$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/AC861103DDC024E3BEB681351D66B027A8BA785A.mft File: AC861103DDC024E3BEB681351D66B027A8BA785A.mft (raw, json) Hash identifier: cuwLiVlgCn/zc1L1oDlCGtz7m+dcdihoRGQJ//0VePQ= Subject key identifier: 7A:B7:66:3E:BF:D8:6B:D0:6D:74:5E:71:52:22:90:94:FB:C0:82:62 Authority key identifier: AC:86:11:03:DD:C0:24:E3:BE:B6:81:35:1D:66:B0:27:A8:BA:78:5A Certificate issuer: /CN=AC861103DDC024E3BEB681351D66B027A8BA785A Certificate serial: 0EB8EBD4EC3833B0D2B0516035560BF11CAF0BA6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC861103DDC024E3BEB681351D66B027A8BA785A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/AC861103DDC024E3BEB681351D66B027A8BA785A.mft Manifest number: EB Signing time: Mon 26 Oct 2026 19:44:58 +0000 Manifest this update: Mon 26 Oct 2026 19:39:58 +0000 Manifest next update: Tue 27 Oct 2026 21:32:58 +0000 Files and hashes: 1: 323430363a633634303a323a3a2f34382d3438203d3e20313431313337.roa (hash: qh5eFZWjtfs6SGeMUmGMmglBO26iaZvOjL82WMbtwVc=) 2: AC861103DDC024E3BEB681351D66B027A8BA785A.crl (hash: 4CLUafQlKJ+rFZAmr2z+bhSzmohyzC5UMO1n9NHqQaw=) 3: 3130332e3135382e3235332e302f32342d3234203d3e20313431313337.roa (hash: Cxuw8utleC956EhbVyK4h8tr3eWPWdRF27VOeiD3sxU=) 4: 3130332e3135382e3235322e302f32342d3234203d3e20313431313337.roa (hash: SW4deFwDdRpgisaH7RqLBMHR3upFCn0yA60y2S1M1VI=) 5: 323430363a633634303a313a3a2f34382d3438203d3e20313431313337.roa (hash: SC/sM91Mj29qp/7MnNyzUUwPkBeQTEbv2cnvmQBFqIM=) 6: 3130332e3135382e3235322e302f32332d3233203d3e20313431313337.roa (hash: J7StUV2ZODyDnpl4H6qRmHDEDNeYTV1qNMuPRyc9WyE=) 7: 323430363a633634303a3a2f33322d3332203d3e20313431313337.roa (hash: pE41vn8Dt1qZrL/6IKcEElho8GXY6UXGVa22Zlk5Klg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/AC861103DDC024E3BEB681351D66B027A8BA785A.crl rsync://rpki-rsync.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/AC861103DDC024E3BEB681351D66B027A8BA785A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC861103DDC024E3BEB681351D66B027A8BA785A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 12:57:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:b8:eb:d4:ec:38:33:b0:d2:b0:51:60:35:56:0b:f1:1c:af:0b:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC861103DDC024E3BEB681351D66B027A8BA785A Validity Not Before: Oct 26 19:39:58 2026 GMT Not After : Oct 27 21:32:58 2026 GMT Subject: CN=7AB7663EBFD86BD06D745E7152229094FBC08262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:1f:e5:67:95:c4:ce:83:1d:a3:9c:81:ed:14: 14:53:ec:b5:4b:7e:3f:6f:e6:38:e3:96:fb:7f:40: 22:84:21:03:58:f4:eb:c4:4a:ca:66:db:7d:66:ee: a7:ef:41:24:51:35:17:bc:b9:a7:60:20:86:ca:93: 22:da:99:87:2f:d6:2b:95:69:7d:de:7a:08:63:39: eb:00:ce:33:88:e9:f7:06:e8:98:22:01:31:b2:e1: 1b:ae:84:1c:b8:b6:c4:9a:d5:c6:29:36:4e:54:de: 50:fc:8c:44:e7:99:19:72:fe:11:9b:34:46:f7:ea: ff:65:9c:8f:d8:ee:20:94:1e:34:69:f7:dd:88:ab: 0c:6e:60:19:01:49:c7:4e:a1:49:99:10:fb:ee:48: 68:5e:8d:3e:92:51:46:b3:2e:d2:e6:92:b5:72:75: 07:ed:dd:6c:61:08:6e:b4:9a:3d:b7:18:cc:7e:8e: 1a:79:2d:19:4c:58:76:0a:4f:db:05:0c:b9:ba:28: 75:5a:9e:33:4d:27:a9:70:04:d8:82:db:86:b8:4b: ba:d6:92:cf:e8:eb:3c:c4:47:a6:2b:ae:3f:02:e4: 94:6d:af:15:af:e5:84:3a:d0:64:47:cc:67:29:24: 27:07:06:5e:0f:d0:c3:5a:9a:63:da:f9:6e:47:ca: 02:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:B7:66:3E:BF:D8:6B:D0:6D:74:5E:71:52:22:90:94:FB:C0:82:62 X509v3 Authority Key Identifier: keyid:AC:86:11:03:DD:C0:24:E3:BE:B6:81:35:1D:66:B0:27:A8:BA:78:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/AC861103DDC024E3BEB681351D66B027A8BA785A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC861103DDC024E3BEB681351D66B027A8BA785A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/AC861103DDC024E3BEB681351D66B027A8BA785A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:e3:a5:3f:45:7c:b5:a1:37:e7:3d:62:7c:78:e0:52:ac:81: dd:7a:ff:da:12:16:01:b4:61:8d:ad:f2:89:17:d1:4d:da:e7: 97:06:12:ff:27:47:2f:9e:15:c3:37:ea:33:a0:c7:38:9e:20: da:89:33:72:13:76:48:ad:dc:07:14:8f:07:a4:2c:76:f1:3d: 31:39:24:9b:4d:5a:bf:3a:aa:80:e6:cf:5c:86:a9:e5:09:c4: 52:de:25:70:43:fc:13:1e:d9:b0:8f:7d:7a:c4:f2:84:e2:e0: c4:33:32:22:ee:5e:b0:ce:37:92:30:39:8f:40:2b:5e:c6:3e: db:70:b8:cd:37:a4:a4:61:03:30:9f:76:e2:33:42:7b:ba:8e: 8a:4d:e3:26:65:7c:64:05:77:d7:1e:df:2d:fd:77:dc:47:05: 6d:dd:f2:e3:46:82:e1:f9:f9:82:f7:d9:d7:75:6b:81:68:54: 83:15:ea:ba:07:94:ef:af:2f:13:14:d6:2c:a5:71:9c:cb:18: 81:42:55:0d:68:2c:dd:3d:e7:5a:e3:06:07:f6:3b:ab:98:37: 5f:1d:99:d5:90:dd:ec:88:3c:ca:ff:52:3b:ef:a2:80:26:75: 82:f5:33:39:c5:9b:38:e7:74:90:dd:ca:80:e8:df:75:be:a9: 6a:ce:91:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDrjr1Ow4M7DSsFFgNVYL8RyvC6YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM4NjExMDNEREMwMjRFM0JFQjY4MTM1MUQ2NkIwMjdB OEJBNzg1QTAeFw0yNjEwMjYxOTM5NThaFw0yNjEwMjcyMTMyNThaMDMxMTAvBgNV BAMTKDdBQjc2NjNFQkZEODZCRDA2RDc0NUU3MTUyMjI5MDk0RkJDMDgyNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZH+VnlcTOgx2jnIHtFBRT7LVL fj9v5jjjlvt/QCKEIQNY9OvESspm231m7qfvQSRRNRe8uadgIIbKkyLamYcv1iuV aX3eeghjOesAzjOI6fcG6JgiATGy4RuuhBy4tsSa1cYpNk5U3lD8jETnmRly/hGb NEb36v9lnI/Y7iCUHjRp992IqwxuYBkBScdOoUmZEPvuSGhejT6SUUazLtLmkrVy dQft3WxhCG60mj23GMx+jhp5LRlMWHYKT9sFDLm6KHVanjNNJ6lwBNiC24a4S7rW ks/o6zzER6Yrrj8C5JRtrxWv5YQ60GRHzGcpJCcHBl4P0MNammPa+W5HygLhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUerdmPr/Ya9BtdF5xUiKQlPvAgmIwHwYDVR0j BBgwFoAUrIYRA93AJOO+toE1HWawJ6i6eFowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjQ5MDM0NWUtMmQ1Ny00MzQ5LWI3OGYtYzhiMThhNDQyNDQ1LzAvQUM4NjExMDNE REMwMjRFM0JFQjY4MTM1MUQ2NkIwMjdBOEJBNzg1QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzg2MTEwM0REQzAyNEUzQkVCNjgxMzUxRDY2QjAyN0E4QkE3 ODVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjQ5MDM0NWUtMmQ1Ny00MzQ5LWI3 OGYtYzhiMThhNDQyNDQ1LzAvQUM4NjExMDNEREMwMjRFM0JFQjY4MTM1MUQ2NkIw MjdBOEJBNzg1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACvjpT9FfLWhN+c9Ynx44FKsgd16/9oSFgG0 YY2t8okX0U3a55cGEv8nRy+eFcM36jOgxzieINqJM3ITdkit3AcUjwekLHbxPTE5 JJtNWr86qoDmz1yGqeUJxFLeJXBD/BMe2bCPfXrE8oTi4MQzMiLuXrDON5IwOY9A K17GPttwuM03pKRhAzCfduIzQnu6jopN4yZlfGQFd9ce3y39d9xHBW3d8uNGguH5 +YL32dd1a4FoVIMV6roHlO+vLxMU1iylcZzLGIFCVQ1oLN0951rjBgf2O6uYN18d mdWQ3eyIPMr/UjvvooAmdYL1MznFmzjndJDdyoDo33W+qWrOkVU= -----END CERTIFICATE-----Generated at Mon Oct 26 23:54:01 2026 by rpki-client