$ rpki-client -vvf repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft File: ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft (raw, json) Hash identifier: NmAM2UXo4LnDSILXJHwuGB/RecGhCQ6bzTbluo22SDA= Subject key identifier: 74:4D:37:84:53:89:9E:D1:0F:08:C2:DE:31:7A:51:3E:3E:8E:B7:AC Authority key identifier: AC:FB:1A:5D:99:38:A6:4B:3B:54:A8:32:D5:B7:9C:03:24:86:A7:59 Certificate issuer: /CN=ACFB1A5D9938A64B3B54A832D5B79C032486A759 Certificate serial: 7D23375A02421F532916FD910D967DF23B5832C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ACFB1A5D9938A64B3B54A832D5B79C032486A759.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft Manifest number: 0108 Signing time: Tue 24 Mar 2026 16:40:01 +0000 Manifest this update: Tue 24 Mar 2026 16:35:01 +0000 Manifest next update: Sat 28 Mar 2026 04:15:01 +0000 Files and hashes: 1: ACFB1A5D9938A64B3B54A832D5B79C032486A759.crl (hash: bC1vgP41lxh7IaIbk5uZBWrOOOqM2y4A+wm+diBJDco=) 2: 3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa (hash: EWnjtErVMnBbrrbwTFVBXyhULkzmfdybYpW9vhB6Px8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.crl rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ACFB1A5D9938A64B3B54A832D5B79C032486A759.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 04:15:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:23:37:5a:02:42:1f:53:29:16:fd:91:0d:96:7d:f2:3b:58:32:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ACFB1A5D9938A64B3B54A832D5B79C032486A759 Validity Not Before: Mar 24 16:35:01 2026 GMT Not After : Mar 28 04:15:01 2026 GMT Subject: CN=744D378453899ED10F08C2DE317A513E3E8EB7AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:91:98:b8:f6:2f:7b:c2:03:a6:29:e3:d7:75: 0c:cf:be:14:32:dd:c2:95:2d:da:4a:0e:8c:c3:d7: ee:da:ff:e9:42:b9:45:a3:ba:60:00:a2:44:88:1d: f4:0a:60:9c:7c:2f:95:99:e2:32:4e:14:df:6d:13: a2:94:6f:15:d6:f7:5e:9e:6c:fa:13:86:88:db:e7: b0:cb:e2:c7:a0:a7:db:f5:68:e3:3b:f5:b0:65:92: aa:2b:b9:92:83:0d:61:8c:70:3c:f7:11:5a:af:10: 82:8e:dd:43:62:4d:f4:40:e0:81:86:f1:ad:b5:d2: 0c:cc:62:d9:bf:5c:18:44:86:30:e1:7f:47:49:66: e4:dc:02:c6:3e:ee:c4:1c:1e:d6:0f:1f:fd:9e:f2: bb:8a:4e:57:0a:aa:d9:7a:2b:ff:2e:6e:80:7d:0a: c1:28:39:60:cc:b9:29:38:5f:01:94:d8:7f:97:af: 34:c4:f9:63:97:16:46:b3:07:3a:58:fd:02:a6:d6: 95:4c:75:22:5d:2e:0c:57:fa:75:3c:39:09:f7:1f: 59:44:ea:6e:d9:98:a0:66:4a:e9:9c:f8:48:95:a2: c1:c4:29:dd:81:99:b2:bb:48:a2:67:8f:fe:41:06: 03:28:68:e1:0b:4b:0c:f4:20:b1:e1:2e:20:7e:c7: a0:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:4D:37:84:53:89:9E:D1:0F:08:C2:DE:31:7A:51:3E:3E:8E:B7:AC X509v3 Authority Key Identifier: keyid:AC:FB:1A:5D:99:38:A6:4B:3B:54:A8:32:D5:B7:9C:03:24:86:A7:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ACFB1A5D9938A64B3B54A832D5B79C032486A759.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:85:82:8f:d6:ec:07:c9:54:73:10:e1:d1:d2:80:af:60:42: 4c:eb:3a:53:10:c1:51:bf:75:63:fc:af:c5:0d:66:d5:6f:91: 25:1c:99:01:25:69:8a:2d:09:f6:a3:9e:0e:ac:d5:41:2b:00: f4:22:c2:6f:7e:2c:c0:37:40:98:2c:3a:76:ca:78:1e:ed:f5: 3a:ad:0e:8f:3f:94:ff:39:9e:3b:86:ea:14:6e:f5:17:cf:76: 2a:6e:ac:70:3d:8f:12:7f:ac:ef:af:53:23:da:f3:fc:da:1f: 20:44:95:ab:0c:d9:8f:0f:75:58:6f:98:83:66:c0:fe:b3:38: 9d:45:b7:44:57:26:da:f2:1d:d4:40:c1:71:d9:03:ba:bb:0f: 00:34:fe:38:d2:52:3b:f0:eb:c0:5e:06:87:c3:a0:1c:d2:e9: e2:2c:60:b3:f9:b9:38:ab:55:77:5a:52:40:b8:24:20:73:e0: c4:36:79:ed:27:c0:7d:ad:2a:8f:05:7e:55:1d:26:6c:da:13: cd:4b:09:ab:0b:bc:dd:81:37:90:13:65:52:16:60:d0:ed:28: 3b:ae:a8:1f:00:e4:58:15:b0:7f:bb:92:17:97:05:9e:c4:a4: d4:d8:df:1a:40:ba:83:0d:18:0b:0a:69:45:0f:b8:19:a3:4d: d5:21:a0:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfSM3WgJCH1MpFv2RDZZ98jtYMsIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUNGQjFBNUQ5OTM4QTY0QjNCNTRBODMyRDVCNzlDMDMy NDg2QTc1OTAeFw0yNjAzMjQxNjM1MDFaFw0yNjAzMjgwNDE1MDFaMDMxMTAvBgNV BAMTKDc0NEQzNzg0NTM4OTlFRDEwRjA4QzJERTMxN0E1MTNFM0U4RUI3QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjkZi49i97wgOmKePXdQzPvhQy 3cKVLdpKDozD1+7a/+lCuUWjumAAokSIHfQKYJx8L5WZ4jJOFN9tE6KUbxXW916e bPoThojb57DL4segp9v1aOM79bBlkqoruZKDDWGMcDz3EVqvEIKO3UNiTfRA4IGG 8a210gzMYtm/XBhEhjDhf0dJZuTcAsY+7sQcHtYPH/2e8ruKTlcKqtl6K/8uboB9 CsEoOWDMuSk4XwGU2H+XrzTE+WOXFkazBzpY/QKm1pVMdSJdLgxX+nU8OQn3H1lE 6m7ZmKBmSumc+EiVosHEKd2BmbK7SKJnj/5BBgMoaOELSwz0ILHhLiB+x6ALAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdE03hFOJntEPCMLeMXpRPj6Ot6wwHwYDVR0j BBgwFoAUrPsaXZk4pks7VKgy1becAySGp1kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTk1NGY0Mi05NDUyLTQyNDctOTlhNS0zMWE1M2U1NmE5ZjgvMC9BQ0ZCMUE1RDk5 MzhBNjRCM0I1NEE4MzJENUI3OUMwMzI0ODZBNzU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUNGQjFBNUQ5OTM4QTY0QjNCNTRBODMyRDVCNzlDMDMyNDg2 QTc1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmU5NTRmNDItOTQ1Mi00MjQ3LTk5 YTUtMzFhNTNlNTZhOWY4LzAvQUNGQjFBNUQ5OTM4QTY0QjNCNTRBODMyRDVCNzlD MDMyNDg2QTc1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMSFgo/W7AfJVHMQ4dHSgK9gQkzrOlMQwVG/ dWP8r8UNZtVvkSUcmQElaYotCfajng6s1UErAPQiwm9+LMA3QJgsOnbKeB7t9Tqt Do8/lP85njuG6hRu9RfPdipurHA9jxJ/rO+vUyPa8/zaHyBElasM2Y8PdVhvmINm wP6zOJ1Ft0RXJtryHdRAwXHZA7q7DwA0/jjSUjvw68BeBofDoBzS6eIsYLP5uTir VXdaUkC4JCBz4MQ2ee0nwH2tKo8FflUdJmzaE81LCasLvN2BN5ATZVIWYNDtKDuu qB8A5FgVsH+7kheXBZ7EpNTY3xpAuoMNGAsKaUUPuBmjTdUhoGY= -----END CERTIFICATE-----Generated at Thu Mar 26 19:46:45 2026 by rpki-client