$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.mft File: AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.mft (raw, json) Hash identifier: u8UrBr+/IVYI4Tasktn7AQi+WlpzLLRjAyIN2Ugz4sk= Subject key identifier: 84:7D:A1:7A:7E:86:0E:B8:CE:29:FE:24:F4:8C:A3:6B:08:12:CE:9A Authority key identifier: AC:2C:B9:F6:C8:CB:FD:54:9E:9E:FC:E2:2F:22:F1:BC:DB:CB:73:92 Certificate issuer: /CN=AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392 Certificate serial: 54B6FD5D04B472D624E92DCA0E70B83C649CF91E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.mft Manifest number: A6 Signing time: Wed 02 Sep 2026 19:41:59 +0000 Manifest this update: Wed 02 Sep 2026 19:36:59 +0000 Manifest next update: Thu 03 Sep 2026 22:23:59 +0000 Files and hashes: 1: 3130332e3139302e3131332e302f32342d3234203d3e20313439393037.roa (hash: Q95AZcZVTNNMyCA8ySPTWTlV5HgDicctdDFDNHoHuh0=) 2: 3130332e3139302e3131322e302f32342d3234203d3e20313439393037.roa (hash: 1w+lHciz1g+OQhhivgPPNI1UUThYYbymT06vuiGhBaA=) 3: AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.crl (hash: K9yutdpyYtSOfwpkAqx7B6ans4qoTVhtynCW/A59ki0=) 4: 3130332e3139302e3131322e302f32332d3234203d3e20313439393037.roa (hash: hhQovD5k6aPWCJpf1Q2RXufesBruZAyhfmoou+CUYHI=) 5: 323030313a6466303a663963303a3a2f34382d3438203d3e20313439393037.roa (hash: GJQ+AHj2o4V89RFkllxAeKJUIy+kRG6F/hsMS14nw+s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.crl rsync://rpki-rsync.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:b6:fd:5d:04:b4:72:d6:24:e9:2d:ca:0e:70:b8:3c:64:9c:f9:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392 Validity Not Before: Sep 2 19:36:59 2026 GMT Not After : Sep 3 22:23:59 2026 GMT Subject: CN=847DA17A7E860EB8CE29FE24F48CA36B0812CE9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:72:8d:8d:25:78:b3:9a:b3:df:49:2b:bf:32: 13:86:c7:c3:62:f4:10:5d:c1:a3:4a:b3:6c:87:34: af:37:aa:45:dc:c6:20:53:6c:f9:cf:8c:5b:4b:3e: bb:ab:d6:fc:32:86:7e:52:2c:dd:7f:79:de:9b:84: fd:be:0a:0d:21:bc:20:8c:7a:2b:7e:ba:48:41:ed: 8b:0f:e1:0a:94:79:52:01:66:f0:98:86:1e:23:5f: 25:7a:1a:3b:77:b7:c9:71:a1:b2:9b:79:81:34:9e: 14:c3:e3:cb:b0:fc:05:07:91:70:a2:dc:17:f4:16: 2b:ce:04:67:7c:ba:89:61:aa:04:d3:85:25:23:cc: 61:1b:53:e5:9e:9a:18:8f:58:b7:59:42:b7:0d:42: 7a:14:55:e2:2c:31:d4:a2:b5:57:27:9e:92:81:90: 19:59:cb:fd:bc:b1:a1:ca:e0:44:2a:05:4f:f1:80: 47:76:6c:ce:e6:e9:f8:b3:ec:ba:1c:95:e8:46:73: c5:d4:de:61:a7:db:df:1d:35:63:57:35:2b:f3:e3: 24:89:21:91:3d:d2:53:f8:97:cd:fe:d8:d7:b3:c9: 0d:b4:37:90:9f:36:c5:49:7c:9f:fc:39:32:48:76: 6a:a2:38:fc:c9:62:18:1a:30:ca:cf:4c:1f:9c:30: 3e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:7D:A1:7A:7E:86:0E:B8:CE:29:FE:24:F4:8C:A3:6B:08:12:CE:9A X509v3 Authority Key Identifier: keyid:AC:2C:B9:F6:C8:CB:FD:54:9E:9E:FC:E2:2F:22:F1:BC:DB:CB:73:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:c6:1f:bc:c7:41:78:cf:34:a4:75:7e:b4:a2:5d:5d:4b:f3: 3a:8f:3c:63:4a:a5:41:cd:a4:2b:ac:ad:ee:cf:a0:5e:aa:3a: 38:73:56:c1:91:41:20:6a:a8:65:06:8a:08:63:81:38:af:7a: 30:5c:71:61:9e:ff:e3:09:b3:23:9e:7a:5b:2b:75:cf:91:d6: 05:36:b7:7f:77:db:62:54:24:14:d6:40:3f:e2:3e:cc:a4:85: 8f:08:af:d6:cd:f0:ed:81:6a:be:c1:29:6b:ce:2c:bf:c9:bb: e8:89:e7:75:ff:c8:98:6a:20:4b:c0:e4:2c:c6:04:7f:44:97: 14:26:0d:0b:f4:03:83:48:46:d6:a5:ac:a5:31:01:4e:77:02: f7:96:81:e5:b1:9e:b0:56:7c:0b:41:42:ee:7f:58:4f:c9:91: a2:45:b2:34:e9:24:76:fc:23:50:e4:fc:27:1d:b5:0e:18:32: 3b:42:21:09:25:6b:cd:d3:38:bb:ac:b4:fd:7c:4b:f1:aa:07: 62:08:50:98:e8:c0:b2:5b:0f:45:a8:5f:3b:80:ac:18:e1:3c: 36:f0:a1:c4:c1:e4:8e:1a:50:ff:e8:eb:33:f3:f9:50:d8:f2: 76:a6:78:37:18:3b:a0:4b:e3:c4:e9:a6:2d:83:77:b3:66:95: ed:fc:be:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVLb9XQS0ctYk6S3KDnC4PGSc+R4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUMyQ0I5RjZDOENCRkQ1NDlFOUVGQ0UyMkYyMkYxQkNE QkNCNzM5MjAeFw0yNjA5MDIxOTM2NTlaFw0yNjA5MDMyMjIzNTlaMDMxMTAvBgNV BAMTKDg0N0RBMTdBN0U4NjBFQjhDRTI5RkUyNEY0OENBMzZCMDgxMkNFOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVco2NJXizmrPfSSu/MhOGx8Ni 9BBdwaNKs2yHNK83qkXcxiBTbPnPjFtLPrur1vwyhn5SLN1/ed6bhP2+Cg0hvCCM eit+ukhB7YsP4QqUeVIBZvCYhh4jXyV6Gjt3t8lxobKbeYE0nhTD48uw/AUHkXCi 3Bf0FivOBGd8uolhqgTThSUjzGEbU+WemhiPWLdZQrcNQnoUVeIsMdSitVcnnpKB kBlZy/28saHK4EQqBU/xgEd2bM7m6fiz7LoclehGc8XU3mGn298dNWNXNSvz4ySJ IZE90lP4l83+2NezyQ20N5CfNsVJfJ/8OTJIdmqiOPzJYhgaMMrPTB+cMD6VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhH2hen6GDrjOKf4k9IyjawgSzpowHwYDVR0j BBgwFoAUrCy59sjL/VSenvziLyLxvNvLc5IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjA1MTZhN2EtNDE5NS00NGIzLWEyNGUtY2Y4ZWQ1NzhkNzkxLzAvQUMyQ0I5RjZD OENCRkQ1NDlFOUVGQ0UyMkYyMkYxQkNEQkNCNzM5Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzJDQjlGNkM4Q0JGRDU0OUU5RUZDRTIyRjIyRjFCQ0RCQ0I3 MzkyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjA1MTZhN2EtNDE5NS00NGIzLWEy NGUtY2Y4ZWQ1NzhkNzkxLzAvQUMyQ0I5RjZDOENCRkQ1NDlFOUVGQ0UyMkYyMkYx QkNEQkNCNzM5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACLGH7zHQXjPNKR1frSiXV1L8zqPPGNKpUHN pCusre7PoF6qOjhzVsGRQSBqqGUGighjgTivejBccWGe/+MJsyOeelsrdc+R1gU2 t39322JUJBTWQD/iPsykhY8Ir9bN8O2Bar7BKWvOLL/Ju+iJ53X/yJhqIEvA5CzG BH9ElxQmDQv0A4NIRtalrKUxAU53AveWgeWxnrBWfAtBQu5/WE/JkaJFsjTpJHb8 I1Dk/CcdtQ4YMjtCIQkla83TOLustP18S/GqB2IIUJjowLJbD0WoXzuArBjhPDbw ocTB5I4aUP/o6zPz+VDY8nameDcYO6BL48Tppi2Dd7Nmle38vsY= -----END CERTIFICATE-----Generated at Thu Sep 3 09:27:19 2026 by rpki-client