$ rpki-client -vvf repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft File: ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft (raw, json) Hash identifier: eNE/GkqFkpe9CtKzisOCqoEfiDrn0CjwiaUDkTd2fBU= Subject key identifier: AE:13:5E:BB:0A:06:8C:49:6D:08:21:A5:9C:8A:57:8C:71:60:39:81 Authority key identifier: AC:FB:1A:5D:99:38:A6:4B:3B:54:A8:32:D5:B7:9C:03:24:86:A7:59 Certificate issuer: /CN=ACFB1A5D9938A64B3B54A832D5B79C032486A759 Certificate serial: 6012210B31BFDC3AB5D0B779D66ACA183D965CEC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ACFB1A5D9938A64B3B54A832D5B79C032486A759.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft Manifest number: 0114 Signing time: Tue 21 Apr 2026 03:30:01 +0000 Manifest this update: Tue 21 Apr 2026 03:25:01 +0000 Manifest next update: Fri 24 Apr 2026 08:27:01 +0000 Files and hashes: 1: ACFB1A5D9938A64B3B54A832D5B79C032486A759.crl (hash: /ZiX1yJY6qs+ILZ9GjUbkmUgu+Gsxt92S3nNIEIm5J8=) 2: 3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa (hash: EWnjtErVMnBbrrbwTFVBXyhULkzmfdybYpW9vhB6Px8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.crl rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ACFB1A5D9938A64B3B54A832D5B79C032486A759.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 08:27:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:12:21:0b:31:bf:dc:3a:b5:d0:b7:79:d6:6a:ca:18:3d:96:5c:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ACFB1A5D9938A64B3B54A832D5B79C032486A759 Validity Not Before: Apr 21 03:25:01 2026 GMT Not After : Apr 24 08:27:01 2026 GMT Subject: CN=AE135EBB0A068C496D0821A59C8A578C71603981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9d:3f:8d:d1:77:68:6c:6f:09:7e:ba:91:d1: 18:60:9e:a3:10:64:24:78:ce:4c:eb:1e:7f:6f:56: cc:c4:42:a9:a9:74:d6:98:dc:ef:63:0f:85:20:ec: f7:44:5f:be:f3:05:df:82:5b:4b:e1:06:50:29:57: c5:bb:64:85:85:41:1e:7f:8d:57:3c:a4:84:18:83: e1:38:e6:9d:0b:73:de:56:c6:cc:9c:56:96:dd:b4: cc:65:30:0d:19:e6:8f:3b:27:6b:7f:e2:b1:de:c8: d4:07:7c:b2:0c:71:7d:aa:2b:92:03:a2:7a:ab:e5: 17:37:06:18:68:35:0a:5d:4c:4e:fd:94:ad:90:3b: ba:ce:c5:f7:92:82:36:5f:c3:36:26:b4:0a:1c:a9: b2:5b:4d:70:57:99:98:35:15:19:46:b1:00:97:65: e2:86:be:61:a4:8c:cd:01:9e:42:22:28:79:1c:06: d9:2a:c6:5e:b0:39:08:63:8c:87:56:95:7a:15:c2: 49:84:69:df:ee:7f:2b:43:95:64:c1:a8:6a:e7:cf: 38:d0:6b:52:e4:dc:6a:4d:c2:96:7a:5e:8e:b6:1b: 91:c7:ab:8e:14:10:18:51:ec:34:9e:5a:23:2d:04: 7b:1d:8b:76:cf:91:97:29:47:25:a5:30:b0:bc:4d: c1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:13:5E:BB:0A:06:8C:49:6D:08:21:A5:9C:8A:57:8C:71:60:39:81 X509v3 Authority Key Identifier: keyid:AC:FB:1A:5D:99:38:A6:4B:3B:54:A8:32:D5:B7:9C:03:24:86:A7:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ACFB1A5D9938A64B3B54A832D5B79C032486A759.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:2d:ca:0b:8b:c8:ef:9a:59:4d:c7:92:42:25:44:0a:40:b3: 64:a5:38:9c:a3:2e:be:ff:65:34:db:fe:76:e0:d1:d5:09:f0: f4:18:e4:41:59:c4:8d:42:1f:f4:05:37:70:34:bf:45:85:d8: 22:60:25:7d:df:98:6c:01:99:f9:f6:a6:76:70:44:ac:3a:27: 2f:86:3f:98:87:be:71:af:c5:1a:6e:b6:ea:d4:0b:e9:9f:5b: 82:94:ff:77:ce:1a:46:67:0a:40:25:5b:d5:ee:d2:d2:37:7b: 7e:64:2e:88:0a:2d:bb:62:39:04:b6:d3:26:cf:aa:a0:7e:cf: 47:84:31:7a:f1:38:70:07:f4:9b:83:8c:08:7e:a4:a7:37:43: c6:e5:bb:e6:13:15:59:3e:d6:40:da:f1:3a:13:21:7e:14:b7: b3:f4:05:2d:b2:d3:ca:c9:1c:d5:1e:f0:9a:ae:f7:0d:c4:23: f0:d3:ec:fe:f9:9e:f1:06:2f:d9:12:5d:4e:5e:4f:26:18:23: 3e:12:93:1b:70:9a:03:ea:54:e9:5f:74:a9:b1:bd:59:12:e4: 15:fd:8e:9b:9f:9f:5c:41:71:c2:e5:e0:0d:6b:d0:32:72:8c: 43:3d:8e:4c:89:6b:25:73:db:13:a4:50:05:e5:b6:0f:1a:5e: d6:74:2f:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYBIhCzG/3Dq10Ld51mrKGD2WXOwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUNGQjFBNUQ5OTM4QTY0QjNCNTRBODMyRDVCNzlDMDMy NDg2QTc1OTAeFw0yNjA0MjEwMzI1MDFaFw0yNjA0MjQwODI3MDFaMDMxMTAvBgNV BAMTKEFFMTM1RUJCMEEwNjhDNDk2RDA4MjFBNTlDOEE1NzhDNzE2MDM5ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8nT+N0XdobG8JfrqR0RhgnqMQ ZCR4zkzrHn9vVszEQqmpdNaY3O9jD4Ug7PdEX77zBd+CW0vhBlApV8W7ZIWFQR5/ jVc8pIQYg+E45p0Lc95WxsycVpbdtMxlMA0Z5o87J2t/4rHeyNQHfLIMcX2qK5ID onqr5Rc3BhhoNQpdTE79lK2QO7rOxfeSgjZfwzYmtAocqbJbTXBXmZg1FRlGsQCX ZeKGvmGkjM0BnkIiKHkcBtkqxl6wOQhjjIdWlXoVwkmEad/ufytDlWTBqGrnzzjQ a1Lk3GpNwpZ6Xo62G5HHq44UEBhR7DSeWiMtBHsdi3bPkZcpRyWlMLC8TcHzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrhNeuwoGjEltCCGlnIpXjHFgOYEwHwYDVR0j BBgwFoAUrPsaXZk4pks7VKgy1becAySGp1kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTk1NGY0Mi05NDUyLTQyNDctOTlhNS0zMWE1M2U1NmE5ZjgvMC9BQ0ZCMUE1RDk5 MzhBNjRCM0I1NEE4MzJENUI3OUMwMzI0ODZBNzU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUNGQjFBNUQ5OTM4QTY0QjNCNTRBODMyRDVCNzlDMDMyNDg2 QTc1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmU5NTRmNDItOTQ1Mi00MjQ3LTk5 YTUtMzFhNTNlNTZhOWY4LzAvQUNGQjFBNUQ5OTM4QTY0QjNCNTRBODMyRDVCNzlD MDMyNDg2QTc1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF4tyguLyO+aWU3HkkIlRApAs2SlOJyjLr7/ ZTTb/nbg0dUJ8PQY5EFZxI1CH/QFN3A0v0WF2CJgJX3fmGwBmfn2pnZwRKw6Jy+G P5iHvnGvxRputurUC+mfW4KU/3fOGkZnCkAlW9Xu0tI3e35kLogKLbtiOQS20ybP qqB+z0eEMXrxOHAH9JuDjAh+pKc3Q8blu+YTFVk+1kDa8ToTIX4Ut7P0BS2y08rJ HNUe8Jqu9w3EI/DT7P75nvEGL9kSXU5eTyYYIz4SkxtwmgPqVOlfdKmxvVkS5BX9 jpufn1xBccLl4A1r0DJyjEM9jkyJayVz2xOkUAXltg8aXtZ0Lxw= -----END CERTIFICATE-----Generated at Wed Apr 22 04:54:21 2026 by rpki-client