$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.mft File: AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.mft (raw, json) Hash identifier: o/79Rzc9nGxvi8FdQjPv72a/O6IyvnaDDLpZxLyuMrk= Subject key identifier: A6:46:17:9B:E2:5B:B5:95:E2:B1:CF:BB:D5:82:33:4F:A7:56:44:F1 Authority key identifier: AC:9E:E5:D4:AC:F7:FD:0D:FD:66:CD:FE:D1:20:17:1D:F6:19:5E:B0 Certificate issuer: /CN=AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0 Certificate serial: 3A1F8A985B1893283E40CA3B4A35164B4F9B788B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.mft Manifest number: D4 Signing time: Thu 08 Oct 2026 10:51:31 +0000 Manifest this update: Thu 08 Oct 2026 10:46:31 +0000 Manifest next update: Fri 09 Oct 2026 11:11:31 +0000 Files and hashes: 1: 3130332e3136322e3132322e302f32332d3234203d3e203137393935.roa (hash: OLWauFfmrw2a6NVsZr060P9JMbawsYC5rFsVrmOkFCE=) 2: AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.crl (hash: qiq1dUrUdni7ySQJ2mv8Htj1fgUQgrLuSAeiu9Oke84=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.crl rsync://rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 11:11:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:1f:8a:98:5b:18:93:28:3e:40:ca:3b:4a:35:16:4b:4f:9b:78:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0 Validity Not Before: Oct 8 10:46:31 2026 GMT Not After : Oct 9 11:11:31 2026 GMT Subject: CN=A646179BE25BB595E2B1CFBBD582334FA75644F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d4:17:f8:60:b2:15:2f:e7:04:20:ff:b2:8e: cf:9d:6d:18:11:c9:93:ae:15:13:e6:e7:04:18:62: cd:3d:53:6d:c8:43:8f:bc:75:0e:19:8d:74:a7:78: 99:75:06:aa:2a:3c:d1:54:ec:78:7e:b6:20:40:f3: 09:f1:95:39:08:4c:a5:c0:fc:82:43:47:b1:3f:50: 3e:3b:4c:8f:d4:e9:70:a7:40:e9:d4:7e:21:f3:8f: b5:ab:d2:05:05:5b:79:54:c4:1d:1f:b0:43:83:69: ed:19:52:1b:86:eb:9b:43:de:fd:82:f1:e3:46:08: 97:47:a0:7c:38:1d:70:b0:8c:bd:0c:e4:df:af:e8: b0:f4:59:00:4d:a1:74:5a:30:c8:f7:f8:7d:c4:6e: a9:96:69:8a:27:88:bb:53:3b:b7:85:d7:15:cd:29: d8:68:da:85:4a:7b:23:b9:4c:d9:80:e8:6a:ea:7a: 54:fd:c3:53:01:64:7b:d4:08:f0:1e:09:49:a5:39: 80:b9:3c:91:00:e3:e6:8a:d4:bc:56:59:95:fe:d5: b6:cd:2d:cb:f1:cc:36:17:a7:5b:20:cb:91:06:1a: 45:91:2f:09:37:a9:eb:e0:d2:0b:ff:12:bc:36:ae: 3e:9c:69:93:fb:1d:5b:de:e2:b2:48:d8:be:2b:3a: f9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:46:17:9B:E2:5B:B5:95:E2:B1:CF:BB:D5:82:33:4F:A7:56:44:F1 X509v3 Authority Key Identifier: keyid:AC:9E:E5:D4:AC:F7:FD:0D:FD:66:CD:FE:D1:20:17:1D:F6:19:5E:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/AC9EE5D4ACF7FD0DFD66CDFED120171DF6195EB0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:a2:12:36:84:ab:88:6f:d1:a9:65:58:6d:86:fd:2d:24:d7: ee:51:31:8e:03:b6:12:7e:29:64:e0:5e:29:e7:f3:0c:60:c9: 00:20:4f:27:28:57:42:4c:cc:88:e7:c4:51:7c:0e:67:a1:22: e8:dc:ea:04:e0:1f:05:62:56:fe:d4:fe:98:e5:cd:a8:20:44: c9:de:e3:8d:29:20:7d:77:1b:78:07:3c:1b:55:70:c0:ab:b7: f0:0d:fe:04:d7:23:7a:eb:44:0b:4f:c5:e6:ae:ba:1e:12:00: c3:78:a7:1e:28:2a:fa:99:a0:ce:20:cb:5b:71:4b:9a:b1:f2: e4:fe:05:7d:b7:5b:c8:dd:2d:f9:a8:40:eb:32:96:ea:f0:93: 79:94:47:32:8c:47:01:b4:6a:18:58:17:81:5e:71:ea:e4:cb: ad:68:b2:3b:f7:a6:2a:0e:eb:ea:e4:b1:b7:e6:aa:16:8b:91: 5e:44:f8:1c:e0:ff:14:f3:40:44:fd:e6:eb:2f:86:1e:07:86: 44:aa:2c:36:7e:47:58:9a:05:cf:61:9d:95:b9:e5:17:c7:c4: 18:45:04:4e:92:42:db:52:d8:51:06:46:ec:b0:af:4c:97:d7: 59:f3:ce:53:99:e0:21:8f:e2:0b:e5:d0:4b:bf:7d:7b:0e:57: e8:87:24:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOh+KmFsYkyg+QMo7SjUWS0+beIswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM5RUU1RDRBQ0Y3RkQwREZENjZDREZFRDEyMDE3MURG NjE5NUVCMDAeFw0yNjEwMDgxMDQ2MzFaFw0yNjEwMDkxMTExMzFaMDMxMTAvBgNV BAMTKEE2NDYxNzlCRTI1QkI1OTVFMkIxQ0ZCQkQ1ODIzMzRGQTc1NjQ0RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC31Bf4YLIVL+cEIP+yjs+dbRgR yZOuFRPm5wQYYs09U23IQ4+8dQ4ZjXSneJl1BqoqPNFU7Hh+tiBA8wnxlTkITKXA /IJDR7E/UD47TI/U6XCnQOnUfiHzj7Wr0gUFW3lUxB0fsEODae0ZUhuG65tD3v2C 8eNGCJdHoHw4HXCwjL0M5N+v6LD0WQBNoXRaMMj3+H3EbqmWaYoniLtTO7eF1xXN Kdho2oVKeyO5TNmA6GrqelT9w1MBZHvUCPAeCUmlOYC5PJEA4+aK1LxWWZX+1bbN LcvxzDYXp1sgy5EGGkWRLwk3qevg0gv/Erw2rj6caZP7HVve4rJI2L4rOvlnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpkYXm+JbtZXisc+71YIzT6dWRPEwHwYDVR0j BBgwFoAUrJ7l1Kz3/Q39Zs3+0SAXHfYZXrAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDFiM2ZlNDUtYjU4OC00YmI3LWFlOTAtOTFmNTdmNTkzY2I1LzAvQUM5RUU1RDRB Q0Y3RkQwREZENjZDREZFRDEyMDE3MURGNjE5NUVCMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzlFRTVENEFDRjdGRDBERkQ2NkNERkVEMTIwMTcxREY2MTk1 RUIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDFiM2ZlNDUtYjU4OC00YmI3LWFl OTAtOTFmNTdmNTkzY2I1LzAvQUM5RUU1RDRBQ0Y3RkQwREZENjZDREZFRDEyMDE3 MURGNjE5NUVCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM2iEjaEq4hv0allWG2G/S0k1+5RMY4DthJ+ KWTgXinn8wxgyQAgTycoV0JMzIjnxFF8DmehIujc6gTgHwViVv7U/pjlzaggRMne 440pIH13G3gHPBtVcMCrt/AN/gTXI3rrRAtPxeauuh4SAMN4px4oKvqZoM4gy1tx S5qx8uT+BX23W8jdLfmoQOsylurwk3mURzKMRwG0ahhYF4Fecerky61osjv3pioO 6+rksbfmqhaLkV5E+Bzg/xTzQET95usvhh4HhkSqLDZ+R1iaBc9hnZW55RfHxBhF BE6SQttS2FEGRuywr0yX11nzzlOZ4CGP4gvl0Eu/fXsOV+iHJA8= -----END CERTIFICATE-----Generated at Thu Oct 8 16:54:43 2026 by rpki-client