$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/AC861103DDC024E3BEB681351D66B027A8BA785A.mft File: AC861103DDC024E3BEB681351D66B027A8BA785A.mft (raw, json) Hash identifier: R6IfnfPYf1BV5hcieq0pKnbBGs2J8iY+oZpzxpkK+Nc= Subject key identifier: F9:13:64:0E:43:3D:97:2E:D1:D5:90:FC:8A:1D:CF:F2:4E:08:53:DB Authority key identifier: AC:86:11:03:DD:C0:24:E3:BE:B6:81:35:1D:66:B0:27:A8:BA:78:5A Certificate issuer: /CN=AC861103DDC024E3BEB681351D66B027A8BA785A Certificate serial: 373039E74334E2B83D88D0B550E170E5892292FD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC861103DDC024E3BEB681351D66B027A8BA785A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/AC861103DDC024E3BEB681351D66B027A8BA785A.mft Manifest number: A5 Signing time: Thu 03 Sep 2026 09:34:02 +0000 Manifest this update: Thu 03 Sep 2026 09:29:02 +0000 Manifest next update: Fri 04 Sep 2026 12:36:02 +0000 Files and hashes: 1: 3130332e3135382e3235322e302f32332d3233203d3e20313431313337.roa (hash: J7StUV2ZODyDnpl4H6qRmHDEDNeYTV1qNMuPRyc9WyE=) 2: 323430363a633634303a323a3a2f34382d3438203d3e20313431313337.roa (hash: qh5eFZWjtfs6SGeMUmGMmglBO26iaZvOjL82WMbtwVc=) 3: 323430363a633634303a3a2f33322d3332203d3e20313431313337.roa (hash: pE41vn8Dt1qZrL/6IKcEElho8GXY6UXGVa22Zlk5Klg=) 4: 3130332e3135382e3235322e302f32342d3234203d3e20313431313337.roa (hash: SW4deFwDdRpgisaH7RqLBMHR3upFCn0yA60y2S1M1VI=) 5: AC861103DDC024E3BEB681351D66B027A8BA785A.crl (hash: VR1IeeJKqk3S/1S2HAWCTtmGctNCee6txIMLL5xPFOc=) 6: 3130332e3135382e3235332e302f32342d3234203d3e20313431313337.roa (hash: Cxuw8utleC956EhbVyK4h8tr3eWPWdRF27VOeiD3sxU=) 7: 323430363a633634303a313a3a2f34382d3438203d3e20313431313337.roa (hash: SC/sM91Mj29qp/7MnNyzUUwPkBeQTEbv2cnvmQBFqIM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/AC861103DDC024E3BEB681351D66B027A8BA785A.crl rsync://rpki-rsync.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/AC861103DDC024E3BEB681351D66B027A8BA785A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC861103DDC024E3BEB681351D66B027A8BA785A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 12:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:30:39:e7:43:34:e2:b8:3d:88:d0:b5:50:e1:70:e5:89:22:92:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC861103DDC024E3BEB681351D66B027A8BA785A Validity Not Before: Sep 3 09:29:02 2026 GMT Not After : Sep 4 12:36:02 2026 GMT Subject: CN=F913640E433D972ED1D590FC8A1DCFF24E0853DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:34:6a:5c:8c:55:80:72:c2:16:d3:2a:ac:3b: c9:ac:d0:b4:a3:3d:2f:75:96:51:19:2e:77:85:39: 79:5a:ee:7f:53:41:61:fb:72:98:0a:c7:79:46:55: ea:85:6e:ea:0b:1d:38:90:75:97:3f:36:21:8e:c3: 02:cd:f8:bb:9c:23:5d:ee:39:0a:77:93:d6:b4:2e: fe:f7:a3:7b:fa:58:95:93:ed:d7:be:84:fd:1b:01: 49:41:a4:f3:ff:49:8f:20:96:95:f3:6c:6b:3f:b1: 9b:ab:3e:7a:06:6f:8a:f3:64:58:11:2e:21:d2:a9: 34:bf:40:fb:e2:b5:24:35:bf:f9:b3:10:9c:93:7c: 7f:64:ad:6c:69:34:9f:48:82:af:3d:0e:08:d5:71: 98:78:ad:0d:25:9e:b6:41:e3:8b:a0:70:1f:6f:e6: c2:fa:25:06:cd:6d:17:90:65:f8:f2:d5:92:aa:3d: ef:2e:97:72:5e:ff:78:86:64:da:e5:7e:95:0d:f0: 34:51:ce:5e:28:6a:cd:6c:1a:69:8f:ce:c9:48:ae: 26:7f:48:99:65:bd:b7:ba:ad:95:80:f9:89:e6:32: 3e:b1:0d:66:d8:83:e2:03:cd:65:8c:e0:a5:e2:3f: ca:7f:15:85:46:f1:c5:72:88:74:a1:f3:e4:66:6c: 75:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:13:64:0E:43:3D:97:2E:D1:D5:90:FC:8A:1D:CF:F2:4E:08:53:DB X509v3 Authority Key Identifier: keyid:AC:86:11:03:DD:C0:24:E3:BE:B6:81:35:1D:66:B0:27:A8:BA:78:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/AC861103DDC024E3BEB681351D66B027A8BA785A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC861103DDC024E3BEB681351D66B027A8BA785A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/AC861103DDC024E3BEB681351D66B027A8BA785A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:dd:f1:a9:7a:27:b4:92:d9:d0:f0:bc:d4:ff:8e:fa:3b:cc: 4a:3c:e9:9e:06:49:e6:99:a4:9d:2d:73:69:c8:46:0d:4d:1b: f7:65:e6:95:13:cd:fb:8f:05:7e:b1:08:ab:d6:6c:3b:86:da: 98:0a:e6:ac:14:a5:07:99:c0:3a:e0:20:b4:b4:e1:8c:4f:dc: ad:2f:b8:55:bb:3c:43:b4:d8:91:76:2f:9a:d2:cd:92:76:0c: 0f:a3:82:e4:40:0f:58:9b:40:1c:36:7e:23:90:6d:a4:ce:12: 5a:8f:77:21:ea:a8:6d:d8:23:b2:a1:e9:f5:62:a4:ef:05:67: 1c:76:67:b0:73:2b:84:19:0b:fa:7a:c1:a6:bf:79:7d:ff:6d: f0:5f:da:66:bb:ad:97:57:dc:fb:33:e9:dc:6b:66:95:0e:6a: 80:11:f9:de:83:82:e7:bc:08:f1:7f:5e:7d:1a:88:06:00:a4: 9e:e6:90:45:bf:d8:b7:79:36:60:59:19:60:ce:03:b9:af:48: 3f:4a:7e:e5:20:ae:69:bb:ed:b8:1c:59:5f:80:2b:e4:3f:d6: cf:7b:41:12:17:7e:11:bf:be:88:7b:e8:42:4b:9a:31:b7:30: 05:58:db:77:88:f7:63:e2:4b:d5:42:f8:cf:f7:55:f2:4e:e9: 5c:c6:41:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNzA550M04rg9iNC1UOFw5Ykikv0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM4NjExMDNEREMwMjRFM0JFQjY4MTM1MUQ2NkIwMjdB OEJBNzg1QTAeFw0yNjA5MDMwOTI5MDJaFw0yNjA5MDQxMjM2MDJaMDMxMTAvBgNV BAMTKEY5MTM2NDBFNDMzRDk3MkVEMUQ1OTBGQzhBMURDRkYyNEUwODUzREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuNGpcjFWAcsIW0yqsO8ms0LSj PS91llEZLneFOXla7n9TQWH7cpgKx3lGVeqFbuoLHTiQdZc/NiGOwwLN+LucI13u OQp3k9a0Lv73o3v6WJWT7de+hP0bAUlBpPP/SY8glpXzbGs/sZurPnoGb4rzZFgR LiHSqTS/QPvitSQ1v/mzEJyTfH9krWxpNJ9Igq89DgjVcZh4rQ0lnrZB44ugcB9v 5sL6JQbNbReQZfjy1ZKqPe8ul3Je/3iGZNrlfpUN8DRRzl4oas1sGmmPzslIriZ/ SJllvbe6rZWA+YnmMj6xDWbYg+IDzWWM4KXiP8p/FYVG8cVyiHSh8+RmbHVJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+RNkDkM9ly7R1ZD8ih3P8k4IU9swHwYDVR0j BBgwFoAUrIYRA93AJOO+toE1HWawJ6i6eFowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjQ5MDM0NWUtMmQ1Ny00MzQ5LWI3OGYtYzhiMThhNDQyNDQ1LzAvQUM4NjExMDNE REMwMjRFM0JFQjY4MTM1MUQ2NkIwMjdBOEJBNzg1QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzg2MTEwM0REQzAyNEUzQkVCNjgxMzUxRDY2QjAyN0E4QkE3 ODVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjQ5MDM0NWUtMmQ1Ny00MzQ5LWI3 OGYtYzhiMThhNDQyNDQ1LzAvQUM4NjExMDNEREMwMjRFM0JFQjY4MTM1MUQ2NkIw MjdBOEJBNzg1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAETd8al6J7SS2dDwvNT/jvo7zEo86Z4GSeaZ pJ0tc2nIRg1NG/dl5pUTzfuPBX6xCKvWbDuG2pgK5qwUpQeZwDrgILS04YxP3K0v uFW7PEO02JF2L5rSzZJ2DA+jguRAD1ibQBw2fiOQbaTOElqPdyHqqG3YI7Kh6fVi pO8FZxx2Z7BzK4QZC/p6waa/eX3/bfBf2ma7rZdX3Psz6dxrZpUOaoAR+d6Dgue8 CPF/Xn0aiAYApJ7mkEW/2Ld5NmBZGWDOA7mvSD9KfuUgrmm77bgcWV+AK+Q/1s97 QRIXfhG/voh76EJLmjG3MAVY23eI92PiS9VC+M/3VfJO6VzGQWU= -----END CERTIFICATE-----Generated at Thu Sep 3 12:38:23 2026 by rpki-client