$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.mft File: AC555447BA62C39107F16BF572F82A417F728DBF.mft (raw, json) Hash identifier: U0rZlFBY1hjJt0bWoE8NO/th38FwiX+rMzPbo/f0/ao= Subject key identifier: 02:C5:9B:07:D5:EC:7E:FD:B6:FA:9C:17:25:FE:7C:41:12:A8:8D:48 Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF Certificate issuer: /CN=AC555447BA62C39107F16BF572F82A417F728DBF Certificate serial: 7E3B8E9F6526F33FD377BAC53B9AA5F23C1BB980 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.mft Manifest number: 0698 Signing time: Sat 28 Feb 2026 05:41:56 +0000 Manifest this update: Sat 28 Feb 2026 05:36:56 +0000 Manifest next update: Tue 03 Mar 2026 11:36:56 +0000 Files and hashes: 1: AS38482.roa (hash: Z5T34hUG9DPEbhFsZ1d7bfb7habQ4GAs/XvpAFOHhKk=) 2: AS45493.roa (hash: rZ+bNzJQC/viqI5H1YlJtVUU+yt/vWuH3IoVopKxF0M=) 3: AS17451.roa (hash: VcrGlc+Mn9rF9IDLIOvg+YU+M3gN784w5SoIm6wfn18=) 4: AC555447BA62C39107F16BF572F82A417F728DBF.crl (hash: /XB89ukC1hhXMX8MAfit8Aqk+/07FWQXZ6Mfi+uSxJU=) 5: AS38060.roa (hash: 1IXq4jc1HO5ig714zBEw9ikfHk5alhGdvuka1TRwl+A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 11:36:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:3b:8e:9f:65:26:f3:3f:d3:77:ba:c5:3b:9a:a5:f2:3c:1b:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF Validity Not Before: Feb 28 05:36:56 2026 GMT Not After : Mar 3 11:36:56 2026 GMT Subject: CN=02C59B07D5EC7EFDB6FA9C1725FE7C4112A88D48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8e:b5:9f:43:5b:33:76:89:4a:c2:66:28:f9: 85:43:3f:9f:bd:a3:b6:97:d2:e3:6c:0b:fc:0c:86: 1c:47:a7:59:45:c4:0b:22:a1:09:1a:a0:bc:f0:71: 31:c8:30:75:34:db:6a:00:e2:e1:6c:7e:44:59:0a: 93:81:f9:23:e1:9b:29:21:df:83:b3:47:f9:52:d8: 32:e7:71:bf:3d:be:c6:c3:83:02:0c:7a:cd:49:4b: 8d:60:69:ad:72:76:4a:be:75:af:07:71:25:88:26: f0:46:ce:79:32:ac:2a:d2:cc:f4:1d:59:4a:fc:cc: ce:98:eb:17:c1:a1:ee:46:40:26:12:14:75:f0:00: 24:74:32:b6:da:bb:ed:1f:11:53:8a:16:28:15:21: a4:3c:91:c0:07:54:b1:6f:e6:08:ae:c8:67:8b:c3: 60:3c:02:6f:8c:54:27:b0:ac:70:d8:50:e3:aa:29: 85:7e:15:2e:10:80:cb:78:eb:23:75:50:56:31:0c: 42:e6:5d:79:94:3c:a1:f6:b5:52:25:0c:6c:8c:d0: 54:ee:b1:aa:42:4d:a7:cb:ec:89:ec:c8:2c:66:49: 4c:15:1a:ca:67:23:26:ba:5a:fb:d3:9a:3d:03:a7: aa:5d:3f:33:49:aa:e4:39:61:03:d8:d9:11:e5:8d: 82:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:C5:9B:07:D5:EC:7E:FD:B6:FA:9C:17:25:FE:7C:41:12:A8:8D:48 X509v3 Authority Key Identifier: keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:c3:2e:4a:5e:27:f4:6b:27:73:68:b3:f9:18:86:1d:0d:ca: 71:21:b1:63:0b:05:0d:5e:cf:66:89:59:d5:21:83:6c:74:12: e1:84:b4:6e:f9:43:c2:e4:0a:d0:57:63:0f:ce:85:9c:5b:46: 8f:4f:bf:78:8d:e9:53:8c:42:18:cf:de:28:22:1a:8f:ae:96: 43:df:b7:21:ca:ae:48:fe:35:61:0f:82:22:a1:aa:c5:ea:52: 77:f5:68:bd:5c:23:d6:24:32:f8:43:c8:0b:bb:cf:3a:fe:32: 72:71:eb:98:7a:93:e5:30:a3:cc:b9:b4:a8:be:be:b5:a8:1c: 75:e7:f6:4e:19:d2:b7:dd:54:17:29:12:23:d1:92:a6:16:b7: e6:1b:70:02:33:17:cf:4f:67:0b:47:f0:2e:d8:4c:54:14:7f: 59:3f:fe:b2:0c:6d:7f:bb:00:de:ff:23:ac:bf:5a:1c:5b:89: 99:56:ae:39:f1:52:20:3e:cd:2c:f7:6d:1d:cd:13:c7:31:a4: f4:5a:4d:d0:2b:2a:08:45:a7:b2:9e:03:ee:91:69:85:28:09: e2:1a:3e:36:65:ad:26:39:4c:7a:ae:5f:cc:82:62:95:f3:05: 52:36:47:d7:38:ab:85:fe:d0:02:65:48:4a:f3:30:71:7a:43: 56:47:9d:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfjuOn2Um8z/Td7rFO5ql8jwbuYAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3 RjcyOERCRjAeFw0yNjAyMjgwNTM2NTZaFw0yNjAzMDMxMTM2NTZaMDMxMTAvBgNV BAMTKDAyQzU5QjA3RDVFQzdFRkRCNkZBOUMxNzI1RkU3QzQxMTJBODhENDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkjrWfQ1szdolKwmYo+YVDP5+9 o7aX0uNsC/wMhhxHp1lFxAsioQkaoLzwcTHIMHU022oA4uFsfkRZCpOB+SPhmykh 34OzR/lS2DLncb89vsbDgwIMes1JS41gaa1ydkq+da8HcSWIJvBGznkyrCrSzPQd WUr8zM6Y6xfBoe5GQCYSFHXwACR0Mrbau+0fEVOKFigVIaQ8kcAHVLFv5giuyGeL w2A8Am+MVCewrHDYUOOqKYV+FS4QgMt46yN1UFYxDELmXXmUPKH2tVIlDGyM0FTu sapCTafL7InsyCxmSUwVGspnIya6WvvTmj0Dp6pdPzNJquQ5YQPY2RHljYKxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAsWbB9Xsfv22+pwXJf58QRKojUgwHwYDVR0j BBgwFoAUrFVUR7piw5EH8Wv1cvgqQX9yjb8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC9BQzU1NTQ0N0JB NjJDMzkxMDdGMTZCRjU3MkY4MkE0MTdGNzI4REJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3Rjcy OERCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB NDE3RjcyOERCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGzDLkpeJ/RrJ3Nos/kYhh0NynEhsWMLBQ1e z2aJWdUhg2x0EuGEtG75Q8LkCtBXYw/OhZxbRo9Pv3iN6VOMQhjP3igiGo+ulkPf tyHKrkj+NWEPgiKhqsXqUnf1aL1cI9YkMvhDyAu7zzr+MnJx65h6k+Uwo8y5tKi+ vrWoHHXn9k4Z0rfdVBcpEiPRkqYWt+YbcAIzF89PZwtH8C7YTFQUf1k//rIMbX+7 AN7/I6y/WhxbiZlWrjnxUiA+zSz3bR3NE8cxpPRaTdArKghFp7KeA+6RaYUoCeIa PjZlrSY5THquX8yCYpXzBVI2R9c4q4X+0AJlSErzMHF6Q1ZHnWg= -----END CERTIFICATE-----Generated at Mon Mar 2 12:48:53 2026 by rpki-client