$ rpki-client -vvf rpki-rsync.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.mft File: AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.mft (raw, json) Hash identifier: DJ/9gO1+RtV3QSnTk/dtBP04USzTLmWyA1KWEuRiDSI= Subject key identifier: 65:CC:9C:81:0D:8D:6F:F4:26:79:DE:B6:31:FD:56:0C:95:9D:E3:CA Authority key identifier: AC:21:F3:02:F8:FE:87:98:E3:EB:EC:F7:4F:BB:4A:1A:FA:8C:0A:5A Certificate issuer: /CN=AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A Certificate serial: 7F1CA92486EB077C9430135E14DD80AD10ABB631 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.mft Manifest number: 69 Signing time: Mon 20 Jul 2026 09:53:37 +0000 Manifest this update: Mon 20 Jul 2026 09:48:37 +0000 Manifest next update: Tue 21 Jul 2026 13:38:37 +0000 Files and hashes: 1: 3130332e35342e3137322e302f32342d3234203d3e203538383234.roa (hash: 2hznDtF+sHEQo6Fg1DwDt2/m1fqJNRXXGLkGt1F7ms0=) 2: AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.crl (hash: DZlovFBxc+7VHkV1OUB/p9+OU3NH/mlYvZjP291UT50=) 3: 3130332e3234322e3233332e302f32342d3234203d3e203538383234.roa (hash: F0odlT4U3J2I7U1EPBDoQbX8C+Jjnqt/uRif6Raoqb0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.crl rsync://rpki-rsync.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 13:38:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:1c:a9:24:86:eb:07:7c:94:30:13:5e:14:dd:80:ad:10:ab:b6:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A Validity Not Before: Jul 20 09:48:37 2026 GMT Not After : Jul 21 13:38:37 2026 GMT Subject: CN=65CC9C810D8D6FF42679DEB631FD560C959DE3CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:5c:87:1f:54:4f:3a:bc:d1:a9:5e:ec:31:73: e3:fa:45:22:28:72:ce:88:52:90:79:e7:dc:3a:88: 1a:c2:12:76:9b:d1:09:3e:f3:48:51:7f:40:27:f4: 83:07:11:56:d9:1e:06:0b:4d:80:07:2a:a5:22:e9: 2c:7a:d3:e2:02:fa:f1:aa:ea:d6:3d:b5:42:02:ea: ec:83:09:c5:d3:b8:52:6d:cf:cd:8c:6a:63:af:51: bb:ad:a8:31:3e:a0:f6:7c:06:29:a4:30:72:3f:de: 43:ba:78:cb:6a:1c:0b:b1:02:2a:1e:0e:c7:94:8d: 51:05:06:55:6d:1d:8c:6c:26:47:ca:3f:93:bb:e8: 44:03:03:70:92:5f:1a:88:be:e3:ac:9a:cd:07:0d: 84:29:ac:8a:9e:91:83:cf:9d:5d:91:56:71:77:54: 6d:de:30:42:fc:0f:92:e3:78:3e:ff:8e:69:94:60: 6d:9f:52:0e:9f:ee:ee:e9:db:5b:81:da:15:d6:54: 6d:30:96:13:46:22:38:6f:8a:22:08:09:ac:eb:af: 3c:e9:13:bc:f0:e4:11:0f:88:66:17:26:79:f1:29: 13:84:4c:a0:f4:05:a1:f8:e2:01:ee:d1:08:65:83: 7b:64:3f:70:90:aa:8a:30:17:22:91:9c:49:e7:50: 05:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:CC:9C:81:0D:8D:6F:F4:26:79:DE:B6:31:FD:56:0C:95:9D:E3:CA X509v3 Authority Key Identifier: keyid:AC:21:F3:02:F8:FE:87:98:E3:EB:EC:F7:4F:BB:4A:1A:FA:8C:0A:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:4c:65:02:cf:6f:fb:1f:a2:ad:cc:6f:08:4b:d9:db:6d:55: ab:41:ee:5e:6b:da:e3:06:95:86:3d:ef:8d:20:01:c8:d7:7a: 0e:c3:e9:eb:01:e7:e1:4e:f1:57:b4:29:2b:04:06:53:56:ae: a0:80:93:5f:df:69:ff:ba:51:49:6e:fd:83:76:bf:8a:51:83: ba:e7:5e:98:97:03:bd:f9:a8:cb:f0:ba:44:81:bd:b4:16:d3: 10:fd:b3:21:8f:60:28:56:ae:b6:5d:56:42:59:41:a0:00:28: dd:e3:59:3e:60:58:25:3c:9f:c2:ed:8e:8d:7d:b7:46:20:36: 64:41:a4:49:80:ab:21:4a:58:9e:3c:bf:1f:4a:5e:38:34:1b: 37:5e:c7:f5:bc:51:57:37:8a:46:8b:04:de:30:df:9b:03:da: 9a:a9:24:d5:e1:89:0a:97:41:0c:06:b3:35:31:b0:f5:4f:9b: dc:af:58:72:f8:04:e3:85:29:f9:6a:51:d6:9f:69:d8:cb:7f: b1:e6:fc:19:f4:50:4e:43:bd:b5:cb:5f:db:ae:ab:b9:54:fe: 34:83:6a:ee:8e:db:9b:45:09:2e:8d:ed:ca:7e:fc:30:39:26: a3:bc:f9:40:5a:c8:e5:d9:57:c4:2c:d8:c7:ec:6d:21:a6:c7: 49:a0:6c:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfxypJIbrB3yUMBNeFN2ArRCrtjEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUMyMUYzMDJGOEZFODc5OEUzRUJFQ0Y3NEZCQjRBMUFG QThDMEE1QTAeFw0yNjA3MjAwOTQ4MzdaFw0yNjA3MjExMzM4MzdaMDMxMTAvBgNV BAMTKDY1Q0M5QzgxMEQ4RDZGRjQyNjc5REVCNjMxRkQ1NjBDOTU5REUzQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfXIcfVE86vNGpXuwxc+P6RSIo cs6IUpB559w6iBrCEnab0Qk+80hRf0An9IMHEVbZHgYLTYAHKqUi6Sx60+IC+vGq 6tY9tUIC6uyDCcXTuFJtz82MamOvUbutqDE+oPZ8BimkMHI/3kO6eMtqHAuxAioe DseUjVEFBlVtHYxsJkfKP5O76EQDA3CSXxqIvuOsms0HDYQprIqekYPPnV2RVnF3 VG3eMEL8D5LjeD7/jmmUYG2fUg6f7u7p21uB2hXWVG0wlhNGIjhviiIICazrrzzp E7zw5BEPiGYXJnnxKROETKD0BaH44gHu0Qhlg3tkP3CQqoowFyKRnEnnUAUHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZcycgQ2Nb/Qmed62Mf1WDJWd48owHwYDVR0j BBgwFoAUrCHzAvj+h5jj6+z3T7tKGvqMClowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTdlMGZhZjAtNzg4ZC00OTViLWFjOTgtZjM1MTYxOTVkYjYwLzAvQUMyMUYzMDJG OEZFODc5OEUzRUJFQ0Y3NEZCQjRBMUFGQThDMEE1QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzIxRjMwMkY4RkU4Nzk4RTNFQkVDRjc0RkJCNEExQUZBOEMw QTVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTdlMGZhZjAtNzg4ZC00OTViLWFj OTgtZjM1MTYxOTVkYjYwLzAvQUMyMUYzMDJGOEZFODc5OEUzRUJFQ0Y3NEZCQjRB MUFGQThDMEE1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACdMZQLPb/sfoq3MbwhL2dttVatB7l5r2uMG lYY9740gAcjXeg7D6esB5+FO8Ve0KSsEBlNWrqCAk1/faf+6UUlu/YN2v4pRg7rn XpiXA735qMvwukSBvbQW0xD9syGPYChWrrZdVkJZQaAAKN3jWT5gWCU8n8Ltjo19 t0YgNmRBpEmAqyFKWJ48vx9KXjg0Gzdex/W8UVc3ikaLBN4w35sD2pqpJNXhiQqX QQwGszUxsPVPm9yvWHL4BOOFKflqUdafadjLf7Hm/Bn0UE5DvbXLX9uuq7lU/jSD au6O25tFCS6N7cp+/DA5JqO8+UBayOXZV8Qs2MfsbSGmx0mgbIM= -----END CERTIFICATE-----Generated at Tue Jul 21 06:47:43 2026 by rpki-client