$ rpki-client -vvf repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft File: 4ACFA054E26D225A10C6B0FD316D21263924491E.mft (raw, json) Hash identifier: LTXFRsX5XM6nYaapVEbu8N2m0r9He22ZZGukOS40vjs= Subject key identifier: CA:77:C5:95:F5:8B:2C:A1:D6:18:F6:FC:80:99:A5:4E:24:B4:5D:17 Authority key identifier: 4A:CF:A0:54:E2:6D:22:5A:10:C6:B0:FD:31:6D:21:26:39:24:49:1E Certificate issuer: /CN=4ACFA054E26D225A10C6B0FD316D21263924491E Certificate serial: 4DF49CA745D19E08A586F08FC1A317897D85A6E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft Manifest number: 055D Signing time: Tue 24 Mar 2026 10:51:23 +0000 Manifest this update: Tue 24 Mar 2026 10:46:23 +0000 Manifest next update: Fri 27 Mar 2026 21:11:23 +0000 Files and hashes: 1: 3130332e32342e3231342e302f32342d3234203d3e20313332363439.roa (hash: yAXaSsyAZCT1TlzRq2Ly3hqQXPTOIb4fK/X1XVhMrsQ=) 2: 323430363a653930303a3a2f34382d3438203d3e20313332363439.roa (hash: wG+9X966FrXEy+/eGU93wsgmxZZCxywdW61E71ZhOio=) 3: 4ACFA054E26D225A10C6B0FD316D21263924491E.crl (hash: w4vhqZLO7pK9mdLcbJdvroR1RD7cVr0tGc5vL+LF6oA=) 4: 3130332e32342e3231322e302f32322d3232203d3e20313332363439.roa (hash: 45SWUlBMje1Gil0mHOq3QhxOP8W4+J1eu/35dWSuGkk=) 5: 3130332e32342e3231322e302f32342d3234203d3e20313332363439.roa (hash: Occ9qukgsG4ZnF1Qic+Tc5XTBoYcoc2YAGi7zbsnbGs=) 6: 3130332e32342e3231352e302f32342d3234203d3e20313332363439.roa (hash: 8s60aKm8BvyPqQYfQkCsPX1L1uTLkhjy/eeXecR9yKI=) 7: 3130332e32342e3231332e302f32342d3234203d3e20313332363439.roa (hash: rU6CTRCIbPGkygtk9vCtJAvLoojM7auukeL4M4/e+W4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.crl rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 21:11:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:f4:9c:a7:45:d1:9e:08:a5:86:f0:8f:c1:a3:17:89:7d:85:a6:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ACFA054E26D225A10C6B0FD316D21263924491E Validity Not Before: Mar 24 10:46:23 2026 GMT Not After : Mar 27 21:11:23 2026 GMT Subject: CN=CA77C595F58B2CA1D618F6FC8099A54E24B45D17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:77:e5:31:5a:6b:d5:d5:b4:b9:3b:15:44:fa: b8:8a:ca:c8:4f:1d:a4:8f:21:e5:25:7d:29:42:df: e3:c0:24:7b:87:9e:c0:8d:00:dd:a3:6c:41:6d:60: 89:b8:1c:b4:50:b0:85:3f:9c:47:00:8f:fe:6c:b0: 3c:34:f8:7e:e2:d6:79:f5:cc:75:ec:1d:3b:58:cc: cf:61:c9:b0:81:24:72:65:e9:0b:ba:38:78:a3:02: fd:a8:39:1e:78:88:b9:a8:9a:88:4d:3d:de:00:7e: ff:85:d5:b4:ca:f8:e9:82:b7:61:36:59:58:c0:26: cd:7e:1c:0c:bf:35:54:f3:13:a9:d5:15:d0:89:81: 89:c2:9a:75:bf:9d:25:c5:3d:0d:97:45:09:24:f3: 23:77:75:6f:e3:a3:3a:ce:30:7a:07:bf:3d:d3:8d: d4:d0:06:59:15:70:09:2a:60:98:f4:93:a5:9f:fe: 06:9a:99:89:5c:ba:b2:dc:5a:40:64:c7:e9:25:ca: c9:89:f0:e9:a3:92:13:e5:19:5f:7d:3d:95:d5:14: 9e:1d:d8:7b:84:1d:98:92:1e:e9:21:51:57:d2:46: 34:ce:53:2f:94:fb:99:30:f8:49:e1:fd:24:06:0f: 43:91:39:3d:74:68:2c:f4:fe:d0:0e:37:95:96:fa: 27:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:77:C5:95:F5:8B:2C:A1:D6:18:F6:FC:80:99:A5:4E:24:B4:5D:17 X509v3 Authority Key Identifier: keyid:4A:CF:A0:54:E2:6D:22:5A:10:C6:B0:FD:31:6D:21:26:39:24:49:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:e7:0b:4a:3d:41:b9:4c:e3:24:03:d1:12:6d:6c:8c:7e:42: 2e:53:d0:9d:9f:44:bd:8a:90:52:5c:10:ff:77:a9:c1:ea:f3: a5:00:ee:cb:aa:86:4f:9f:a4:bc:c7:e3:23:c2:4d:72:2a:5e: f7:e3:67:00:46:9b:f4:02:44:04:d1:a7:4a:b3:09:e2:a7:4e: 6f:38:72:c6:1c:c2:66:83:42:e2:aa:7d:d9:26:ff:7d:d3:6b: 93:de:59:6d:3c:91:70:5f:4c:6d:85:e1:ab:31:ec:67:fc:ef: fe:25:f6:ab:bb:3e:23:a6:49:ad:c5:3f:ac:9f:2f:39:a1:49: a1:b4:fd:2b:d8:b3:f3:6b:73:09:18:5e:60:a0:da:21:87:15: 70:78:3b:97:dc:c2:93:ff:be:14:ce:52:86:3b:b0:6e:33:ca: 73:ec:fb:d2:36:48:ff:9a:8a:da:af:0f:df:be:ce:29:12:3d: 80:10:c2:6b:ca:47:bf:b2:66:7b:0e:da:84:4d:bf:ac:e4:b0: 9f:07:15:d7:58:9e:50:aa:40:d9:af:1c:e2:b9:4f:76:5f:37: 64:5a:4f:cd:28:0e:29:a9:6f:7e:e7:8b:09:a9:85:9d:65:35: cd:38:e1:2a:e9:f6:4c:44:80:4c:a3:2a:e9:00:b4:c5:4f:53: f8:ba:f7:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTfScp0XRngilhvCPwaMXiX2FpugwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFDRkEwNTRFMjZEMjI1QTEwQzZCMEZEMzE2RDIxMjYz OTI0NDkxRTAeFw0yNjAzMjQxMDQ2MjNaFw0yNjAzMjcyMTExMjNaMDMxMTAvBgNV BAMTKENBNzdDNTk1RjU4QjJDQTFENjE4RjZGQzgwOTlBNTRFMjRCNDVEMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9d+UxWmvV1bS5OxVE+riKyshP HaSPIeUlfSlC3+PAJHuHnsCNAN2jbEFtYIm4HLRQsIU/nEcAj/5ssDw0+H7i1nn1 zHXsHTtYzM9hybCBJHJl6Qu6OHijAv2oOR54iLmomohNPd4Afv+F1bTK+OmCt2E2 WVjAJs1+HAy/NVTzE6nVFdCJgYnCmnW/nSXFPQ2XRQkk8yN3dW/jozrOMHoHvz3T jdTQBlkVcAkqYJj0k6Wf/gaamYlcurLcWkBkx+klysmJ8OmjkhPlGV99PZXVFJ4d 2HuEHZiSHukhUVfSRjTOUy+U+5kw+Enh/SQGD0OROT10aCz0/tAON5WW+iddAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUynfFlfWLLKHWGPb8gJmlTiS0XRcwHwYDVR0j BBgwFoAUSs+gVOJtIloQxrD9MW0hJjkkSR4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTQ2YTMwNS1kZjc3LTQ1ODctODcwMy1hOTA1YzUzNzc5YWMvMC80QUNGQTA1NEUy NkQyMjVBMTBDNkIwRkQzMTZEMjEyNjM5MjQ0OTFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEFDRkEwNTRFMjZEMjI1QTEwQzZCMEZEMzE2RDIxMjYzOTI0 NDkxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGU0NmEzMDUtZGY3Ny00NTg3LTg3 MDMtYTkwNWM1Mzc3OWFjLzAvNEFDRkEwNTRFMjZEMjI1QTEwQzZCMEZEMzE2RDIx MjYzOTI0NDkxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIbnC0o9QblM4yQD0RJtbIx+Qi5T0J2fRL2K kFJcEP93qcHq86UA7suqhk+fpLzH4yPCTXIqXvfjZwBGm/QCRATRp0qzCeKnTm84 csYcwmaDQuKqfdkm/33Ta5PeWW08kXBfTG2F4asx7Gf87/4l9qu7PiOmSa3FP6yf LzmhSaG0/SvYs/NrcwkYXmCg2iGHFXB4O5fcwpP/vhTOUoY7sG4zynPs+9I2SP+a itqvD9++zikSPYAQwmvKR7+yZnsO2oRNv6zksJ8HFddYnlCqQNmvHOK5T3ZfN2Ra T80oDimpb37niwmphZ1lNc044Srp9kxEgEyjKukAtMVPU/i69xU= -----END CERTIFICATE-----Generated at Thu Mar 26 18:59:14 2026 by rpki-client