$ rpki-client -vvf repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft File: 00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft (raw, json) Hash identifier: xyPQq3ddUkv9Lqj5KBeer1QKuSHAHZEpk+gY1BxMSoE= Subject key identifier: 5A:98:BB:85:09:9F:FB:5F:7B:2E:55:3A:A7:2F:88:F0:8D:A8:A2:4D Authority key identifier: 00:AC:65:E6:1E:49:13:26:8C:5D:0B:8A:FE:8C:7D:91:3B:68:6D:9F Certificate issuer: /CN=00AC65E61E4913268C5D0B8AFE8C7D913B686D9F Certificate serial: 10D15C32D92787C3E1ADB68B04364E55D3C3E238 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft Manifest number: 0558 Signing time: Tue 17 Mar 2026 10:30:51 +0000 Manifest this update: Tue 17 Mar 2026 10:25:51 +0000 Manifest next update: Fri 20 Mar 2026 18:15:51 +0000 Files and hashes: 1: 323430333a343334303a3a2f33322d3332203d3e20313337333738.roa (hash: 33v24/+Rv2iOxGAU7l0du0lgoN/314/yiFhS7aj6fhE=) 2: 3130332e3131392e3131372e302f32342d3234203d3e20313337333738.roa (hash: HmlGJU60qnT6VsG24BHqwMQLdMGBaxDBrgRKZDFmkxU=) 3: 3130332e3131392e3131382e302f32342d3234203d3e20313337333738.roa (hash: Oqk+2aNoDkz3rAuUwzqbP96AFip7IVOJ+sOmFv2FC3s=) 4: 00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.crl (hash: YUfhO9BHcYNFp0jJjoNNl+Lb7msmSyvF5fFaspIbypI=) 5: 3130332e3131392e3131392e302f32342d3234203d3e20313337333738.roa (hash: dqbXh2fh2OaVSVgJTjSWxwpOg/4I40zirFE6nOuWYzo=) 6: 3130332e3131392e3131362e302f32342d3234203d3e20313337333738.roa (hash: L25qOwaR1z4WBpyOCt6SGRe3C1qJyUGhLdY1D+C8bH0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.crl rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 18:15:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:d1:5c:32:d9:27:87:c3:e1:ad:b6:8b:04:36:4e:55:d3:c3:e2:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00AC65E61E4913268C5D0B8AFE8C7D913B686D9F Validity Not Before: Mar 17 10:25:51 2026 GMT Not After : Mar 20 18:15:51 2026 GMT Subject: CN=5A98BB85099FFB5F7B2E553AA72F88F08DA8A24D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1c:f8:d6:ef:41:19:9e:26:09:5f:e6:e4:4e: 67:5b:8d:71:fe:b7:fa:e8:6b:38:ab:3a:bc:43:e2: 73:34:b5:81:6b:cf:61:4f:a2:28:fd:95:fd:7f:fd: 42:29:be:4b:d4:28:7d:a8:e5:9d:cf:05:a5:cf:47: ae:db:30:37:cb:64:3c:af:8d:17:b1:aa:86:8c:29: be:bf:00:55:84:fa:33:22:b4:f6:6d:c3:36:e8:63: 29:aa:52:21:bf:8e:ce:20:a9:18:ae:ed:d2:ad:81: fe:6b:2b:fa:48:7f:c6:9d:ae:18:4a:fa:2c:90:6d: b6:be:d4:6b:9e:92:b9:c7:60:d3:9c:b7:06:1f:71: f4:8c:b6:6e:b7:43:da:02:2c:f9:d4:c4:a6:b2:59: 19:0c:ea:01:7a:41:f6:7e:5f:5b:95:49:1a:9c:8d: 17:c1:72:65:25:51:95:53:73:78:f1:b6:f5:9b:5d: 2d:ef:50:22:c7:df:3b:7b:d8:f0:74:7f:cf:0c:54: 43:6f:ed:df:d8:1a:9f:41:f4:de:88:e4:4c:87:3a: c2:ce:8e:1b:51:69:6e:bb:7a:84:71:26:ac:c5:05: c1:e9:64:eb:5c:cf:db:ed:87:a0:01:3a:c9:1e:cf: 31:2f:d5:9c:54:10:f6:ef:fe:b8:a8:06:af:00:ef: e6:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:98:BB:85:09:9F:FB:5F:7B:2E:55:3A:A7:2F:88:F0:8D:A8:A2:4D X509v3 Authority Key Identifier: keyid:00:AC:65:E6:1E:49:13:26:8C:5D:0B:8A:FE:8C:7D:91:3B:68:6D:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:9a:59:46:e2:5f:fe:d6:30:1c:f7:ab:5d:81:84:fa:ee:ba: 5b:09:01:81:b6:b0:29:0a:fc:d6:1f:c0:45:ff:69:ad:c9:23: ed:4f:cf:ff:93:20:00:fe:39:4d:a9:3c:ab:b1:bc:fc:d2:14: 85:a0:c7:5f:23:a3:44:42:c7:6e:b4:be:40:c7:4a:9d:b8:22: 58:a6:c8:f2:b6:ba:a8:cb:1e:9c:64:dd:94:8a:c6:8c:24:89: d8:b1:5c:4f:5c:89:c7:23:14:d1:08:10:eb:12:a7:5f:11:8d: e9:1a:f8:2a:d5:db:92:82:ea:3f:a2:fe:9c:44:02:00:c1:a2: 17:e8:9a:89:10:af:4f:a3:b9:66:c3:02:1d:09:bd:4e:b6:bb: 6e:99:7a:a7:b7:1d:f2:a3:6e:ac:43:5f:50:d2:ec:3a:54:75: 1a:6a:85:ab:e2:86:0e:08:2a:fa:ca:55:77:b8:e3:40:16:f1: 21:3f:50:63:48:bf:0a:f4:37:1a:6f:53:ef:d4:b2:9f:b0:7a: 0a:f3:a4:33:ed:21:45:0d:0a:1d:2a:08:ed:66:2c:df:f8:fc: 30:44:b6:1f:b6:e7:50:7a:ce:9a:8b:e0:48:ce:65:19:86:4b: f2:b9:18:53:4e:70:bc:bb:b9:9f:f0:d3:b3:1f:49:70:20:fc: 5b:e8:0b:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUENFcMtknh8PhrbaLBDZOVdPD4jgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBBQzY1RTYxRTQ5MTMyNjhDNUQwQjhBRkU4QzdEOTEz QjY4NkQ5RjAeFw0yNjAzMTcxMDI1NTFaFw0yNjAzMjAxODE1NTFaMDMxMTAvBgNV BAMTKDVBOThCQjg1MDk5RkZCNUY3QjJFNTUzQUE3MkY4OEYwOERBOEEyNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwHPjW70EZniYJX+bkTmdbjXH+ t/roazirOrxD4nM0tYFrz2FPoij9lf1//UIpvkvUKH2o5Z3PBaXPR67bMDfLZDyv jRexqoaMKb6/AFWE+jMitPZtwzboYymqUiG/js4gqRiu7dKtgf5rK/pIf8adrhhK +iyQbba+1GuekrnHYNOctwYfcfSMtm63Q9oCLPnUxKayWRkM6gF6QfZ+X1uVSRqc jRfBcmUlUZVTc3jxtvWbXS3vUCLH3zt72PB0f88MVENv7d/YGp9B9N6I5EyHOsLO jhtRaW67eoRxJqzFBcHpZOtcz9vth6ABOskezzEv1ZxUEPbv/rioBq8A7+blAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWpi7hQmf+197LlU6py+I8I2ook0wHwYDVR0j BBgwFoAUAKxl5h5JEyaMXQuK/ox9kTtobZ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTg5NTBmMC0zYjE0LTRhNmQtYjMwZi03NTM3OWNiMmViY2UvMC8wMEFDNjVFNjFF NDkxMzI2OEM1RDBCOEFGRThDN0Q5MTNCNjg2RDlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDBBQzY1RTYxRTQ5MTMyNjhDNUQwQjhBRkU4QzdEOTEzQjY4 NkQ5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U4OTUwZjAtM2IxNC00YTZkLWIz MGYtNzUzNzljYjJlYmNlLzAvMDBBQzY1RTYxRTQ5MTMyNjhDNUQwQjhBRkU4QzdE OTEzQjY4NkQ5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADiaWUbiX/7WMBz3q12BhPruulsJAYG2sCkK /NYfwEX/aa3JI+1Pz/+TIAD+OU2pPKuxvPzSFIWgx18jo0RCx260vkDHSp24Ilim yPK2uqjLHpxk3ZSKxowkidixXE9ciccjFNEIEOsSp18Rjeka+CrV25KC6j+i/pxE AgDBohfomokQr0+juWbDAh0JvU62u26Zeqe3HfKjbqxDX1DS7DpUdRpqhavihg4I KvrKVXe440AW8SE/UGNIvwr0NxpvU+/Usp+wegrzpDPtIUUNCh0qCO1mLN/4/DBE th+251B6zpqL4EjOZRmGS/K5GFNOcLy7uZ/w07MfSXAg/FvoC00= -----END CERTIFICATE-----Generated at Thu Mar 19 09:38:57 2026 by rpki-client