$ rpki-client -vvf rpki-rsync.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.mft File: AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.mft (raw, json) Hash identifier: WlPKmCD736fWmRklMVc6CIQEtcYJ4M0aaxJ0ZgueMxo= Subject key identifier: 97:14:B7:37:BA:D8:7E:29:F5:10:56:F7:A4:4F:09:12:ED:56:29:EC Authority key identifier: AC:2C:B9:F6:C8:CB:FD:54:9E:9E:FC:E2:2F:22:F1:BC:DB:CB:73:92 Certificate issuer: /CN=AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392 Certificate serial: 65E482766C469E7EE3A6184CAE33014A2051EC06 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.mft Manifest number: 42 Signing time: Fri 19 Jun 2026 20:05:10 +0000 Manifest this update: Fri 19 Jun 2026 20:00:10 +0000 Manifest next update: Sun 21 Jun 2026 00:02:10 +0000 Files and hashes: 1: AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.crl (hash: 4OVXR4NahsjFYFe+PJiX8ZoUaSKi8ABC44xPQy5jzpo=) 2: 3130332e3139302e3131322e302f32332d3234203d3e20313439393037.roa (hash: hhQovD5k6aPWCJpf1Q2RXufesBruZAyhfmoou+CUYHI=) 3: 3130332e3139302e3131332e302f32342d3234203d3e20313439393037.roa (hash: Q95AZcZVTNNMyCA8ySPTWTlV5HgDicctdDFDNHoHuh0=) 4: 3130332e3139302e3131322e302f32342d3234203d3e20313439393037.roa (hash: 1w+lHciz1g+OQhhivgPPNI1UUThYYbymT06vuiGhBaA=) 5: 323030313a6466303a663963303a3a2f34382d3438203d3e20313439393037.roa (hash: GJQ+AHj2o4V89RFkllxAeKJUIy+kRG6F/hsMS14nw+s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.crl rsync://rpki-rsync.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 00:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:e4:82:76:6c:46:9e:7e:e3:a6:18:4c:ae:33:01:4a:20:51:ec:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392 Validity Not Before: Jun 19 20:00:10 2026 GMT Not After : Jun 21 00:02:10 2026 GMT Subject: CN=9714B737BAD87E29F51056F7A44F0912ED5629EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:82:df:33:2e:80:72:04:d2:79:e6:21:a4:03: b6:66:4b:d5:81:a7:b3:6f:1a:06:a0:42:00:42:6f: 4a:ff:ee:04:8a:50:df:30:32:8e:bd:87:33:f8:2b: 61:ad:c4:8b:ce:3e:0d:39:59:49:5a:99:66:30:20: 9f:e6:22:9c:40:f4:86:04:b3:95:4d:9d:56:d3:d7: d6:f2:bb:5b:ff:80:56:7c:e4:87:ff:ed:0c:e1:18: 7f:b0:f5:ca:52:45:70:06:80:fd:68:8e:fd:40:71: 97:30:37:3e:2f:27:67:1c:11:a1:75:f9:a4:c0:a7: d3:af:e4:a6:b0:4a:4c:3f:42:b5:55:e9:ef:eb:4d: 6e:e4:9d:95:24:22:8f:f1:fc:0d:25:e8:54:8b:44: 96:a7:27:a1:67:59:ff:09:d4:92:c8:3e:fa:24:83: 05:70:f4:65:40:81:10:d6:48:fd:74:ca:93:fa:3b: 43:54:18:9f:f9:d2:7b:c2:68:67:d4:9b:21:0b:80: a9:f5:fb:9c:f7:dc:37:3d:1c:03:06:36:65:4c:50: 3a:32:62:46:b2:bc:0c:c5:80:a5:0a:f5:4d:e2:f7: 1f:de:09:ee:95:d7:fd:42:37:d4:d8:d9:9b:13:31: 71:ca:0c:85:73:05:18:0d:73:3e:3f:7c:d7:69:97: be:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:14:B7:37:BA:D8:7E:29:F5:10:56:F7:A4:4F:09:12:ED:56:29:EC X509v3 Authority Key Identifier: keyid:AC:2C:B9:F6:C8:CB:FD:54:9E:9E:FC:E2:2F:22:F1:BC:DB:CB:73:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/AC2CB9F6C8CBFD549E9EFCE22F22F1BCDBCB7392.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:74:f7:de:e8:43:4c:9f:b8:49:a2:83:e2:0f:11:a2:43:bb: 3c:fc:c3:ee:25:ce:9d:60:9f:9a:a6:4f:2d:9c:f2:ec:07:09: bc:df:ec:84:53:c5:fa:0c:29:62:5a:d0:8d:bc:6d:5a:9c:38: cd:9b:c9:6a:07:05:76:dc:32:2c:bd:14:f9:0a:5a:cf:34:d0: f0:f5:94:5f:89:d3:75:63:de:84:55:76:ec:d3:64:a6:80:60: b4:1a:b0:88:55:a2:57:64:7e:fe:4d:8a:e4:2e:c5:fa:62:11: 98:92:1e:37:ee:b3:85:61:76:e2:54:fe:f4:87:07:0e:d8:74: b9:85:de:9c:f5:50:ce:59:1c:39:fa:18:f3:8c:83:cc:5d:49: 11:20:f5:4d:b3:45:04:a5:48:d7:83:43:0a:4a:56:7c:be:4a: 55:18:c8:3c:dc:bd:0b:e0:de:b4:60:62:75:51:30:39:7d:e6: fb:e4:28:c9:76:3e:d0:ec:de:dc:f8:71:c1:74:4c:70:10:52: 5b:ea:6b:3f:e3:4f:2a:3f:a4:c6:7d:3c:f6:57:ff:da:fe:f3: 10:6b:4b:9f:79:e2:c3:79:f8:21:57:4a:f2:84:4b:3a:52:63: 4b:72:b3:19:11:f1:a2:da:f8:51:31:65:41:a2:10:66:f0:8a: 91:b3:12:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZeSCdmxGnn7jphhMrjMBSiBR7AYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUMyQ0I5RjZDOENCRkQ1NDlFOUVGQ0UyMkYyMkYxQkNE QkNCNzM5MjAeFw0yNjA2MTkyMDAwMTBaFw0yNjA2MjEwMDAyMTBaMDMxMTAvBgNV BAMTKDk3MTRCNzM3QkFEODdFMjlGNTEwNTZGN0E0NEYwOTEyRUQ1NjI5RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWgt8zLoByBNJ55iGkA7ZmS9WB p7NvGgagQgBCb0r/7gSKUN8wMo69hzP4K2GtxIvOPg05WUlamWYwIJ/mIpxA9IYE s5VNnVbT19byu1v/gFZ85If/7QzhGH+w9cpSRXAGgP1ojv1AcZcwNz4vJ2ccEaF1 +aTAp9Ov5KawSkw/QrVV6e/rTW7knZUkIo/x/A0l6FSLRJanJ6FnWf8J1JLIPvok gwVw9GVAgRDWSP10ypP6O0NUGJ/50nvCaGfUmyELgKn1+5z33Dc9HAMGNmVMUDoy YkayvAzFgKUK9U3i9x/eCe6V1/1CN9TY2ZsTMXHKDIVzBRgNcz4/fNdpl75tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlxS3N7rYfin1EFb3pE8JEu1WKewwHwYDVR0j BBgwFoAUrCy59sjL/VSenvziLyLxvNvLc5IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjA1MTZhN2EtNDE5NS00NGIzLWEyNGUtY2Y4ZWQ1NzhkNzkxLzAvQUMyQ0I5RjZD OENCRkQ1NDlFOUVGQ0UyMkYyMkYxQkNEQkNCNzM5Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzJDQjlGNkM4Q0JGRDU0OUU5RUZDRTIyRjIyRjFCQ0RCQ0I3 MzkyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjA1MTZhN2EtNDE5NS00NGIzLWEy NGUtY2Y4ZWQ1NzhkNzkxLzAvQUMyQ0I5RjZDOENCRkQ1NDlFOUVGQ0UyMkYyMkYx QkNEQkNCNzM5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACB0997oQ0yfuEmig+IPEaJDuzz8w+4lzp1g n5qmTy2c8uwHCbzf7IRTxfoMKWJa0I28bVqcOM2byWoHBXbcMiy9FPkKWs800PD1 lF+J03Vj3oRVduzTZKaAYLQasIhVoldkfv5NiuQuxfpiEZiSHjfus4VhduJU/vSH Bw7YdLmF3pz1UM5ZHDn6GPOMg8xdSREg9U2zRQSlSNeDQwpKVny+SlUYyDzcvQvg 3rRgYnVRMDl95vvkKMl2PtDs3tz4ccF0THAQUlvqaz/jTyo/pMZ9PPZX/9r+8xBr S5954sN5+CFXSvKESzpSY0tysxkR8aLa+FExZUGiEGbwipGzEmc= -----END CERTIFICATE-----Generated at Sat Jun 20 09:18:20 2026 by rpki-client