$ rpki-client -vvvf rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/AC7439239B591D2499B70C3230C1C35BE2A0104B.mft File: AC7439239B591D2499B70C3230C1C35BE2A0104B.mft (raw, json) Hash identifier: SDTY2Xe38Z7w8ccp452uVIfj//eSXmCYfNkqa4as6V0= Subject key identifier: 57:7A:EA:BA:99:62:D0:1F:50:52:46:C5:E9:B1:28:2E:CD:31:44:CF Authority key identifier: AC:74:39:23:9B:59:1D:24:99:B7:0C:32:30:C1:C3:5B:E2:A0:10:4B Certificate issuer: /CN=AC7439239B591D2499B70C3230C1C35BE2A0104B Certificate serial: 7B3AD1D87E35B58ADBD8070C2CFA1B3F216BA33D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC7439239B591D2499B70C3230C1C35BE2A0104B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/AC7439239B591D2499B70C3230C1C35BE2A0104B.mft Manifest number: ED Signing time: Sat 24 Oct 2026 22:47:34 +0000 Manifest this update: Sat 24 Oct 2026 22:42:34 +0000 Manifest next update: Mon 26 Oct 2026 01:41:34 +0000 Files and hashes: 1: 323430363a396163303a3a2f33322d3438203d3e20313431313134.roa (hash: pTJhsbE/QsnSwa5lw6Tt2iC9wy8jG1QR42mcBhsUqfg=) 2: 3130332e3135372e37382e302f32332d3234203d3e20313431313134.roa (hash: w+9v1WGiMKcMfvG8PMyM732c95+KBZTi8eUiSRuPBO8=) 3: AC7439239B591D2499B70C3230C1C35BE2A0104B.crl (hash: v1o3HYQ4KJrv2eWXcVzOXp3uA21a/xjXkXFJQGv7pfM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/AC7439239B591D2499B70C3230C1C35BE2A0104B.crl rsync://rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/AC7439239B591D2499B70C3230C1C35BE2A0104B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC7439239B591D2499B70C3230C1C35BE2A0104B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 19:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:3a:d1:d8:7e:35:b5:8a:db:d8:07:0c:2c:fa:1b:3f:21:6b:a3:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC7439239B591D2499B70C3230C1C35BE2A0104B Validity Not Before: Oct 24 22:42:34 2026 GMT Not After : Oct 26 01:41:34 2026 GMT Subject: CN=577AEABA9962D01F505246C5E9B1282ECD3144CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e5:0a:b7:d7:f7:3f:d0:a9:d7:cb:48:36:ef: d0:8b:a8:e8:79:e3:d0:e2:62:3e:30:ea:fd:3f:63: 22:65:c4:37:3f:91:3b:c3:3e:f7:a8:1b:ab:e7:41: 8f:86:4c:e5:e4:90:69:9d:4b:92:01:af:70:b7:9b: f3:77:a3:2d:3a:01:6a:77:f6:79:6b:6e:5d:64:09: 44:d1:38:b2:38:b2:f4:ad:8e:4b:4a:b2:11:dc:f3: 09:ac:c2:60:e2:a2:7e:49:63:08:70:0a:ea:65:3a: 7b:7c:2b:af:50:92:9a:42:14:81:3f:10:68:14:75: 80:a7:2f:36:a9:5c:c1:a0:cf:0f:da:45:8f:e0:3f: 16:96:97:96:b3:36:41:5a:bb:0a:f8:96:59:bf:89: 4b:14:b5:98:d2:85:40:c1:eb:ba:9d:54:60:38:98: fe:23:a5:12:19:f2:65:9d:ac:bf:9c:e9:3a:14:48: 7a:cd:b5:cc:7c:d5:6f:63:6e:d9:e7:7d:80:48:69: aa:a0:fd:a6:3a:af:d6:38:ec:f1:e1:b9:73:61:d6: 43:13:04:b9:29:42:72:8c:fb:8b:d7:6b:a2:87:4d: da:11:c8:f7:37:76:71:6b:ec:0d:2a:1f:cd:92:53: 75:2d:9c:a1:67:10:4d:43:f8:2f:2c:3b:39:7a:99: 5a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:7A:EA:BA:99:62:D0:1F:50:52:46:C5:E9:B1:28:2E:CD:31:44:CF X509v3 Authority Key Identifier: keyid:AC:74:39:23:9B:59:1D:24:99:B7:0C:32:30:C1:C3:5B:E2:A0:10:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/AC7439239B591D2499B70C3230C1C35BE2A0104B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC7439239B591D2499B70C3230C1C35BE2A0104B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/AC7439239B591D2499B70C3230C1C35BE2A0104B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:81:da:1a:5e:aa:d5:09:1c:3e:2a:8d:f8:de:67:e5:be:1d: 15:45:23:11:d3:8b:a0:8b:3b:c0:c7:bc:5e:40:56:b1:ab:a3: 2e:9f:bd:a7:a9:3f:22:51:e2:07:63:e8:e7:ad:2d:02:65:0d: 69:3f:2c:0d:b5:35:8d:1c:10:ed:e8:e9:45:62:5b:4a:23:56: 6b:a1:b4:e4:c6:93:fe:ac:94:ba:c8:95:89:49:3b:ef:f7:30: 8d:d5:a7:11:02:f8:6b:7f:81:22:8c:2e:4b:ca:c3:23:f0:b1: 27:57:73:8c:7c:04:64:50:e6:0d:8f:4e:77:15:e6:a3:5f:5f: d3:ab:b0:fe:54:bf:73:1d:7c:ec:7c:e5:2c:8f:24:a1:7b:e4: 7e:94:7f:20:2c:44:13:e9:96:1e:10:cb:b2:93:a6:47:9a:cd: 54:b8:36:1d:95:a6:ee:6e:ac:32:19:a4:10:8f:2f:21:1e:bd: a2:35:80:1f:41:0d:74:e9:7e:83:bc:d6:1f:4a:8d:54:66:1b: 34:e2:9c:6e:61:42:bc:54:a2:ef:b1:97:30:38:85:c0:36:ae: ce:9b:8e:00:6a:1a:0e:0f:6a:c4:82:82:00:e4:d6:e5:31:8a: 48:28:78:ad:72:91:d1:c7:4d:b3:3a:1f:61:f6:a7:b7:99:41: 5d:61:b3:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUezrR2H41tYrb2AcMLPobPyFroz0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM3NDM5MjM5QjU5MUQyNDk5QjcwQzMyMzBDMUMzNUJF MkEwMTA0QjAeFw0yNjEwMjQyMjQyMzRaFw0yNjEwMjYwMTQxMzRaMDMxMTAvBgNV BAMTKDU3N0FFQUJBOTk2MkQwMUY1MDUyNDZDNUU5QjEyODJFQ0QzMTQ0Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC75Qq31/c/0KnXy0g279CLqOh5 49DiYj4w6v0/YyJlxDc/kTvDPveoG6vnQY+GTOXkkGmdS5IBr3C3m/N3oy06AWp3 9nlrbl1kCUTROLI4svStjktKshHc8wmswmDion5JYwhwCuplOnt8K69QkppCFIE/ EGgUdYCnLzapXMGgzw/aRY/gPxaWl5azNkFauwr4llm/iUsUtZjShUDB67qdVGA4 mP4jpRIZ8mWdrL+c6ToUSHrNtcx81W9jbtnnfYBIaaqg/aY6r9Y47PHhuXNh1kMT BLkpQnKM+4vXa6KHTdoRyPc3dnFr7A0qH82SU3UtnKFnEE1D+C8sOzl6mVp5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV3rqupli0B9QUkbF6bEoLs0xRM8wHwYDVR0j BBgwFoAUrHQ5I5tZHSSZtwwyMMHDW+KgEEswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjU3ZTg5ZTgtNTNhYS00NGY2LWI2ZDgtNTg3OTA3OGJmNjY0LzAvQUM3NDM5MjM5 QjU5MUQyNDk5QjcwQzMyMzBDMUMzNUJFMkEwMTA0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzc0MzkyMzlCNTkxRDI0OTlCNzBDMzIzMEMxQzM1QkUyQTAx MDRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjU3ZTg5ZTgtNTNhYS00NGY2LWI2 ZDgtNTg3OTA3OGJmNjY0LzAvQUM3NDM5MjM5QjU5MUQyNDk5QjcwQzMyMzBDMUMz NUJFMkEwMTA0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMOB2hpeqtUJHD4qjfjeZ+W+HRVFIxHTi6CL O8DHvF5AVrGroy6fvaepPyJR4gdj6OetLQJlDWk/LA21NY0cEO3o6UViW0ojVmuh tOTGk/6slLrIlYlJO+/3MI3VpxEC+Gt/gSKMLkvKwyPwsSdXc4x8BGRQ5g2PTncV 5qNfX9OrsP5Uv3MdfOx85SyPJKF75H6UfyAsRBPplh4Qy7KTpkeazVS4Nh2Vpu5u rDIZpBCPLyEevaI1gB9BDXTpfoO81h9KjVRmGzTinG5hQrxUou+xlzA4hcA2rs6b jgBqGg4PasSCggDk1uUxikgoeK1ykdHHTbM6H2H2p7eZQV1hsys= -----END CERTIFICATE-----Generated at Sun Oct 25 09:04:12 2026 by rpki-client