$ rpki-client -vvf repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft File: AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft (raw, json) Hash identifier: UI9l32smOeiz23CbZ8KzElL+/dMpCECGZvJtpQ/u2sY= Subject key identifier: E4:16:AB:79:8C:64:A0:4B:89:16:3E:3B:0E:1F:9D:AB:3E:60:3F:46 Authority key identifier: AC:0E:9A:C4:2F:52:F2:15:8C:3E:C5:FD:3E:87:9B:2B:B2:A9:DF:85 Certificate issuer: /CN=AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85 Certificate serial: 6D8DD0957C995C0338580B01CC738D54C76CA80D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft Manifest number: 040F Signing time: Wed 25 Mar 2026 18:42:28 +0000 Manifest this update: Wed 25 Mar 2026 18:37:28 +0000 Manifest next update: Sun 29 Mar 2026 03:33:28 +0000 Files and hashes: 1: 3130332e38332e3137322e302f32322d3234203d3e20313332363431.roa (hash: 6n0zbkjlvbHceH0p62I2wThs9xuZUKLnW06pWcnuIOM=) 2: AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.crl (hash: C0Nijd4qLk4/8GkQJhpRZ2+l2hoxwjy4pWlNRh7Jdu0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.crl rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 03:33:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:8d:d0:95:7c:99:5c:03:38:58:0b:01:cc:73:8d:54:c7:6c:a8:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85 Validity Not Before: Mar 25 18:37:28 2026 GMT Not After : Mar 29 03:33:28 2026 GMT Subject: CN=E416AB798C64A04B89163E3B0E1F9DAB3E603F46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:cd:a8:86:eb:86:b3:29:19:1e:f6:f5:4b:9e: 1e:09:3b:39:80:70:91:65:c9:e9:37:a3:02:f7:ce: df:fb:56:de:e8:5b:a1:61:f9:09:88:52:48:6c:29: 16:48:90:00:70:fc:c2:20:00:2d:e3:73:f7:69:22: 94:e6:d5:9a:a9:3b:51:d3:39:ff:0b:1c:b5:6b:31: 91:a0:c5:fa:37:39:ec:19:34:f6:da:ca:f0:be:73: 66:d6:ac:f3:0b:02:b1:cd:b4:36:1d:61:ac:59:ff: 71:97:d4:a4:2b:76:e6:10:ba:ba:34:9a:97:f3:9d: 9c:a4:6f:7b:0f:cf:6e:00:54:6a:0b:a9:bb:be:b9: 01:41:c6:f6:06:5c:fb:fe:15:77:89:6d:da:d1:4f: 9f:ac:85:df:29:2b:7d:96:df:c4:52:f9:d1:fe:90: f6:fa:a8:d8:45:77:9c:97:a4:3d:1e:a0:a0:28:86: 47:af:77:0c:c7:e7:64:15:9e:e8:3b:ff:d0:79:76: c0:d9:90:86:f8:4a:38:7b:3a:2b:af:8f:0a:7c:39: 4c:4d:88:31:36:54:55:ac:ca:d8:24:30:5a:92:99: d0:cd:bb:a1:11:eb:59:66:1b:2a:5e:03:17:74:6c: 2c:3c:e4:a4:13:fb:05:0b:2a:6a:da:19:a4:0d:c1: 97:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:16:AB:79:8C:64:A0:4B:89:16:3E:3B:0E:1F:9D:AB:3E:60:3F:46 X509v3 Authority Key Identifier: keyid:AC:0E:9A:C4:2F:52:F2:15:8C:3E:C5:FD:3E:87:9B:2B:B2:A9:DF:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:e0:77:8e:21:3e:ce:c2:ae:86:ce:c4:b6:a2:4a:83:32:8d: c6:31:35:a9:7c:f0:90:53:94:f5:23:7f:a2:53:1d:95:c6:4d: 34:32:8f:30:72:92:47:db:6c:a3:46:20:93:0f:2e:e2:3e:4b: 79:96:99:ad:3b:1a:74:cf:17:fe:fb:a9:bc:49:21:1c:00:a7: bf:43:e2:cd:38:b7:a0:33:63:63:be:cf:46:e0:69:28:f5:7d: e9:4f:5a:1e:e0:ac:ff:50:d5:57:ff:62:4f:e2:f0:f7:75:dd: f4:06:23:52:4b:98:07:4c:7a:55:eb:64:2e:83:58:8b:59:dd: 0f:c5:40:89:37:79:75:1d:05:de:f8:0c:77:08:ad:61:05:77: af:eb:e7:52:0e:8d:dc:b3:46:f9:ad:61:22:77:0c:60:d7:fa: 48:d3:63:f1:0c:dc:6a:b1:08:fb:11:a8:57:34:2f:8d:0a:5e: 75:1e:54:02:ec:8d:24:35:60:1f:2e:d1:fc:14:ba:9d:ee:df: 33:32:49:8d:00:03:b0:36:c2:f9:8d:76:65:05:34:f2:fb:fe: ca:99:a7:df:e1:b5:f6:7b:80:ce:4b:16:91:e0:51:0a:4f:43: d3:3e:88:b5:21:95:49:b7:d9:83:31:0d:91:e2:36:06:39:58: 96:bf:bd:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbY3QlXyZXAM4WAsBzHONVMdsqA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUMwRTlBQzQyRjUyRjIxNThDM0VDNUZEM0U4NzlCMkJC MkE5REY4NTAeFw0yNjAzMjUxODM3MjhaFw0yNjAzMjkwMzMzMjhaMDMxMTAvBgNV BAMTKEU0MTZBQjc5OEM2NEEwNEI4OTE2M0UzQjBFMUY5REFCM0U2MDNGNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJzaiG64azKRke9vVLnh4JOzmA cJFlyek3owL3zt/7Vt7oW6Fh+QmIUkhsKRZIkABw/MIgAC3jc/dpIpTm1ZqpO1HT Of8LHLVrMZGgxfo3OewZNPbayvC+c2bWrPMLArHNtDYdYaxZ/3GX1KQrduYQuro0 mpfznZykb3sPz24AVGoLqbu+uQFBxvYGXPv+FXeJbdrRT5+shd8pK32W38RS+dH+ kPb6qNhFd5yXpD0eoKAohkevdwzH52QVnug7/9B5dsDZkIb4Sjh7Oiuvjwp8OUxN iDE2VFWsytgkMFqSmdDNu6ER61lmGypeAxd0bCw85KQT+wULKmraGaQNwZdXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5BareYxkoEuJFj47Dh+dqz5gP0YwHwYDVR0j BBgwFoAUrA6axC9S8hWMPsX9PoebK7Kp34UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NmY2NWRjMy00YTJiLTQyMDctYmNjYi1iMGQxNGRkOTM0MDMvMC9BQzBFOUFDNDJG NTJGMjE1OEMzRUM1RkQzRTg3OUIyQkIyQTlERjg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUMwRTlBQzQyRjUyRjIxNThDM0VDNUZEM0U4NzlCMkJCMkE5 REY4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjZmNjVkYzMtNGEyYi00MjA3LWJj Y2ItYjBkMTRkZDkzNDAzLzAvQUMwRTlBQzQyRjUyRjIxNThDM0VDNUZEM0U4NzlC MkJCMkE5REY4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGjgd44hPs7CrobOxLaiSoMyjcYxNal88JBT lPUjf6JTHZXGTTQyjzBykkfbbKNGIJMPLuI+S3mWma07GnTPF/77qbxJIRwAp79D 4s04t6AzY2O+z0bgaSj1felPWh7grP9Q1Vf/Yk/i8Pd13fQGI1JLmAdMelXrZC6D WItZ3Q/FQIk3eXUdBd74DHcIrWEFd6/r51IOjdyzRvmtYSJ3DGDX+kjTY/EM3Gqx CPsRqFc0L40KXnUeVALsjSQ1YB8u0fwUup3u3zMySY0AA7A2wvmNdmUFNPL7/sqZ p9/htfZ7gM5LFpHgUQpPQ9M+iLUhlUm32YMxDZHiNgY5WJa/vUo= -----END CERTIFICATE-----Generated at Thu Mar 26 13:04:47 2026 by rpki-client