$ rpki-client -vvf repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft File: AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft (raw, json) Hash identifier: vvhCpSpUfDd4xtrRmoLzHb8IRgTFKlHM1Y50j85Utzk= Subject key identifier: 1D:63:2F:37:3A:6D:39:2D:51:3D:66:16:1B:75:8C:BD:A4:F0:F1:C4 Authority key identifier: AC:0E:9A:C4:2F:52:F2:15:8C:3E:C5:FD:3E:87:9B:2B:B2:A9:DF:85 Certificate issuer: /CN=AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85 Certificate serial: 11BC8ED82CB630CC7904525B726128BD499EF505 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft Manifest number: 0409 Signing time: Wed 11 Mar 2026 20:42:27 +0000 Manifest this update: Wed 11 Mar 2026 20:37:27 +0000 Manifest next update: Sat 14 Mar 2026 23:36:27 +0000 Files and hashes: 1: AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.crl (hash: WIQdHKWtJZgSPHKuUyqTwR0j1W+/gCaxQ+rDwyyBL88=) 2: 3130332e38332e3137322e302f32322d3234203d3e20313332363431.roa (hash: 6n0zbkjlvbHceH0p62I2wThs9xuZUKLnW06pWcnuIOM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.crl rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Mar 2026 23:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:bc:8e:d8:2c:b6:30:cc:79:04:52:5b:72:61:28:bd:49:9e:f5:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85 Validity Not Before: Mar 11 20:37:27 2026 GMT Not After : Mar 14 23:36:27 2026 GMT Subject: CN=1D632F373A6D392D513D66161B758CBDA4F0F1C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:14:38:cc:f2:30:59:2b:23:ed:d9:9c:11:00: 11:25:a8:22:98:84:d4:ce:2b:13:fc:a9:77:45:24: c2:14:f1:e8:ac:c4:0f:d4:3b:c2:19:e0:59:e3:19: 8d:dd:cd:d6:8c:4b:98:96:6b:42:fd:b4:a0:00:70: c6:34:ae:c5:32:d0:db:38:74:cf:8a:70:6c:bd:9a: 23:f9:0b:cd:38:59:99:54:b9:d0:8d:d6:c2:32:b4: cc:4d:59:af:ff:69:d5:c7:7b:8f:fc:cb:71:cf:89: df:21:3e:d4:4c:e5:31:5b:80:8c:24:74:2c:79:b4: 89:06:36:8a:67:ed:2a:d0:35:67:e9:e5:64:f0:c2: 99:df:cc:90:fa:43:19:02:55:69:bf:37:61:b6:49: ea:e7:cf:f4:be:dc:a5:a3:f0:53:53:95:cc:45:43: dd:c6:32:1c:42:2f:ff:6f:67:1f:a2:9e:11:8b:a4: b7:d3:2d:84:ea:db:99:5c:01:d1:22:7b:89:3e:42: 89:7b:fb:29:b6:e6:10:b1:09:8f:be:87:34:13:46: 7d:73:33:3e:cc:21:b6:41:18:4d:b9:ec:4c:8d:04: a9:9a:d4:12:a5:aa:ec:b0:b2:c0:33:c1:89:16:f3: 2e:11:8a:61:5d:17:6c:40:e7:7b:b7:31:7e:87:4b: 7e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:63:2F:37:3A:6D:39:2D:51:3D:66:16:1B:75:8C:BD:A4:F0:F1:C4 X509v3 Authority Key Identifier: keyid:AC:0E:9A:C4:2F:52:F2:15:8C:3E:C5:FD:3E:87:9B:2B:B2:A9:DF:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:49:bc:23:f2:3e:dd:ea:0a:4e:2f:58:3d:d4:89:db:56:c9: f2:90:35:51:b6:4b:b3:8b:e1:39:13:00:44:41:bc:63:dc:9e: fd:d1:78:d3:5c:28:f0:5f:4d:c3:08:40:cf:bd:db:62:91:cf: e6:70:8b:2c:e3:ce:73:36:46:6a:cd:0c:00:15:a3:e8:24:fa: 0b:a3:60:a7:71:36:de:7b:74:34:c2:4c:18:0b:de:e3:8b:e5: 27:13:19:31:2c:49:9d:1d:89:b4:e5:4a:75:b0:b4:df:b6:f8: ed:9e:97:0a:c0:78:f5:cc:7d:e6:fe:65:83:90:aa:8e:33:7f: a1:29:f0:8b:ce:0d:db:db:76:90:d0:46:ab:59:5f:46:d1:b4: 4c:5e:56:b5:77:2e:58:03:2e:1a:9d:68:b4:8a:88:3a:80:98: 1f:8b:d6:05:50:a4:e0:36:a9:87:36:1c:4b:91:99:4e:08:e2: 58:d4:00:6a:9a:6c:01:03:62:99:5d:cd:89:c2:e7:61:da:a4: 40:31:78:55:f8:24:05:28:00:69:a1:f6:a5:f8:1c:43:79:9a: c9:f7:dd:7b:49:02:1c:7f:27:cf:d7:f1:46:af:2a:8b:fd:0f: dc:11:24:38:a8:53:5b:75:06:bd:97:f0:c5:ba:79:c9:7b:ea: bc:a3:7d:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEbyO2Cy2MMx5BFJbcmEovUme9QUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUMwRTlBQzQyRjUyRjIxNThDM0VDNUZEM0U4NzlCMkJC MkE5REY4NTAeFw0yNjAzMTEyMDM3MjdaFw0yNjAzMTQyMzM2MjdaMDMxMTAvBgNV BAMTKDFENjMyRjM3M0E2RDM5MkQ1MTNENjYxNjFCNzU4Q0JEQTRGMEYxQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfFDjM8jBZKyPt2ZwRABElqCKY hNTOKxP8qXdFJMIU8eisxA/UO8IZ4FnjGY3dzdaMS5iWa0L9tKAAcMY0rsUy0Ns4 dM+KcGy9miP5C804WZlUudCN1sIytMxNWa//adXHe4/8y3HPid8hPtRM5TFbgIwk dCx5tIkGNopn7SrQNWfp5WTwwpnfzJD6QxkCVWm/N2G2Sernz/S+3KWj8FNTlcxF Q93GMhxCL/9vZx+inhGLpLfTLYTq25lcAdEie4k+Qol7+ym25hCxCY++hzQTRn1z Mz7MIbZBGE257EyNBKma1BKlquywssAzwYkW8y4RimFdF2xA53u3MX6HS36bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHWMvNzptOS1RPWYWG3WMvaTw8cQwHwYDVR0j BBgwFoAUrA6axC9S8hWMPsX9PoebK7Kp34UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NmY2NWRjMy00YTJiLTQyMDctYmNjYi1iMGQxNGRkOTM0MDMvMC9BQzBFOUFDNDJG NTJGMjE1OEMzRUM1RkQzRTg3OUIyQkIyQTlERjg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUMwRTlBQzQyRjUyRjIxNThDM0VDNUZEM0U4NzlCMkJCMkE5 REY4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjZmNjVkYzMtNGEyYi00MjA3LWJj Y2ItYjBkMTRkZDkzNDAzLzAvQUMwRTlBQzQyRjUyRjIxNThDM0VDNUZEM0U4NzlC MkJCMkE5REY4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFdJvCPyPt3qCk4vWD3UidtWyfKQNVG2S7OL 4TkTAERBvGPcnv3ReNNcKPBfTcMIQM+922KRz+ZwiyzjznM2RmrNDAAVo+gk+guj YKdxNt57dDTCTBgL3uOL5ScTGTEsSZ0dibTlSnWwtN+2+O2elwrAePXMfeb+ZYOQ qo4zf6Ep8IvODdvbdpDQRqtZX0bRtExeVrV3LlgDLhqdaLSKiDqAmB+L1gVQpOA2 qYc2HEuRmU4I4ljUAGqabAEDYpldzYnC52HapEAxeFX4JAUoAGmh9qX4HEN5msn3 3XtJAhx/J8/X8UavKov9D9wRJDioU1t1Br2X8MW6ecl76ryjfS8= -----END CERTIFICATE-----Generated at Fri Mar 13 10:55:46 2026 by rpki-client