$ rpki-client -vvf repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft File: 4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft (raw, json) Hash identifier: 6D24S4nXxD/FnAVdDEn9Doltco10WZAjXkFdqq2A1sM= Subject key identifier: 3B:FF:78:75:A4:78:AE:A4:4C:7A:E8:A2:9A:10:0C:E0:51:34:16:D1 Authority key identifier: 4A:C7:DC:D8:EB:12:34:AD:C4:27:AE:BE:39:49:E8:69:16:38:A7:07 Certificate issuer: /CN=4AC7DCD8EB1234ADC427AEBE3949E8691638A707 Certificate serial: 61FA228602A81A0D14908F12305D080027C9688A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer Subject info access: rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft Manifest number: 0268 Signing time: Wed 25 Mar 2026 20:10:53 +0000 Manifest this update: Wed 25 Mar 2026 20:05:53 +0000 Manifest next update: Sun 29 Mar 2026 05:18:53 +0000 Files and hashes: 1: 3130332e382e39362e302f32322d3234203d3e203137343530.roa (hash: 3PeI4c1+04C9ghzq6F40f5013YnnignJ8PNDhSKl9BY=) 2: 3230322e362e3230382e302f32302d3234203d3e203137343530.roa (hash: UrGzpQyb4OcG13ECSRKSWIFvQeDrPkoBtijveesvtFQ=) 3: 3131392e322e36342e302f31392d3234203d3e203137343530.roa (hash: Uce528/KV3oCstaRCZguiOogFuox/yiwX1g2nJn55uk=) 4: 4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl (hash: Bnfr5UY5GjISecW039+7zKGv6J/OaOAv/Vze5KYxhL4=) 5: 323030313a6466363a366630303a3a2f34382d3438203d3e20313331373034.roa (hash: 1IuZ+1sb5CuVWfx/fjE2EJ1GmWjRaqNz5VL2CGRsg+c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 05:18:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:fa:22:86:02:a8:1a:0d:14:90:8f:12:30:5d:08:00:27:c9:68:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AC7DCD8EB1234ADC427AEBE3949E8691638A707 Validity Not Before: Mar 25 20:05:53 2026 GMT Not After : Mar 29 05:18:53 2026 GMT Subject: CN=3BFF7875A478AEA44C7AE8A29A100CE0513416D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:da:f3:16:fc:49:e5:bf:26:36:01:79:ec:98: 0d:df:7f:cc:a2:81:f7:08:30:73:17:db:64:b8:fa: 49:60:e7:41:69:39:24:3c:9b:5b:c6:5b:d3:ec:ed: 41:b7:65:22:74:71:c7:cf:b9:ba:e4:9f:4a:c6:88: 6e:bd:0b:9b:25:f2:b4:90:a4:87:0e:64:1b:55:a6: c6:6c:e0:a2:1c:07:36:43:3c:0f:2e:0b:27:b0:10: aa:f7:70:f7:c3:08:03:e0:83:a5:3f:1a:29:47:72: 6b:1b:15:8e:9f:f8:27:28:e4:77:f2:ad:8f:45:5f: 6c:8f:41:5f:47:3a:25:b3:27:d8:7a:0f:c0:fd:85: 7a:42:7f:8c:bd:35:8a:4a:f7:6b:db:1d:d6:a6:e8: b4:44:13:3a:54:d9:79:4c:90:85:a8:4e:78:3e:1c: 19:d1:47:b3:d1:37:3a:49:4e:71:2f:05:1c:b1:48: c2:92:ff:a2:47:54:60:68:14:d8:10:f0:30:bf:31: 24:80:26:93:f6:b2:95:5a:14:25:6b:70:2e:f9:66: 88:de:d1:48:1e:12:d0:7f:5d:54:16:ab:02:e0:f6: ee:8f:67:69:7b:31:09:fb:dd:89:43:f7:cc:fa:2c: 37:68:b5:b8:89:b6:e7:71:d5:0c:d2:31:23:58:3c: ba:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:FF:78:75:A4:78:AE:A4:4C:7A:E8:A2:9A:10:0C:E0:51:34:16:D1 X509v3 Authority Key Identifier: keyid:4A:C7:DC:D8:EB:12:34:AD:C4:27:AE:BE:39:49:E8:69:16:38:A7:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:66:c2:d7:ab:58:4e:5a:63:c1:70:9f:3e:35:3a:35:50:0e: 66:f3:23:16:fb:cc:5a:db:76:13:3b:30:60:35:ec:9e:96:72: c6:b3:3c:13:a7:25:e0:c7:68:6f:8c:78:b2:74:83:9e:6c:86: 40:4b:c9:43:39:b2:64:da:7f:96:2b:e9:de:4a:2a:0d:d5:9e: aa:a2:7e:04:c8:7a:1b:a9:df:d7:2f:0b:3b:23:e6:a0:ec:58: 30:75:b4:9c:44:27:d5:87:4c:8d:46:78:03:a5:97:8b:20:a1: 63:9a:0c:5a:53:cf:8f:04:32:67:dd:1e:ce:02:e0:33:4e:1a: 5f:85:dc:16:6c:fe:f6:33:c8:f6:d8:f8:28:d7:03:cf:7b:b9: 4a:66:a3:0b:ef:fd:8a:bb:76:7b:98:1a:ac:a1:05:62:73:1a: 44:17:e5:c1:80:38:7b:9c:1e:86:de:37:6e:18:a5:7c:22:ba: c8:6e:d7:f1:eb:04:95:b1:b6:a8:b3:4c:fc:81:d6:1e:99:f6: fe:56:b8:e6:31:a5:3a:c8:c2:ae:5f:2d:a1:58:5e:a7:18:f0: 33:c8:b2:f8:22:dc:57:e3:93:42:2e:2d:6d:08:43:45:ac:ef: 3c:49:cf:61:21:1e:39:33:3a:87:e3:ef:6a:7f:b4:cc:dd:92: ce:a4:35:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYfoihgKoGg0UkI8SMF0IACfJaIowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFDN0RDRDhFQjEyMzRBREM0MjdBRUJFMzk0OUU4Njkx NjM4QTcwNzAeFw0yNjAzMjUyMDA1NTNaFw0yNjAzMjkwNTE4NTNaMDMxMTAvBgNV BAMTKDNCRkY3ODc1QTQ3OEFFQTQ0QzdBRThBMjlBMTAwQ0UwNTEzNDE2RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE2vMW/EnlvyY2AXnsmA3ff8yi gfcIMHMX22S4+klg50FpOSQ8m1vGW9Ps7UG3ZSJ0ccfPubrkn0rGiG69C5sl8rSQ pIcOZBtVpsZs4KIcBzZDPA8uCyewEKr3cPfDCAPgg6U/GilHcmsbFY6f+Cco5Hfy rY9FX2yPQV9HOiWzJ9h6D8D9hXpCf4y9NYpK92vbHdam6LREEzpU2XlMkIWoTng+ HBnRR7PRNzpJTnEvBRyxSMKS/6JHVGBoFNgQ8DC/MSSAJpP2spVaFCVrcC75Zoje 0UgeEtB/XVQWqwLg9u6PZ2l7MQn73YlD98z6LDdotbiJtudx1QzSMSNYPLrLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO/94daR4rqRMeuiimhAM4FE0FtEwHwYDVR0j BBgwFoAUSsfc2OsSNK3EJ66+OUnoaRY4pwcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MzgwNjFmMS1mYTMwLTRiZDYtODFhMC0yZWM2NzA4MzZjNDIvMC80QUM3RENEOEVC MTIzNEFEQzQyN0FFQkUzOTQ5RTg2OTE2MzhBNzA3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEFDN0RDRDhFQjEyMzRBREM0MjdBRUJFMzk0OUU4NjkxNjM4 QTcwNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDM4MDYxZjEtZmEzMC00YmQ2LTgx YTAtMmVjNjcwODM2YzQyLzAvNEFDN0RDRDhFQjEyMzRBREM0MjdBRUJFMzk0OUU4 NjkxNjM4QTcwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKNmwterWE5aY8Fwnz41OjVQDmbzIxb7zFrb dhM7MGA17J6WcsazPBOnJeDHaG+MeLJ0g55shkBLyUM5smTaf5Yr6d5KKg3Vnqqi fgTIehup39cvCzsj5qDsWDB1tJxEJ9WHTI1GeAOll4sgoWOaDFpTz48EMmfdHs4C 4DNOGl+F3BZs/vYzyPbY+CjXA897uUpmowvv/Yq7dnuYGqyhBWJzGkQX5cGAOHuc HobeN24YpXwiushu1/HrBJWxtqizTPyB1h6Z9v5WuOYxpTrIwq5fLaFYXqcY8DPI svgi3Ffjk0IuLW0IQ0Ws7zxJz2EhHjkzOofj72p/tMzdks6kNX0= -----END CERTIFICATE-----Generated at Thu Mar 26 21:38:23 2026 by rpki-client