$ rpki-client -vvf rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.mft File: AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.mft (raw, json) Hash identifier: P3KnO9mC/AmRuOXbFCQOniVcgyBChOeKaDyOAYA0zZ0= Subject key identifier: 2D:B2:16:4D:DC:BB:04:4F:5D:F7:2C:82:08:CC:ED:A3:81:EF:63:61 Authority key identifier: AC:96:19:8C:9E:15:9F:FA:EE:BD:01:EE:DB:4D:EC:D2:D1:25:B4:FB Certificate issuer: /CN=AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB Certificate serial: 5FD3209AA5A204758F9FAB1DFD4B5E4308C4A923 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.mft Manifest number: 40 Signing time: Thu 18 Jun 2026 14:08:57 +0000 Manifest this update: Thu 18 Jun 2026 14:03:57 +0000 Manifest next update: Fri 19 Jun 2026 15:49:57 +0000 Files and hashes: 1: AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.crl (hash: 9Y6yJunmnk17nWZJk7Q8YjPLK8vB2XSe374cUxGYn1Y=) 2: 3136302e32352e33362e302f32332d3234203d3e20313532383332.roa (hash: 9bTByo6Uq+XJTjxp6h+UyAdxQrw5r9BmwsjxhvbZ91A=) 3: 3136302e32352e33362e302f32342d3234203d3e20313532383332.roa (hash: vwfxZYWrk/RSmMQGBZC+p6lAwrY6bWIJ0nylVMAf2ng=) 4: 3136302e32352e33372e302f32342d3234203d3e20313532383332.roa (hash: mYODDo3xXjU46MAAdCgBohgomvh7OQ+5/NIDJ1DIeOU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.crl rsync://rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 08:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:d3:20:9a:a5:a2:04:75:8f:9f:ab:1d:fd:4b:5e:43:08:c4:a9:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB Validity Not Before: Jun 18 14:03:57 2026 GMT Not After : Jun 19 15:49:57 2026 GMT Subject: CN=2DB2164DDCBB044F5DF72C8208CCEDA381EF6361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:08:7e:f0:9a:3b:34:45:95:7d:b9:fc:2f:76: 24:cc:42:20:39:7d:ec:23:f0:c7:93:4a:6d:19:a1: b0:16:43:17:75:11:25:dd:51:ef:ae:f2:70:e0:6a: db:78:96:10:a8:76:74:52:50:b1:b1:08:82:bf:11: 9f:55:e7:ea:9b:d8:49:f2:b4:d6:fd:8d:36:9a:6b: 57:44:c9:6a:d8:b3:bb:72:69:ee:56:04:10:48:11: 99:e6:a0:3f:51:e6:dd:29:8b:21:43:72:ab:14:43: 88:32:79:d6:05:94:bb:d6:e3:b9:ea:d4:a7:da:d2: df:e6:6f:62:02:1c:2a:1d:5d:45:a7:d0:0b:39:0e: 1e:2f:76:41:bc:a2:f2:5f:bf:45:23:a0:b7:57:18: c2:22:8c:b1:8f:ac:cf:92:92:fc:f9:44:b6:4b:61: 6d:41:48:00:f5:2b:e3:fb:17:43:7e:44:94:84:77: bd:a7:06:47:ca:27:e1:6c:fa:80:8a:ca:14:b8:cc: 8f:f4:35:79:65:a6:bb:d0:fa:96:1d:9b:a3:69:00: c3:de:f5:1e:0e:5b:ba:c1:94:58:d1:98:b2:f3:62: ac:3c:3f:8d:06:fc:5f:7a:8a:c7:b2:b4:c2:93:c9: 68:ad:2e:e8:d2:c3:f8:95:11:1f:c7:20:a4:3b:3f: 05:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:B2:16:4D:DC:BB:04:4F:5D:F7:2C:82:08:CC:ED:A3:81:EF:63:61 X509v3 Authority Key Identifier: keyid:AC:96:19:8C:9E:15:9F:FA:EE:BD:01:EE:DB:4D:EC:D2:D1:25:B4:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:3c:e5:02:48:73:39:26:9a:b0:57:05:d3:e0:da:23:25:f2: 76:aa:be:82:1b:08:58:32:88:d5:e4:3d:f6:64:47:04:ce:12: 5a:28:90:e8:55:32:d9:42:78:b7:e0:68:d6:e8:ba:46:3a:9a: b7:ff:54:ce:b0:b0:7c:b5:07:c7:0e:53:b0:b0:c9:d9:8f:84: 9e:36:82:3f:f1:ad:4e:fd:41:61:3c:e0:da:84:22:dc:0f:c8: f3:33:b2:80:e1:d4:6c:06:31:d2:70:95:0f:33:71:3d:75:2b: 90:82:fd:b9:ee:8f:16:99:53:c4:81:cc:4b:7c:e1:5e:26:63: bf:a0:78:57:49:29:e4:26:42:cb:8c:87:21:d7:3b:e9:7b:f3: ac:ec:ae:ab:e3:ec:bf:c3:dc:36:77:de:16:09:48:85:92:b9: 40:f9:29:0c:5d:e6:73:f7:d3:f3:02:f7:e1:3f:bf:01:ac:34: 3a:a7:3f:1f:8d:69:43:c4:a6:4a:28:2b:ee:33:d0:95:47:c7: 22:68:fb:15:08:1a:e2:41:57:bd:ba:11:d9:cb:ab:72:83:9f: 6a:9f:e2:66:92:f1:64:51:45:1b:e5:22:df:e8:f6:69:d8:0c: 94:36:c9:8a:4d:bb:58:82:dc:1f:53:ec:d9:35:7a:b8:4d:e5: 1d:53:ef:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX9MgmqWiBHWPn6sd/UteQwjEqSMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM5NjE5OEM5RTE1OUZGQUVFQkQwMUVFREI0REVDRDJE MTI1QjRGQjAeFw0yNjA2MTgxNDAzNTdaFw0yNjA2MTkxNTQ5NTdaMDMxMTAvBgNV BAMTKDJEQjIxNjRERENCQjA0NEY1REY3MkM4MjA4Q0NFREEzODFFRjYzNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJCH7wmjs0RZV9ufwvdiTMQiA5 fewj8MeTSm0ZobAWQxd1ESXdUe+u8nDgatt4lhCodnRSULGxCIK/EZ9V5+qb2Eny tNb9jTaaa1dEyWrYs7tyae5WBBBIEZnmoD9R5t0piyFDcqsUQ4gyedYFlLvW47nq 1Kfa0t/mb2ICHCodXUWn0As5Dh4vdkG8ovJfv0UjoLdXGMIijLGPrM+Skvz5RLZL YW1BSAD1K+P7F0N+RJSEd72nBkfKJ+Fs+oCKyhS4zI/0NXllprvQ+pYdm6NpAMPe 9R4OW7rBlFjRmLLzYqw8P40G/F96iseytMKTyWitLujSw/iVER/HIKQ7PwVbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULbIWTdy7BE9d9yyCCMzto4HvY2EwHwYDVR0j BBgwFoAUrJYZjJ4Vn/ruvQHu203s0tEltPswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2Y0YjUzZDgtYjJmZi00OTczLWIxYWMtNmY4NWZhZWFkYmU1LzAvQUM5NjE5OEM5 RTE1OUZGQUVFQkQwMUVFREI0REVDRDJEMTI1QjRGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BQzk2MTk4QzlFMTU5RkZBRUVCRDAxRUVEQjRERUNEMkQxMjVC NEZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2Y0YjUzZDgtYjJmZi00OTczLWIx YWMtNmY4NWZhZWFkYmU1LzAvQUM5NjE5OEM5RTE1OUZGQUVFQkQwMUVFREI0REVD RDJEMTI1QjRGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKc85QJIczkmmrBXBdPg2iMl8naqvoIbCFgy iNXkPfZkRwTOElookOhVMtlCeLfgaNboukY6mrf/VM6wsHy1B8cOU7CwydmPhJ42 gj/xrU79QWE84NqEItwPyPMzsoDh1GwGMdJwlQ8zcT11K5CC/bnujxaZU8SBzEt8 4V4mY7+geFdJKeQmQsuMhyHXO+l786zsrqvj7L/D3DZ33hYJSIWSuUD5KQxd5nP3 0/MC9+E/vwGsNDqnPx+NaUPEpkooK+4z0JVHxyJo+xUIGuJBV726EdnLq3KDn2qf 4maS8WRRRRvlIt/o9mnYDJQ2yYpNu1iC3B9T7Nk1erhN5R1T7/M= -----END CERTIFICATE-----Generated at Thu Jun 18 17:13:24 2026 by rpki-client