$ rpki-client -vvf rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.mft File: AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.mft (raw, json) Hash identifier: pq6ndknOrkdNd8jXcRVvem8tFa47LyFVadCBaZ4r/n0= Subject key identifier: 60:2B:3E:C4:C5:06:72:69:58:DF:45:E9:78:52:FF:7A:E1:A5:72:08 Authority key identifier: AC:96:19:8C:9E:15:9F:FA:EE:BD:01:EE:DB:4D:EC:D2:D1:25:B4:FB Certificate issuer: /CN=AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB Certificate serial: 7E70CEB06510506963A4069F7AC8871505CC3701 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 13:49:14 +0000 Manifest this update: Sun 02 Aug 2026 13:44:14 +0000 Manifest next update: Mon 03 Aug 2026 16:26:14 +0000 Files and hashes: 1: AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.crl (hash: dhOQBq52nWvOYvWxCsp70UWpVDpWnzvtdMyhX5k1QSc=) 2: 3136302e32352e33372e302f32342d3234203d3e20313532383332.roa (hash: mYODDo3xXjU46MAAdCgBohgomvh7OQ+5/NIDJ1DIeOU=) 3: 3136302e32352e33362e302f32342d3234203d3e20313532383332.roa (hash: vwfxZYWrk/RSmMQGBZC+p6lAwrY6bWIJ0nylVMAf2ng=) 4: 3136302e32352e33362e302f32332d3234203d3e20313532383332.roa (hash: 9bTByo6Uq+XJTjxp6h+UyAdxQrw5r9BmwsjxhvbZ91A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.crl rsync://rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 16:26:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:70:ce:b0:65:10:50:69:63:a4:06:9f:7a:c8:87:15:05:cc:37:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB Validity Not Before: Aug 2 13:44:14 2026 GMT Not After : Aug 3 16:26:14 2026 GMT Subject: CN=602B3EC4C506726958DF45E97852FF7AE1A57208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:71:7b:33:ed:86:1d:1f:34:0c:61:21:45:2f: 87:a9:2e:9a:76:75:99:46:d1:f5:74:7c:b2:b2:52: 8c:bd:56:dd:f1:47:54:16:e2:08:ad:d3:78:e5:eb: ee:6a:dc:2a:44:99:f0:15:25:6b:f6:69:49:d2:f7: e5:26:95:db:81:76:89:71:08:cd:59:c4:84:69:70: 16:f8:01:23:21:ba:ff:fb:a6:24:7d:c9:8e:00:22: 8a:c3:ff:95:7e:e6:aa:a6:07:74:4f:2b:f4:78:fd: 18:eb:48:72:8a:2f:73:ed:70:da:b9:75:f6:ae:49: aa:e0:98:1a:d5:4c:af:de:d7:01:15:38:7b:f1:33: 53:5e:6b:e0:c4:7d:6b:eb:46:3b:9e:5b:04:18:fa: db:aa:f3:34:bc:af:38:97:83:e7:67:7c:a4:7e:7c: 6c:3e:8a:c0:e4:39:4b:06:40:58:36:e6:1c:22:db: 3e:85:47:0f:8d:42:bb:ac:a5:ac:17:3d:75:b4:b5: 49:ea:65:34:d8:6b:97:75:e5:7c:56:df:29:71:e4: 7c:7d:88:b6:dd:fc:5a:25:ab:e0:7e:02:65:9d:5e: 43:3b:8f:b7:f4:73:6a:1a:2b:8e:fd:00:ea:cb:e6: 7f:67:37:31:0d:1f:d1:a5:9d:3d:11:6c:84:03:4e: d9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:2B:3E:C4:C5:06:72:69:58:DF:45:E9:78:52:FF:7A:E1:A5:72:08 X509v3 Authority Key Identifier: keyid:AC:96:19:8C:9E:15:9F:FA:EE:BD:01:EE:DB:4D:EC:D2:D1:25:B4:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:16:e9:74:4b:53:62:8b:98:af:54:9f:ab:b3:ff:04:53:b2: 88:17:8c:cd:8a:81:65:eb:a4:fc:6b:93:9b:3e:2f:9f:8c:a9: 96:b9:14:77:dc:f1:6d:8c:6f:87:c9:8c:16:1d:1d:c5:e2:75: 22:20:93:a7:08:10:e5:1a:0c:99:a5:e9:90:65:45:1c:8f:1e: 35:25:bb:26:85:72:44:d2:89:e4:5d:5b:01:85:e7:36:f9:1f: af:b5:70:9b:fe:5c:77:f5:3b:1e:79:af:f5:cb:2a:f1:a5:e8: 52:24:63:81:a2:5b:6b:68:d6:39:3c:e8:a2:2c:49:38:be:3c: b5:7c:99:d8:6f:a0:f8:03:21:66:d7:df:4a:a8:d7:a9:8e:ad: 18:e7:ff:0a:d5:ce:2d:6a:cf:cf:69:e0:8f:c7:52:9e:cc:fa: 5e:57:ff:17:1a:41:b8:6a:32:aa:44:9f:8e:c4:ea:dc:e9:95: d0:25:21:17:65:57:fe:58:08:71:63:e4:d4:17:5f:7b:a9:a7: 62:12:43:12:f7:d4:8c:21:fb:0b:95:4d:5a:70:85:7c:74:2f: a1:d2:77:4d:2f:05:2b:fa:21:7b:98:4e:69:b8:87:3b:36:28: a9:1d:a7:e0:ba:93:c2:83:bb:ce:ca:47:85:f0:93:7d:5b:a8: a5:61:18:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfnDOsGUQUGljpAafesiHFQXMNwEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM5NjE5OEM5RTE1OUZGQUVFQkQwMUVFREI0REVDRDJE MTI1QjRGQjAeFw0yNjA4MDIxMzQ0MTRaFw0yNjA4MDMxNjI2MTRaMDMxMTAvBgNV BAMTKDYwMkIzRUM0QzUwNjcyNjk1OERGNDVFOTc4NTJGRjdBRTFBNTcyMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7cXsz7YYdHzQMYSFFL4epLpp2 dZlG0fV0fLKyUoy9Vt3xR1QW4git03jl6+5q3CpEmfAVJWv2aUnS9+UmlduBdolx CM1ZxIRpcBb4ASMhuv/7piR9yY4AIorD/5V+5qqmB3RPK/R4/RjrSHKKL3PtcNq5 dfauSargmBrVTK/e1wEVOHvxM1Nea+DEfWvrRjueWwQY+tuq8zS8rziXg+dnfKR+ fGw+isDkOUsGQFg25hwi2z6FRw+NQruspawXPXW0tUnqZTTYa5d15XxW3ylx5Hx9 iLbd/Folq+B+AmWdXkM7j7f0c2oaK479AOrL5n9nNzENH9GlnT0RbIQDTtlpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYCs+xMUGcmlY30XpeFL/euGlcggwHwYDVR0j BBgwFoAUrJYZjJ4Vn/ruvQHu203s0tEltPswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2Y0YjUzZDgtYjJmZi00OTczLWIxYWMtNmY4NWZhZWFkYmU1LzAvQUM5NjE5OEM5 RTE1OUZGQUVFQkQwMUVFREI0REVDRDJEMTI1QjRGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BQzk2MTk4QzlFMTU5RkZBRUVCRDAxRUVEQjRERUNEMkQxMjVC NEZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2Y0YjUzZDgtYjJmZi00OTczLWIx YWMtNmY4NWZhZWFkYmU1LzAvQUM5NjE5OEM5RTE1OUZGQUVFQkQwMUVFREI0REVD RDJEMTI1QjRGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADYW6XRLU2KLmK9Un6uz/wRTsogXjM2KgWXr pPxrk5s+L5+MqZa5FHfc8W2Mb4fJjBYdHcXidSIgk6cIEOUaDJml6ZBlRRyPHjUl uyaFckTSieRdWwGF5zb5H6+1cJv+XHf1Ox55r/XLKvGl6FIkY4GiW2to1jk86KIs STi+PLV8mdhvoPgDIWbX30qo16mOrRjn/wrVzi1qz89p4I/HUp7M+l5X/xcaQbhq MqpEn47E6tzpldAlIRdlV/5YCHFj5NQXX3upp2ISQxL31Iwh+wuVTVpwhXx0L6HS d00vBSv6IXuYTmm4hzs2KKkdp+C6k8KDu87KR4Xwk31bqKVhGK4= -----END CERTIFICATE-----Generated at Sun Aug 2 20:33:43 2026 by rpki-client