$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.mft File: AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.mft (raw, json) Hash identifier: y2MgyPquIKb5UdJ/MY3AqYWiUmKJRmAOUJDTVgQNSeo= Subject key identifier: 2D:20:51:CD:96:9B:11:F1:9A:D5:3C:DC:31:7C:97:44:02:A4:88:2A Authority key identifier: AC:9E:E5:D4:AC:F7:FD:0D:FD:66:CD:FE:D1:20:17:1D:F6:19:5E:B0 Certificate issuer: /CN=AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0 Certificate serial: 74F192BBC520B94E9DCC87BCEFA0E100E6A29B17 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.mft Manifest number: 09 Signing time: Fri 08 May 2026 05:15:33 +0000 Manifest this update: Fri 08 May 2026 05:10:33 +0000 Manifest next update: Sat 09 May 2026 06:56:33 +0000 Files and hashes: 1: AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.crl (hash: 7P/Xku7YD0Tnap6pjuCtiyiBuvvJQhyYc25I8F0tMQ4=) 2: 3130332e3136322e3132322e302f32332d3234203d3e203137393935.roa (hash: OLWauFfmrw2a6NVsZr060P9JMbawsYC5rFsVrmOkFCE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.crl rsync://rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 May 2026 05:34:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:f1:92:bb:c5:20:b9:4e:9d:cc:87:bc:ef:a0:e1:00:e6:a2:9b:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0 Validity Not Before: May 8 05:10:33 2026 GMT Not After : May 9 06:56:33 2026 GMT Subject: CN=2D2051CD969B11F19AD53CDC317C974402A4882A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b6:a6:8e:87:65:0f:30:9a:6b:7e:fe:cf:03: 0f:37:23:6d:f5:84:bc:ac:4c:a4:fa:e7:e6:b9:42: 69:21:57:d8:63:2c:ac:a7:cf:52:c4:e2:56:41:73: 2d:26:61:f9:ac:ba:70:59:57:04:d1:56:6e:4f:e9: 37:1e:e7:3a:1e:12:b0:a8:2d:5d:f5:f0:ed:78:a3: 96:da:48:0b:bc:62:a2:12:49:26:ee:bf:f2:86:a6: 81:66:db:4e:be:9e:b0:2f:c2:8a:48:c2:c9:9b:6f: b4:e7:59:98:32:4a:22:85:8c:cd:fd:15:86:00:72: e0:96:90:17:69:26:19:02:20:e5:21:bd:14:1e:1d: 65:3e:17:5b:b9:5f:ad:04:86:85:b5:71:de:76:98: 86:46:14:87:e6:b3:19:94:90:73:8e:a2:f5:df:e4: ee:10:7b:0b:76:99:7f:51:bf:f7:a2:96:5e:99:0b: fb:9a:fb:47:8d:ea:dc:67:69:67:fe:e9:66:b7:b1: 65:c7:bf:d7:1d:68:b8:84:b9:fe:63:da:16:f0:07: a3:c1:7a:2a:4c:75:85:21:6e:96:6b:aa:fe:e0:fb: 30:b1:dc:45:9a:cf:e6:bc:2d:cb:8b:01:70:21:7d: aa:ab:00:49:2f:86:8f:03:9b:8f:da:31:ae:d8:43: 7b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:20:51:CD:96:9B:11:F1:9A:D5:3C:DC:31:7C:97:44:02:A4:88:2A X509v3 Authority Key Identifier: keyid:AC:9E:E5:D4:AC:F7:FD:0D:FD:66:CD:FE:D1:20:17:1D:F6:19:5E:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:5a:7e:3d:60:6c:e4:6f:ae:9e:c7:9f:b2:24:32:8c:34:9d: 68:85:ca:31:67:be:cf:e5:50:17:f7:e3:2e:ed:e3:1f:7f:ad: 19:b6:c7:c5:26:98:87:91:a5:b9:f8:a8:9d:b1:5e:d2:86:64: ae:10:9d:c5:0a:85:19:73:d0:b7:b8:76:38:5c:61:bf:67:15: fe:20:e8:b1:a8:63:bd:aa:9c:58:88:95:cb:eb:c0:f6:64:6e: d3:00:70:74:52:ce:f3:c4:9d:df:f2:67:ff:ba:65:80:c5:9f: 54:b4:dd:95:0a:b2:28:6e:77:3a:86:bd:e5:18:54:11:a1:1d: 6d:01:89:76:45:04:ae:b4:e0:e6:16:b9:2d:99:84:67:67:d0: 07:54:14:a2:63:f9:98:a4:bb:71:16:f5:d3:6c:a3:c0:45:62: 6f:9b:4d:50:17:d0:ee:16:55:d6:1f:5c:c6:b6:49:28:d0:ec: f2:7f:d2:1f:16:d9:ea:55:69:c6:c9:d2:86:87:b0:66:4e:17: 08:72:56:3d:76:9c:7a:7d:67:c4:db:95:41:e1:03:3f:3d:f0: 8b:9a:21:13:d8:7c:c5:8a:06:77:78:a2:c7:50:28:aa:ee:e0: da:1d:c1:7f:58:74:d3:61:e8:1b:71:95:12:28:b3:31:d9:e1: 12:d8:df:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdPGSu8UguU6dzIe876DhAOaimxcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM5RUU1RDRBQ0Y3RkQwREZENjZDREZFRDEyMDE3MURG NjE5NUVCMDAeFw0yNjA1MDgwNTEwMzNaFw0yNjA1MDkwNjU2MzNaMDMxMTAvBgNV BAMTKDJEMjA1MUNEOTY5QjExRjE5QUQ1M0NEQzMxN0M5NzQ0MDJBNDg4MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCltqaOh2UPMJprfv7PAw83I231 hLysTKT65+a5QmkhV9hjLKynz1LE4lZBcy0mYfmsunBZVwTRVm5P6Tce5zoeErCo LV318O14o5baSAu8YqISSSbuv/KGpoFm206+nrAvwopIwsmbb7TnWZgySiKFjM39 FYYAcuCWkBdpJhkCIOUhvRQeHWU+F1u5X60EhoW1cd52mIZGFIfmsxmUkHOOovXf 5O4Qewt2mX9Rv/eill6ZC/ua+0eN6txnaWf+6Wa3sWXHv9cdaLiEuf5j2hbwB6PB eipMdYUhbpZrqv7g+zCx3EWaz+a8LcuLAXAhfaqrAEkvho8Dm4/aMa7YQ3sNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULSBRzZabEfGa1TzcMXyXRAKkiCowHwYDVR0j BBgwFoAUrJ7l1Kz3/Q39Zs3+0SAXHfYZXrAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDFiM2ZlNDUtYjU4OC00YmI3LWFlOTAtOTFmNTdmNTkzY2I1LzAvQUM5RUU1RDRB Q0Y3RkQwREZENjZDREZFRDEyMDE3MURGNjE5NUVCMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzlFRTVENEFDRjdGRDBERkQ2NkNERkVEMTIwMTcxREY2MTk1 RUIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDFiM2ZlNDUtYjU4OC00YmI3LWFl OTAtOTFmNTdmNTkzY2I1LzAvQUM5RUU1RDRBQ0Y3RkQwREZENjZDREZFRDEyMDE3 MURGNjE5NUVCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEBafj1gbORvrp7Hn7IkMow0nWiFyjFnvs/l UBf34y7t4x9/rRm2x8UmmIeRpbn4qJ2xXtKGZK4QncUKhRlz0Le4djhcYb9nFf4g 6LGoY72qnFiIlcvrwPZkbtMAcHRSzvPEnd/yZ/+6ZYDFn1S03ZUKsihudzqGveUY VBGhHW0BiXZFBK604OYWuS2ZhGdn0AdUFKJj+Ziku3EW9dNso8BFYm+bTVAX0O4W VdYfXMa2SSjQ7PJ/0h8W2epVacbJ0oaHsGZOFwhyVj12nHp9Z8TblUHhAz898Iua IRPYfMWKBnd4osdQKKru4NodwX9YdNNh6BtxlRIoszHZ4RLY3/M= -----END CERTIFICATE-----Generated at Fri May 8 07:27:16 2026 by rpki-client