$ rpki-client -vvf rpki-rsync.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.mft File: AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.mft (raw, json) Hash identifier: Rp7NHIOexyRENAkMwFTdVQIY7gt6kZBZO5XcaU06ntw= Subject key identifier: CB:F1:D7:06:57:00:D5:95:7F:96:71:56:25:BF:86:78:3D:D5:16:F3 Authority key identifier: AC:7E:AF:B0:07:F3:DD:9B:32:32:7F:16:3D:AF:2A:92:B5:CE:EC:47 Certificate issuer: /CN=AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47 Certificate serial: 467436F51222CD633D4BB46BFD150B02D3071979 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 12:04:58 +0000 Manifest this update: Tue 02 Jun 2026 11:59:58 +0000 Manifest next update: Wed 03 Jun 2026 12:56:58 +0000 Files and hashes: 1: AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.crl (hash: HnYK7sKEDwbTUO46AWVO5wTPE9mTNVoR0Cn+QWojwcM=) 2: 3130332e3131302e34312e302f32342d3234203d3e20313530343734.roa (hash: obnag6K+/PYNxyPn5mnr74fqA7ofmhwpwaEP4tBMPxc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.crl rsync://rpki-rsync.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:74:36:f5:12:22:cd:63:3d:4b:b4:6b:fd:15:0b:02:d3:07:19:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47 Validity Not Before: Jun 2 11:59:58 2026 GMT Not After : Jun 3 12:56:58 2026 GMT Subject: CN=CBF1D7065700D5957F96715625BF86783DD516F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:23:2e:10:8d:11:5b:88:a5:95:61:d3:30:4d: a6:88:61:6b:29:fa:43:22:44:c7:ff:9f:d0:9c:e8: ce:47:f6:cf:e3:34:29:f0:62:86:2e:30:f4:3f:1d: 5b:49:fb:bc:b8:63:7c:07:c6:3c:1c:1e:c5:44:57: 86:40:b5:5d:fb:ba:f1:ac:8a:86:2a:99:81:e6:b1: d5:83:9a:82:ca:eb:4e:26:ec:61:50:27:bc:1f:bc: e2:ed:c4:f9:5f:1d:0a:46:f3:b7:0d:73:f1:23:94: 7f:fd:a9:01:0d:e9:99:c2:82:1d:44:08:06:92:6a: 06:8f:c7:16:26:7e:66:9b:74:38:ad:aa:dd:72:ab: 7c:0b:a1:73:f2:31:62:f4:2b:0c:71:86:aa:2c:e9: 19:f3:45:5e:7f:b6:fb:34:45:5b:1d:6b:2b:75:69: 3e:be:1b:4f:5d:2a:ab:39:29:e6:be:d9:3c:d0:9c: 5d:a3:9e:30:09:1d:f3:65:38:ad:7c:31:2e:86:92: e0:bb:b8:35:d3:6b:2f:df:de:91:19:29:79:5c:55: b1:a6:af:e2:8c:9e:e1:03:3b:bf:8c:3b:15:4d:cf: 37:b5:18:40:3e:2f:14:1b:2b:db:56:ec:ad:be:ea: f6:dd:60:e4:79:9c:94:04:45:bc:c3:54:ba:b4:e2: d9:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:F1:D7:06:57:00:D5:95:7F:96:71:56:25:BF:86:78:3D:D5:16:F3 X509v3 Authority Key Identifier: keyid:AC:7E:AF:B0:07:F3:DD:9B:32:32:7F:16:3D:AF:2A:92:B5:CE:EC:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:42:f1:7a:59:6d:69:b1:c9:e6:32:1b:63:b9:68:f6:46:da: 1b:5c:29:b3:81:19:f0:77:a0:eb:a0:ae:c2:0e:78:f3:60:c8: 03:56:c6:a0:bf:93:44:df:84:5c:27:cf:b4:88:6f:1e:f4:08: f6:0d:0a:0f:16:07:00:1d:dd:73:fc:4d:6d:a6:47:af:6c:83: 89:57:e0:08:70:ba:80:e7:27:34:ba:53:9c:44:0f:89:ba:bf: f3:86:29:52:b3:d7:91:d7:f9:38:7b:cb:d7:95:dc:fc:9b:08: d8:0d:2b:b2:74:72:c6:ba:fa:75:73:dd:46:e9:6b:e6:bb:f8: df:02:df:ad:1c:d9:d1:a2:cd:1f:4c:4a:cc:c2:b3:a6:55:d4: 3d:e2:4a:9d:fc:66:b3:f5:55:26:da:99:32:1e:6a:a1:a6:bc: b9:4b:92:43:38:cf:af:7d:0f:95:32:c6:8e:91:33:50:fa:65: 09:34:96:3d:0d:af:ee:20:57:0b:46:e1:9b:12:a8:1b:82:43: 50:a1:af:4c:c2:16:37:72:3d:0c:6e:a0:de:a4:0f:b7:11:a9: cc:b7:4a:62:7b:16:3e:57:99:02:02:07:c1:ea:c8:27:77:b7: 25:f7:e4:11:87:3e:1b:f7:6d:83:ea:ce:32:a0:93:e8:69:54: 5f:bb:29:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURnQ29RIizWM9S7Rr/RULAtMHGXkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM3RUFGQjAwN0YzREQ5QjMyMzI3RjE2M0RBRjJBOTJC NUNFRUM0NzAeFw0yNjA2MDIxMTU5NThaFw0yNjA2MDMxMjU2NThaMDMxMTAvBgNV BAMTKENCRjFENzA2NTcwMEQ1OTU3Rjk2NzE1NjI1QkY4Njc4M0RENTE2RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrIy4QjRFbiKWVYdMwTaaIYWsp +kMiRMf/n9Cc6M5H9s/jNCnwYoYuMPQ/HVtJ+7y4Y3wHxjwcHsVEV4ZAtV37uvGs ioYqmYHmsdWDmoLK604m7GFQJ7wfvOLtxPlfHQpG87cNc/EjlH/9qQEN6ZnCgh1E CAaSagaPxxYmfmabdDitqt1yq3wLoXPyMWL0Kwxxhqos6RnzRV5/tvs0RVsdayt1 aT6+G09dKqs5Kea+2TzQnF2jnjAJHfNlOK18MS6GkuC7uDXTay/f3pEZKXlcVbGm r+KMnuEDO7+MOxVNzze1GEA+LxQbK9tW7K2+6vbdYOR5nJQERbzDVLq04tnNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy/HXBlcA1ZV/lnFWJb+GeD3VFvMwHwYDVR0j BBgwFoAUrH6vsAfz3ZsyMn8WPa8qkrXO7EcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDA5ODE5N2MtYTUyNi00NWJkLTljZTktMTUzODNjNWQ5NTM2LzAvQUM3RUFGQjAw N0YzREQ5QjMyMzI3RjE2M0RBRjJBOTJCNUNFRUM0Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzdFQUZCMDA3RjNERDlCMzIzMjdGMTYzREFGMkE5MkI1Q0VF QzQ3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDA5ODE5N2MtYTUyNi00NWJkLTlj ZTktMTUzODNjNWQ5NTM2LzAvQUM3RUFGQjAwN0YzREQ5QjMyMzI3RjE2M0RBRjJB OTJCNUNFRUM0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKFC8XpZbWmxyeYyG2O5aPZG2htcKbOBGfB3 oOugrsIOePNgyANWxqC/k0TfhFwnz7SIbx70CPYNCg8WBwAd3XP8TW2mR69sg4lX 4AhwuoDnJzS6U5xED4m6v/OGKVKz15HX+Th7y9eV3PybCNgNK7J0csa6+nVz3Ubp a+a7+N8C360c2dGizR9MSszCs6ZV1D3iSp38ZrP1VSbamTIeaqGmvLlLkkM4z699 D5Uyxo6RM1D6ZQk0lj0Nr+4gVwtG4ZsSqBuCQ1Chr0zCFjdyPQxuoN6kD7cRqcy3 SmJ7Fj5XmQICB8HqyCd3tyX35BGHPhv3bYPqzjKgk+hpVF+7KaE= -----END CERTIFICATE-----Generated at Wed Jun 3 03:46:34 2026 by rpki-client