$ rpki-client -vvf repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.mft File: ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.mft (raw, json) Hash identifier: 3KoIeKE+QM/vY0Z54laEVd4+oGBOPrfb9zJYbhTY1Nc= Subject key identifier: BF:D3:9F:E8:DD:13:5F:94:62:9D:CC:C6:77:B0:72:16:5B:76:3B:70 Authority key identifier: AC:DA:02:2F:7F:3E:28:A6:E1:31:DA:80:D4:C4:18:E8:3C:D0:7C:73 Certificate issuer: /CN=ACDA022F7F3E28A6E131DA80D4C418E83CD07C73 Certificate serial: 6570A02AFAD49894A865F4FBE8F875C6AE04C464 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.mft Manifest number: 0428 Signing time: Tue 24 Mar 2026 07:30:03 +0000 Manifest this update: Tue 24 Mar 2026 07:25:03 +0000 Manifest next update: Fri 27 Mar 2026 13:33:03 +0000 Files and hashes: 1: 3131362e35382e3139322e302f32312d3234203d3e203338313534.roa (hash: shSt6RZ1MwvIPYyETnN1BneHslb44OdrCSOCCLJ7w9E=) 2: 3131362e35382e3139342e302f32342d3234203d3e203338313534.roa (hash: zWM0xGqqaOdxz1Hu9SQE3wCPcPGJcY2qyq+pULXMUKw=) 3: ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.crl (hash: +UhYVGojSCocUVukl/xkc0H6KJTRAV4tylORwmPFU1o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.crl rsync://repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 13:33:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:70:a0:2a:fa:d4:98:94:a8:65:f4:fb:e8:f8:75:c6:ae:04:c4:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ACDA022F7F3E28A6E131DA80D4C418E83CD07C73 Validity Not Before: Mar 24 07:25:03 2026 GMT Not After : Mar 27 13:33:03 2026 GMT Subject: CN=BFD39FE8DD135F94629DCCC677B072165B763B70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:6d:a5:8a:ed:8d:cd:80:dd:2d:17:3f:a6:de: b0:e3:8b:8d:41:92:55:91:5b:89:74:14:0c:e8:5e: 31:81:65:87:bd:ee:f7:d7:9b:6c:4a:2f:84:0c:e3: 81:5c:ae:e6:72:78:9e:0b:71:f0:1c:fb:0e:b3:15: 5a:71:c8:e5:a1:d9:07:29:73:f1:b0:ae:9c:3a:32: 1a:9a:09:21:71:8a:b8:65:76:24:70:46:9d:d9:2e: 6c:25:c7:f6:38:e5:0f:ee:61:94:a6:f2:3b:ab:bd: 0d:60:87:fe:67:0f:b6:8d:00:d4:47:df:47:11:aa: fa:80:6a:a6:83:9a:56:f2:23:3e:f9:d7:6c:94:f0: b0:b1:c7:14:17:6a:d0:09:f1:9b:d5:e8:45:06:51: cc:d6:34:b2:13:c3:bf:21:09:04:cd:e9:32:67:d4: 49:80:bf:6d:b7:26:11:35:07:e8:68:c0:a3:aa:2f: 18:19:ea:3e:3d:71:fc:64:20:5b:47:93:e1:40:f3: c6:ba:1b:76:79:9b:9f:38:af:96:29:ba:dd:6c:5e: 19:d0:00:52:8f:04:31:f5:2d:ff:2d:84:f4:71:82: 26:05:9a:ba:51:e7:e1:fb:71:83:b2:7c:db:a3:13: 5a:21:f2:09:26:53:74:15:88:7b:1f:c7:a9:3a:ec: 4e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:D3:9F:E8:DD:13:5F:94:62:9D:CC:C6:77:B0:72:16:5B:76:3B:70 X509v3 Authority Key Identifier: keyid:AC:DA:02:2F:7F:3E:28:A6:E1:31:DA:80:D4:C4:18:E8:3C:D0:7C:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:58:7a:a5:84:3b:4d:cc:9c:ad:a2:d6:da:91:76:5d:3c:4b: 8b:7d:00:28:45:eb:be:03:8f:4e:75:dc:3f:8a:43:a0:11:3b: fe:75:51:28:61:2c:90:9a:31:7b:78:84:f1:ab:98:ad:79:8d: 5c:5a:c1:82:72:04:38:c3:15:71:45:7f:e8:81:73:1e:18:03: 30:81:a6:80:74:6e:03:de:34:32:d6:ba:f3:a5:93:48:7f:a7: 0f:4f:25:6b:e7:01:c7:20:0f:3f:24:d2:1e:ff:42:19:28:cc: a0:df:ec:72:46:98:e1:66:b0:fc:02:70:17:46:d0:a4:83:97: 50:0d:07:d9:93:41:19:a4:cc:80:10:02:2d:49:0a:f4:a2:45: 2e:ea:d3:4b:dd:81:e7:b4:e3:2d:6a:2d:da:08:47:5a:3a:59: fb:2d:2e:3c:05:ef:6e:87:d1:cc:1c:cc:67:d3:00:d5:c5:c7: 3f:ca:93:14:d4:65:d2:fb:81:93:fc:eb:7b:ec:c9:31:a9:c9: 59:66:f1:d0:54:e3:ee:74:cc:4c:b1:27:83:91:ee:08:ed:e6: b5:b2:26:f7:64:5d:24:b5:0d:2e:64:1a:46:e9:fc:f8:f8:38: 52:27:8d:ac:c1:6f:70:8f:48:b6:82:42:b5:0b:ca:52:81:39: 2e:da:77:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZXCgKvrUmJSoZfT76Ph1xq4ExGQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUNEQTAyMkY3RjNFMjhBNkUxMzFEQTgwRDRDNDE4RTgz Q0QwN0M3MzAeFw0yNjAzMjQwNzI1MDNaFw0yNjAzMjcxMzMzMDNaMDMxMTAvBgNV BAMTKEJGRDM5RkU4REQxMzVGOTQ2MjlEQ0NDNjc3QjA3MjE2NUI3NjNCNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDibaWK7Y3NgN0tFz+m3rDji41B klWRW4l0FAzoXjGBZYe97vfXm2xKL4QM44FcruZyeJ4LcfAc+w6zFVpxyOWh2Qcp c/Gwrpw6MhqaCSFxirhldiRwRp3ZLmwlx/Y45Q/uYZSm8jurvQ1gh/5nD7aNANRH 30cRqvqAaqaDmlbyIz7512yU8LCxxxQXatAJ8ZvV6EUGUczWNLITw78hCQTN6TJn 1EmAv223JhE1B+howKOqLxgZ6j49cfxkIFtHk+FA88a6G3Z5m584r5Yput1sXhnQ AFKPBDH1Lf8thPRxgiYFmrpR5+H7cYOyfNujE1oh8gkmU3QViHsfx6k67E6hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv9Of6N0TX5RinczGd7ByFlt2O3AwHwYDVR0j BBgwFoAUrNoCL38+KKbhMdqA1MQY6DzQfHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZmViYjY4YS04YTVkLTQxMWMtOGJiMy04MzM0MjMxMDBiNmUvMC9BQ0RBMDIyRjdG M0UyOEE2RTEzMURBODBENEM0MThFODNDRDA3QzczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUNEQTAyMkY3RjNFMjhBNkUxMzFEQTgwRDRDNDE4RTgzQ0Qw N0M3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmZlYmI2OGEtOGE1ZC00MTFjLThi YjMtODMzNDIzMTAwYjZlLzAvQUNEQTAyMkY3RjNFMjhBNkUxMzFEQTgwRDRDNDE4 RTgzQ0QwN0M3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHRYeqWEO03MnK2i1tqRdl08S4t9AChF674D j0513D+KQ6ARO/51UShhLJCaMXt4hPGrmK15jVxawYJyBDjDFXFFf+iBcx4YAzCB poB0bgPeNDLWuvOlk0h/pw9PJWvnAccgDz8k0h7/QhkozKDf7HJGmOFmsPwCcBdG 0KSDl1ANB9mTQRmkzIAQAi1JCvSiRS7q00vdgee04y1qLdoIR1o6WfstLjwF726H 0cwczGfTANXFxz/KkxTUZdL7gZP863vsyTGpyVlm8dBU4+50zEyxJ4OR7gjt5rWy JvdkXSS1DS5kGkbp/Pj4OFInjazBb3CPSLaCQrULylKBOS7ad8M= -----END CERTIFICATE-----Generated at Wed Mar 25 09:47:02 2026 by rpki-client