$ rpki-client -vvf rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/AC7439239B591D2499B70C3230C1C35BE2A0104B.mft File: AC7439239B591D2499B70C3230C1C35BE2A0104B.mft (raw, json) Hash identifier: xws5eJ6QUvcMLDPwI22aTXlrmF17Y+60wYbt/oHHhgM= Subject key identifier: 23:40:2B:A7:E9:C1:C5:EA:0C:0E:23:8D:81:CD:32:BC:4D:14:D9:82 Authority key identifier: AC:74:39:23:9B:59:1D:24:99:B7:0C:32:30:C1:C3:5B:E2:A0:10:4B Certificate issuer: /CN=AC7439239B591D2499B70C3230C1C35BE2A0104B Certificate serial: 24EDFD03F9D8EFD9E02C06FA31AB6D88C88B86F1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC7439239B591D2499B70C3230C1C35BE2A0104B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/AC7439239B591D2499B70C3230C1C35BE2A0104B.mft Manifest number: 14 Signing time: Sat 16 May 2026 07:38:40 +0000 Manifest this update: Sat 16 May 2026 07:33:40 +0000 Manifest next update: Sun 17 May 2026 08:08:40 +0000 Files and hashes: 1: AC7439239B591D2499B70C3230C1C35BE2A0104B.crl (hash: mQzGC8NUHxL5i1Y6IxfWWdVj/P6mrRuenC32abbw7kA=) 2: 3130332e3135372e37382e302f32332d3234203d3e20313431313134.roa (hash: w+9v1WGiMKcMfvG8PMyM732c95+KBZTi8eUiSRuPBO8=) 3: 323430363a396163303a3a2f33322d3438203d3e20313431313134.roa (hash: pTJhsbE/QsnSwa5lw6Tt2iC9wy8jG1QR42mcBhsUqfg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/AC7439239B591D2499B70C3230C1C35BE2A0104B.crl rsync://rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/AC7439239B591D2499B70C3230C1C35BE2A0104B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC7439239B591D2499B70C3230C1C35BE2A0104B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 May 2026 08:08:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:ed:fd:03:f9:d8:ef:d9:e0:2c:06:fa:31:ab:6d:88:c8:8b:86:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC7439239B591D2499B70C3230C1C35BE2A0104B Validity Not Before: May 16 07:33:40 2026 GMT Not After : May 17 08:08:40 2026 GMT Subject: CN=23402BA7E9C1C5EA0C0E238D81CD32BC4D14D982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e8:9b:ef:03:18:a9:52:8f:ee:b9:f9:f2:f7: 69:51:3a:66:9e:a8:58:8e:14:c8:b3:2f:99:56:91: 13:de:10:1c:2f:65:ab:9f:d4:cb:6e:a6:59:fb:e0: 77:34:5d:3d:76:36:89:14:18:1e:1f:54:c1:0b:5c: 64:c9:63:60:f3:a7:26:6c:b3:c3:18:07:09:f2:d6: d6:78:48:b3:a6:a1:ff:ce:14:62:ca:2e:03:c7:58: 21:0d:37:26:60:37:4d:b4:5a:bf:df:19:a7:a9:f5: 94:ec:5a:be:30:5a:0e:13:4e:b1:82:f1:62:14:07: 1d:0f:c6:8c:a3:5a:46:13:74:25:6b:60:77:0f:37: b7:27:16:87:f8:7b:7d:74:d6:31:e3:7e:6f:90:1f: 8a:42:d2:41:c6:c6:56:21:f0:52:5b:cd:e6:cb:01: 57:fd:5d:0a:0f:73:39:28:f4:a9:ec:03:61:6c:17: 5f:ea:36:bf:ef:35:93:f4:5d:f6:0f:4f:b9:b6:f4: 1b:b0:2b:5e:d7:61:4a:fc:53:1b:d1:51:88:79:a3: e6:1f:42:19:39:b0:4a:ec:e2:74:fd:e0:4f:0d:38: 56:ad:62:b0:c9:1f:c4:87:80:14:75:4e:41:d0:84: c4:54:6f:f4:5a:f7:60:07:fb:14:87:09:11:2d:dc: c7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:40:2B:A7:E9:C1:C5:EA:0C:0E:23:8D:81:CD:32:BC:4D:14:D9:82 X509v3 Authority Key Identifier: keyid:AC:74:39:23:9B:59:1D:24:99:B7:0C:32:30:C1:C3:5B:E2:A0:10:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/AC7439239B591D2499B70C3230C1C35BE2A0104B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC7439239B591D2499B70C3230C1C35BE2A0104B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/AC7439239B591D2499B70C3230C1C35BE2A0104B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:15:cf:b2:41:9b:58:5d:27:fa:ec:78:f3:f0:1c:cb:08:7b: f6:c5:b8:31:6f:67:60:70:2d:ae:bb:a9:20:0e:59:ca:fe:c5: 65:73:2c:d6:95:f2:1c:e4:43:0d:ce:c4:1d:f2:2c:b5:5d:06: 84:02:a6:27:de:96:da:45:ae:74:2b:1f:d8:0b:48:91:7e:6e: 87:81:97:2c:94:bc:1e:fb:03:ab:8c:74:dd:bb:28:86:31:76: 7a:78:c7:93:02:6b:14:7c:50:61:5e:34:d2:ef:bf:98:ed:87: 1d:3e:82:46:c2:4e:96:26:97:bc:17:c9:32:d0:7e:fc:ea:c5: d7:02:a9:17:3b:19:1a:26:eb:26:83:57:e8:9d:ed:52:8d:49: f2:b3:ee:b7:a7:1e:05:9c:21:4c:0c:5a:fe:06:7d:3b:d1:31: a1:5f:db:4d:90:dc:c1:56:5c:6b:68:bd:e5:1c:ae:8c:77:97: 30:d9:9c:92:5f:94:8c:4f:a1:a2:99:f8:9d:2f:3c:bb:9d:b8: c8:c9:54:d6:c3:2a:d9:5d:6b:62:f7:ab:3d:33:e4:23:91:84: 30:15:aa:e2:88:00:52:e5:2a:91:b1:32:ff:08:83:89:70:eb: d7:fd:d0:90:d3:0d:5b:49:39:2d:c8:bc:0d:3c:ed:3f:d1:66: b3:bd:53:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJO39A/nY79ngLAb6MattiMiLhvEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM3NDM5MjM5QjU5MUQyNDk5QjcwQzMyMzBDMUMzNUJF MkEwMTA0QjAeFw0yNjA1MTYwNzMzNDBaFw0yNjA1MTcwODA4NDBaMDMxMTAvBgNV BAMTKDIzNDAyQkE3RTlDMUM1RUEwQzBFMjM4RDgxQ0QzMkJDNEQxNEQ5ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh6JvvAxipUo/uufny92lROmae qFiOFMizL5lWkRPeEBwvZauf1Mtupln74Hc0XT12NokUGB4fVMELXGTJY2DzpyZs s8MYBwny1tZ4SLOmof/OFGLKLgPHWCENNyZgN020Wr/fGaep9ZTsWr4wWg4TTrGC 8WIUBx0PxoyjWkYTdCVrYHcPN7cnFof4e3101jHjfm+QH4pC0kHGxlYh8FJbzebL AVf9XQoPczko9KnsA2FsF1/qNr/vNZP0XfYPT7m29BuwK17XYUr8UxvRUYh5o+Yf Qhk5sErs4nT94E8NOFatYrDJH8SHgBR1TkHQhMRUb/Ra92AH+xSHCREt3MffAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI0Arp+nBxeoMDiONgc0yvE0U2YIwHwYDVR0j BBgwFoAUrHQ5I5tZHSSZtwwyMMHDW+KgEEswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjU3ZTg5ZTgtNTNhYS00NGY2LWI2ZDgtNTg3OTA3OGJmNjY0LzAvQUM3NDM5MjM5 QjU5MUQyNDk5QjcwQzMyMzBDMUMzNUJFMkEwMTA0Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzc0MzkyMzlCNTkxRDI0OTlCNzBDMzIzMEMxQzM1QkUyQTAx MDRCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjU3ZTg5ZTgtNTNhYS00NGY2LWI2 ZDgtNTg3OTA3OGJmNjY0LzAvQUM3NDM5MjM5QjU5MUQyNDk5QjcwQzMyMzBDMUMz NUJFMkEwMTA0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIcVz7JBm1hdJ/rsePPwHMsIe/bFuDFvZ2Bw La67qSAOWcr+xWVzLNaV8hzkQw3OxB3yLLVdBoQCpifeltpFrnQrH9gLSJF+boeB lyyUvB77A6uMdN27KIYxdnp4x5MCaxR8UGFeNNLvv5jthx0+gkbCTpYml7wXyTLQ fvzqxdcCqRc7GRom6yaDV+id7VKNSfKz7renHgWcIUwMWv4GfTvRMaFf202Q3MFW XGtoveUcrox3lzDZnJJflIxPoaKZ+J0vPLuduMjJVNbDKtlda2L3qz0z5CORhDAV quKIAFLlKpGxMv8Ig4lw69f90JDTDVtJOS3IvA087T/RZrO9UxU= -----END CERTIFICATE-----Generated at Sat May 16 21:11:22 2026 by rpki-client