$ rpki-client -vvf rpki-rsync.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/AC135A343D89C2715C1AA76F3314EDF91A5D7473.mft File: AC135A343D89C2715C1AA76F3314EDF91A5D7473.mft (raw, json) Hash identifier: IpxGxumGa1Gzgw3oaGZTpu+oAqtQe9Y0+AHb6MB00YA= Subject key identifier: 90:CE:DE:BE:DB:6A:6B:3C:0B:85:41:08:BD:8E:69:18:08:81:CF:77 Authority key identifier: AC:13:5A:34:3D:89:C2:71:5C:1A:A7:6F:33:14:ED:F9:1A:5D:74:73 Certificate issuer: /CN=AC135A343D89C2715C1AA76F3314EDF91A5D7473 Certificate serial: 790DD813BDD6AF4F9CAA920DE4831B503A67F2F4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC135A343D89C2715C1AA76F3314EDF91A5D7473.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/AC135A343D89C2715C1AA76F3314EDF91A5D7473.mft Manifest number: 40 Signing time: Thu 18 Jun 2026 16:21:39 +0000 Manifest this update: Thu 18 Jun 2026 16:16:39 +0000 Manifest next update: Fri 19 Jun 2026 18:21:39 +0000 Files and hashes: 1: 3130332e33312e3234302e302f32342d3234203d3e20313339393532.roa (hash: MXQvxQuFfrOrlrDM0pu7aI1UUtAamLu0vBW+zEyQ+dQ=) 2: 3130332e33312e3234312e302f32342d3234203d3e20313339393532.roa (hash: wmrO1sIlSaYPXG3uoDQ46bwtU1pWLEpz2UMTkfOKpVs=) 3: AC135A343D89C2715C1AA76F3314EDF91A5D7473.crl (hash: C8TLTqQtRZLozwHbGMrIEPPXqWLaU5PAiHu7l5UNkUk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/AC135A343D89C2715C1AA76F3314EDF91A5D7473.crl rsync://rpki-rsync.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/AC135A343D89C2715C1AA76F3314EDF91A5D7473.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC135A343D89C2715C1AA76F3314EDF91A5D7473.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 12:15:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:0d:d8:13:bd:d6:af:4f:9c:aa:92:0d:e4:83:1b:50:3a:67:f2:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC135A343D89C2715C1AA76F3314EDF91A5D7473 Validity Not Before: Jun 18 16:16:39 2026 GMT Not After : Jun 19 18:21:39 2026 GMT Subject: CN=90CEDEBEDB6A6B3C0B854108BD8E69180881CF77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b2:a1:da:d7:1c:89:86:f0:40:57:6a:07:c9: e9:e7:21:e1:a0:03:3d:19:48:cd:c6:30:63:d9:eb: 0d:17:f2:25:d7:9a:44:26:d7:12:d4:c0:ce:3c:fc: 5d:2c:c9:f5:0c:78:8e:d9:23:38:1a:ad:68:e2:89: d9:7f:84:97:60:12:77:90:0d:9a:9c:6b:c4:ff:75: 03:e4:9d:36:ea:9b:06:53:02:73:c9:96:43:a8:20: f6:85:af:00:01:b1:e6:23:53:a1:11:f6:9f:b3:a0: f0:ba:9b:79:d8:db:e1:1a:e2:b0:62:01:b0:92:c8: 2c:b0:ab:28:c7:2f:3f:13:b5:da:5e:43:94:92:e0: e9:80:81:c5:28:b7:af:42:6d:59:d5:ce:8d:b1:8e: 9a:35:71:9b:4e:6f:46:2e:37:70:b0:05:0b:31:42: d6:63:a4:de:f9:a2:6c:f9:c8:08:4e:c4:2a:02:8f: df:a9:e5:37:fd:c5:e7:36:2d:80:c4:77:74:7e:a3: 34:a0:5b:c4:c3:24:3b:77:52:d8:45:ab:05:74:c1: f0:ac:f7:88:8b:fb:54:97:05:99:37:dc:e5:d2:e2: 41:be:16:a7:c6:dd:3d:57:f1:be:92:d5:31:ae:a8: 7e:69:e6:27:7d:d0:02:3c:19:cf:ff:44:63:6f:b5: 92:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:CE:DE:BE:DB:6A:6B:3C:0B:85:41:08:BD:8E:69:18:08:81:CF:77 X509v3 Authority Key Identifier: keyid:AC:13:5A:34:3D:89:C2:71:5C:1A:A7:6F:33:14:ED:F9:1A:5D:74:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/AC135A343D89C2715C1AA76F3314EDF91A5D7473.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC135A343D89C2715C1AA76F3314EDF91A5D7473.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/AC135A343D89C2715C1AA76F3314EDF91A5D7473.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:1c:a1:b7:7d:f3:86:3b:48:0e:ba:05:00:94:39:eb:aa:11: 2d:6a:40:f4:b5:97:97:58:1f:76:a6:65:1c:3c:84:48:5c:ca: 1d:e6:05:2c:2f:44:d5:c6:1c:f4:a7:b0:6d:66:08:0e:99:4d: 21:c2:90:ab:4f:5c:9c:1c:00:49:79:8a:6f:5c:25:01:f7:91: 62:aa:11:f9:72:d6:1f:45:1b:9a:22:a0:95:02:fb:c7:95:b0: 21:fb:61:10:89:f4:7f:97:ee:a1:5a:7d:8a:22:d4:e5:af:e2: 73:c3:ae:69:98:be:67:15:b3:e6:1f:ea:ce:5e:ae:75:c4:33: 01:27:33:d9:43:30:30:81:0c:5f:d4:2c:7f:5b:b9:ed:18:fa: 16:f9:bf:25:d6:2b:73:8a:f7:39:57:bb:9b:3f:7c:6d:f9:dc: 50:8d:90:f9:c4:b9:66:63:79:39:a7:b1:af:7e:20:f5:ce:3a: 7b:d7:ff:00:0c:7f:6b:7e:b8:3f:eb:8f:60:4b:9b:76:31:f8: b3:8e:f7:77:bd:54:87:37:1a:e6:72:9e:cc:ad:9c:0d:e9:ae: 89:b0:6c:ac:c2:1a:da:3c:dc:de:33:8a:bd:8e:26:97:df:f4: 24:80:81:d6:49:b4:d7:bd:d8:06:6c:c5:28:d7:10:c6:10:a0: 8e:f4:4b:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeQ3YE73Wr0+cqpIN5IMbUDpn8vQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUMxMzVBMzQzRDg5QzI3MTVDMUFBNzZGMzMxNEVERjkx QTVENzQ3MzAeFw0yNjA2MTgxNjE2MzlaFw0yNjA2MTkxODIxMzlaMDMxMTAvBgNV BAMTKDkwQ0VERUJFREI2QTZCM0MwQjg1NDEwOEJEOEU2OTE4MDg4MUNGNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1sqHa1xyJhvBAV2oHyennIeGg Az0ZSM3GMGPZ6w0X8iXXmkQm1xLUwM48/F0syfUMeI7ZIzgarWjiidl/hJdgEneQ DZqca8T/dQPknTbqmwZTAnPJlkOoIPaFrwABseYjU6ER9p+zoPC6m3nY2+Ea4rBi AbCSyCywqyjHLz8TtdpeQ5SS4OmAgcUot69CbVnVzo2xjpo1cZtOb0YuN3CwBQsx QtZjpN75omz5yAhOxCoCj9+p5Tf9xec2LYDEd3R+ozSgW8TDJDt3UthFqwV0wfCs 94iL+1SXBZk33OXS4kG+FqfG3T1X8b6S1TGuqH5p5id90AI8Gc//RGNvtZKtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkM7evttqazwLhUEIvY5pGAiBz3cwHwYDVR0j BBgwFoAUrBNaND2JwnFcGqdvMxTt+RpddHMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjQzMDM0YWEtZjM5Yy00OGY1LTg1MmUtZDFiZDdmMTdhYTQyLzAvQUMxMzVBMzQz RDg5QzI3MTVDMUFBNzZGMzMxNEVERjkxQTVENzQ3My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzEzNUEzNDNEODlDMjcxNUMxQUE3NkYzMzE0RURGOTFBNUQ3 NDczLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjQzMDM0YWEtZjM5Yy00OGY1LTg1 MmUtZDFiZDdmMTdhYTQyLzAvQUMxMzVBMzQzRDg5QzI3MTVDMUFBNzZGMzMxNEVE RjkxQTVENzQ3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACUcobd984Y7SA66BQCUOeuqES1qQPS1l5dY H3amZRw8hEhcyh3mBSwvRNXGHPSnsG1mCA6ZTSHCkKtPXJwcAEl5im9cJQH3kWKq Efly1h9FG5oioJUC+8eVsCH7YRCJ9H+X7qFafYoi1OWv4nPDrmmYvmcVs+Yf6s5e rnXEMwEnM9lDMDCBDF/ULH9bue0Y+hb5vyXWK3OK9zlXu5s/fG353FCNkPnEuWZj eTmnsa9+IPXOOnvX/wAMf2t+uD/rj2BLm3Yx+LOO93e9VIc3GuZynsytnA3promw bKzCGto83N4zir2OJpff9CSAgdZJtNe92AZsxSjXEMYQoI70S6E= -----END CERTIFICATE-----Generated at Thu Jun 18 19:21:39 2026 by rpki-client