$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.mft File: AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.mft (raw, json) Hash identifier: gQ2qR17U1A10FQXQ8yCeUwT8+YFtXQuoBQqCtOvTWYY= Subject key identifier: 1F:D2:CA:3B:AD:03:19:FF:67:13:C1:DE:F5:AA:F6:2B:A9:1E:18:49 Authority key identifier: AC:21:F3:02:F8:FE:87:98:E3:EB:EC:F7:4F:BB:4A:1A:FA:8C:0A:5A Certificate issuer: /CN=AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A Certificate serial: 73C6E04E57726527937B7725731A23FDEB4E19DA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 17:15:31 +0000 Manifest this update: Wed 16 Sep 2026 17:10:31 +0000 Manifest next update: Thu 17 Sep 2026 19:37:31 +0000 Files and hashes: 1: 3130332e35342e3137322e302f32342d3234203d3e203538383234.roa (hash: 2hznDtF+sHEQo6Fg1DwDt2/m1fqJNRXXGLkGt1F7ms0=) 2: AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.crl (hash: xYkBXQWwE2XGnvHvDTt8sInvXQA+PaFucSmfoikvb9I=) 3: 3130332e3234322e3233332e302f32342d3234203d3e203538383234.roa (hash: F0odlT4U3J2I7U1EPBDoQbX8C+Jjnqt/uRif6Raoqb0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.crl rsync://rpki-rsync.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 19:37:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:c6:e0:4e:57:72:65:27:93:7b:77:25:73:1a:23:fd:eb:4e:19:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A Validity Not Before: Sep 16 17:10:31 2026 GMT Not After : Sep 17 19:37:31 2026 GMT Subject: CN=1FD2CA3BAD0319FF6713C1DEF5AAF62BA91E1849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:61:e0:10:85:97:9f:bd:45:b9:60:47:bb:a5: c8:30:80:e4:e9:e7:c5:3e:11:72:9d:db:28:4c:cd: 13:f7:4c:c4:b6:a4:5b:3c:bf:84:e8:fd:e9:2d:1b: 68:6c:2f:6f:18:db:45:15:f5:41:ce:08:99:00:0f: 1a:d6:56:8d:75:a7:ab:1b:ea:64:0a:aa:38:45:3a: 44:23:c1:30:d1:f3:00:91:75:b0:c9:14:c6:0c:89: 09:67:90:01:e0:e2:86:9d:47:6f:c5:89:a5:ad:fb: e5:c6:3c:a6:b3:34:59:84:f7:ce:aa:93:be:38:af: 1c:e2:25:63:0b:8a:f0:ad:6c:b5:1f:db:6a:7e:48: 82:bc:7c:5c:da:25:3b:79:5a:0c:3f:6a:91:d6:1b: 63:0b:a6:9c:34:f9:21:91:cc:d3:99:e1:99:65:52: 25:b7:d2:4b:eb:dc:e3:ca:46:23:3b:76:5a:b6:1e: 77:20:92:41:ad:fd:4f:a5:28:41:4d:57:8c:36:45: c7:e9:ad:eb:a2:d2:a5:6d:77:ea:eb:01:b2:84:93: 8d:e0:19:d2:5b:68:2c:82:89:6e:e8:13:ac:25:d9: 61:91:1e:c3:2e:a4:0f:ee:e9:c6:35:f7:e8:8a:85: 2c:f1:11:dc:e3:63:de:fa:c0:09:e6:d0:12:6e:c1: 3a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D2:CA:3B:AD:03:19:FF:67:13:C1:DE:F5:AA:F6:2B:A9:1E:18:49 X509v3 Authority Key Identifier: keyid:AC:21:F3:02:F8:FE:87:98:E3:EB:EC:F7:4F:BB:4A:1A:FA:8C:0A:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/AC21F302F8FE8798E3EBECF74FBB4A1AFA8C0A5A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:5a:c0:d8:02:be:d7:b5:fe:2c:42:d2:48:5b:db:ff:c7:d3: 7d:8b:3f:97:98:61:40:dc:60:d2:61:ed:d1:48:f7:ab:94:7f: 4e:d8:e5:09:c4:3c:46:d9:7c:da:85:72:28:35:30:1c:9f:8d: 98:5a:30:e5:19:09:8f:bb:0f:79:57:e2:c2:d6:06:4a:a5:d1: d6:22:54:ab:18:f4:6a:70:f4:70:76:dd:3b:82:5d:81:82:bd: 98:64:0e:76:5c:0e:b4:32:23:d7:32:90:66:ad:bb:0f:fe:47: da:de:60:df:bf:be:a3:f7:af:87:63:dd:36:84:a9:3e:f7:8d: 85:67:fa:52:47:94:b1:73:b1:fd:ba:d1:e7:ea:29:8c:74:31: 91:f5:93:45:5e:a7:6f:20:89:bd:16:be:9c:ff:2f:3f:05:bf: f2:4a:7d:00:64:6f:b6:a8:5b:bb:43:60:af:ac:c2:a9:af:c5: fd:ca:f9:03:85:09:44:05:c8:35:2e:5d:ce:de:e5:d7:92:57: 82:57:01:12:5d:9f:2c:e5:c7:d6:ee:a2:22:d9:50:c6:e7:f5: 9f:bf:79:73:3c:e4:ef:c8:dc:db:8a:74:e8:7d:dd:5c:6f:5f: 62:cd:74:26:7f:d5:db:a2:2d:e4:af:b4:eb:4f:61:63:34:b2: 23:97:6f:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc8bgTldyZSeTe3clcxoj/etOGdowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUMyMUYzMDJGOEZFODc5OEUzRUJFQ0Y3NEZCQjRBMUFG QThDMEE1QTAeFw0yNjA5MTYxNzEwMzFaFw0yNjA5MTcxOTM3MzFaMDMxMTAvBgNV BAMTKDFGRDJDQTNCQUQwMzE5RkY2NzEzQzFERUY1QUFGNjJCQTkxRTE4NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTYeAQhZefvUW5YEe7pcgwgOTp 58U+EXKd2yhMzRP3TMS2pFs8v4To/ektG2hsL28Y20UV9UHOCJkADxrWVo11p6sb 6mQKqjhFOkQjwTDR8wCRdbDJFMYMiQlnkAHg4oadR2/FiaWt++XGPKazNFmE986q k744rxziJWMLivCtbLUf22p+SIK8fFzaJTt5Wgw/apHWG2MLppw0+SGRzNOZ4Zll UiW30kvr3OPKRiM7dlq2HncgkkGt/U+lKEFNV4w2Rcfpreui0qVtd+rrAbKEk43g GdJbaCyCiW7oE6wl2WGRHsMupA/u6cY19+iKhSzxEdzjY976wAnm0BJuwTqFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH9LKO60DGf9nE8He9ar2K6keGEkwHwYDVR0j BBgwFoAUrCHzAvj+h5jj6+z3T7tKGvqMClowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTdlMGZhZjAtNzg4ZC00OTViLWFjOTgtZjM1MTYxOTVkYjYwLzAvQUMyMUYzMDJG OEZFODc5OEUzRUJFQ0Y3NEZCQjRBMUFGQThDMEE1QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BQzIxRjMwMkY4RkU4Nzk4RTNFQkVDRjc0RkJCNEExQUZBOEMw QTVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTdlMGZhZjAtNzg4ZC00OTViLWFj OTgtZjM1MTYxOTVkYjYwLzAvQUMyMUYzMDJGOEZFODc5OEUzRUJFQ0Y3NEZCQjRB MUFGQThDMEE1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJpawNgCvte1/ixC0khb2//H032LP5eYYUDc YNJh7dFI96uUf07Y5QnEPEbZfNqFcig1MByfjZhaMOUZCY+7D3lX4sLWBkql0dYi VKsY9Gpw9HB23TuCXYGCvZhkDnZcDrQyI9cykGatuw/+R9reYN+/vqP3r4dj3TaE qT73jYVn+lJHlLFzsf260efqKYx0MZH1k0Vep28gib0Wvpz/Lz8Fv/JKfQBkb7ao W7tDYK+swqmvxf3K+QOFCUQFyDUuXc7e5deSV4JXARJdnyzlx9buoiLZUMbn9Z+/ eXM85O/I3NuKdOh93VxvX2LNdCZ/1duiLeSvtOtPYWM0siOXb50= -----END CERTIFICATE-----Generated at Thu Sep 17 06:39:30 2026 by rpki-client