$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.mft File: AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.mft (raw, json) Hash identifier: JqLP2OiDAEtD4XOuURYFe35y9LuRStPJB70viLQDZ6E= Subject key identifier: 6B:1E:F1:40:D7:82:04:5C:51:26:22:39:82:E7:0B:5D:57:9F:D4:E7 Authority key identifier: AC:9E:E5:D4:AC:F7:FD:0D:FD:66:CD:FE:D1:20:17:1D:F6:19:5E:B0 Certificate issuer: /CN=AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0 Certificate serial: 59DC9BE1851C76B799E0DF7CF2565CAE1DC53DCE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.mft Manifest number: 91 Signing time: Tue 18 Aug 2026 20:32:13 +0000 Manifest this update: Tue 18 Aug 2026 20:27:13 +0000 Manifest next update: Wed 19 Aug 2026 22:37:13 +0000 Files and hashes: 1: AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.crl (hash: SgSDmciePQzHWkTBV4SWZKJisYu6znBPv/LC76OoSvo=) 2: 3130332e3136322e3132322e302f32332d3234203d3e203137393935.roa (hash: OLWauFfmrw2a6NVsZr060P9JMbawsYC5rFsVrmOkFCE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.crl rsync://rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Aug 2026 22:37:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:dc:9b:e1:85:1c:76:b7:99:e0:df:7c:f2:56:5c:ae:1d:c5:3d:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0 Validity Not Before: Aug 18 20:27:13 2026 GMT Not After : Aug 19 22:37:13 2026 GMT Subject: CN=6B1EF140D782045C5126223982E70B5D579FD4E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d4:c8:11:61:9b:c3:25:6e:73:31:e0:77:e9: 0d:52:1b:f1:18:06:95:4f:4a:69:a6:1f:17:d2:e7: 36:b3:14:3e:42:52:1f:b1:6c:5f:00:bd:43:8e:67: 90:18:e1:ba:57:63:44:60:da:8f:dd:93:5a:5a:56: 53:fe:a6:39:50:6c:6e:e4:a3:ab:a7:e1:0f:76:94: 44:82:78:fc:a0:77:cf:7d:6d:29:73:bd:49:9e:17: 93:f0:32:a4:5d:79:7a:f9:32:cc:8a:e5:b8:a4:de: d7:66:40:ef:63:e0:27:8f:58:7b:7e:1c:3b:27:a1: 05:0d:4c:37:b4:de:45:55:31:a4:4e:76:f5:d7:5d: f9:d7:b0:32:1a:47:be:6d:61:b9:60:86:d5:27:15: ee:31:c4:30:c0:d0:c5:3b:64:1d:5f:3b:9e:57:40: a1:d6:5b:d8:ff:6d:1a:c5:2d:57:e4:60:6b:30:50: be:cf:f6:4c:9c:a7:b7:48:99:ba:6f:8e:54:f3:14: ee:62:36:c8:c4:7a:17:94:81:f9:b4:a3:11:c3:2d: 71:44:d0:a5:45:b6:8e:dc:be:4b:07:39:d0:f4:d8: fc:6e:59:e7:ae:0b:f1:1c:bd:5c:72:d3:6a:ca:91: 1e:65:78:95:64:26:3a:9f:2f:76:df:02:40:7c:77: 95:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:1E:F1:40:D7:82:04:5C:51:26:22:39:82:E7:0B:5D:57:9F:D4:E7 X509v3 Authority Key Identifier: keyid:AC:9E:E5:D4:AC:F7:FD:0D:FD:66:CD:FE:D1:20:17:1D:F6:19:5E:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:47:ec:00:0e:6e:5b:9c:ad:4c:0d:42:da:c6:50:f2:40:a2: 8b:66:75:9a:e5:be:01:d6:76:f1:fc:3d:cd:95:80:ae:53:b5: 51:94:b5:18:c5:89:87:61:27:ec:c1:1d:01:95:48:e1:db:ac: 2f:20:79:fa:35:4b:37:3f:e0:ae:70:a0:28:09:ea:31:1e:32: fe:62:38:4d:18:cb:5d:d0:40:c6:b6:08:2a:02:69:08:b6:9e: ad:57:32:63:c1:07:dd:d6:7b:5e:c8:77:28:1c:1c:ef:93:98: 01:2f:0e:5f:12:8c:9d:38:f3:3c:33:33:20:59:08:c6:52:fc: bb:d9:0d:a5:54:4a:89:88:7b:2d:96:3d:b8:87:9e:95:83:ce: 3e:b2:78:84:e3:62:2d:c5:b1:cf:ff:c0:33:e5:01:0e:3b:7e: 84:a4:d6:7f:fc:0d:52:ea:a6:3b:c9:29:b7:9a:50:ad:4f:98: 30:f9:24:e8:fc:0f:2b:7e:2b:5f:a9:d8:d0:9b:13:8e:98:49: eb:19:cd:1b:c2:51:e8:17:71:71:70:a6:af:09:cd:bd:48:7c: ed:85:5a:a0:d4:d0:29:5c:db:e3:35:7c:ad:bc:b1:cb:e5:35: 62:31:b0:d2:a1:70:cb:de:b9:67:d3:05:1c:f1:48:4c:f2:99: 15:5b:7b:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWdyb4YUcdreZ4N988lZcrh3FPc4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM5RUU1RDRBQ0Y3RkQwREZENjZDREZFRDEyMDE3MURG NjE5NUVCMDAeFw0yNjA4MTgyMDI3MTNaFw0yNjA4MTkyMjM3MTNaMDMxMTAvBgNV BAMTKDZCMUVGMTQwRDc4MjA0NUM1MTI2MjIzOTgyRTcwQjVENTc5RkQ0RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG1MgRYZvDJW5zMeB36Q1SG/EY BpVPSmmmHxfS5zazFD5CUh+xbF8AvUOOZ5AY4bpXY0Rg2o/dk1paVlP+pjlQbG7k o6un4Q92lESCePygd899bSlzvUmeF5PwMqRdeXr5MsyK5bik3tdmQO9j4CePWHt+ HDsnoQUNTDe03kVVMaROdvXXXfnXsDIaR75tYblghtUnFe4xxDDA0MU7ZB1fO55X QKHWW9j/bRrFLVfkYGswUL7P9kycp7dImbpvjlTzFO5iNsjEeheUgfm0oxHDLXFE 0KVFto7cvksHOdD02PxuWeeuC/EcvVxy02rKkR5leJVkJjqfL3bfAkB8d5XbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUax7xQNeCBFxRJiI5gucLXVef1OcwHwYDVR0j BBgwFoAUrJ7l1Kz3/Q39Zs3+0SAXHfYZXrAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDFiM2ZlNDUtYjU4OC00YmI3LWFlOTAtOTFmNTdmNTkzY2I1LzAvQUM5RUU1RDRB Q0Y3RkQwREZENjZDREZFRDEyMDE3MURGNjE5NUVCMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzlFRTVENEFDRjdGRDBERkQ2NkNERkVEMTIwMTcxREY2MTk1 RUIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDFiM2ZlNDUtYjU4OC00YmI3LWFl OTAtOTFmNTdmNTkzY2I1LzAvQUM5RUU1RDRBQ0Y3RkQwREZENjZDREZFRDEyMDE3 MURGNjE5NUVCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA9H7AAOblucrUwNQtrGUPJAootmdZrlvgHW dvH8Pc2VgK5TtVGUtRjFiYdhJ+zBHQGVSOHbrC8gefo1Szc/4K5woCgJ6jEeMv5i OE0Yy13QQMa2CCoCaQi2nq1XMmPBB93We17IdygcHO+TmAEvDl8SjJ048zwzMyBZ CMZS/LvZDaVUSomIey2WPbiHnpWDzj6yeITjYi3Fsc//wDPlAQ47foSk1n/8DVLq pjvJKbeaUK1PmDD5JOj8Dyt+K1+p2NCbE46YSesZzRvCUegXcXFwpq8Jzb1IfO2F WqDU0Clc2+M1fK28scvlNWIxsNKhcMveuWfTBRzxSEzymRVbe/g= -----END CERTIFICATE-----Generated at Wed Aug 19 16:01:17 2026 by rpki-client