$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.mft File: AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.mft (raw, json) Hash identifier: 1CKBJKu9DC2l+bKNXHfks0x5mSePWaOlzc54W4wQ0o0= Subject key identifier: 48:C0:3D:6E:A0:35:ED:13:2C:AA:2C:A6:16:1A:F0:BD:31:5E:96:0B Authority key identifier: AC:96:19:8C:9E:15:9F:FA:EE:BD:01:EE:DB:4D:EC:D2:D1:25:B4:FB Certificate issuer: /CN=AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB Certificate serial: 1E9A3526DFF4F7821D4B5D92D369581564C7F86B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.mft Manifest number: F5 Signing time: Mon 02 Nov 2026 06:00:04 +0000 Manifest this update: Mon 02 Nov 2026 05:55:04 +0000 Manifest next update: Tue 03 Nov 2026 08:19:04 +0000 Files and hashes: 1: 3136302e32352e33372e302f32342d3234203d3e20313532383332.roa (hash: mYODDo3xXjU46MAAdCgBohgomvh7OQ+5/NIDJ1DIeOU=) 2: 3136302e32352e33362e302f32342d3234203d3e20313532383332.roa (hash: vwfxZYWrk/RSmMQGBZC+p6lAwrY6bWIJ0nylVMAf2ng=) 3: AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.crl (hash: w5psRU+ty474KxqIwPRm2iAcPL3UifGidCF7KY76848=) 4: 3136302e32352e33362e302f32332d3234203d3e20313532383332.roa (hash: 9bTByo6Uq+XJTjxp6h+UyAdxQrw5r9BmwsjxhvbZ91A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.crl rsync://rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 08:19:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:9a:35:26:df:f4:f7:82:1d:4b:5d:92:d3:69:58:15:64:c7:f8:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB Validity Not Before: Nov 2 05:55:04 2026 GMT Not After : Nov 3 08:19:04 2026 GMT Subject: CN=48C03D6EA035ED132CAA2CA6161AF0BD315E960B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:46:8a:07:e8:0d:11:e1:d8:4b:36:f5:40:a5: 48:4f:ba:cf:1a:85:23:53:55:d2:65:42:9b:bb:1f: bf:f5:fc:35:61:b9:bb:e7:53:a1:0c:db:c4:92:01: 2b:a5:93:d8:2b:89:71:b6:ca:cf:11:91:df:63:4e: d0:21:31:a2:33:ca:ab:8c:f1:f2:bc:c0:91:2e:99: 13:7e:0f:b6:5e:78:11:25:43:c2:65:b3:7c:80:a8: e4:ab:ff:1e:88:d3:06:58:26:33:25:03:30:bb:a6: cc:d6:ca:3b:7b:77:4a:82:bd:b9:4a:7b:47:2b:b4: 87:ed:f6:0d:33:a4:13:28:0a:54:b5:47:60:15:52: d3:40:c2:66:51:ed:7a:9a:cb:61:6c:2d:83:ca:51: 8e:fd:12:70:4b:1e:c3:5b:5f:ff:79:91:89:67:bf: 53:16:35:4b:c5:7a:67:19:b4:5b:8b:45:e8:50:50: c2:03:09:9b:d4:03:14:87:24:4d:07:fa:67:6f:b6: 6b:45:70:a0:6c:4d:7d:8c:48:ff:d5:b4:b1:8a:0a: ce:55:0d:3b:e8:3f:3b:3e:5b:88:91:79:20:0e:a9: 54:ad:ca:81:80:27:62:0a:14:e9:6f:3b:cf:c3:2b: fb:ab:e8:bd:d0:e8:19:3e:62:c9:21:f2:50:e0:f4: 8d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:C0:3D:6E:A0:35:ED:13:2C:AA:2C:A6:16:1A:F0:BD:31:5E:96:0B X509v3 Authority Key Identifier: keyid:AC:96:19:8C:9E:15:9F:FA:EE:BD:01:EE:DB:4D:EC:D2:D1:25:B4:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:09:d4:db:df:30:86:07:cd:c0:c9:5e:57:0a:fe:93:c3:72: c5:81:8b:f8:db:b3:47:b9:78:24:99:88:ba:4e:54:b1:2d:93: b3:e1:93:84:1d:50:eb:23:a3:d0:ca:1b:d8:9e:a9:cf:0e:96: 54:9f:a1:a2:a2:18:da:3f:ff:7e:b8:7b:37:e4:01:a0:29:ee: d2:35:9b:a5:ae:15:46:b2:97:3b:47:15:22:b4:4f:0c:7a:90: ed:a5:ed:cf:f9:12:57:47:9c:fb:8c:17:2a:4d:f6:df:eb:b3: 83:54:c9:4d:ad:82:29:e4:eb:e2:03:da:11:60:11:17:0c:69: 29:61:36:f6:a9:cc:8f:37:e9:df:c8:ad:53:44:d7:18:d1:29: ef:56:12:a7:f8:d6:68:9e:83:f6:66:19:5b:98:ba:d2:b6:4e: 3d:d3:d9:fd:7b:da:9b:ca:28:9e:9a:09:9e:bc:08:89:1d:0d: 5e:90:c3:01:7e:71:81:53:ba:c0:d1:87:9e:c0:03:be:55:54: 1b:c4:08:13:58:04:74:f9:2b:4b:cb:d0:e5:29:02:cb:f2:63: 2b:1b:5c:56:60:c5:d1:1e:ae:00:66:6e:98:7e:b8:f0:d2:bf: 8f:fb:4f:d0:6c:94:3e:7a:21:d4:40:64:73:c8:bb:32:cb:7b: d3:42:0c:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHpo1Jt/094IdS12S02lYFWTH+GswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM5NjE5OEM5RTE1OUZGQUVFQkQwMUVFREI0REVDRDJE MTI1QjRGQjAeFw0yNjExMDIwNTU1MDRaFw0yNjExMDMwODE5MDRaMDMxMTAvBgNV BAMTKDQ4QzAzRDZFQTAzNUVEMTMyQ0FBMkNBNjE2MUFGMEJEMzE1RTk2MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3RooH6A0R4dhLNvVApUhPus8a hSNTVdJlQpu7H7/1/DVhubvnU6EM28SSASulk9griXG2ys8Rkd9jTtAhMaIzyquM 8fK8wJEumRN+D7ZeeBElQ8Jls3yAqOSr/x6I0wZYJjMlAzC7pszWyjt7d0qCvblK e0crtIft9g0zpBMoClS1R2AVUtNAwmZR7Xqay2FsLYPKUY79EnBLHsNbX/95kYln v1MWNUvFemcZtFuLRehQUMIDCZvUAxSHJE0H+mdvtmtFcKBsTX2MSP/VtLGKCs5V DTvoPzs+W4iReSAOqVStyoGAJ2IKFOlvO8/DK/ur6L3Q6Bk+Yskh8lDg9I1ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSMA9bqA17RMsqiymFhrwvTFelgswHwYDVR0j BBgwFoAUrJYZjJ4Vn/ruvQHu203s0tEltPswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2Y0YjUzZDgtYjJmZi00OTczLWIxYWMtNmY4NWZhZWFkYmU1LzAvQUM5NjE5OEM5 RTE1OUZGQUVFQkQwMUVFREI0REVDRDJEMTI1QjRGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BQzk2MTk4QzlFMTU5RkZBRUVCRDAxRUVEQjRERUNEMkQxMjVC NEZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2Y0YjUzZDgtYjJmZi00OTczLWIx YWMtNmY4NWZhZWFkYmU1LzAvQUM5NjE5OEM5RTE1OUZGQUVFQkQwMUVFREI0REVD RDJEMTI1QjRGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGsJ1NvfMIYHzcDJXlcK/pPDcsWBi/jbs0e5 eCSZiLpOVLEtk7Phk4QdUOsjo9DKG9ieqc8OllSfoaKiGNo//364ezfkAaAp7tI1 m6WuFUaylztHFSK0Twx6kO2l7c/5EldHnPuMFypN9t/rs4NUyU2tgink6+ID2hFg ERcMaSlhNvapzI836d/IrVNE1xjRKe9WEqf41mieg/ZmGVuYutK2Tj3T2f172pvK KJ6aCZ68CIkdDV6QwwF+cYFTusDRh57AA75VVBvECBNYBHT5K0vL0OUpAsvyYysb XFZgxdEergBmbph+uPDSv4/7T9BslD56IdRAZHPIuzLLe9NCDPQ= -----END CERTIFICATE-----Generated at Tue Nov 3 01:32:05 2026 by rpki-client