$ rpki-client -vvf repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft File: ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft (raw, json) Hash identifier: 8QHZndJJEMXck+l35FDSBnobfWjqnwzydbA/LnZaZtM= Subject key identifier: 3F:88:9E:E3:77:20:F9:30:1E:F3:3B:6A:76:25:89:D0:09:6D:C2:C5 Authority key identifier: AC:C3:D7:9A:B1:BE:F6:2B:C0:09:5B:6F:6A:C3:F3:44:6A:A9:03:53 Certificate issuer: /CN=ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353 Certificate serial: 2E71CC59177A0B85FDB85428BA73AD11956B6EFC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft Manifest number: 0569 Signing time: Tue 21 Apr 2026 12:31:05 +0000 Manifest this update: Tue 21 Apr 2026 12:26:05 +0000 Manifest next update: Fri 24 Apr 2026 22:56:05 +0000 Files and hashes: 1: 323030313a6466343a336230303a3a2f34382d3438203d3e203535363838.roa (hash: ejfVv9si1K2MpeXhh8zMJGLdHAeeV0dhSQaga8rtoCM=) 2: 3130312e35302e302e302f32322d3234203d3e203535363838.roa (hash: JE0sJw2Y30gQbCmAIhnjpinJa8eG7Fgewlr8Jax6ero=) 3: ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.crl (hash: 4qI2GRY4qwSgk5CXVQ3V0ooOxMu3SOwGT7IfRLBBFmk=) 4: 3130332e32372e3230362e302f32332d3234203d3e203535363838.roa (hash: UUI0UvU6AUH37Q/H9zW8u0Apq7Y6pN001mJMdkH8taI=) 5: 3130332e35362e3134382e302f32332d3234203d3e203535363838.roa (hash: XTrAUzINtImcd3F+XaTVo5H750rmDxdeBt+LpGOrxS4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.crl rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 22:56:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:71:cc:59:17:7a:0b:85:fd:b8:54:28:ba:73:ad:11:95:6b:6e:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353 Validity Not Before: Apr 21 12:26:05 2026 GMT Not After : Apr 24 22:56:05 2026 GMT Subject: CN=3F889EE37720F9301EF33B6A762589D0096DC2C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bf:cb:ee:f0:18:9c:40:a9:13:0e:7c:a2:37: ef:78:ae:ea:f2:ce:5b:b3:43:c6:ac:bb:9e:5a:77: c8:e7:42:bf:90:23:a0:fa:f8:d4:fe:64:25:27:8e: 0a:21:4d:6b:cf:4d:83:e8:14:cb:f7:3b:9b:d8:a6: 7f:ff:eb:92:2f:88:97:0c:c0:0e:53:dc:58:17:4a: 78:c0:66:d5:96:d1:4a:73:c2:a3:ab:20:06:06:3c: 00:ad:c8:6d:16:85:dd:14:53:68:27:f2:a9:cb:09: bb:40:15:8b:51:fa:62:bd:63:0b:30:0b:98:7f:88: f1:77:5a:a3:1e:0c:47:13:93:69:5b:10:e4:ae:f8: e8:6e:21:c8:bd:26:ea:fc:57:3b:c8:b1:7a:42:de: b9:6f:1a:4c:eb:90:35:d7:c1:48:52:2a:6b:27:07: 8b:c9:47:c7:35:c9:c7:ff:1d:fa:62:97:4d:26:df: 66:4c:a1:e3:37:aa:cf:31:1a:35:ef:5b:90:7d:3b: fc:15:91:02:85:96:e5:a8:c5:61:64:bd:d8:84:ad: 21:57:f4:c4:1c:55:43:9a:12:91:dd:59:6f:7a:e9: dd:d9:5c:6c:64:99:63:ab:1c:68:d6:b8:be:3c:9e: 73:4e:2d:bb:5c:e7:9c:13:17:d4:db:f3:02:8f:03: 32:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:88:9E:E3:77:20:F9:30:1E:F3:3B:6A:76:25:89:D0:09:6D:C2:C5 X509v3 Authority Key Identifier: keyid:AC:C3:D7:9A:B1:BE:F6:2B:C0:09:5B:6F:6A:C3:F3:44:6A:A9:03:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:bf:05:4d:77:45:dc:78:26:cb:23:06:ae:94:bd:4a:f4:be: 5f:08:dc:d8:41:ec:12:5f:31:f0:77:a9:68:bd:ba:58:92:a4: ba:23:4d:f3:f8:93:36:09:17:c2:f4:26:60:7f:ec:74:f4:6b: 16:98:fb:39:62:5c:10:3f:71:5e:1a:bd:77:91:30:67:52:56: ae:db:52:3d:39:6f:b1:91:85:85:8e:8a:75:6f:10:af:ba:99: 44:19:01:01:02:bf:3b:db:43:7d:b0:45:04:5f:76:b2:d3:45: c3:95:df:c2:3a:8a:57:b3:85:66:21:fb:5b:73:ad:80:a5:f5: 01:92:90:49:fe:1c:1b:6a:6c:5a:b7:c7:06:e3:0f:cf:3d:42: 6a:0e:67:2f:cd:d1:ca:05:7b:67:f0:c8:75:34:4a:23:94:8d: 98:c3:ab:13:7c:c5:0e:a0:66:e5:fb:68:e1:3f:cd:7a:f9:9d: c6:0b:2b:12:80:e8:92:60:ff:70:08:e4:92:56:4e:01:02:22: ed:93:51:39:70:1b:0a:2b:ac:15:a5:fe:a7:39:f8:47:96:e4: f1:e8:06:3b:0b:b8:a9:b0:8b:6b:b8:8e:b2:d2:12:f4:e8:3c: 94:f7:af:a2:66:66:b3:f4:5b:bd:a6:25:87:fc:10:fd:64:65: b2:4c:57:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULnHMWRd6C4X9uFQounOtEZVrbvwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUNDM0Q3OUFCMUJFRjYyQkMwMDk1QjZGNkFDM0YzNDQ2 QUE5MDM1MzAeFw0yNjA0MjExMjI2MDVaFw0yNjA0MjQyMjU2MDVaMDMxMTAvBgNV BAMTKDNGODg5RUUzNzcyMEY5MzAxRUYzM0I2QTc2MjU4OUQwMDk2REMyQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0v8vu8BicQKkTDnyiN+94rury zluzQ8asu55ad8jnQr+QI6D6+NT+ZCUnjgohTWvPTYPoFMv3O5vYpn//65IviJcM wA5T3FgXSnjAZtWW0UpzwqOrIAYGPACtyG0Whd0UU2gn8qnLCbtAFYtR+mK9Ywsw C5h/iPF3WqMeDEcTk2lbEOSu+OhuIci9Jur8VzvIsXpC3rlvGkzrkDXXwUhSKmsn B4vJR8c1ycf/Hfpil00m32ZMoeM3qs8xGjXvW5B9O/wVkQKFluWoxWFkvdiErSFX 9MQcVUOaEpHdWW966d3ZXGxkmWOrHGjWuL48nnNOLbtc55wTF9Tb8wKPAzLJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP4ie43cg+TAe8ztqdiWJ0AltwsUwHwYDVR0j BBgwFoAUrMPXmrG+9ivACVtvasPzRGqpA1MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzU4YzgwZS1hMzI4LTRmOGMtYTAzZi05MWMzYzI2MjE0YTIvMC9BQ0MzRDc5QUIx QkVGNjJCQzAwOTVCNkY2QUMzRjM0NDZBQTkwMzUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUNDM0Q3OUFCMUJFRjYyQkMwMDk1QjZGNkFDM0YzNDQ2QUE5 MDM1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTc1OGM4MGUtYTMyOC00ZjhjLWEw M2YtOTFjM2MyNjIxNGEyLzAvQUNDM0Q3OUFCMUJFRjYyQkMwMDk1QjZGNkFDM0Yz NDQ2QUE5MDM1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHa/BU13Rdx4JssjBq6UvUr0vl8I3NhB7BJf MfB3qWi9uliSpLojTfP4kzYJF8L0JmB/7HT0axaY+zliXBA/cV4avXeRMGdSVq7b Uj05b7GRhYWOinVvEK+6mUQZAQECvzvbQ32wRQRfdrLTRcOV38I6ilezhWYh+1tz rYCl9QGSkEn+HBtqbFq3xwbjD889QmoOZy/N0coFe2fwyHU0SiOUjZjDqxN8xQ6g ZuX7aOE/zXr5ncYLKxKA6JJg/3AI5JJWTgECIu2TUTlwGworrBWl/qc5+EeW5PHo BjsLuKmwi2u4jrLSEvToPJT3r6JmZrP0W72mJYf8EP1kZbJMVxo= -----END CERTIFICATE-----Generated at Wed Apr 22 09:59:54 2026 by rpki-client