$ rpki-client -vvf rpki-rsync.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/AC135A343D89C2715C1AA76F3314EDF91A5D7473.mft File: AC135A343D89C2715C1AA76F3314EDF91A5D7473.mft (raw, json) Hash identifier: o2LYpPQg6rmXP2re3vEk2raD9H6p9IRuH3OgfixO190= Subject key identifier: 26:03:97:32:FF:7E:7B:37:D1:B7:94:E2:29:62:0C:16:1F:71:A2:3C Authority key identifier: AC:13:5A:34:3D:89:C2:71:5C:1A:A7:6F:33:14:ED:F9:1A:5D:74:73 Certificate issuer: /CN=AC135A343D89C2715C1AA76F3314EDF91A5D7473 Certificate serial: 56D0DBE928742D471C63457DEFEAA200A66C5AA2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC135A343D89C2715C1AA76F3314EDF91A5D7473.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/AC135A343D89C2715C1AA76F3314EDF91A5D7473.mft Manifest number: 7B Signing time: Sun 02 Aug 2026 11:21:28 +0000 Manifest this update: Sun 02 Aug 2026 11:16:28 +0000 Manifest next update: Mon 03 Aug 2026 12:53:28 +0000 Files and hashes: 1: 3130332e33312e3234302e302f32342d3234203d3e20313339393532.roa (hash: MXQvxQuFfrOrlrDM0pu7aI1UUtAamLu0vBW+zEyQ+dQ=) 2: 3130332e33312e3234312e302f32342d3234203d3e20313339393532.roa (hash: wmrO1sIlSaYPXG3uoDQ46bwtU1pWLEpz2UMTkfOKpVs=) 3: AC135A343D89C2715C1AA76F3314EDF91A5D7473.crl (hash: qj59FdVDgMVM9RuJsV5/umalzA+e85Ur5ZqEHOvL9u8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/AC135A343D89C2715C1AA76F3314EDF91A5D7473.crl rsync://rpki-rsync.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/AC135A343D89C2715C1AA76F3314EDF91A5D7473.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC135A343D89C2715C1AA76F3314EDF91A5D7473.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:d0:db:e9:28:74:2d:47:1c:63:45:7d:ef:ea:a2:00:a6:6c:5a:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC135A343D89C2715C1AA76F3314EDF91A5D7473 Validity Not Before: Aug 2 11:16:28 2026 GMT Not After : Aug 3 12:53:28 2026 GMT Subject: CN=26039732FF7E7B37D1B794E229620C161F71A23C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ef:d1:d1:b6:9b:77:47:07:57:eb:36:e2:24: c3:71:99:02:72:50:c8:70:6b:00:c6:d8:c8:40:90: 26:dd:0e:01:b9:8e:39:2f:5c:3c:4d:ff:4d:2c:8f: b7:c7:81:6c:5b:88:b5:dd:ff:f1:e2:d0:4f:78:8a: a5:31:8f:3e:dd:64:ec:b6:ec:7f:e7:f2:a5:44:a8: f1:ff:61:45:d0:ce:be:99:83:4a:0a:cc:79:a4:93: 40:aa:c1:9e:14:fa:be:3d:ea:dd:9c:d9:f2:e1:80: bd:76:18:98:18:dc:0d:4d:e0:0d:17:1a:1b:b1:ec: f0:4b:4d:84:06:f4:88:80:86:45:b9:70:88:85:cd: 8f:1f:e4:62:b5:e8:1d:90:2f:d7:15:8c:1f:bd:30: 2a:31:ca:a8:52:e3:50:08:34:2f:15:1f:33:e5:76: 0b:db:94:df:7a:ed:fd:fe:d1:81:55:22:99:e2:2e: e0:df:5d:19:17:32:23:9e:0a:98:01:5c:c0:05:81: 1c:52:ab:aa:84:cc:59:62:21:94:e0:f4:db:7d:82: 37:e9:3a:e4:b4:60:a3:1a:c3:b4:a2:a0:c8:8d:6e: 65:60:2f:8b:13:f5:28:e6:82:e0:f9:de:be:9b:05: 9a:d9:11:f0:61:e8:05:b9:79:67:bb:3c:03:1e:6a: 52:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:03:97:32:FF:7E:7B:37:D1:B7:94:E2:29:62:0C:16:1F:71:A2:3C X509v3 Authority Key Identifier: keyid:AC:13:5A:34:3D:89:C2:71:5C:1A:A7:6F:33:14:ED:F9:1A:5D:74:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/AC135A343D89C2715C1AA76F3314EDF91A5D7473.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC135A343D89C2715C1AA76F3314EDF91A5D7473.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/AC135A343D89C2715C1AA76F3314EDF91A5D7473.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:76:28:12:ce:78:1f:43:be:13:ab:ec:f5:15:9c:03:18:c4: 8b:23:2b:3b:71:63:b6:5c:6c:25:6b:1f:fc:33:e0:64:f0:5c: 9c:2a:80:0e:b0:f0:cb:dc:45:31:de:8f:38:52:1c:bd:dc:b6: fd:2b:de:4c:36:2e:d6:a1:67:89:e3:06:8d:b9:b5:d5:f4:73: ed:ae:a6:78:b3:41:4b:7a:b7:3b:96:81:9b:b5:18:b0:b7:86: 71:52:17:ba:c1:70:1e:d6:41:57:8f:56:15:76:e0:a8:fe:27: c1:14:04:e3:61:ba:f5:ad:75:e5:36:d1:8d:a5:4f:87:a3:9f: 47:38:99:e2:ba:d9:d4:43:44:97:0b:57:78:fa:ea:83:e2:a4: 17:ce:ad:3c:ab:19:fc:18:78:53:c9:c5:a7:fa:e8:db:8b:11: 61:9e:7e:02:5a:2b:21:c0:54:90:73:af:44:2f:63:ef:6c:2d: 55:e4:56:ed:d1:16:6d:71:86:7e:d7:70:95:53:ed:6e:b6:a0: 7a:8f:84:4e:9d:41:3f:2e:8b:c1:57:c7:f0:30:3a:c4:51:31: 65:b3:8e:66:4f:ce:f4:fe:3b:16:eb:d9:f9:15:f1:de:71:ef: b8:5a:ee:70:e1:bc:e6:ff:39:6f:50:8d:91:2d:ed:7c:c3:01: 20:ce:53:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVtDb6Sh0LUccY0V97+qiAKZsWqIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUMxMzVBMzQzRDg5QzI3MTVDMUFBNzZGMzMxNEVERjkx QTVENzQ3MzAeFw0yNjA4MDIxMTE2MjhaFw0yNjA4MDMxMjUzMjhaMDMxMTAvBgNV BAMTKDI2MDM5NzMyRkY3RTdCMzdEMUI3OTRFMjI5NjIwQzE2MUY3MUEyM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj79HRtpt3RwdX6zbiJMNxmQJy UMhwawDG2MhAkCbdDgG5jjkvXDxN/00sj7fHgWxbiLXd//Hi0E94iqUxjz7dZOy2 7H/n8qVEqPH/YUXQzr6Zg0oKzHmkk0CqwZ4U+r496t2c2fLhgL12GJgY3A1N4A0X Ghux7PBLTYQG9IiAhkW5cIiFzY8f5GK16B2QL9cVjB+9MCoxyqhS41AINC8VHzPl dgvblN967f3+0YFVIpniLuDfXRkXMiOeCpgBXMAFgRxSq6qEzFliIZTg9Nt9gjfp OuS0YKMaw7SioMiNbmVgL4sT9SjmguD53r6bBZrZEfBh6AW5eWe7PAMealKPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJgOXMv9+ezfRt5TiKWIMFh9xojwwHwYDVR0j BBgwFoAUrBNaND2JwnFcGqdvMxTt+RpddHMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjQzMDM0YWEtZjM5Yy00OGY1LTg1MmUtZDFiZDdmMTdhYTQyLzAvQUMxMzVBMzQz RDg5QzI3MTVDMUFBNzZGMzMxNEVERjkxQTVENzQ3My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzEzNUEzNDNEODlDMjcxNUMxQUE3NkYzMzE0RURGOTFBNUQ3 NDczLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjQzMDM0YWEtZjM5Yy00OGY1LTg1 MmUtZDFiZDdmMTdhYTQyLzAvQUMxMzVBMzQzRDg5QzI3MTVDMUFBNzZGMzMxNEVE RjkxQTVENzQ3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALd2KBLOeB9DvhOr7PUVnAMYxIsjKztxY7Zc bCVrH/wz4GTwXJwqgA6w8MvcRTHejzhSHL3ctv0r3kw2LtahZ4njBo25tdX0c+2u pnizQUt6tzuWgZu1GLC3hnFSF7rBcB7WQVePVhV24Kj+J8EUBONhuvWtdeU20Y2l T4ejn0c4meK62dRDRJcLV3j66oPipBfOrTyrGfwYeFPJxaf66NuLEWGefgJaKyHA VJBzr0QvY+9sLVXkVu3RFm1xhn7XcJVT7W62oHqPhE6dQT8ui8FXx/AwOsRRMWWz jmZPzvT+Oxbr2fkV8d5x77ha7nDhvOb/OW9QjZEt7XzDASDOUwo= -----END CERTIFICATE-----Generated at Sun Aug 2 22:52:24 2026 by rpki-client