$ rpki-client -vvf repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft File: A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft (raw, json) Hash identifier: G7bkfJ1JtxoXe+DZuSbQxmrIb1Sol0ypqTuSkOuN/94= Subject key identifier: 8B:5C:84:DE:77:CE:74:F6:66:02:11:91:A4:25:B2:30:20:79:06:E8 Authority key identifier: A4:AC:49:C4:F5:5B:F5:D4:AF:3D:42:10:4A:8A:5E:C1:F2:12:3E:6F Certificate issuer: /CN=A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F Certificate serial: 45542B285F7B1740D6BA809D6830981CFAE27EB7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft Manifest number: 01EE Signing time: Wed 25 Mar 2026 03:30:47 +0000 Manifest this update: Wed 25 Mar 2026 03:25:47 +0000 Manifest next update: Sat 28 Mar 2026 07:32:47 +0000 Files and hashes: 1: 3130332e38312e36362e302f32342d3234203d3e20313336303535.roa (hash: ATuxXOYK3e/3Ld+KeMllvgXdJfLA5B6FogxB4ZqIC5o=) 2: 3130332e38312e36352e302f32342d3234203d3e20313336303535.roa (hash: u8jL1wvQ3N2/+7j20g3WIVxFeVvx0q2WU+pz5MDhyKI=) 3: 323430303a363463303a3a2f33322d3438203d3e20313336303535.roa (hash: lkJMOSpD6CK+vqFIQ+W4fJTKxjWnPx2rZSDGiMaIa7Q=) 4: 3130332e38312e36342e302f32342d3234203d3e20313336303535.roa (hash: ELk6/6IWDK4cOkAhqxagMF7RU6tMeOE1ofhJAKCHKqk=) 5: A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.crl (hash: R7Db0O6ff+HoBICwN0B7Zs/u9r3iIM7fyjxtbyRctLA=) 6: 3130332e38312e36342e302f32322d3234203d3e20313336303535.roa (hash: G2lV5U9+p39d6xSgHB2TJ310g1uTGGU7EbB7g2ly4zQ=) 7: 3130332e38312e36372e302f32342d3234203d3e20313336303535.roa (hash: sMqZuUQ3TUwiAl7c3vFGsavhFRoJNzCv4yEgkQl+sQs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.crl rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 07:32:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:54:2b:28:5f:7b:17:40:d6:ba:80:9d:68:30:98:1c:fa:e2:7e:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F Validity Not Before: Mar 25 03:25:47 2026 GMT Not After : Mar 28 07:32:47 2026 GMT Subject: CN=8B5C84DE77CE74F666021191A425B230207906E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d2:17:a2:f9:77:ed:7a:fc:62:db:d4:e7:7d: fd:9b:ec:60:20:dc:45:7b:76:33:fc:d2:66:99:e0: d3:52:13:94:f1:3e:ca:74:8a:f6:5b:ee:6e:1f:74: c4:ac:55:5c:b7:9a:98:14:f6:c0:d0:30:8b:e7:8b: 12:34:89:e2:b3:a3:03:dc:98:b8:e2:4a:40:6b:13: a8:36:27:4b:f5:4a:29:51:32:70:35:74:95:4c:0b: 01:87:ef:e2:2e:95:a0:7f:83:80:b8:1c:f1:6a:63: 39:58:ef:24:41:f2:ab:51:c3:32:d9:60:52:c1:33: ce:c5:e2:5d:92:cd:43:12:e2:39:8b:c4:05:ce:17: 61:04:30:b8:c3:04:7c:64:3b:81:38:b5:9d:2c:07: a1:d8:81:55:1e:6e:18:fc:7c:86:19:2f:20:8e:8b: 73:d3:18:28:7c:18:c3:eb:ee:7d:52:20:6a:d2:03: db:26:2c:17:a2:9c:57:6d:c1:36:98:8e:98:cd:97: 04:95:9a:0b:5e:8c:25:d9:ae:80:90:7a:2f:10:9f: 39:e4:e8:84:94:91:1a:b8:bf:3f:86:e0:02:d4:ee: 5c:17:4c:21:bb:c4:be:72:c7:bd:6b:77:04:e5:2e: 48:ac:9c:8e:ef:8d:ee:f9:7e:c4:34:0a:bd:99:ac: a3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:5C:84:DE:77:CE:74:F6:66:02:11:91:A4:25:B2:30:20:79:06:E8 X509v3 Authority Key Identifier: keyid:A4:AC:49:C4:F5:5B:F5:D4:AF:3D:42:10:4A:8A:5E:C1:F2:12:3E:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:d5:b9:ce:91:67:b6:50:31:0e:b9:a3:2b:e1:17:52:8e:8b: 7d:93:1b:b8:27:76:5d:ad:75:1b:27:31:3c:af:63:07:96:c1: 0e:38:4f:56:26:ba:ff:09:bb:c9:c0:e8:26:79:0a:26:60:a9: 42:55:09:f1:fe:86:8a:03:ef:3a:5c:cc:af:bf:b3:a5:5a:d0: e7:04:23:fc:b5:5d:58:65:77:3f:d5:7c:22:c5:04:86:64:78: 9f:a0:1b:81:59:59:55:93:f1:b5:e5:05:75:d5:0b:5d:73:31: 37:58:08:ac:f7:5b:eb:76:b3:45:cf:dc:f9:9d:c3:97:d2:3a: 2e:1f:bf:a7:74:82:6b:21:28:4b:37:a5:a6:4b:c7:b8:df:68: 4b:e6:98:fb:24:03:5a:f3:69:6b:0a:9e:f3:ee:14:2a:68:4e: 30:ab:b2:5a:e4:1d:9c:b4:33:98:d9:70:ee:ef:29:f8:f5:ac: a4:69:f3:08:71:e7:92:85:a1:dd:c2:79:0b:7e:d3:5f:e1:75: 3b:64:d2:84:71:c4:c4:ae:82:2f:00:f8:13:66:68:a7:da:ec: ee:df:b6:13:d3:e2:c5:53:aa:94:84:11:ad:1c:87:db:38:b9: 68:dc:ae:d8:f7:6d:e6:10:3d:b6:d6:37:a8:6c:a3:f3:8e:5b: ac:7e:59:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURVQrKF97F0DWuoCdaDCYHPrifrcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRBQzQ5QzRGNTVCRjVENEFGM0Q0MjEwNEE4QTVFQzFG MjEyM0U2RjAeFw0yNjAzMjUwMzI1NDdaFw0yNjAzMjgwNzMyNDdaMDMxMTAvBgNV BAMTKDhCNUM4NERFNzdDRTc0RjY2NjAyMTE5MUE0MjVCMjMwMjA3OTA2RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC50hei+Xftevxi29Tnff2b7GAg 3EV7djP80maZ4NNSE5TxPsp0ivZb7m4fdMSsVVy3mpgU9sDQMIvnixI0ieKzowPc mLjiSkBrE6g2J0v1SilRMnA1dJVMCwGH7+IulaB/g4C4HPFqYzlY7yRB8qtRwzLZ YFLBM87F4l2SzUMS4jmLxAXOF2EEMLjDBHxkO4E4tZ0sB6HYgVUebhj8fIYZLyCO i3PTGCh8GMPr7n1SIGrSA9smLBeinFdtwTaYjpjNlwSVmgtejCXZroCQei8Qnznk 6ISUkRq4vz+G4ALU7lwXTCG7xL5yx71rdwTlLkisnI7vje75fsQ0Cr2ZrKPzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi1yE3nfOdPZmAhGRpCWyMCB5BugwHwYDVR0j BBgwFoAUpKxJxPVb9dSvPUIQSopewfISPm8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NzI4MDQwMC05NjU0LTRkNDUtODg4Yi05MDY3YmFkYTE5MGIvMC9BNEFDNDlDNEY1 NUJGNUQ0QUYzRDQyMTA0QThBNUVDMUYyMTIzRTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTRBQzQ5QzRGNTVCRjVENEFGM0Q0MjEwNEE4QTVFQzFGMjEy M0U2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTcyODA0MDAtOTY1NC00ZDQ1LTg4 OGItOTA2N2JhZGExOTBiLzAvQTRBQzQ5QzRGNTVCRjVENEFGM0Q0MjEwNEE4QTVF QzFGMjEyM0U2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJzVuc6RZ7ZQMQ65oyvhF1KOi32TG7gndl2t dRsnMTyvYweWwQ44T1Ymuv8Ju8nA6CZ5CiZgqUJVCfH+hooD7zpczK+/s6Va0OcE I/y1XVhldz/VfCLFBIZkeJ+gG4FZWVWT8bXlBXXVC11zMTdYCKz3W+t2s0XP3Pmd w5fSOi4fv6d0gmshKEs3paZLx7jfaEvmmPskA1rzaWsKnvPuFCpoTjCrslrkHZy0 M5jZcO7vKfj1rKRp8whx55KFod3CeQt+01/hdTtk0oRxxMSugi8A+BNmaKfa7O7f thPT4sVTqpSEEa0ch9s4uWjcrtj3beYQPbbWN6hso/OOW6x+Wco= -----END CERTIFICATE-----Generated at Thu Mar 26 12:03:47 2026 by rpki-client