$ rpki-client -vvf rpki-rsync.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.mft File: AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.mft (raw, json) Hash identifier: 290lznAkAU1eBHhz2eJ8lW8RpLeplsODmOxs+GkL6JE= Subject key identifier: 89:00:D0:EA:8B:8D:C9:F1:10:6B:27:87:D9:C0:EB:A2:51:38:EE:42 Authority key identifier: AC:21:F3:02:F8:FE:87:98:E3:EB:EC:F7:4F:BB:4A:1A:FA:8C:0A:5A Certificate issuer: /CN=AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A Certificate serial: 6CA85D6C4987ABDD2BD286E785CD2054660E9A21 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 23:29:12 +0000 Manifest this update: Tue 02 Jun 2026 23:24:12 +0000 Manifest next update: Thu 04 Jun 2026 02:18:12 +0000 Files and hashes: 1: AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.crl (hash: /ewao5Rr26OqvJ1wJUSFMvkRgSyhQmFY/l1GYJLzQTA=) 2: 3130332e3234322e3233332e302f32342d3234203d3e203538383234.roa (hash: F0odlT4U3J2I7U1EPBDoQbX8C+Jjnqt/uRif6Raoqb0=) 3: 3130332e35342e3137322e302f32342d3234203d3e203538383234.roa (hash: 2hznDtF+sHEQo6Fg1DwDt2/m1fqJNRXXGLkGt1F7ms0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.crl rsync://rpki-rsync.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:a8:5d:6c:49:87:ab:dd:2b:d2:86:e7:85:cd:20:54:66:0e:9a:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A Validity Not Before: Jun 2 23:24:12 2026 GMT Not After : Jun 4 02:18:12 2026 GMT Subject: CN=8900D0EA8B8DC9F1106B2787D9C0EBA25138EE42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:60:65:33:ad:95:a5:06:49:32:cb:b4:ba:8d: 5b:a1:a6:51:da:1e:d7:0b:54:37:63:51:b3:11:3e: dd:b8:c0:08:42:27:08:a8:5b:1d:34:78:d8:43:b2: 06:ac:e6:5a:db:84:6a:86:24:7b:ae:0c:ed:dc:37: 00:4c:64:c5:3c:e5:dc:8b:5f:77:83:f0:3b:37:ab: 76:77:21:e0:ac:b3:d3:b8:8a:d4:6e:6a:26:00:af: 0a:fd:64:db:67:84:d7:b8:0b:ed:27:0e:0d:f4:03: 53:ad:c2:4e:1d:27:64:e0:12:59:9d:b0:e0:77:cf: 58:6d:60:3f:46:c5:61:1c:ea:d4:4b:cf:5f:36:f9: 6b:1c:ed:2f:7f:e5:f7:3d:6c:20:55:77:a4:65:10: 0d:d4:d4:b8:c1:51:40:e9:fa:95:6d:e8:5a:06:94: 91:81:8d:2b:54:b2:f6:54:ce:bd:85:c6:65:60:04: 3b:a2:82:f6:ec:ee:37:05:30:1e:c1:1b:e5:de:e9: 04:df:70:89:d0:f1:d6:25:90:a5:92:f2:59:df:d6: 1e:21:c0:ce:97:1c:e4:23:b7:34:80:6c:ff:16:f8: cb:bf:5b:f1:39:7f:c7:33:85:d2:dd:03:dd:17:eb: c2:96:dc:08:cc:e8:b1:41:e8:4e:2e:0f:49:c3:d4: c8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:00:D0:EA:8B:8D:C9:F1:10:6B:27:87:D9:C0:EB:A2:51:38:EE:42 X509v3 Authority Key Identifier: keyid:AC:21:F3:02:F8:FE:87:98:E3:EB:EC:F7:4F:BB:4A:1A:FA:8C:0A:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:bf:79:96:f8:cb:c7:c0:1f:a2:8d:83:01:a2:c5:68:cb:cb: 57:f4:be:d9:ca:69:fa:9d:89:35:5c:5d:ec:ec:dc:9f:e0:5a: df:48:4d:cf:4c:82:9f:64:5a:87:12:2e:47:8d:e1:9b:ff:a1: 49:91:e5:1a:05:11:78:8a:c8:7d:9d:9d:27:6c:b2:98:fd:dd: 9e:9c:b8:e9:02:87:91:af:84:d1:7a:28:8a:e0:1e:34:df:64: 19:56:a3:0d:d9:5c:4c:c6:b8:4a:a7:4c:92:a8:57:6a:17:5d: ef:02:84:fb:4f:8a:7c:61:bd:8c:6b:43:24:77:79:d7:0b:64: e7:35:b7:18:cc:c7:20:b1:25:89:7f:9d:a0:09:bb:f8:25:8f: 99:17:f6:8e:7a:52:39:22:84:00:fc:99:f7:10:84:09:03:4e: e8:ce:44:73:67:31:0b:2e:c8:c6:e8:bb:a8:64:2c:fa:b4:2d: 76:5f:5c:c8:a2:65:06:45:ad:d3:93:bd:af:8a:67:a9:78:93: 8b:52:53:3f:e9:7f:3c:a9:22:d0:a3:15:63:b8:d6:b2:70:99: cc:cb:1c:70:96:b4:33:ef:64:95:14:3b:36:e9:19:23:17:d4: fc:b8:62:b2:a8:db:b5:61:79:1b:94:69:14:d3:32:21:2d:63: d5:5c:8c:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbKhdbEmHq90r0obnhc0gVGYOmiEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUMyMUYzMDJGOEZFODc5OEUzRUJFQ0Y3NEZCQjRBMUFG QThDMEE1QTAeFw0yNjA2MDIyMzI0MTJaFw0yNjA2MDQwMjE4MTJaMDMxMTAvBgNV BAMTKDg5MDBEMEVBOEI4REM5RjExMDZCMjc4N0Q5QzBFQkEyNTEzOEVFNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtYGUzrZWlBkkyy7S6jVuhplHa HtcLVDdjUbMRPt24wAhCJwioWx00eNhDsgas5lrbhGqGJHuuDO3cNwBMZMU85dyL X3eD8Ds3q3Z3IeCss9O4itRuaiYArwr9ZNtnhNe4C+0nDg30A1Otwk4dJ2TgElmd sOB3z1htYD9GxWEc6tRLz182+Wsc7S9/5fc9bCBVd6RlEA3U1LjBUUDp+pVt6FoG lJGBjStUsvZUzr2FxmVgBDuigvbs7jcFMB7BG+Xe6QTfcInQ8dYlkKWS8lnf1h4h wM6XHOQjtzSAbP8W+Mu/W/E5f8czhdLdA90X68KW3AjM6LFB6E4uD0nD1Mi7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiQDQ6ouNyfEQayeH2cDrolE47kIwHwYDVR0j BBgwFoAUrCHzAvj+h5jj6+z3T7tKGvqMClowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTdlMGZhZjAtNzg4ZC00OTViLWFjOTgtZjM1MTYxOTVkYjYwLzAvQUMyMUYzMDJG OEZFODc5OEUzRUJFQ0Y3NEZCQjRBMUFGQThDMEE1QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzIxRjMwMkY4RkU4Nzk4RTNFQkVDRjc0RkJCNEExQUZBOEMw QTVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTdlMGZhZjAtNzg4ZC00OTViLWFj OTgtZjM1MTYxOTVkYjYwLzAvQUMyMUYzMDJGOEZFODc5OEUzRUJFQ0Y3NEZCQjRB MUFGQThDMEE1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI2/eZb4y8fAH6KNgwGixWjLy1f0vtnKafqd iTVcXezs3J/gWt9ITc9Mgp9kWocSLkeN4Zv/oUmR5RoFEXiKyH2dnSdsspj93Z6c uOkCh5GvhNF6KIrgHjTfZBlWow3ZXEzGuEqnTJKoV2oXXe8ChPtPinxhvYxrQyR3 edcLZOc1txjMxyCxJYl/naAJu/glj5kX9o56UjkihAD8mfcQhAkDTujORHNnMQsu yMbou6hkLPq0LXZfXMiiZQZFrdOTva+KZ6l4k4tSUz/pfzypItCjFWO41rJwmczL HHCWtDPvZJUUOzbpGSMX1Py4YrKo27VheRuUaRTTMiEtY9VcjFM= -----END CERTIFICATE-----Generated at Wed Jun 3 04:12:11 2026 by rpki-client