$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.mft File: AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.mft (raw, json) Hash identifier: 3L1XjKGEswOSNczUiri3sTr/qLlOImffzWMzjk0odZU= Subject key identifier: 30:78:72:51:92:E9:F3:85:35:85:C1:45:4A:14:19:B0:E8:1C:72:8A Authority key identifier: AC:7E:AF:B0:07:F3:DD:9B:32:32:7F:16:3D:AF:2A:92:B5:CE:EC:47 Certificate issuer: /CN=AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47 Certificate serial: 6568E75633BD69800B5D2BDA2EFD6A8BABAA58F5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.mft Manifest number: BB Signing time: Thu 17 Sep 2026 06:57:04 +0000 Manifest this update: Thu 17 Sep 2026 06:52:04 +0000 Manifest next update: Fri 18 Sep 2026 09:47:04 +0000 Files and hashes: 1: 3130332e3131302e34312e302f32342d3234203d3e20313530343734.roa (hash: obnag6K+/PYNxyPn5mnr74fqA7ofmhwpwaEP4tBMPxc=) 2: AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.crl (hash: f+SeSHs3/+0ncYUNUKT6+aRAcZ0LBWTEnkx4iO3iR0g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.crl rsync://rpki-rsync.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:47:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:68:e7:56:33:bd:69:80:0b:5d:2b:da:2e:fd:6a:8b:ab:aa:58:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47 Validity Not Before: Sep 17 06:52:04 2026 GMT Not After : Sep 18 09:47:04 2026 GMT Subject: CN=3078725192E9F3853585C1454A1419B0E81C728A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:88:81:1f:0e:70:27:c7:af:13:fd:ba:f9:cd: d4:9c:75:8b:1c:c3:21:30:b3:f2:72:58:51:f0:df: 08:86:46:80:78:f2:2a:2a:bd:ad:f2:3d:da:10:0c: b3:91:af:d1:4e:d1:1d:3b:6d:3c:8a:6e:df:b0:48: 37:52:23:76:1f:bb:19:8c:f9:ad:f8:90:d8:8d:ec: 19:98:83:b8:02:29:a2:22:a2:21:e5:a7:80:ac:34: 7e:44:17:90:c6:f8:49:b1:b3:23:fb:1e:af:70:a0: d9:21:50:06:26:3a:c1:cd:16:31:19:22:a2:78:5b: ae:87:46:71:78:6e:89:fe:55:04:bb:39:d6:0d:b6: f1:96:d7:8e:9a:f2:8f:2e:3f:d3:14:a2:20:39:72: 47:3b:02:f6:8a:6c:37:ea:a6:ae:80:22:3b:1b:6d: 90:8b:2a:da:11:ff:24:bd:32:f2:bf:56:12:d2:13: 9a:09:50:d8:e9:b8:99:7c:57:d9:fd:ac:ee:bc:28: 64:3b:aa:7f:ce:68:1e:2f:59:aa:a9:d4:41:62:6f: 97:cf:53:90:8d:7d:bc:04:13:23:3c:65:f6:7c:f9: d8:2d:ff:1a:b6:b8:55:42:a2:79:56:80:0a:8d:49: 3a:a2:27:1b:85:2b:88:7c:a8:03:b2:81:14:3d:83: c1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:78:72:51:92:E9:F3:85:35:85:C1:45:4A:14:19:B0:E8:1C:72:8A X509v3 Authority Key Identifier: keyid:AC:7E:AF:B0:07:F3:DD:9B:32:32:7F:16:3D:AF:2A:92:B5:CE:EC:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:42:d8:83:33:8e:80:65:a7:ad:8c:27:fd:1e:bf:61:dd:7d: 19:23:37:4d:0e:31:60:e6:de:45:65:f2:d4:e2:02:05:fa:d5: 4b:9d:5c:3a:bd:5c:27:1b:cc:7e:c3:6d:70:95:1a:88:6e:4a: c0:15:85:12:5b:aa:3c:20:54:09:a6:3e:f2:8a:cf:02:71:10: 5c:b1:b1:2f:f0:b8:92:9a:a6:41:87:2b:ec:3f:f6:e3:37:67: c3:39:ee:a1:cc:dd:23:bc:dc:0a:b1:c0:28:84:d7:d7:db:7c: 37:59:ff:25:d8:62:f5:67:18:5c:45:1b:2e:3c:01:87:d6:6c: bc:51:dd:a6:cb:df:0f:ee:09:29:c1:11:44:ff:f1:b2:b9:29: 55:d8:f4:9b:8f:61:3a:ef:d3:28:f5:90:28:15:6d:3a:f9:34: bb:f3:42:a0:e8:d9:07:df:6a:9d:09:fa:9f:12:00:e5:58:ad: d5:cf:ef:19:c0:cc:f2:72:4d:d0:cc:eb:4c:25:b6:b9:8b:7a: 65:27:14:06:24:7e:c5:8a:e7:46:4c:2b:74:05:8f:21:59:e7: 3b:74:51:ae:93:95:ae:78:a9:c6:4a:d6:f2:33:ae:b6:e1:16: d7:f9:2e:7c:6a:8d:49:ac:1a:8b:c7:b6:15:a5:39:ce:c0:03: e7:b7:05:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZWjnVjO9aYALXSvaLv1qi6uqWPUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM3RUFGQjAwN0YzREQ5QjMyMzI3RjE2M0RBRjJBOTJC NUNFRUM0NzAeFw0yNjA5MTcwNjUyMDRaFw0yNjA5MTgwOTQ3MDRaMDMxMTAvBgNV BAMTKDMwNzg3MjUxOTJFOUYzODUzNTg1QzE0NTRBMTQxOUIwRTgxQzcyOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwiIEfDnAnx68T/br5zdScdYsc wyEws/JyWFHw3wiGRoB48ioqva3yPdoQDLORr9FO0R07bTyKbt+wSDdSI3YfuxmM +a34kNiN7BmYg7gCKaIioiHlp4CsNH5EF5DG+EmxsyP7Hq9woNkhUAYmOsHNFjEZ IqJ4W66HRnF4bon+VQS7OdYNtvGW146a8o8uP9MUoiA5ckc7AvaKbDfqpq6AIjsb bZCLKtoR/yS9MvK/VhLSE5oJUNjpuJl8V9n9rO68KGQ7qn/OaB4vWaqp1EFib5fP U5CNfbwEEyM8ZfZ8+dgt/xq2uFVConlWgAqNSTqiJxuFK4h8qAOygRQ9g8FDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMHhyUZLp84U1hcFFShQZsOgccoowHwYDVR0j BBgwFoAUrH6vsAfz3ZsyMn8WPa8qkrXO7EcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDA5ODE5N2MtYTUyNi00NWJkLTljZTktMTUzODNjNWQ5NTM2LzAvQUM3RUFGQjAw N0YzREQ5QjMyMzI3RjE2M0RBRjJBOTJCNUNFRUM0Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzdFQUZCMDA3RjNERDlCMzIzMjdGMTYzREFGMkE5MkI1Q0VF QzQ3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDA5ODE5N2MtYTUyNi00NWJkLTlj ZTktMTUzODNjNWQ5NTM2LzAvQUM3RUFGQjAwN0YzREQ5QjMyMzI3RjE2M0RBRjJB OTJCNUNFRUM0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGhC2IMzjoBlp62MJ/0ev2HdfRkjN00OMWDm 3kVl8tTiAgX61UudXDq9XCcbzH7DbXCVGohuSsAVhRJbqjwgVAmmPvKKzwJxEFyx sS/wuJKapkGHK+w/9uM3Z8M57qHM3SO83AqxwCiE19fbfDdZ/yXYYvVnGFxFGy48 AYfWbLxR3abL3w/uCSnBEUT/8bK5KVXY9JuPYTrv0yj1kCgVbTr5NLvzQqDo2Qff ap0J+p8SAOVYrdXP7xnAzPJyTdDM60wltrmLemUnFAYkfsWK50ZMK3QFjyFZ5zt0 Ua6Tla54qcZK1vIzrrbhFtf5LnxqjUmsGovHthWlOc7AA+e3Bag= -----END CERTIFICATE-----Generated at Thu Sep 17 14:40:04 2026 by rpki-client