$ rpki-client -vvf repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft File: AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft (raw, json) Hash identifier: zrhWuwUzCsYO3bQgiB+qGbTfnuHlImoCz9owQnfSCJ8= Subject key identifier: 78:58:05:28:8F:5A:6C:25:AC:23:2D:59:BB:86:0A:9C:D5:64:1B:19 Authority key identifier: AC:0E:9A:C4:2F:52:F2:15:8C:3E:C5:FD:3E:87:9B:2B:B2:A9:DF:85 Certificate issuer: /CN=AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85 Certificate serial: 2F5A8CC0A25A85C81DB38BC97425917E455D8814 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft Manifest number: 041D Signing time: Sun 26 Apr 2026 07:42:27 +0000 Manifest this update: Sun 26 Apr 2026 07:37:27 +0000 Manifest next update: Wed 29 Apr 2026 14:44:27 +0000 Files and hashes: 1: AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.crl (hash: UzVTUG16Y5z0kw1zneuL3ECSaTZb0HtUk0GY8CeUWzU=) 2: 3130332e38332e3137322e302f32322d3234203d3e20313332363431.roa (hash: 6n0zbkjlvbHceH0p62I2wThs9xuZUKLnW06pWcnuIOM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.crl rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Apr 2026 14:44:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:5a:8c:c0:a2:5a:85:c8:1d:b3:8b:c9:74:25:91:7e:45:5d:88:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85 Validity Not Before: Apr 26 07:37:27 2026 GMT Not After : Apr 29 14:44:27 2026 GMT Subject: CN=785805288F5A6C25AC232D59BB860A9CD5641B19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:57:8e:0d:d2:de:53:1a:5a:6b:bd:20:b3:fc: ed:67:e5:a0:55:16:2c:1a:0a:cc:4a:10:63:c0:8b: 70:f8:03:02:90:7d:39:f8:f2:bd:18:d2:63:4c:76: 29:83:11:09:d9:29:13:cb:d2:2f:d8:d1:71:c7:a2: 65:9d:e5:14:31:96:68:a2:6d:63:1b:80:bb:c4:e1: 04:b8:85:e9:af:91:c5:dd:b6:46:a1:df:df:c0:4f: 44:87:b0:d3:fe:7e:0f:75:70:3a:5e:a5:fe:f8:f0: 4b:79:e4:17:00:88:d6:23:3c:93:ec:82:71:ce:6e: c7:35:dd:fd:9f:d2:ca:66:1e:07:a1:d4:99:ea:ec: c2:18:a1:f9:d9:a3:dd:77:4c:d7:68:38:80:20:0a: a3:c7:a5:60:4f:a5:20:26:e0:0d:94:41:4e:71:03: 9e:3f:c3:7c:9e:fb:30:d6:c2:e7:9d:ee:00:de:6a: 83:6b:54:fc:ce:23:c9:15:42:3a:2c:95:e1:70:9e: 8b:f7:21:85:90:6f:d9:8d:69:05:39:2a:8c:ef:fb: 17:3b:4c:ce:89:5f:5e:ae:e5:6f:f8:cf:59:91:62: a5:b8:c6:90:37:07:f7:b6:40:fc:d1:a0:3a:54:34: b5:59:f2:ef:80:63:f5:d1:f9:a7:eb:2f:49:54:de: a4:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:58:05:28:8F:5A:6C:25:AC:23:2D:59:BB:86:0A:9C:D5:64:1B:19 X509v3 Authority Key Identifier: keyid:AC:0E:9A:C4:2F:52:F2:15:8C:3E:C5:FD:3E:87:9B:2B:B2:A9:DF:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:ac:67:77:81:91:f2:dc:71:70:59:1c:39:4f:8e:35:bd:be: e6:29:0c:93:c9:c8:8b:bc:3f:c3:73:11:24:4a:54:60:1a:31: f9:94:93:88:da:37:8b:06:ea:3b:cc:86:92:8b:df:60:4d:4e: 1a:03:af:c4:a8:7b:92:0e:fa:39:d8:1e:9c:50:7a:dd:7d:5a: 22:92:19:42:49:4f:53:08:02:e1:d8:3c:ee:c0:2a:63:1e:d7: 3f:c5:a5:19:d5:cc:39:b6:2a:61:bd:d3:fa:86:79:8c:8c:64: c0:98:bf:3b:bd:63:07:41:dc:0d:27:2c:a1:ae:f1:dd:e8:5c: 5f:92:7d:be:e7:9a:32:c7:14:02:d8:16:c0:07:13:be:8a:f4: 62:d7:2c:ae:e4:24:c8:a6:77:4c:bb:42:cf:25:ed:2e:07:36: 68:40:5b:1c:48:d4:72:26:a3:aa:46:62:92:c6:e7:a0:4b:8b: 4a:87:5d:84:13:f8:9a:1b:f0:2d:50:31:43:ee:7e:1b:dc:f1: 24:28:16:6d:38:1b:6c:dc:0a:dc:35:04:b5:67:9f:1d:e0:be: 50:d1:27:30:14:08:37:8a:5d:e0:46:cc:4e:84:64:1a:2f:1d: f1:22:87:69:d4:c4:81:51:fe:de:ed:9a:7b:31:9d:81:90:f3: 16:2d:c8:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL1qMwKJahcgds4vJdCWRfkVdiBQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUMwRTlBQzQyRjUyRjIxNThDM0VDNUZEM0U4NzlCMkJC MkE5REY4NTAeFw0yNjA0MjYwNzM3MjdaFw0yNjA0MjkxNDQ0MjdaMDMxMTAvBgNV BAMTKDc4NTgwNTI4OEY1QTZDMjVBQzIzMkQ1OUJCODYwQTlDRDU2NDFCMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXV44N0t5TGlprvSCz/O1n5aBV FiwaCsxKEGPAi3D4AwKQfTn48r0Y0mNMdimDEQnZKRPL0i/Y0XHHomWd5RQxlmii bWMbgLvE4QS4hemvkcXdtkah39/AT0SHsNP+fg91cDpepf748Et55BcAiNYjPJPs gnHObsc13f2f0spmHgeh1Jnq7MIYofnZo913TNdoOIAgCqPHpWBPpSAm4A2UQU5x A54/w3ye+zDWwued7gDeaoNrVPzOI8kVQjosleFwnov3IYWQb9mNaQU5Kozv+xc7 TM6JX16u5W/4z1mRYqW4xpA3B/e2QPzRoDpUNLVZ8u+AY/XR+afrL0lU3qTxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeFgFKI9abCWsIy1Zu4YKnNVkGxkwHwYDVR0j BBgwFoAUrA6axC9S8hWMPsX9PoebK7Kp34UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NmY2NWRjMy00YTJiLTQyMDctYmNjYi1iMGQxNGRkOTM0MDMvMC9BQzBFOUFDNDJG NTJGMjE1OEMzRUM1RkQzRTg3OUIyQkIyQTlERjg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUMwRTlBQzQyRjUyRjIxNThDM0VDNUZEM0U4NzlCMkJCMkE5 REY4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjZmNjVkYzMtNGEyYi00MjA3LWJj Y2ItYjBkMTRkZDkzNDAzLzAvQUMwRTlBQzQyRjUyRjIxNThDM0VDNUZEM0U4NzlC MkJCMkE5REY4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFusZ3eBkfLccXBZHDlPjjW9vuYpDJPJyIu8 P8NzESRKVGAaMfmUk4jaN4sG6jvMhpKL32BNThoDr8Soe5IO+jnYHpxQet19WiKS GUJJT1MIAuHYPO7AKmMe1z/FpRnVzDm2KmG90/qGeYyMZMCYvzu9YwdB3A0nLKGu 8d3oXF+Sfb7nmjLHFALYFsAHE76K9GLXLK7kJMimd0y7Qs8l7S4HNmhAWxxI1HIm o6pGYpLG56BLi0qHXYQT+Job8C1QMUPufhvc8SQoFm04G2zcCtw1BLVnnx3gvlDR JzAUCDeKXeBGzE6EZBovHfEih2nUxIFR/t7tmnsxnYGQ8xYtyBs= -----END CERTIFICATE-----Generated at Mon Apr 27 19:47:51 2026 by rpki-client