvJAyKY1R4XYFFXekAqHBaBL22heG/B9thj+Vr A34X1CboHGl9BJc3p/1RUcDHfEa3q0FHIm2kGPdTFXriqyiqnX+Byk7vYwRGN9Q9 Bmz2pPPkWuknsm6zgYNMw4kWgnxLyk5mHXeJWvi5MTtV6hPchVE= -----END CERTIFICATE-----Generated at Wed May 13 06:57:52 2026 by rpki-client