$ rpki-client -vvf repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.mft File: 4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.mft (raw, json) Hash identifier: xHMr2ylQ5Gfi1+Pa6evEQ+SWZZR6YDNaz0shuXJt8HE= Subject key identifier: BA:4E:ED:26:13:C9:45:8B:F7:C1:4F:47:F8:BE:B1:CB:5E:DE:6B:C5 Authority key identifier: 4A:CE:0A:DD:BB:5B:F3:B4:9B:1C:DA:5A:23:10:CF:06:B3:34:A6:59 Certificate issuer: /CN=4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659 Certificate serial: 0AF9A9F6D73E0D5D2CFC10F8500E7AAA8874832C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.mft Manifest number: F6 Signing time: Tue 21 Apr 2026 19:40:53 +0000 Manifest this update: Tue 21 Apr 2026 19:35:53 +0000 Manifest next update: Sat 25 Apr 2026 03:38:53 +0000 Files and hashes: 1: 4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.crl (hash: AdzOmfOe4afMYF3adkLVQIf3LizqCxOHLO5IXsnfxk0=) 2: 3136302e32352e3139372e302f32342d3234203d3e20313533313037.roa (hash: xdI7HWpC7S6F3YsdhXQZOI+Bb5mAqBVyTqf6Y1GJCkg=) 3: 3136302e32352e3139362e302f32342d3234203d3e20313533313037.roa (hash: WXQWW4Wi6xrEbWBjUR+QMjICoHgwf/HhAfAnKsJzlws=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.crl rsync://repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 13:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:f9:a9:f6:d7:3e:0d:5d:2c:fc:10:f8:50:0e:7a:aa:88:74:83:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659 Validity Not Before: Apr 21 19:35:53 2026 GMT Not After : Apr 25 03:38:53 2026 GMT Subject: CN=BA4EED2613C9458BF7C14F47F8BEB1CB5EDE6BC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3c:4b:ff:89:95:c4:7d:e0:03:8f:29:ad:e5: 8d:14:28:76:8e:d0:13:f5:c4:51:51:e5:0d:7a:50: c4:30:d9:1b:2d:81:c3:ad:0a:73:24:98:48:ce:70: bd:a7:f4:50:5f:16:bb:53:cf:31:34:ae:31:bc:47: 2c:33:0f:0c:e0:90:2c:cc:14:d0:c3:8f:fd:4f:69: 6e:36:e8:9c:ae:f9:f9:1a:91:c8:c2:50:b3:3c:3d: e6:b5:04:66:e0:2f:46:8e:6c:f1:ac:b9:1b:51:ae: 93:b4:8a:b3:01:98:fe:3f:da:3e:8d:db:ac:31:6a: 33:d4:00:2f:df:ab:9f:0a:91:3d:be:23:ff:e9:30: 08:22:25:e8:34:13:a0:39:31:b9:3c:21:39:24:0b: db:e2:c7:3f:74:a9:de:e6:c8:61:7d:33:db:d4:bf: 70:c2:81:aa:6f:66:d3:48:69:18:52:a1:8c:81:bc: 7b:09:fb:73:1b:79:95:07:21:b7:cd:09:75:48:18: f9:8e:59:9f:a9:6b:cf:b6:a3:3f:2c:ad:a3:af:69: 7b:bc:f9:5b:92:f7:e2:70:93:4d:ab:21:38:8c:e4: ab:b3:b2:cd:92:d6:db:44:9c:a7:30:01:bd:b1:7c: 61:d7:94:f4:d7:52:a2:e1:eb:4a:d7:d2:2f:74:60: 1d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:4E:ED:26:13:C9:45:8B:F7:C1:4F:47:F8:BE:B1:CB:5E:DE:6B:C5 X509v3 Authority Key Identifier: keyid:4A:CE:0A:DD:BB:5B:F3:B4:9B:1C:DA:5A:23:10:CF:06:B3:34:A6:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:36:33:16:29:d5:d0:f4:02:48:47:8e:8c:0d:50:6a:38:9a: 3c:ea:81:c1:64:4f:9c:e1:8e:8c:fc:ff:37:12:96:ef:b9:fe: e4:84:43:c8:8b:01:a0:76:2a:25:89:52:ae:e7:f7:88:4e:34: 3c:5b:7a:6e:ec:32:ff:3c:56:ee:65:f4:a0:e8:d7:39:1b:70: 30:b2:ee:c4:99:5c:6a:13:a3:1d:ae:35:0c:08:64:5f:97:1b: b8:86:73:43:c2:dc:9f:c2:94:16:d6:c2:01:2a:e2:16:46:18: af:c2:a1:eb:ed:17:57:2a:ba:bb:d1:1b:9d:50:2b:a0:7f:72: 69:3f:cd:63:9f:97:09:e0:a1:76:04:7a:76:10:14:5e:ed:c3: a1:5f:d4:7d:75:a4:e3:ea:92:29:cc:fe:72:55:e4:c0:2b:83: a5:01:9e:47:90:ac:33:1a:56:be:3a:12:85:29:00:e8:5a:38: 91:4e:87:a7:5f:2e:e7:e2:10:86:31:44:15:bd:99:15:c4:60: a5:44:01:69:f9:62:f7:da:54:cb:bd:b1:c2:42:3d:ca:d5:b0: be:19:25:dc:51:3a:da:77:68:2b:f1:e8:3c:03:f9:c9:77:b4: 9f:47:4b:1a:f8:85:f0:70:cf:9f:3e:8d:8d:e7:e2:e5:38:19: 6d:f1:53:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCvmp9tc+DV0s/BD4UA56qoh0gywwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFDRTBBRERCQjVCRjNCNDlCMUNEQTVBMjMxMENGMDZC MzM0QTY1OTAeFw0yNjA0MjExOTM1NTNaFw0yNjA0MjUwMzM4NTNaMDMxMTAvBgNV BAMTKEJBNEVFRDI2MTNDOTQ1OEJGN0MxNEY0N0Y4QkVCMUNCNUVERTZCQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHPEv/iZXEfeADjymt5Y0UKHaO 0BP1xFFR5Q16UMQw2RstgcOtCnMkmEjOcL2n9FBfFrtTzzE0rjG8RywzDwzgkCzM FNDDj/1PaW426Jyu+fkakcjCULM8Pea1BGbgL0aObPGsuRtRrpO0irMBmP4/2j6N 26wxajPUAC/fq58KkT2+I//pMAgiJeg0E6A5Mbk8ITkkC9vixz90qd7myGF9M9vU v3DCgapvZtNIaRhSoYyBvHsJ+3MbeZUHIbfNCXVIGPmOWZ+pa8+2oz8sraOvaXu8 +VuS9+Jwk02rITiM5Kuzss2S1ttEnKcwAb2xfGHXlPTXUqLh60rX0i90YB3LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuk7tJhPJRYv3wU9H+L6xy17ea8UwHwYDVR0j BBgwFoAUSs4K3btb87SbHNpaIxDPBrM0plkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YjY5ZDY2Ny0xN2E0LTRmZGQtOWM1Ny0xMTIyMDMzZWY5OTkvMC80QUNFMEFEREJC NUJGM0I0OUIxQ0RBNUEyMzEwQ0YwNkIzMzRBNjU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNEFDRTBBRERCQjVCRjNCNDlCMUNEQTVBMjMxMENGMDZCMzM0 QTY1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmI2OWQ2NjctMTdhNC00ZmRkLTlj NTctMTEyMjAzM2VmOTk5LzAvNEFDRTBBRERCQjVCRjNCNDlCMUNEQTVBMjMxMENG MDZCMzM0QTY1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGQ2MxYp1dD0AkhHjowNUGo4mjzqgcFkT5zh joz8/zcSlu+5/uSEQ8iLAaB2KiWJUq7n94hONDxbem7sMv88Vu5l9KDo1zkbcDCy 7sSZXGoTox2uNQwIZF+XG7iGc0PC3J/ClBbWwgEq4hZGGK/CoevtF1cqurvRG51Q K6B/cmk/zWOflwngoXYEenYQFF7tw6Ff1H11pOPqkinM/nJV5MArg6UBnkeQrDMa Vr46EoUpAOhaOJFOh6dfLufiEIYxRBW9mRXEYKVEAWn5YvfaVMu9scJCPcrVsL4Z JdxROtp3aCvx6DwD+cl3tJ9HSxr4hfBwz58+jY3n4uU4GW3xU3A= -----END CERTIFICATE-----Generated at Wed Apr 22 04:52:15 2026 by rpki-client