$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.mft File: AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.mft (raw, json) Hash identifier: 15nM0IXsZW+uenHf37iWA93bkWcYcSa4zEGa5X5mHcE= Subject key identifier: 2F:44:35:51:03:C7:0B:AA:03:C2:8A:2E:E0:E4:C7:34:D1:97:70:3D Authority key identifier: AC:23:DD:AA:2C:89:DF:C4:3F:0D:12:03:31:CD:3C:8F:1E:60:D1:CA Certificate issuer: /CN=AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA Certificate serial: 15E02BC3F9A088DE77227B63E2BCC9D5F8C379D5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.mft Manifest number: D3 Signing time: Thu 08 Oct 2026 06:51:41 +0000 Manifest this update: Thu 08 Oct 2026 06:46:41 +0000 Manifest next update: Fri 09 Oct 2026 07:01:41 +0000 Files and hashes: 1: 3130332e3138342e31382e302f32332d3233203d3e20313439363735.roa (hash: IKu3DMB2Lrk9WDHkDL4CNW43tnQhk2oAbk+rhH/oyA8=) 2: 3130332e3138342e31382e302f32342d3234203d3e20313439363735.roa (hash: etrhCGlRM8YYOHb6oshuOaV8mvXHwHvEf9qlp95P9kg=) 3: 3130332e3138342e31392e302f32342d3234203d3e203438343635.roa (hash: jT66ugDcwrPPZn+FW9LcATaa7pa94IbpNMskVZmpYyA=) 4: 3130332e3138342e31392e302f32342d3234203d3e20313439363735.roa (hash: tpylCt5CgrBx6WkyqQ/Q0MxG2lKbEyC1EbhCs0e+Yuo=) 5: 3130332e3138342e31382e302f32342d3234203d3e203438343635.roa (hash: AMN816Na79PG9Dr8taQyQqg9+CtJXIVEVEtntXynyXw=) 6: AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.crl (hash: PnuZNBTaq0CuvXX1D2jjF8K1H53U91TtfGmnabiZtYY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.crl rsync://rpki-rsync.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 07:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:e0:2b:c3:f9:a0:88:de:77:22:7b:63:e2:bc:c9:d5:f8:c3:79:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA Validity Not Before: Oct 8 06:46:41 2026 GMT Not After : Oct 9 07:01:41 2026 GMT Subject: CN=2F44355103C70BAA03C28A2EE0E4C734D197703D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:20:85:24:37:ca:99:f9:95:b3:85:49:16:fa: a7:d4:63:2b:00:56:51:01:2e:29:ee:5b:6a:8c:8b: dc:4d:88:7d:4d:dd:a4:86:cb:c5:72:67:97:ef:4b: 89:65:5a:10:cb:7c:61:25:39:df:81:bf:31:a5:a8: 11:47:c7:27:1d:ed:5f:70:c5:af:6d:d0:85:31:a0: c0:fa:0b:f6:75:ae:54:22:b9:11:7f:ad:c7:00:73: 01:cb:d1:c0:d9:ef:8f:20:f6:6b:ed:ea:64:7d:aa: e0:0c:8b:08:f0:e7:aa:a8:5e:b1:f7:18:20:76:43: 7c:2c:6c:4c:f2:ad:e8:6c:7d:68:b1:5b:fb:55:c6: 50:75:5f:c7:fd:a2:d6:19:58:47:9e:52:c9:25:19: 0a:31:57:31:c0:93:a6:5f:71:15:c6:b0:1f:2d:97: 42:83:07:8d:e6:00:10:97:bf:24:0a:0f:ac:bf:8b: 65:17:aa:5d:1f:0d:52:13:a7:ab:c1:46:f1:f5:1e: 4f:94:56:a6:32:bf:05:e0:70:c3:1b:df:e5:f2:05: 4d:0a:09:64:26:e9:47:ae:4b:38:3d:02:b9:fb:9e: 38:eb:6d:05:19:4f:d4:52:b2:e5:f6:35:11:1b:e4: a6:63:1a:bb:2b:34:1b:71:d7:85:d1:fb:05:86:dc: 61:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:44:35:51:03:C7:0B:AA:03:C2:8A:2E:E0:E4:C7:34:D1:97:70:3D X509v3 Authority Key Identifier: keyid:AC:23:DD:AA:2C:89:DF:C4:3F:0D:12:03:31:CD:3C:8F:1E:60:D1:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/AC23DDAA2C89DFC43F0D120331CD3C8F1E60D1CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:33:1c:2d:5d:d0:03:90:a3:a6:13:7c:87:fe:48:7b:31:16: af:77:86:42:94:bb:4d:47:7f:ba:a3:ce:5e:43:2b:0b:d2:27: 14:94:44:b3:ef:0e:55:36:5b:e8:3a:f0:a9:12:2d:7d:01:64: 57:72:78:53:b5:c9:71:a8:7b:16:aa:b7:ce:eb:57:ec:64:f6: 8e:b7:4f:ec:cd:5b:bf:0b:c0:e6:59:84:b7:1f:b3:77:d7:4f: 38:6e:af:b4:e5:a3:20:14:37:e2:c4:db:3c:1b:83:62:d5:62: b0:11:17:06:21:f9:83:40:67:8c:8a:53:3e:cc:ed:36:fe:1a: 67:d9:6b:8d:fd:a6:ba:ab:09:81:ce:b1:54:d9:11:06:be:b4: 4a:54:7b:77:25:d6:1a:5c:2d:b5:8f:f9:e7:24:b6:f1:9b:75: 80:b1:a1:3e:5f:7a:66:6d:9f:65:9e:a5:53:01:ba:ea:d7:40: 85:b1:ed:93:85:20:8f:5c:da:1a:e2:c4:21:9d:ef:22:e7:b5: 71:6a:34:a5:80:27:65:d7:db:4e:d8:65:98:ab:8f:a7:c1:63: d5:ad:00:16:a2:84:2e:12:3d:a4:e6:92:6d:c6:ce:1f:1b:fa: ed:b5:de:94:23:90:d6:a0:fb:2e:d6:0c:af:97:71:88:f7:55: 0a:7f:d7:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFeArw/mgiN53Intj4rzJ1fjDedUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUMyM0REQUEyQzg5REZDNDNGMEQxMjAzMzFDRDNDOEYx RTYwRDFDQTAeFw0yNjEwMDgwNjQ2NDFaFw0yNjEwMDkwNzAxNDFaMDMxMTAvBgNV BAMTKDJGNDQzNTUxMDNDNzBCQUEwM0MyOEEyRUUwRTRDNzM0RDE5NzcwM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRIIUkN8qZ+ZWzhUkW+qfUYysA VlEBLinuW2qMi9xNiH1N3aSGy8VyZ5fvS4llWhDLfGElOd+BvzGlqBFHxycd7V9w xa9t0IUxoMD6C/Z1rlQiuRF/rccAcwHL0cDZ748g9mvt6mR9quAMiwjw56qoXrH3 GCB2Q3wsbEzyrehsfWixW/tVxlB1X8f9otYZWEeeUsklGQoxVzHAk6ZfcRXGsB8t l0KDB43mABCXvyQKD6y/i2UXql0fDVITp6vBRvH1Hk+UVqYyvwXgcMMb3+XyBU0K CWQm6UeuSzg9Arn7njjrbQUZT9RSsuX2NREb5KZjGrsrNBtx14XR+wWG3GFnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL0Q1UQPHC6oDwoou4OTHNNGXcD0wHwYDVR0j BBgwFoAUrCPdqiyJ38Q/DRIDMc08jx5g0cowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjBkOTE0ZWYtMGIxZi00OTBiLTgwOGQtYTI3YjgzZmY5YTNlLzAvQUMyM0REQUEy Qzg5REZDNDNGMEQxMjAzMzFDRDNDOEYxRTYwRDFDQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzIzRERBQTJDODlERkM0M0YwRDEyMDMzMUNEM0M4RjFFNjBE MUNBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjBkOTE0ZWYtMGIxZi00OTBiLTgw OGQtYTI3YjgzZmY5YTNlLzAvQUMyM0REQUEyQzg5REZDNDNGMEQxMjAzMzFDRDND OEYxRTYwRDFDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFszHC1d0AOQo6YTfIf+SHsxFq93hkKUu01H f7qjzl5DKwvSJxSURLPvDlU2W+g68KkSLX0BZFdyeFO1yXGoexaqt87rV+xk9o63 T+zNW78LwOZZhLcfs3fXTzhur7TloyAUN+LE2zwbg2LVYrARFwYh+YNAZ4yKUz7M 7Tb+GmfZa439prqrCYHOsVTZEQa+tEpUe3cl1hpcLbWP+ecktvGbdYCxoT5femZt n2WepVMBuurXQIWx7ZOFII9c2hrixCGd7yLntXFqNKWAJ2XX207YZZirj6fBY9Wt ABaihC4SPaTmkm3Gzh8b+u213pQjkNag+y7WDK+XcYj3VQp/19s= -----END CERTIFICATE-----Generated at Thu Oct 8 20:54:48 2026 by rpki-client