$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.mft File: AC555447BA62C39107F16BF572F82A417F728DBF.mft (raw, json) Hash identifier: WuVIVawO5S+WIztZfbP3xlXKOi5RkJa0tG1XBaCHAqA= Subject key identifier: 02:53:34:48:44:8A:4B:CE:2D:FD:DB:7A:3A:25:47:03:73:6F:4F:C8 Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF Certificate issuer: /CN=AC555447BA62C39107F16BF572F82A417F728DBF Certificate serial: 76F1FCC8D116FC916729711C97968B436ED459E2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.mft Manifest number: 06AB Signing time: Thu 26 Mar 2026 09:39:32 +0000 Manifest this update: Thu 26 Mar 2026 09:34:32 +0000 Manifest next update: Sun 29 Mar 2026 18:42:32 +0000 Files and hashes: 1: AS38060.roa (hash: gveH1F5rbDZtDttJs7VnPZn/PQ4utt9CdaN1LCZDGD0=) 2: AC555447BA62C39107F16BF572F82A417F728DBF.crl (hash: eOYuw0rPVHK+sV6+iMedLZjwpsz8Qel+xwyrvT+3JME=) 3: AS38482.roa (hash: 6DNbKDEK/SY+/DzJhbRflBz1Pn5KQge5nVs4UP46K+A=) 4: AS45493.roa (hash: rZ+bNzJQC/viqI5H1YlJtVUU+yt/vWuH3IoVopKxF0M=) 5: AS17451.roa (hash: o9vY7fBrLs3Zf5S7wP9oFRw6pFdggNXvrEGsx0A3oNs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 18:42:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:f1:fc:c8:d1:16:fc:91:67:29:71:1c:97:96:8b:43:6e:d4:59:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF Validity Not Before: Mar 26 09:34:32 2026 GMT Not After : Mar 29 18:42:32 2026 GMT Subject: CN=02533448448A4BCE2DFDDB7A3A254703736F4FC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:da:0a:f5:0f:8b:1b:39:9c:d7:e6:e2:07:65: 7e:cb:ff:1f:2c:ec:56:38:42:e5:60:63:82:55:2f: 6d:1e:09:5e:e2:cd:16:91:a0:9e:82:3b:ef:5d:bd: f1:9f:2c:c4:c4:ff:ea:7c:67:48:1e:12:82:c5:a9: c2:7d:dd:86:08:fd:4e:7d:de:dd:9d:d0:1f:82:cf: a3:9f:ec:d8:1a:be:03:c8:09:41:1c:24:b7:70:e9: 53:c6:de:a3:21:21:8f:8b:c7:80:98:7f:a4:f5:4a: f3:f8:78:d8:dd:89:ed:54:cc:a3:61:0c:92:a0:02: 30:5c:27:a0:cb:74:93:c0:9a:65:93:3a:3f:9f:fc: 38:d2:6c:8a:3c:e5:71:d7:fc:e5:41:59:55:fb:84: bd:d9:f0:5d:1a:c8:39:14:d3:3b:da:f9:77:61:e8: bd:e2:61:dd:22:e5:99:9f:97:85:03:1c:3b:c9:18: 5f:67:a8:22:35:00:fc:36:a8:cd:2c:f5:58:49:80: 89:78:f3:0a:2a:ce:65:3e:fd:89:34:5e:8e:b9:d1: 23:90:f8:f1:89:29:ae:5c:5a:89:12:75:61:c0:dd: 29:ff:3f:77:09:f5:ff:83:5b:13:16:f3:34:1c:48: 70:ae:83:86:c7:52:ae:66:4f:6e:b9:66:dc:0c:fe: b7:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:53:34:48:44:8A:4B:CE:2D:FD:DB:7A:3A:25:47:03:73:6F:4F:C8 X509v3 Authority Key Identifier: keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:e8:65:44:94:cf:45:dc:34:e4:4f:57:76:69:82:21:58:30: 24:07:47:c0:6a:56:94:54:8a:17:c1:85:4b:e4:19:6f:44:01: 4c:52:6f:4c:6f:47:58:f7:40:62:10:3d:a1:6e:6f:bb:05:9f: 62:1c:77:b0:d8:ea:5e:a7:92:dc:84:0d:29:35:c7:44:c6:89: af:08:cc:90:e5:26:ce:44:4a:76:7f:86:80:29:32:f5:e6:5f: 3e:6e:4f:21:90:8b:34:04:d5:af:b4:dc:be:e5:04:68:a7:9d: b2:f8:98:62:95:a0:47:39:af:26:ff:f2:de:25:2f:eb:19:d6: e3:35:67:b2:1c:c3:03:68:0e:50:0e:3a:41:bb:ac:b7:a1:31: 9b:5b:6d:1d:3b:a3:bc:72:32:f8:8f:16:39:e7:7b:43:d8:5a: e9:b5:86:38:88:9d:8a:bb:b7:f7:07:7e:ba:3a:13:00:9c:e2: 52:7c:ab:47:3f:80:b3:2f:6b:33:1e:ef:15:b4:86:f1:d4:aa: d3:2f:6a:71:d8:78:cf:3a:b6:07:64:a0:77:1c:7d:20:5a:df: bc:c6:36:49:ef:df:1a:89:00:0d:a1:72:6f:2d:b8:19:89:bb: 14:1f:e1:f3:9d:f5:b8:51:88:58:c6:a0:ea:f5:37:72:1d:fb: c2:82:99:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdvH8yNEW/JFnKXEcl5aLQ27UWeIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3 RjcyOERCRjAeFw0yNjAzMjYwOTM0MzJaFw0yNjAzMjkxODQyMzJaMDMxMTAvBgNV BAMTKDAyNTMzNDQ4NDQ4QTRCQ0UyREZEREI3QTNBMjU0NzAzNzM2RjRGQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP2gr1D4sbOZzX5uIHZX7L/x8s 7FY4QuVgY4JVL20eCV7izRaRoJ6CO+9dvfGfLMTE/+p8Z0geEoLFqcJ93YYI/U59 3t2d0B+Cz6Of7NgavgPICUEcJLdw6VPG3qMhIY+Lx4CYf6T1SvP4eNjdie1UzKNh DJKgAjBcJ6DLdJPAmmWTOj+f/DjSbIo85XHX/OVBWVX7hL3Z8F0ayDkU0zva+Xdh 6L3iYd0i5Zmfl4UDHDvJGF9nqCI1APw2qM0s9VhJgIl48woqzmU+/Yk0Xo650SOQ +PGJKa5cWokSdWHA3Sn/P3cJ9f+DWxMW8zQcSHCug4bHUq5mT265ZtwM/rfzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAlM0SESKS84t/dt6OiVHA3NvT8gwHwYDVR0j BBgwFoAUrFVUR7piw5EH8Wv1cvgqQX9yjb8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC9BQzU1NTQ0N0JB NjJDMzkxMDdGMTZCRjU3MkY4MkE0MTdGNzI4REJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3Rjcy OERCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB NDE3RjcyOERCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFPoZUSUz0XcNORPV3ZpgiFYMCQHR8BqVpRU ihfBhUvkGW9EAUxSb0xvR1j3QGIQPaFub7sFn2Icd7DY6l6nktyEDSk1x0TGia8I zJDlJs5ESnZ/hoApMvXmXz5uTyGQizQE1a+03L7lBGinnbL4mGKVoEc5ryb/8t4l L+sZ1uM1Z7IcwwNoDlAOOkG7rLehMZtbbR07o7xyMviPFjnne0PYWum1hjiInYq7 t/cHfro6EwCc4lJ8q0c/gLMvazMe7xW0hvHUqtMvanHYeM86tgdkoHccfSBa37zG Nknv3xqJAA2hcm8tuBmJuxQf4fOd9bhRiFjGoOr1N3Id+8KCmUU= -----END CERTIFICATE-----Generated at Thu Mar 26 20:59:42 2026 by rpki-client