$ rpki-client -vvvf rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/AC7439239B591D2499B70C3230C1C35BE2A0104B.mft File: AC7439239B591D2499B70C3230C1C35BE2A0104B.mft (raw, json) Hash identifier: AjdIYTiOkxnk33sbd2ZzugO5UD0nnMFp+rHP8Dpiz94= Subject key identifier: D1:0F:AE:C2:ED:A2:42:DC:65:C1:C9:44:96:6B:26:21:CF:F9:E4:C5 Authority key identifier: AC:74:39:23:9B:59:1D:24:99:B7:0C:32:30:C1:C3:5B:E2:A0:10:4B Certificate issuer: /CN=AC7439239B591D2499B70C3230C1C35BE2A0104B Certificate serial: 51325122564664F4DD2ABB7D7179BC658FADADB6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC7439239B591D2499B70C3230C1C35BE2A0104B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/AC7439239B591D2499B70C3230C1C35BE2A0104B.mft Manifest number: A8 Signing time: Thu 03 Sep 2026 16:58:04 +0000 Manifest this update: Thu 03 Sep 2026 16:53:04 +0000 Manifest next update: Fri 04 Sep 2026 19:26:04 +0000 Files and hashes: 1: 323430363a396163303a3a2f33322d3438203d3e20313431313134.roa (hash: pTJhsbE/QsnSwa5lw6Tt2iC9wy8jG1QR42mcBhsUqfg=) 2: AC7439239B591D2499B70C3230C1C35BE2A0104B.crl (hash: 67KT3qKFfcXLZbM6ZLLVB3SuI43TFccvJ7ONALUldbE=) 3: 3130332e3135372e37382e302f32332d3234203d3e20313431313134.roa (hash: w+9v1WGiMKcMfvG8PMyM732c95+KBZTi8eUiSRuPBO8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/AC7439239B591D2499B70C3230C1C35BE2A0104B.crl rsync://rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/AC7439239B591D2499B70C3230C1C35BE2A0104B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC7439239B591D2499B70C3230C1C35BE2A0104B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 12:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:32:51:22:56:46:64:f4:dd:2a:bb:7d:71:79:bc:65:8f:ad:ad:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC7439239B591D2499B70C3230C1C35BE2A0104B Validity Not Before: Sep 3 16:53:04 2026 GMT Not After : Sep 4 19:26:04 2026 GMT Subject: CN=D10FAEC2EDA242DC65C1C944966B2621CFF9E4C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:63:73:a8:dc:79:ab:73:eb:1e:4a:0a:d9:c2: 1a:76:fa:6f:dd:d0:57:92:1e:17:44:5f:5d:13:59: 09:24:4b:23:fa:8a:fa:f8:e9:d4:24:fd:09:83:10: de:92:03:de:84:28:2e:77:a2:66:90:dc:6a:d9:d1: 97:37:4b:47:09:c2:de:88:d0:2b:db:36:dd:39:1a: 0d:09:2e:8d:02:ac:61:5d:98:9e:d9:ee:b2:87:78: 69:94:0c:c8:7a:b9:3f:44:d6:db:e3:3d:60:0d:2a: 73:b5:24:55:88:4c:42:33:00:17:27:2c:83:8d:7e: 7f:f4:28:d6:69:fb:71:78:12:68:98:5a:3d:89:d4: 98:c1:3d:98:b7:25:46:46:be:74:f1:7d:8f:db:64: 46:3b:3e:97:f2:2a:ee:7d:53:97:d0:70:4b:67:4a: ca:60:75:e9:80:40:9e:d5:4b:31:d3:68:06:ac:0f: b5:ca:59:d9:36:e8:73:84:03:b4:c2:f0:4c:47:e9: 1c:6d:46:c9:b9:ec:12:6c:66:33:fd:7b:8a:0b:8a: da:36:f9:7a:3c:6c:af:d1:3b:f5:b3:9c:6e:aa:9d: e4:15:1c:68:21:45:8a:46:8f:48:e3:a8:aa:14:e0: 68:8d:b2:7e:28:12:bd:32:76:c2:3b:c2:da:13:37: 64:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:0F:AE:C2:ED:A2:42:DC:65:C1:C9:44:96:6B:26:21:CF:F9:E4:C5 X509v3 Authority Key Identifier: keyid:AC:74:39:23:9B:59:1D:24:99:B7:0C:32:30:C1:C3:5B:E2:A0:10:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/AC7439239B591D2499B70C3230C1C35BE2A0104B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC7439239B591D2499B70C3230C1C35BE2A0104B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/AC7439239B591D2499B70C3230C1C35BE2A0104B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:e3:75:62:fd:b5:3d:d2:54:2c:02:67:c8:72:22:c1:74:41: ab:44:dd:39:3c:18:6c:6f:74:3c:be:8a:64:ca:2d:48:15:7f: 82:54:f8:e3:52:1e:df:7d:89:84:60:3a:49:dc:a1:f1:ff:97: d8:d8:32:b2:24:0b:48:4a:53:83:ce:b0:3d:c6:f7:f4:50:43: 8e:6e:89:9b:62:a0:43:56:9b:30:4d:7c:bb:5f:19:f4:d1:3b: 8c:2b:11:db:b6:89:1c:48:a0:3f:14:49:04:de:f7:c6:93:76: 40:45:41:50:fe:71:33:dc:0f:c0:2e:9d:79:02:3c:75:0d:f2: b6:b3:72:4c:6c:b9:28:d6:74:ea:ae:83:f1:b5:dd:26:1e:24: c4:29:ba:c3:5f:23:df:45:b2:8a:58:d7:d7:c5:e7:4a:cb:8e: 0f:04:c1:09:70:06:63:c5:e4:40:ff:82:c3:96:97:6e:0a:3f: bf:01:ac:c7:27:85:4d:3d:e9:c2:f9:70:eb:43:46:37:28:85: 0b:bc:e1:03:f9:32:fc:b2:cb:27:5e:29:6b:44:93:10:11:17: cb:89:2e:2e:51:24:fe:d8:27:4e:6b:9d:30:d2:6c:92:93:e0: 72:92:ce:37:2d:72:f7:ee:eb:01:80:66:4f:d8:d3:ea:db:df: 45:2b:dd:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUTJRIlZGZPTdKrt9cXm8ZY+trbYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM3NDM5MjM5QjU5MUQyNDk5QjcwQzMyMzBDMUMzNUJF MkEwMTA0QjAeFw0yNjA5MDMxNjUzMDRaFw0yNjA5MDQxOTI2MDRaMDMxMTAvBgNV BAMTKEQxMEZBRUMyRURBMjQyREM2NUMxQzk0NDk2NkIyNjIxQ0ZGOUU0QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwY3Oo3Hmrc+seSgrZwhp2+m/d 0FeSHhdEX10TWQkkSyP6ivr46dQk/QmDEN6SA96EKC53omaQ3GrZ0Zc3S0cJwt6I 0CvbNt05Gg0JLo0CrGFdmJ7Z7rKHeGmUDMh6uT9E1tvjPWANKnO1JFWITEIzABcn LIONfn/0KNZp+3F4EmiYWj2J1JjBPZi3JUZGvnTxfY/bZEY7PpfyKu59U5fQcEtn SspgdemAQJ7VSzHTaAasD7XKWdk26HOEA7TC8ExH6RxtRsm57BJsZjP9e4oLito2 +Xo8bK/RO/WznG6qneQVHGghRYpGj0jjqKoU4GiNsn4oEr0ydsI7wtoTN2RFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0Q+uwu2iQtxlwclElmsmIc/55MUwHwYDVR0j BBgwFoAUrHQ5I5tZHSSZtwwyMMHDW+KgEEswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjU3ZTg5ZTgtNTNhYS00NGY2LWI2ZDgtNTg3OTA3OGJmNjY0LzAvQUM3NDM5MjM5 QjU5MUQyNDk5QjcwQzMyMzBDMUMzNUJFMkEwMTA0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzc0MzkyMzlCNTkxRDI0OTlCNzBDMzIzMEMxQzM1QkUyQTAx MDRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjU3ZTg5ZTgtNTNhYS00NGY2LWI2 ZDgtNTg3OTA3OGJmNjY0LzAvQUM3NDM5MjM5QjU5MUQyNDk5QjcwQzMyMzBDMUMz NUJFMkEwMTA0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABPjdWL9tT3SVCwCZ8hyIsF0QatE3Tk8GGxv dDy+imTKLUgVf4JU+ONSHt99iYRgOkncofH/l9jYMrIkC0hKU4POsD3G9/RQQ45u iZtioENWmzBNfLtfGfTRO4wrEdu2iRxIoD8USQTe98aTdkBFQVD+cTPcD8AunXkC PHUN8razckxsuSjWdOqug/G13SYeJMQpusNfI99FsopY19fF50rLjg8EwQlwBmPF 5ED/gsOWl24KP78BrMcnhU096cL5cOtDRjcohQu84QP5MvyyyydeKWtEkxARF8uJ Li5RJP7YJ05rnTDSbJKT4HKSzjctcvfu6wGAZk/Y0+rb30Ur3XU= -----END CERTIFICATE-----Generated at Thu Sep 3 20:56:50 2026 by rpki-client