$ rpki-client -vvf rpki-rsync.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.mft File: AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.mft (raw, json) Hash identifier: ByQos2j/t50/aQ0dVOnol9oZ1Taa+dUVVyXB0jQnI7c= Subject key identifier: 7D:D6:66:6C:E5:1C:3C:03:FB:A4:E5:F9:12:F7:B8:20:39:E0:3F:E5 Authority key identifier: AC:23:DD:AA:2C:89:DF:C4:3F:0D:12:03:31:CD:3C:8F:1E:60:D1:CA Certificate issuer: /CN=AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA Certificate serial: 745D163227FA20DCC40FA0EE8DDCD5E3A1967EDC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.mft Manifest number: 93 Signing time: Thu 20 Aug 2026 08:07:43 +0000 Manifest this update: Thu 20 Aug 2026 08:02:43 +0000 Manifest next update: Fri 21 Aug 2026 09:55:43 +0000 Files and hashes: 1: AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.crl (hash: lDnYOa4PzG5Ypv/+FPYi+7LisMAXsQV4TqOs/nRjWhg=) 2: 3130332e3138342e31382e302f32332d3233203d3e20313439363735.roa (hash: IKu3DMB2Lrk9WDHkDL4CNW43tnQhk2oAbk+rhH/oyA8=) 3: 3130332e3138342e31392e302f32342d3234203d3e203438343635.roa (hash: jT66ugDcwrPPZn+FW9LcATaa7pa94IbpNMskVZmpYyA=) 4: 3130332e3138342e31392e302f32342d3234203d3e20313439363735.roa (hash: tpylCt5CgrBx6WkyqQ/Q0MxG2lKbEyC1EbhCs0e+Yuo=) 5: 3130332e3138342e31382e302f32342d3234203d3e203438343635.roa (hash: AMN816Na79PG9Dr8taQyQqg9+CtJXIVEVEtntXynyXw=) 6: 3130332e3138342e31382e302f32342d3234203d3e20313439363735.roa (hash: etrhCGlRM8YYOHb6oshuOaV8mvXHwHvEf9qlp95P9kg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.crl rsync://rpki-rsync.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Aug 2026 06:28:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:5d:16:32:27:fa:20:dc:c4:0f:a0:ee:8d:dc:d5:e3:a1:96:7e:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA Validity Not Before: Aug 20 08:02:43 2026 GMT Not After : Aug 21 09:55:43 2026 GMT Subject: CN=7DD6666CE51C3C03FBA4E5F912F7B82039E03FE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d2:1e:ab:a3:90:74:fb:46:25:dd:5a:9c:29: 38:03:fe:3a:1a:00:de:4d:68:93:c0:5f:9c:48:99: f0:e5:f8:8a:9e:8b:0b:c7:77:c2:1c:31:22:3b:83: 5d:7a:99:88:c0:f5:98:3d:a6:9e:e8:25:af:32:0b: bd:2c:9e:37:86:0f:6e:94:f0:3a:09:55:00:59:8b: 97:51:37:7e:64:73:d5:02:62:bd:dd:ba:36:3f:9e: 10:50:a7:a0:f5:38:c0:25:9d:e2:8b:f2:c6:cb:da: be:66:62:dc:1c:1d:46:2c:8a:29:62:80:a4:a7:59: e3:df:99:73:24:c2:f7:e5:cd:d8:7d:e2:c6:1a:aa: 8d:b2:a8:2d:0e:80:5a:98:b1:b4:82:09:2d:5f:f5: 3f:e1:50:0b:92:58:65:b4:36:32:80:6b:68:c4:80: 44:89:53:fe:e6:53:b5:49:50:cc:6d:37:c2:4f:c4: ea:e4:b4:f6:d8:e7:c0:2d:5d:d8:80:38:9d:86:0c: d5:d6:82:b5:97:8d:1a:40:c6:41:09:c7:d1:85:7e: 3c:eb:2f:bb:76:8e:8d:21:7d:e3:65:2d:25:c3:ed: 9e:4b:31:24:f7:55:21:8c:3c:26:50:8f:f7:17:ef: 7d:80:f0:30:3f:67:1a:50:ff:b7:6a:fb:ef:00:28: ab:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:D6:66:6C:E5:1C:3C:03:FB:A4:E5:F9:12:F7:B8:20:39:E0:3F:E5 X509v3 Authority Key Identifier: keyid:AC:23:DD:AA:2C:89:DF:C4:3F:0D:12:03:31:CD:3C:8F:1E:60:D1:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:58:ab:78:c4:de:d8:fe:f0:0e:a5:bb:97:10:8d:cc:45:06: af:95:d4:12:f1:c8:ea:70:72:e5:8d:70:52:01:37:b3:3a:3b: 1f:62:92:3c:71:f7:61:34:35:c4:91:3a:57:b7:d3:fa:8a:41: 7f:87:87:ae:b6:91:97:2d:54:3e:6b:7d:57:e1:8a:7a:ef:b6: 99:03:4d:84:c4:5f:b8:02:6c:c4:75:91:8d:33:93:30:0a:04: 29:a7:ce:09:72:f7:d9:2e:66:f2:ff:da:6c:55:ef:f2:5c:40: 5b:f7:8f:4c:ca:d6:25:bf:8d:e9:ca:51:c4:09:c2:95:80:bd: 5f:42:0f:eb:56:65:3e:cd:99:9a:9b:9b:f3:cf:28:20:fc:4e: af:9d:da:f8:1d:bf:17:af:a6:ec:92:f0:ff:cb:ea:74:77:f4: b8:ea:e6:4b:2c:67:5a:38:aa:aa:9f:a6:3c:8f:d3:4b:eb:9f: b3:6f:cb:13:88:69:b2:e1:2d:4c:1f:c8:33:f5:cb:ec:27:cf: 5c:85:67:12:ff:33:3a:b5:de:6d:54:1e:2d:86:4a:03:00:dd: 34:21:61:7a:d0:9b:39:b4:f8:bd:ec:ab:7f:a7:26:15:53:5d: 1d:dd:8f:b0:6d:41:7c:5a:ae:2c:f6:87:a3:04:ea:0f:bb:54: 9d:4c:b7:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdF0WMif6INzED6DujdzV46GWftwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUMyM0REQUEyQzg5REZDNDNGMEQxMjAzMzFDRDNDOEYx RTYwRDFDQTAeFw0yNjA4MjAwODAyNDNaFw0yNjA4MjEwOTU1NDNaMDMxMTAvBgNV BAMTKDdERDY2NjZDRTUxQzNDMDNGQkE0RTVGOTEyRjdCODIwMzlFMDNGRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy0h6ro5B0+0Yl3VqcKTgD/joa AN5NaJPAX5xImfDl+IqeiwvHd8IcMSI7g116mYjA9Zg9pp7oJa8yC70snjeGD26U 8DoJVQBZi5dRN35kc9UCYr3dujY/nhBQp6D1OMAlneKL8sbL2r5mYtwcHUYsiili gKSnWePfmXMkwvflzdh94sYaqo2yqC0OgFqYsbSCCS1f9T/hUAuSWGW0NjKAa2jE gESJU/7mU7VJUMxtN8JPxOrktPbY58AtXdiAOJ2GDNXWgrWXjRpAxkEJx9GFfjzr L7t2jo0hfeNlLSXD7Z5LMST3VSGMPCZQj/cX732A8DA/ZxpQ/7dq++8AKKvZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfdZmbOUcPAP7pOX5Eve4IDngP+UwHwYDVR0j BBgwFoAUrCPdqiyJ38Q/DRIDMc08jx5g0cowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjBkOTE0ZWYtMGIxZi00OTBiLTgwOGQtYTI3YjgzZmY5YTNlLzAvQUMyM0REQUEy Qzg5REZDNDNGMEQxMjAzMzFDRDNDOEYxRTYwRDFDQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzIzRERBQTJDODlERkM0M0YwRDEyMDMzMUNEM0M4RjFFNjBE MUNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjBkOTE0ZWYtMGIxZi00OTBiLTgw OGQtYTI3YjgzZmY5YTNlLzAvQUMyM0REQUEyQzg5REZDNDNGMEQxMjAzMzFDRDND OEYxRTYwRDFDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABJYq3jE3tj+8A6lu5cQjcxFBq+V1BLxyOpw cuWNcFIBN7M6Ox9ikjxx92E0NcSROle30/qKQX+Hh662kZctVD5rfVfhinrvtpkD TYTEX7gCbMR1kY0zkzAKBCmnzgly99kuZvL/2mxV7/JcQFv3j0zK1iW/jenKUcQJ wpWAvV9CD+tWZT7NmZqbm/PPKCD8Tq+d2vgdvxevpuyS8P/L6nR39Ljq5kssZ1o4 qqqfpjyP00vrn7NvyxOIabLhLUwfyDP1y+wnz1yFZxL/Mzq13m1UHi2GSgMA3TQh YXrQmzm0+L3sq3+nJhVTXR3dj7BtQXxariz2h6ME6g+7VJ1MtzA= -----END CERTIFICATE-----Generated at Thu Aug 20 13:13:41 2026 by rpki-client