$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.mft File: AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.mft (raw, json) Hash identifier: qG0wO0R9ZznkqGMUeT+3Df6HO1o4tgqAooMHc/ThBt4= Subject key identifier: 2E:F8:06:86:F5:16:6E:3D:65:E0:AB:82:6A:00:2A:8B:48:06:0A:0B Authority key identifier: AC:96:19:8C:9E:15:9F:FA:EE:BD:01:EE:DB:4D:EC:D2:D1:25:B4:FB Certificate issuer: /CN=AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB Certificate serial: 4787846BED20F96505D5AA32DF97AFC64EB3C892 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 20:14:04 +0000 Manifest this update: Wed 16 Sep 2026 20:09:04 +0000 Manifest next update: Thu 17 Sep 2026 22:14:04 +0000 Files and hashes: 1: AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.crl (hash: DR7E+yMwmp/mgz96NlfkHW0FtKeXwShZynGEdDg3EzY=) 2: 3136302e32352e33372e302f32342d3234203d3e20313532383332.roa (hash: mYODDo3xXjU46MAAdCgBohgomvh7OQ+5/NIDJ1DIeOU=) 3: 3136302e32352e33362e302f32342d3234203d3e20313532383332.roa (hash: vwfxZYWrk/RSmMQGBZC+p6lAwrY6bWIJ0nylVMAf2ng=) 4: 3136302e32352e33362e302f32332d3234203d3e20313532383332.roa (hash: 9bTByo6Uq+XJTjxp6h+UyAdxQrw5r9BmwsjxhvbZ91A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.crl rsync://rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 22:14:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:87:84:6b:ed:20:f9:65:05:d5:aa:32:df:97:af:c6:4e:b3:c8:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB Validity Not Before: Sep 16 20:09:04 2026 GMT Not After : Sep 17 22:14:04 2026 GMT Subject: CN=2EF80686F5166E3D65E0AB826A002A8B48060A0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:83:dd:16:4e:ea:4d:13:66:0a:01:d7:47:4a: 74:15:95:ce:06:40:84:be:4d:93:f6:7b:01:cd:53: 51:c9:58:fa:ad:30:f3:ba:52:0e:9d:b3:c5:58:b8: a3:39:85:9b:21:b4:df:f4:ae:30:5f:5f:77:5a:e3: 1b:fa:95:4f:ab:e1:c4:d1:f5:36:3f:b3:8f:98:04: ea:64:ab:ac:ef:49:e4:07:2e:cf:1b:c3:38:ee:14: 7f:c1:14:da:65:97:55:fc:49:59:1f:c3:75:33:93: 72:89:90:b6:0d:aa:86:a6:38:83:6b:b2:39:aa:55: 5f:55:12:a4:61:2a:f7:72:15:c3:8d:4b:c7:c8:7e: 47:b6:54:6a:4b:8a:20:a5:0c:80:4f:fc:c1:2b:69: c6:d2:2b:3f:94:b0:60:aa:1c:67:69:5a:d3:67:ef: 33:6a:4a:82:ca:81:36:06:66:06:ca:2c:60:4f:10: 91:05:ab:16:27:39:63:7e:9f:64:dc:49:f1:d5:54: 39:72:1d:d2:5b:33:31:5a:7b:70:ef:f4:54:0e:2d: 88:3b:e2:ee:84:9d:a1:2c:4b:2e:3f:63:6d:3c:75: fa:2c:c5:bb:99:ab:7a:b6:f6:e1:c5:09:00:d6:8d: 66:6f:f6:fb:18:ea:83:7e:b3:89:03:ef:9c:5a:f7: c6:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:F8:06:86:F5:16:6E:3D:65:E0:AB:82:6A:00:2A:8B:48:06:0A:0B X509v3 Authority Key Identifier: keyid:AC:96:19:8C:9E:15:9F:FA:EE:BD:01:EE:DB:4D:EC:D2:D1:25:B4:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:c9:df:f4:a0:3e:75:8e:1b:16:19:f8:fb:bf:1a:18:43:90: 2d:a4:e0:9a:42:9d:17:77:b0:49:7e:2a:b3:0f:2f:3e:a8:6d: 10:6a:6e:cd:c4:01:77:07:7c:51:fc:97:f7:92:30:10:5b:da: 40:65:24:86:5b:32:53:a3:12:00:8f:82:4a:c9:e9:ee:54:f0: f6:0e:f8:3b:ac:54:5e:14:3f:4e:b0:9a:69:a1:b5:54:34:b5: e7:e4:cd:0e:9b:fd:4e:eb:09:e8:60:41:89:6b:53:53:f2:bc: 6c:3b:a9:48:7b:9d:9c:e7:ba:60:fa:70:87:e5:ff:a4:50:2c: 0d:18:9b:0f:49:18:e0:6b:dc:a4:e5:12:3d:01:3c:0d:73:a7: 7a:82:7f:3c:f1:33:dc:cc:83:b4:de:b2:8a:67:38:3e:17:7f: 49:46:17:0e:f6:2a:1e:61:97:8b:98:10:ef:c5:d0:f2:90:dc: 3b:38:ee:47:31:fe:83:2e:e0:fd:bd:e6:aa:d7:30:03:cb:44: f5:b7:6c:cc:f3:e1:a2:ad:59:29:1f:07:32:40:1f:b7:e7:63: a7:9e:1c:ee:43:0d:29:2c:be:ac:45:23:7f:d4:c0:a9:f7:0b: 52:2f:0c:0e:12:65:2e:21:ab:2e:2e:7c:89:38:82:96:c0:e4: fb:9f:61:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR4eEa+0g+WUF1aoy35evxk6zyJIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM5NjE5OEM5RTE1OUZGQUVFQkQwMUVFREI0REVDRDJE MTI1QjRGQjAeFw0yNjA5MTYyMDA5MDRaFw0yNjA5MTcyMjE0MDRaMDMxMTAvBgNV BAMTKDJFRjgwNjg2RjUxNjZFM0Q2NUUwQUI4MjZBMDAyQThCNDgwNjBBMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDug90WTupNE2YKAddHSnQVlc4G QIS+TZP2ewHNU1HJWPqtMPO6Ug6ds8VYuKM5hZshtN/0rjBfX3da4xv6lU+r4cTR 9TY/s4+YBOpkq6zvSeQHLs8bwzjuFH/BFNpll1X8SVkfw3Uzk3KJkLYNqoamOINr sjmqVV9VEqRhKvdyFcONS8fIfke2VGpLiiClDIBP/MEracbSKz+UsGCqHGdpWtNn 7zNqSoLKgTYGZgbKLGBPEJEFqxYnOWN+n2TcSfHVVDlyHdJbMzFae3Dv9FQOLYg7 4u6EnaEsSy4/Y208dfosxbuZq3q29uHFCQDWjWZv9vsY6oN+s4kD75xa98ZtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULvgGhvUWbj1l4KuCagAqi0gGCgswHwYDVR0j BBgwFoAUrJYZjJ4Vn/ruvQHu203s0tEltPswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2Y0YjUzZDgtYjJmZi00OTczLWIxYWMtNmY4NWZhZWFkYmU1LzAvQUM5NjE5OEM5 RTE1OUZGQUVFQkQwMUVFREI0REVDRDJEMTI1QjRGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BQzk2MTk4QzlFMTU5RkZBRUVCRDAxRUVEQjRERUNEMkQxMjVC NEZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2Y0YjUzZDgtYjJmZi00OTczLWIx YWMtNmY4NWZhZWFkYmU1LzAvQUM5NjE5OEM5RTE1OUZGQUVFQkQwMUVFREI0REVD RDJEMTI1QjRGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH3J3/SgPnWOGxYZ+Pu/GhhDkC2k4JpCnRd3 sEl+KrMPLz6obRBqbs3EAXcHfFH8l/eSMBBb2kBlJIZbMlOjEgCPgkrJ6e5U8PYO +DusVF4UP06wmmmhtVQ0tefkzQ6b/U7rCehgQYlrU1PyvGw7qUh7nZznumD6cIfl /6RQLA0Ymw9JGOBr3KTlEj0BPA1zp3qCfzzxM9zMg7TesopnOD4Xf0lGFw72Kh5h l4uYEO/F0PKQ3Ds47kcx/oMu4P295qrXMAPLRPW3bMzz4aKtWSkfBzJAH7fnY6ee HO5DDSksvqxFI3/UwKn3C1IvDA4SZS4hqy4ufIk4gpbA5PufYdI= -----END CERTIFICATE-----Generated at Thu Sep 17 15:49:22 2026 by rpki-client