$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.mft File: AC1D31E1C0EBAF054936EEE31001AFEBD8908274.mft (raw, json) Hash identifier: Kgqgzo1E0ZR79Y/prIoo3IU64oEmGUQBbwoi2jUzxL4= Subject key identifier: A5:4C:1C:CC:05:BF:5D:2C:D3:A0:4E:DA:61:97:25:C0:5F:BC:65:90 Authority key identifier: AC:1D:31:E1:C0:EB:AF:05:49:36:EE:E3:10:01:AF:EB:D8:90:82:74 Certificate issuer: /CN=AC1D31E1C0EBAF054936EEE31001AFEBD8908274 Certificate serial: 0BC94608260D6D44004970CFCD72AA2B96AA8C20 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.mft Manifest number: F7 Signing time: Wed 04 Nov 2026 09:14:45 +0000 Manifest this update: Wed 04 Nov 2026 09:09:45 +0000 Manifest next update: Thu 05 Nov 2026 11:02:45 +0000 Files and hashes: 1: 3130332e3130312e3231362e302f32342d3234203d3e20313530393431.roa (hash: WjJ5R6RxIV+WwM7kuHxJKIcmy8NFLw826KU6Z0WZ/xY=) 2: AC1D31E1C0EBAF054936EEE31001AFEBD8908274.crl (hash: NJMG10NCReH13GUgb6Zu3Fj7UT+aZ5Hqy2fIFl0ZZ6k=) 3: 3130332e3130312e3231372e302f32342d3234203d3e20313530393431.roa (hash: mI5pJthlZy5JwJ1aBsKt5QmSIIpmL45EJ55YLJWzCQg=) 4: 3130332e3130312e3231362e302f32332d3233203d3e20313530393431.roa (hash: Tf1Q9sDwa+GlXIub485EhNzCHd5//pppNP4qkGRGD+Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.crl rsync://rpki-rsync.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 09:18:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:c9:46:08:26:0d:6d:44:00:49:70:cf:cd:72:aa:2b:96:aa:8c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC1D31E1C0EBAF054936EEE31001AFEBD8908274 Validity Not Before: Nov 4 09:09:45 2026 GMT Not After : Nov 5 11:02:45 2026 GMT Subject: CN=A54C1CCC05BF5D2CD3A04EDA619725C05FBC6590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c3:af:9e:24:2a:ec:91:8a:e3:f0:a7:ac:43: 40:56:30:c6:eb:27:52:2e:49:39:c6:56:dc:a7:f0: 09:8c:e5:a7:b7:03:4f:5a:a8:61:42:6c:0d:5c:6e: 4c:d2:56:f0:11:d4:14:52:b0:5a:1c:95:fb:1d:3b: a2:dc:c7:e9:dc:10:b6:59:ac:7b:0b:52:35:03:71: 16:18:cd:7f:93:2d:21:11:06:9f:f2:45:7f:74:44: 2f:71:39:c2:b6:5c:e2:6c:31:6c:63:2e:2b:fe:94: 87:77:33:e5:e8:fc:ec:ab:ac:87:79:fb:c2:a1:da: 6b:77:03:3e:2f:b2:74:e2:76:e3:68:c1:98:47:06: f9:75:27:70:b0:5f:b7:ed:17:bd:d8:37:45:8c:a0: 8c:06:78:ab:2f:16:51:21:80:93:db:df:a6:a2:8f: db:70:2d:f6:55:82:46:16:93:44:77:b7:e4:f5:9e: d2:78:a6:d6:b6:d0:d8:11:41:e7:31:95:4b:22:c9: 78:1a:1b:5c:43:c7:d0:c4:a5:40:44:a8:2a:cd:55: d2:c8:e8:ef:58:f9:30:b0:2f:62:c5:21:9e:ad:a7: bd:25:44:d9:f3:65:37:f9:3c:2a:0a:27:54:36:3d: 8a:18:cb:54:d7:e7:e0:3b:51:55:f0:8b:ab:f0:bc: b3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:4C:1C:CC:05:BF:5D:2C:D3:A0:4E:DA:61:97:25:C0:5F:BC:65:90 X509v3 Authority Key Identifier: keyid:AC:1D:31:E1:C0:EB:AF:05:49:36:EE:E3:10:01:AF:EB:D8:90:82:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:96:00:8d:80:61:26:b2:af:2d:61:0e:35:8e:ba:71:e4:87: a8:4d:50:b5:50:4f:e8:83:73:01:da:92:74:c2:3b:43:31:f6: fc:87:cd:bc:13:b0:47:49:36:58:36:24:68:75:6d:72:51:b8: 8f:6f:48:2d:2e:1d:14:ce:b5:e3:3a:72:29:75:b8:2c:7d:b0: a3:e7:47:15:cd:60:6c:0b:89:9b:93:e4:44:87:71:a0:e5:96: 5c:f7:d8:1d:58:ef:fd:13:00:db:a0:b0:19:d2:13:ec:99:88: 68:df:03:a7:92:61:0c:2e:b3:ff:85:5b:68:8f:85:a0:39:d4: 19:ad:88:3f:e7:ca:bb:d9:c4:91:8d:f2:73:a9:0a:b2:5c:39: 1d:82:b4:08:66:c4:45:12:d2:83:58:4b:1e:a8:ae:db:42:cd: e1:cb:3c:7a:11:31:2c:2f:4b:7a:3e:18:c5:c2:d7:79:10:90: 56:da:a4:84:34:d0:90:9e:ce:49:5e:66:d1:91:42:24:0e:cf: 0c:73:1c:fe:1f:76:d6:9c:37:8e:bf:79:49:23:b4:ca:84:1d: 70:fe:bb:9e:95:38:c2:43:b5:9b:c9:5d:27:5f:77:ad:7d:ca: 8a:8e:15:d0:df:34:98:51:d3:b7:ba:29:93:42:f1:af:fb:0f: 28:f2:d6:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC8lGCCYNbUQASXDPzXKqK5aqjCAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUMxRDMxRTFDMEVCQUYwNTQ5MzZFRUUzMTAwMUFGRUJE ODkwODI3NDAeFw0yNjExMDQwOTA5NDVaFw0yNjExMDUxMTAyNDVaMDMxMTAvBgNV BAMTKEE1NEMxQ0NDMDVCRjVEMkNEM0EwNEVEQTYxOTcyNUMwNUZCQzY1OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGw6+eJCrskYrj8KesQ0BWMMbr J1IuSTnGVtyn8AmM5ae3A09aqGFCbA1cbkzSVvAR1BRSsFoclfsdO6Lcx+ncELZZ rHsLUjUDcRYYzX+TLSERBp/yRX90RC9xOcK2XOJsMWxjLiv+lId3M+Xo/OyrrId5 +8Kh2mt3Az4vsnTiduNowZhHBvl1J3CwX7ftF73YN0WMoIwGeKsvFlEhgJPb36ai j9twLfZVgkYWk0R3t+T1ntJ4pta20NgRQecxlUsiyXgaG1xDx9DEpUBEqCrNVdLI 6O9Y+TCwL2LFIZ6tp70lRNnzZTf5PCoKJ1Q2PYoYy1TX5+A7UVXwi6vwvLPlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpUwczAW/XSzToE7aYZclwF+8ZZAwHwYDVR0j BBgwFoAUrB0x4cDrrwVJNu7jEAGv69iQgnQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGExZjM5NzEtM2E0Ny00NTVkLWFiMzAtZTdjMjNiNjFiOWYyLzAvQUMxRDMxRTFD MEVCQUYwNTQ5MzZFRUUzMTAwMUFGRUJEODkwODI3NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzFEMzFFMUMwRUJBRjA1NDkzNkVFRTMxMDAxQUZFQkQ4OTA4 Mjc0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGExZjM5NzEtM2E0Ny00NTVkLWFi MzAtZTdjMjNiNjFiOWYyLzAvQUMxRDMxRTFDMEVCQUYwNTQ5MzZFRUUzMTAwMUFG RUJEODkwODI3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEOWAI2AYSayry1hDjWOunHkh6hNULVQT+iD cwHaknTCO0Mx9vyHzbwTsEdJNlg2JGh1bXJRuI9vSC0uHRTOteM6cil1uCx9sKPn RxXNYGwLiZuT5ESHcaDlllz32B1Y7/0TANugsBnSE+yZiGjfA6eSYQwus/+FW2iP haA51BmtiD/nyrvZxJGN8nOpCrJcOR2CtAhmxEUS0oNYSx6orttCzeHLPHoRMSwv S3o+GMXC13kQkFbapIQ00JCezkleZtGRQiQOzwxzHP4fdtacN46/eUkjtMqEHXD+ u56VOMJDtZvJXSdfd619yoqOFdDfNJhR07e6KZNC8a/7Dyjy1k4= -----END CERTIFICATE-----Generated at Wed Nov 4 11:26:13 2026 by rpki-client