$ rpki-client -vvf rpki-rsync.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.mft File: AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.mft (raw, json) Hash identifier: FDtG/IcNLePjFIoqPy9z+BfFVs3lUK7fYydhq7nt+3k= Subject key identifier: CC:EB:65:E3:65:F0:17:0C:B8:F7:86:C6:31:0F:B6:74:4F:00:28:17 Authority key identifier: AC:7E:AF:B0:07:F3:DD:9B:32:32:7F:16:3D:AF:2A:92:B5:CE:EC:47 Certificate issuer: /CN=AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47 Certificate serial: 6CB158AB935DF9659288FE6F3D5F95B49BE7CD76 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.mft Manifest number: 6C Signing time: Mon 20 Jul 2026 13:43:26 +0000 Manifest this update: Mon 20 Jul 2026 13:38:26 +0000 Manifest next update: Tue 21 Jul 2026 15:23:26 +0000 Files and hashes: 1: 3130332e3131302e34312e302f32342d3234203d3e20313530343734.roa (hash: obnag6K+/PYNxyPn5mnr74fqA7ofmhwpwaEP4tBMPxc=) 2: AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.crl (hash: hy9zB6L2H6VnFj9dG1K8D+kOqEgZKx7lTPC5ZwgDmjk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.crl rsync://rpki-rsync.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 15:23:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:b1:58:ab:93:5d:f9:65:92:88:fe:6f:3d:5f:95:b4:9b:e7:cd:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47 Validity Not Before: Jul 20 13:38:26 2026 GMT Not After : Jul 21 15:23:26 2026 GMT Subject: CN=CCEB65E365F0170CB8F786C6310FB6744F002817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:06:8d:95:8d:cb:97:c1:34:fc:5d:05:b3:a4: 4e:78:be:99:e8:9f:06:1d:5f:e4:b5:bd:9f:e3:3e: 28:33:3f:07:43:1d:e1:84:8f:77:22:af:03:a4:94: 7d:94:9f:2d:ab:8a:1f:4b:90:40:01:a7:43:ce:26: 77:66:84:9b:62:68:9f:17:35:68:29:9a:d6:64:fe: 33:9a:21:1e:6d:a1:8d:9d:ca:5e:60:d0:a0:35:aa: 3b:de:05:b6:61:1c:c8:2c:c4:66:13:27:51:9d:5e: cc:5c:a2:f1:b9:85:f1:4d:61:0a:7b:6f:ac:c9:cd: b9:81:24:51:da:90:ef:d7:be:82:73:13:7c:0d:f2: 24:45:9a:9a:0d:57:97:50:03:15:c8:53:3c:5a:06: a0:a2:b9:d5:24:11:f5:77:e3:52:1c:5e:3e:1b:cd: 8a:fa:af:57:3e:ed:a1:9d:d3:14:e8:08:73:7b:0f: 1c:cc:f2:ad:61:c8:59:af:df:de:e2:4b:9c:b6:49: a2:e4:92:41:d2:7d:2e:3d:26:3c:9b:da:3f:32:7b: 58:51:86:3e:55:ba:bd:0e:b8:49:90:e3:b9:8e:9a: ab:3e:a6:02:a0:3e:0c:60:05:5e:a7:93:91:2d:4f: cb:d4:48:96:cc:06:2b:bf:1f:c8:17:b8:81:7c:eb: 19:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:EB:65:E3:65:F0:17:0C:B8:F7:86:C6:31:0F:B6:74:4F:00:28:17 X509v3 Authority Key Identifier: keyid:AC:7E:AF:B0:07:F3:DD:9B:32:32:7F:16:3D:AF:2A:92:B5:CE:EC:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:e0:c1:ba:34:05:a6:a3:85:f4:04:c0:f7:4a:aa:7b:6c:94: a5:44:db:ef:cd:55:0d:45:4e:be:25:d0:df:ad:c5:96:30:62: b1:fa:b6:dc:86:00:f8:ad:b4:d8:e6:59:43:dc:33:e9:ba:e5: 2a:6f:80:9a:f2:d8:98:05:62:19:55:ca:ba:2c:74:14:4f:03: 66:9d:b9:fa:66:11:a1:98:28:ce:88:c5:99:0c:27:43:10:71: 58:33:0c:4f:04:d0:a6:9a:0c:8f:5b:a6:a4:5e:90:f3:3b:a6: f6:a5:c8:a2:d5:1a:87:db:ce:83:0c:34:d9:5a:f5:e3:6c:da: b3:5f:6b:e2:2a:34:9e:67:82:51:95:3e:43:4a:db:34:99:41: 31:3a:b7:a7:ab:cf:e2:42:fa:ca:00:ec:92:a3:e1:87:1b:61: 40:9b:6b:b0:89:4e:b1:55:10:ce:aa:9a:41:cb:d4:c8:6b:33: b3:de:78:ed:cf:84:20:c3:ec:9a:d2:41:87:b4:e1:57:0a:a3: 7c:eb:29:df:c9:e6:d3:9d:a0:1f:6c:cf:53:7d:e0:22:5a:f3: a1:8d:98:0a:b6:ff:5e:cf:01:37:8d:94:40:f1:7c:2d:9e:af: 95:49:87:ec:c9:67:70:74:33:4a:ea:6e:d5:e3:89:71:3c:9f: 1b:b5:f2:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbLFYq5Nd+WWSiP5vPV+VtJvnzXYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM3RUFGQjAwN0YzREQ5QjMyMzI3RjE2M0RBRjJBOTJC NUNFRUM0NzAeFw0yNjA3MjAxMzM4MjZaFw0yNjA3MjExNTIzMjZaMDMxMTAvBgNV BAMTKENDRUI2NUUzNjVGMDE3MENCOEY3ODZDNjMxMEZCNjc0NEYwMDI4MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMBo2VjcuXwTT8XQWzpE54vpno nwYdX+S1vZ/jPigzPwdDHeGEj3cirwOklH2Uny2rih9LkEABp0POJndmhJtiaJ8X NWgpmtZk/jOaIR5toY2dyl5g0KA1qjveBbZhHMgsxGYTJ1GdXsxcovG5hfFNYQp7 b6zJzbmBJFHakO/XvoJzE3wN8iRFmpoNV5dQAxXIUzxaBqCiudUkEfV341IcXj4b zYr6r1c+7aGd0xToCHN7DxzM8q1hyFmv397iS5y2SaLkkkHSfS49Jjyb2j8ye1hR hj5Vur0OuEmQ47mOmqs+pgKgPgxgBV6nk5EtT8vUSJbMBiu/H8gXuIF86xl/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzOtl42XwFwy494bGMQ+2dE8AKBcwHwYDVR0j BBgwFoAUrH6vsAfz3ZsyMn8WPa8qkrXO7EcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDA5ODE5N2MtYTUyNi00NWJkLTljZTktMTUzODNjNWQ5NTM2LzAvQUM3RUFGQjAw N0YzREQ5QjMyMzI3RjE2M0RBRjJBOTJCNUNFRUM0Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzdFQUZCMDA3RjNERDlCMzIzMjdGMTYzREFGMkE5MkI1Q0VF QzQ3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDA5ODE5N2MtYTUyNi00NWJkLTlj ZTktMTUzODNjNWQ5NTM2LzAvQUM3RUFGQjAwN0YzREQ5QjMyMzI3RjE2M0RBRjJB OTJCNUNFRUM0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF3gwbo0BaajhfQEwPdKqntslKVE2+/NVQ1F Tr4l0N+txZYwYrH6ttyGAPittNjmWUPcM+m65SpvgJry2JgFYhlVyrosdBRPA2ad ufpmEaGYKM6IxZkMJ0MQcVgzDE8E0KaaDI9bpqRekPM7pvalyKLVGofbzoMMNNla 9eNs2rNfa+IqNJ5nglGVPkNK2zSZQTE6t6erz+JC+soA7JKj4YcbYUCba7CJTrFV EM6qmkHL1MhrM7PeeO3PhCDD7JrSQYe04VcKo3zrKd/J5tOdoB9sz1N94CJa86GN mAq2/17PATeNlEDxfC2er5VJh+zJZ3B0M0rqbtXjiXE8nxu18rE= -----END CERTIFICATE-----Generated at Tue Jul 21 07:09:44 2026 by rpki-client