$ rpki-client -vvf repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft File: ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft (raw, json) Hash identifier: sc7RZ46yKlF9wYItdjPoy1tZxKIjOYzQFQunYs32mWU= Subject key identifier: 02:C5:F7:9B:2E:DE:2F:9C:CE:BC:C1:03:AF:AF:77:ED:86:DB:97:6E Authority key identifier: AC:C3:D7:9A:B1:BE:F6:2B:C0:09:5B:6F:6A:C3:F3:44:6A:A9:03:53 Certificate issuer: /CN=ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353 Certificate serial: 55F8D295B2818C546A3EBF0AD859E4CB3F694A43 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft Manifest number: 055D Signing time: Wed 25 Mar 2026 12:41:04 +0000 Manifest this update: Wed 25 Mar 2026 12:36:04 +0000 Manifest next update: Sat 28 Mar 2026 20:03:04 +0000 Files and hashes: 1: 3130312e35302e302e302f32322d3234203d3e203535363838.roa (hash: JE0sJw2Y30gQbCmAIhnjpinJa8eG7Fgewlr8Jax6ero=) 2: 323030313a6466343a336230303a3a2f34382d3438203d3e203535363838.roa (hash: ejfVv9si1K2MpeXhh8zMJGLdHAeeV0dhSQaga8rtoCM=) 3: 3130332e35362e3134382e302f32332d3234203d3e203535363838.roa (hash: XTrAUzINtImcd3F+XaTVo5H750rmDxdeBt+LpGOrxS4=) 4: 3130332e32372e3230362e302f32332d3234203d3e203535363838.roa (hash: UUI0UvU6AUH37Q/H9zW8u0Apq7Y6pN001mJMdkH8taI=) 5: ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.crl (hash: KXWArKGNXFNlF/2Vxwv1nusGQB6Ijyw8SUpw5n2bpdU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.crl rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 20:03:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:f8:d2:95:b2:81:8c:54:6a:3e:bf:0a:d8:59:e4:cb:3f:69:4a:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353 Validity Not Before: Mar 25 12:36:04 2026 GMT Not After : Mar 28 20:03:04 2026 GMT Subject: CN=02C5F79B2EDE2F9CCEBCC103AFAF77ED86DB976E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:68:fc:49:94:0f:4e:b6:75:73:62:d2:68:31: 04:5e:be:26:ee:ae:a4:c1:ed:4f:d3:87:04:ae:d9: 29:98:55:57:48:c5:09:00:7c:4c:1e:a8:4f:3e:83: 1b:fd:40:80:d9:a6:fe:94:8e:5f:fa:37:7f:42:68: 65:ca:c2:a5:08:3e:e8:de:30:16:ce:f8:e7:50:39: 6a:17:49:d9:cf:40:21:56:9e:bf:02:6b:ae:f6:d8: 2e:66:5c:d9:b9:79:4b:75:d5:52:59:e5:aa:63:dd: 44:56:ae:cd:8f:41:51:68:00:28:fd:69:5b:56:f5: 17:c0:f6:62:49:d5:5f:39:fd:2a:bc:8a:ff:2f:7a: 99:71:df:92:62:15:75:6f:d0:55:2f:26:04:af:30: a1:f1:1d:09:41:4a:93:a6:d5:7b:7b:4b:73:e2:86: f3:f9:7b:a3:a3:8d:56:d8:5c:34:12:b0:ea:cd:bb: e4:88:44:2e:af:8a:24:ab:d5:13:a1:0d:31:13:7c: 64:19:ca:2e:49:c6:14:5c:18:80:d4:78:b7:2b:5a: 33:a1:22:ef:f8:98:67:6e:91:67:6f:43:7a:d1:a2: 0c:67:5e:f7:08:c3:f4:b7:b9:b7:17:a7:df:07:81: d8:12:cd:14:33:2f:14:06:c9:42:ce:c8:8c:16:9b: 41:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:C5:F7:9B:2E:DE:2F:9C:CE:BC:C1:03:AF:AF:77:ED:86:DB:97:6E X509v3 Authority Key Identifier: keyid:AC:C3:D7:9A:B1:BE:F6:2B:C0:09:5B:6F:6A:C3:F3:44:6A:A9:03:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:b9:2c:c3:c3:24:93:f3:8d:89:3c:18:da:68:f9:a4:77:27: 6d:b8:c6:60:e5:1c:0a:c2:0b:27:75:fc:5c:d8:86:20:b3:7a: 7d:05:8b:e3:97:05:2d:95:1b:a6:4b:76:74:c2:c6:8e:4e:59: b5:aa:d0:42:d0:88:42:30:4d:fb:66:d4:32:53:a6:66:1a:8d: f0:80:90:a5:1f:be:a3:9a:e3:79:4a:32:f3:5c:07:69:b9:21: 95:08:32:51:bb:d2:83:48:39:23:6c:31:b9:31:b4:6c:a1:37: 18:27:fd:1e:81:d9:4b:5a:22:da:12:0c:79:4c:1f:ab:a4:8a: 61:49:70:ce:57:49:57:55:11:1f:c8:28:b1:23:67:d8:4a:32: 65:db:26:2c:a1:db:f3:d1:2a:1d:15:34:4e:3a:af:cc:72:79: dc:16:9c:7d:4c:75:b5:32:33:a5:e6:3b:eb:20:d4:a6:c6:89: 3a:9b:a3:18:b5:4d:5f:e5:8d:6e:50:f1:f0:29:42:e8:d2:e3: 6a:3b:be:d7:dd:2f:30:ca:0d:9b:f6:2c:63:e6:47:54:fd:f0: 9f:f4:d4:0e:87:12:32:31:79:b8:f9:07:a5:3e:de:04:75:ab: ae:39:a2:8e:cf:f9:94:9e:cd:ed:73:a7:40:a9:b4:b9:ae:74: ac:0b:68:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVfjSlbKBjFRqPr8K2Fnkyz9pSkMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUNDM0Q3OUFCMUJFRjYyQkMwMDk1QjZGNkFDM0YzNDQ2 QUE5MDM1MzAeFw0yNjAzMjUxMjM2MDRaFw0yNjAzMjgyMDAzMDRaMDMxMTAvBgNV BAMTKDAyQzVGNzlCMkVERTJGOUNDRUJDQzEwM0FGQUY3N0VEODZEQjk3NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXaPxJlA9OtnVzYtJoMQRevibu rqTB7U/ThwSu2SmYVVdIxQkAfEweqE8+gxv9QIDZpv6Ujl/6N39CaGXKwqUIPuje MBbO+OdQOWoXSdnPQCFWnr8Ca6722C5mXNm5eUt11VJZ5apj3URWrs2PQVFoACj9 aVtW9RfA9mJJ1V85/Sq8iv8veplx35JiFXVv0FUvJgSvMKHxHQlBSpOm1Xt7S3Pi hvP5e6OjjVbYXDQSsOrNu+SIRC6viiSr1ROhDTETfGQZyi5JxhRcGIDUeLcrWjOh Iu/4mGdukWdvQ3rRogxnXvcIw/S3ubcXp98HgdgSzRQzLxQGyULOyIwWm0GRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAsX3my7eL5zOvMEDr6937Ybbl24wHwYDVR0j BBgwFoAUrMPXmrG+9ivACVtvasPzRGqpA1MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzU4YzgwZS1hMzI4LTRmOGMtYTAzZi05MWMzYzI2MjE0YTIvMC9BQ0MzRDc5QUIx QkVGNjJCQzAwOTVCNkY2QUMzRjM0NDZBQTkwMzUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUNDM0Q3OUFCMUJFRjYyQkMwMDk1QjZGNkFDM0YzNDQ2QUE5 MDM1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTc1OGM4MGUtYTMyOC00ZjhjLWEw M2YtOTFjM2MyNjIxNGEyLzAvQUNDM0Q3OUFCMUJFRjYyQkMwMDk1QjZGNkFDM0Yz NDQ2QUE5MDM1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALa5LMPDJJPzjYk8GNpo+aR3J224xmDlHArC Cyd1/FzYhiCzen0Fi+OXBS2VG6ZLdnTCxo5OWbWq0ELQiEIwTftm1DJTpmYajfCA kKUfvqOa43lKMvNcB2m5IZUIMlG70oNIOSNsMbkxtGyhNxgn/R6B2UtaItoSDHlM H6ukimFJcM5XSVdVER/IKLEjZ9hKMmXbJiyh2/PRKh0VNE46r8xyedwWnH1MdbUy M6XmO+sg1KbGiTqboxi1TV/ljW5Q8fApQujS42o7vtfdLzDKDZv2LGPmR1T98J/0 1A6HEjIxebj5B6U+3gR1q645oo7P+ZSeze1zp0CptLmudKwLaJU= -----END CERTIFICATE-----Generated at Thu Mar 26 07:33:55 2026 by rpki-client