$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.mft File: AC1D31E1C0EBAF054936EEE31001AFEBD8908274.mft (raw, json) Hash identifier: hfXR9P04us042/hHZJRNhzOQLkuPQBSv5DSWHmyd2Lc= Subject key identifier: 32:36:7B:53:E4:13:E3:A6:00:29:FF:E9:D2:4F:89:16:D6:F0:2B:88 Authority key identifier: AC:1D:31:E1:C0:EB:AF:05:49:36:EE:E3:10:01:AF:EB:D8:90:82:74 Certificate issuer: /CN=AC1D31E1C0EBAF054936EEE31001AFEBD8908274 Certificate serial: 2761961A4C2D7346A237CBF0D0D99396B0B00D49 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 05:25:04 +0000 Manifest this update: Thu 17 Sep 2026 05:20:04 +0000 Manifest next update: Fri 18 Sep 2026 09:21:04 +0000 Files and hashes: 1: 3130332e3130312e3231362e302f32332d3233203d3e20313530393431.roa (hash: Tf1Q9sDwa+GlXIub485EhNzCHd5//pppNP4qkGRGD+Y=) 2: 3130332e3130312e3231362e302f32342d3234203d3e20313530393431.roa (hash: WjJ5R6RxIV+WwM7kuHxJKIcmy8NFLw826KU6Z0WZ/xY=) 3: AC1D31E1C0EBAF054936EEE31001AFEBD8908274.crl (hash: AaJ66sZUGxPUquSudDEJiRMR5Vv1Gl3hb0KWAy1aGoc=) 4: 3130332e3130312e3231372e302f32342d3234203d3e20313530393431.roa (hash: mI5pJthlZy5JwJ1aBsKt5QmSIIpmL45EJ55YLJWzCQg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.crl rsync://rpki-rsync.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:21:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:61:96:1a:4c:2d:73:46:a2:37:cb:f0:d0:d9:93:96:b0:b0:0d:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC1D31E1C0EBAF054936EEE31001AFEBD8908274 Validity Not Before: Sep 17 05:20:04 2026 GMT Not After : Sep 18 09:21:04 2026 GMT Subject: CN=32367B53E413E3A60029FFE9D24F8916D6F02B88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:de:4c:6e:bb:6c:a2:d5:c8:b9:bf:a6:d9:6f: ac:b6:0d:55:5d:01:1e:34:d6:d1:72:c9:14:4c:46: 21:8d:9b:30:74:1f:0a:9d:8c:aa:18:7d:c2:f0:1a: 93:e6:94:52:f3:5b:f6:c7:f8:31:99:63:2b:48:ef: a0:e6:6f:bf:fb:81:24:7d:aa:de:d6:bb:f9:aa:8c: 77:2c:f3:8f:4c:37:5d:4c:5d:eb:37:cf:da:a3:ff: 48:05:83:d6:a1:ca:3e:40:eb:76:b3:3b:4c:57:2c: f7:2e:95:df:53:0d:26:58:83:59:f8:2c:74:0b:d1: 19:6b:65:10:c4:28:4c:88:6e:68:24:b6:67:1a:db: db:ae:17:be:da:eb:06:75:ea:34:79:8b:4a:42:04: 87:27:f7:17:18:68:0e:1b:72:77:98:d4:2e:2f:53: 00:55:90:2c:11:71:2c:b2:cd:2a:67:4d:eb:c7:ee: b8:8f:d8:15:f0:a7:2c:ec:70:e3:5c:51:ca:9f:ad: 7b:3b:b7:ba:d3:d5:f8:f0:33:c7:10:16:7b:17:1b: 4b:8f:6a:7f:e6:88:72:cf:86:0f:35:5a:6c:d0:6b: 60:7e:f6:6a:62:37:e9:01:7f:e4:25:48:7b:07:e5: 3c:e6:9e:31:59:fd:3f:ab:61:ce:df:7f:7b:ca:0f: cc:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:36:7B:53:E4:13:E3:A6:00:29:FF:E9:D2:4F:89:16:D6:F0:2B:88 X509v3 Authority Key Identifier: keyid:AC:1D:31:E1:C0:EB:AF:05:49:36:EE:E3:10:01:AF:EB:D8:90:82:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/AC1D31E1C0EBAF054936EEE31001AFEBD8908274.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:0f:96:c7:e8:74:c1:3a:b0:ac:b8:76:19:50:bc:0a:33:aa: 91:37:ed:2c:1f:43:3b:b2:fe:38:f6:87:b2:5f:67:55:85:57: 64:16:d1:c0:da:7a:62:ff:1c:77:a7:ad:74:c1:26:26:b7:0e: ec:1b:6f:c7:75:10:4c:5a:a1:6e:c9:0c:94:60:fd:99:cf:dd: 5e:18:09:c3:19:44:03:49:19:2a:42:25:48:d9:9a:3d:35:14: f9:42:de:52:98:15:76:59:50:5b:59:22:3b:e2:38:ac:15:b7: ee:55:0e:9c:3d:3d:fc:78:e3:6f:99:9d:bb:b3:0d:65:d1:96: 29:eb:89:ed:93:36:3e:b4:ee:47:68:d9:82:93:ac:2f:bc:f5: e9:1d:c7:49:f7:e1:4f:25:4a:f0:ee:ae:46:db:07:55:48:71: 9f:02:f7:ae:d5:9f:54:b1:e1:a1:81:0e:c8:23:ad:f8:1b:e6: af:dc:2e:e5:59:f7:c1:16:bd:68:ce:09:26:f5:c8:c5:e4:60: e1:7a:09:82:fa:99:45:cc:87:27:b3:04:e8:49:fe:d5:88:9b: dc:17:17:90:b6:3c:15:47:c9:2c:ad:bb:c8:49:39:dd:21:17: ea:3f:3a:35:1e:a5:f2:88:79:bb:a5:31:36:c7:99:75:bc:29: 47:18:ea:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ2GWGkwtc0aiN8vw0NmTlrCwDUkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUMxRDMxRTFDMEVCQUYwNTQ5MzZFRUUzMTAwMUFGRUJE ODkwODI3NDAeFw0yNjA5MTcwNTIwMDRaFw0yNjA5MTgwOTIxMDRaMDMxMTAvBgNV BAMTKDMyMzY3QjUzRTQxM0UzQTYwMDI5RkZFOUQyNEY4OTE2RDZGMDJCODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq3kxuu2yi1ci5v6bZb6y2DVVd AR401tFyyRRMRiGNmzB0HwqdjKoYfcLwGpPmlFLzW/bH+DGZYytI76Dmb7/7gSR9 qt7Wu/mqjHcs849MN11MXes3z9qj/0gFg9ahyj5A63azO0xXLPculd9TDSZYg1n4 LHQL0RlrZRDEKEyIbmgktmca29uuF77a6wZ16jR5i0pCBIcn9xcYaA4bcneY1C4v UwBVkCwRcSyyzSpnTevH7riP2BXwpyzscONcUcqfrXs7t7rT1fjwM8cQFnsXG0uP an/miHLPhg81WmzQa2B+9mpiN+kBf+QlSHsH5TzmnjFZ/T+rYc7ff3vKD8zbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMjZ7U+QT46YAKf/p0k+JFtbwK4gwHwYDVR0j BBgwFoAUrB0x4cDrrwVJNu7jEAGv69iQgnQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGExZjM5NzEtM2E0Ny00NTVkLWFiMzAtZTdjMjNiNjFiOWYyLzAvQUMxRDMxRTFD MEVCQUYwNTQ5MzZFRUUzMTAwMUFGRUJEODkwODI3NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzFEMzFFMUMwRUJBRjA1NDkzNkVFRTMxMDAxQUZFQkQ4OTA4 Mjc0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGExZjM5NzEtM2E0Ny00NTVkLWFi MzAtZTdjMjNiNjFiOWYyLzAvQUMxRDMxRTFDMEVCQUYwNTQ5MzZFRUUzMTAwMUFG RUJEODkwODI3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFoPlsfodME6sKy4dhlQvAozqpE37SwfQzuy /jj2h7JfZ1WFV2QW0cDaemL/HHenrXTBJia3Duwbb8d1EExaoW7JDJRg/ZnP3V4Y CcMZRANJGSpCJUjZmj01FPlC3lKYFXZZUFtZIjviOKwVt+5VDpw9Pfx442+Znbuz DWXRlinrie2TNj607kdo2YKTrC+89ekdx0n34U8lSvDurkbbB1VIcZ8C967Vn1Sx 4aGBDsgjrfgb5q/cLuVZ98EWvWjOCSb1yMXkYOF6CYL6mUXMhyezBOhJ/tWIm9wX F5C2PBVHySytu8hJOd0hF+o/OjUepfKIebulMTbHmXW8KUcY6tI= -----END CERTIFICATE-----Generated at Thu Sep 17 12:20:10 2026 by rpki-client