$ rpki-client -vvf repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft File: 00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft (raw, json) Hash identifier: vWOHEeEXP+Uk+XpGwjN9sG62J+vlyvWB5CxOtLE2HZQ= Subject key identifier: 5B:9B:35:82:30:5D:22:14:49:D8:E4:5B:72:F5:00:4B:19:08:50:17 Authority key identifier: 00:AC:65:E6:1E:49:13:26:8C:5D:0B:8A:FE:8C:7D:91:3B:68:6D:9F Certificate issuer: /CN=00AC65E61E4913268C5D0B8AFE8C7D913B686D9F Certificate serial: 0604B508F8B67B4A3FA9739656F2984ADB611759 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft Manifest number: 055B Signing time: Tue 24 Mar 2026 11:40:53 +0000 Manifest this update: Tue 24 Mar 2026 11:35:53 +0000 Manifest next update: Fri 27 Mar 2026 19:48:53 +0000 Files and hashes: 1: 3130332e3131392e3131392e302f32342d3234203d3e20313337333738.roa (hash: dqbXh2fh2OaVSVgJTjSWxwpOg/4I40zirFE6nOuWYzo=) 2: 3130332e3131392e3131372e302f32342d3234203d3e20313337333738.roa (hash: HmlGJU60qnT6VsG24BHqwMQLdMGBaxDBrgRKZDFmkxU=) 3: 3130332e3131392e3131382e302f32342d3234203d3e20313337333738.roa (hash: Oqk+2aNoDkz3rAuUwzqbP96AFip7IVOJ+sOmFv2FC3s=) 4: 323430333a343334303a3a2f33322d3332203d3e20313337333738.roa (hash: 33v24/+Rv2iOxGAU7l0du0lgoN/314/yiFhS7aj6fhE=) 5: 3130332e3131392e3131362e302f32342d3234203d3e20313337333738.roa (hash: L25qOwaR1z4WBpyOCt6SGRe3C1qJyUGhLdY1D+C8bH0=) 6: 00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.crl (hash: DdDrFcDzYftfsj2CSInwAct9xxJEARToD9rRknOfYMQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.crl rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 19:48:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:04:b5:08:f8:b6:7b:4a:3f:a9:73:96:56:f2:98:4a:db:61:17:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00AC65E61E4913268C5D0B8AFE8C7D913B686D9F Validity Not Before: Mar 24 11:35:53 2026 GMT Not After : Mar 27 19:48:53 2026 GMT Subject: CN=5B9B3582305D221449D8E45B72F5004B19085017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:17:b0:d7:28:10:c2:f6:08:c6:9e:8b:be:44: 4c:40:a8:4c:0b:a1:b7:50:36:43:9b:79:7d:05:9a: d9:dc:3c:36:e5:1c:62:81:16:ce:db:bf:6b:82:9f: eb:c9:59:7b:98:46:f6:3b:3e:b6:b6:6c:d8:17:73: a4:9a:6f:6e:9e:ab:eb:3b:f7:a7:1f:ef:e6:9b:22: 97:50:11:5c:f6:d3:c5:59:42:97:fa:e5:8e:1e:65: c9:bc:2d:82:a9:2e:5d:c1:ec:70:4d:56:03:bc:40: 59:9b:c9:60:f1:ca:7a:e0:8c:d4:1b:89:02:8e:d7: 06:9d:1d:70:72:5a:ee:45:fd:5e:13:42:6a:9f:90: a5:12:13:25:de:43:e2:51:4b:f6:8c:ac:e7:09:28: 17:4c:7d:d7:b7:eb:97:41:98:5f:93:11:b5:85:1b: 37:65:3d:8c:fa:73:c6:59:15:68:3a:7a:01:43:ae: 5e:9f:52:41:0b:97:4a:11:98:75:68:4d:c5:67:01: df:1a:17:08:1d:cc:62:d6:7b:91:8c:50:ea:e4:1e: 3a:bc:b1:4e:b0:8d:ef:a9:88:15:1e:28:2e:bb:de: 3d:67:fd:4b:cc:17:81:78:4f:78:29:6f:2b:23:b5: c1:d1:a2:6f:8a:e5:11:25:5c:3e:e3:c3:df:36:3f: c2:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:9B:35:82:30:5D:22:14:49:D8:E4:5B:72:F5:00:4B:19:08:50:17 X509v3 Authority Key Identifier: keyid:00:AC:65:E6:1E:49:13:26:8C:5D:0B:8A:FE:8C:7D:91:3B:68:6D:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:5f:0e:49:a0:68:58:0d:f6:5b:f4:2b:08:93:7b:26:a9:ed: fd:ae:e3:f5:f6:8d:f9:4f:f5:32:98:d7:d1:a3:bf:ce:b1:ad: 54:fb:b6:53:c4:68:60:b8:63:5a:86:7f:de:07:da:ae:01:8a: eb:3f:21:7c:d4:1e:ed:cd:e3:a4:40:8c:5f:c6:37:fd:8a:4e: 83:bf:df:71:10:ef:37:0e:48:11:1c:01:ae:3a:10:54:d9:f1: 06:95:a0:6f:26:cc:82:bb:31:8c:96:44:08:79:5c:c7:98:a4: 94:3a:b5:9e:aa:72:be:5f:69:91:e3:b0:bc:12:c4:02:f1:dc: 99:3d:72:fe:94:10:6f:74:9d:26:cf:6f:0e:ba:18:8c:fc:66: ba:34:ae:2d:d8:81:15:27:8f:9a:eb:8e:2c:63:3d:83:4a:5a: 06:00:c0:2b:a0:84:f6:a5:c0:8a:bc:30:5d:9c:d5:6a:f5:09: 7f:32:80:b5:2d:2b:5d:20:0e:08:d9:6a:26:7f:6f:b3:02:e6: bd:05:c5:a5:c2:23:aa:cf:05:fb:59:6c:0d:8d:d8:2e:5a:ab: 33:e8:5e:34:d6:15:13:7f:c4:0a:80:b3:8e:eb:55:72:34:61: fe:bd:92:0e:80:ab:e6:bf:44:4b:12:97:01:00:bf:24:e1:e4: fa:25:91:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBgS1CPi2e0o/qXOWVvKYStthF1kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBBQzY1RTYxRTQ5MTMyNjhDNUQwQjhBRkU4QzdEOTEz QjY4NkQ5RjAeFw0yNjAzMjQxMTM1NTNaFw0yNjAzMjcxOTQ4NTNaMDMxMTAvBgNV BAMTKDVCOUIzNTgyMzA1RDIyMTQ0OUQ4RTQ1QjcyRjUwMDRCMTkwODUwMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHF7DXKBDC9gjGnou+RExAqEwL obdQNkObeX0FmtncPDblHGKBFs7bv2uCn+vJWXuYRvY7Pra2bNgXc6Sab26eq+s7 96cf7+abIpdQEVz208VZQpf65Y4eZcm8LYKpLl3B7HBNVgO8QFmbyWDxynrgjNQb iQKO1wadHXByWu5F/V4TQmqfkKUSEyXeQ+JRS/aMrOcJKBdMfde365dBmF+TEbWF GzdlPYz6c8ZZFWg6egFDrl6fUkELl0oRmHVoTcVnAd8aFwgdzGLWe5GMUOrkHjq8 sU6wje+piBUeKC673j1n/UvMF4F4T3gpbysjtcHRom+K5RElXD7jw982P8IFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW5s1gjBdIhRJ2ORbcvUASxkIUBcwHwYDVR0j BBgwFoAUAKxl5h5JEyaMXQuK/ox9kTtobZ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTg5NTBmMC0zYjE0LTRhNmQtYjMwZi03NTM3OWNiMmViY2UvMC8wMEFDNjVFNjFF NDkxMzI2OEM1RDBCOEFGRThDN0Q5MTNCNjg2RDlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDBBQzY1RTYxRTQ5MTMyNjhDNUQwQjhBRkU4QzdEOTEzQjY4 NkQ5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U4OTUwZjAtM2IxNC00YTZkLWIz MGYtNzUzNzljYjJlYmNlLzAvMDBBQzY1RTYxRTQ5MTMyNjhDNUQwQjhBRkU4QzdE OTEzQjY4NkQ5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKJfDkmgaFgN9lv0KwiTeyap7f2u4/X2jflP 9TKY19Gjv86xrVT7tlPEaGC4Y1qGf94H2q4Bius/IXzUHu3N46RAjF/GN/2KToO/ 33EQ7zcOSBEcAa46EFTZ8QaVoG8mzIK7MYyWRAh5XMeYpJQ6tZ6qcr5faZHjsLwS xALx3Jk9cv6UEG90nSbPbw66GIz8Zro0ri3YgRUnj5rrjixjPYNKWgYAwCughPal wIq8MF2c1Wr1CX8ygLUtK10gDgjZaiZ/b7MC5r0FxaXCI6rPBftZbA2N2C5aqzPo XjTWFRN/xAqAs47rVXI0Yf69kg6Aq+a/REsSlwEAvyTh5PolkWk= -----END CERTIFICATE-----Generated at Thu Mar 26 07:17:58 2026 by rpki-client