$ rpki-client -vvf repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft File: 4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft (raw, json) Hash identifier: ziknboZgDKu/7E+xUn5r8dz/wT9kIo1/qg0vowRGSL0= Subject key identifier: 3A:76:55:23:EB:A5:FF:72:29:C4:AA:76:E1:C9:CB:CF:A2:00:DA:38 Authority key identifier: 4A:C7:DC:D8:EB:12:34:AD:C4:27:AE:BE:39:49:E8:69:16:38:A7:07 Certificate issuer: /CN=4AC7DCD8EB1234ADC427AEBE3949E8691638A707 Certificate serial: 0B8779E6005D238F095B6CE3501014B5C6F0657B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer Subject info access: rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft Manifest number: 0272 Signing time: Fri 17 Apr 2026 19:30:53 +0000 Manifest this update: Fri 17 Apr 2026 19:25:53 +0000 Manifest next update: Tue 21 Apr 2026 02:16:53 +0000 Files and hashes: 1: 4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl (hash: vXm+tlKEOgYJdDJAnCZPMlPqVOnTLqMF+c5MoOwzwbY=) 2: 3131392e322e36342e302f31392d3234203d3e203137343530.roa (hash: Uce528/KV3oCstaRCZguiOogFuox/yiwX1g2nJn55uk=) 3: 3230322e362e3230382e302f32302d3234203d3e203137343530.roa (hash: UrGzpQyb4OcG13ECSRKSWIFvQeDrPkoBtijveesvtFQ=) 4: 3130332e382e39362e302f32322d3234203d3e203137343530.roa (hash: 3PeI4c1+04C9ghzq6F40f5013YnnignJ8PNDhSKl9BY=) 5: 323030313a6466363a366630303a3a2f34382d3438203d3e20313331373034.roa (hash: 1IuZ+1sb5CuVWfx/fjE2EJ1GmWjRaqNz5VL2CGRsg+c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 02:16:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:87:79:e6:00:5d:23:8f:09:5b:6c:e3:50:10:14:b5:c6:f0:65:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AC7DCD8EB1234ADC427AEBE3949E8691638A707 Validity Not Before: Apr 17 19:25:53 2026 GMT Not After : Apr 21 02:16:53 2026 GMT Subject: CN=3A765523EBA5FF7229C4AA76E1C9CBCFA200DA38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c8:d1:98:34:55:c7:46:c4:6a:69:73:09:40: ce:f3:ff:2b:7c:e9:92:e7:49:63:ec:ec:0e:bc:ad: cd:d8:15:f2:63:49:aa:8c:03:58:f1:34:b6:2c:cd: f5:ae:ce:c3:2f:c3:40:76:dc:8c:de:1b:77:e2:ba: 95:5d:1d:c5:9f:33:33:90:1e:7a:9c:79:b6:37:5d: ed:23:80:fa:29:01:06:cf:65:e8:a7:5f:18:34:a1: 23:cb:41:53:66:3e:4c:bb:4e:07:9e:38:48:98:90: ee:16:61:c4:f9:ed:f2:ca:00:b1:a7:d7:ed:ca:5c: 54:0f:5d:03:11:69:9b:88:5f:9a:2b:37:aa:0c:97: 5e:e4:43:39:0f:2f:37:9b:41:32:76:03:d3:96:ae: 5a:27:9d:15:71:9b:1e:ef:e5:6c:5f:10:68:d6:14: 28:f8:4a:81:11:70:b3:45:0f:0c:31:b5:4d:19:3f: 5e:8f:11:d1:2d:7a:38:dc:bf:13:53:2a:bf:9e:27: 7e:e1:74:de:87:a6:f8:6c:78:ec:04:d9:98:d2:1d: ad:1c:4b:c0:38:6e:5f:96:d3:a7:4f:cb:36:2b:98: 98:e8:67:67:32:9b:65:e7:02:94:bb:5d:5b:f4:85: ba:3a:9d:7a:5b:9a:f1:07:00:a5:95:a6:dd:b8:e2: 60:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:76:55:23:EB:A5:FF:72:29:C4:AA:76:E1:C9:CB:CF:A2:00:DA:38 X509v3 Authority Key Identifier: keyid:4A:C7:DC:D8:EB:12:34:AD:C4:27:AE:BE:39:49:E8:69:16:38:A7:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:09:ac:7e:4c:56:ec:c3:dc:85:ed:da:67:dc:28:52:50:6b: 0e:ca:25:9f:12:86:27:71:fe:93:ff:d9:78:04:b8:9d:10:96: 6c:78:26:59:e5:09:c8:42:68:a7:af:12:b1:7e:e7:99:7c:c6: 4e:1b:a5:d4:97:c3:ab:60:ee:d3:ed:04:80:83:ad:f0:47:94: 2b:fe:ad:5f:32:4b:93:55:94:85:37:8c:24:24:df:85:5a:23: 88:d8:6c:af:d4:07:fd:51:a7:5c:02:91:bd:12:f5:28:13:f3: 82:64:f3:99:c4:97:12:87:3e:58:5d:68:ea:65:e2:36:05:f8: 67:0b:a3:74:f0:ea:62:d6:97:0c:e9:8e:04:45:8e:4d:31:e2: 31:39:96:dd:9b:03:ab:82:77:56:96:20:dd:c1:36:54:44:e6: 0e:57:90:b1:5d:c1:c4:78:d1:0f:98:e2:5d:78:9f:87:c4:23: 7d:0a:4f:13:cc:14:d1:2c:64:32:c7:15:9b:10:a5:98:71:e7: f3:33:2d:f0:d9:39:10:31:08:98:7d:bb:08:bb:2a:47:08:2c: aa:82:a5:2c:69:e7:27:ab:78:e8:60:95:18:72:be:3b:81:99: f0:f0:c3:a8:a4:0a:68:ed:91:93:36:f1:ee:64:0f:78:e0:bc: 2a:87:cc:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC4d55gBdI48JW2zjUBAUtcbwZXswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFDN0RDRDhFQjEyMzRBREM0MjdBRUJFMzk0OUU4Njkx NjM4QTcwNzAeFw0yNjA0MTcxOTI1NTNaFw0yNjA0MjEwMjE2NTNaMDMxMTAvBgNV BAMTKDNBNzY1NTIzRUJBNUZGNzIyOUM0QUE3NkUxQzlDQkNGQTIwMERBMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/yNGYNFXHRsRqaXMJQM7z/yt8 6ZLnSWPs7A68rc3YFfJjSaqMA1jxNLYszfWuzsMvw0B23IzeG3fiupVdHcWfMzOQ HnqcebY3Xe0jgPopAQbPZeinXxg0oSPLQVNmPky7TgeeOEiYkO4WYcT57fLKALGn 1+3KXFQPXQMRaZuIX5orN6oMl17kQzkPLzebQTJ2A9OWrlonnRVxmx7v5WxfEGjW FCj4SoERcLNFDwwxtU0ZP16PEdEtejjcvxNTKr+eJ37hdN6HpvhseOwE2ZjSHa0c S8A4bl+W06dPyzYrmJjoZ2cym2XnApS7XVv0hbo6nXpbmvEHAKWVpt244mAHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOnZVI+ul/3IpxKp24cnLz6IA2jgwHwYDVR0j BBgwFoAUSsfc2OsSNK3EJ66+OUnoaRY4pwcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MzgwNjFmMS1mYTMwLTRiZDYtODFhMC0yZWM2NzA4MzZjNDIvMC80QUM3RENEOEVC MTIzNEFEQzQyN0FFQkUzOTQ5RTg2OTE2MzhBNzA3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEFDN0RDRDhFQjEyMzRBREM0MjdBRUJFMzk0OUU4NjkxNjM4 QTcwNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDM4MDYxZjEtZmEzMC00YmQ2LTgx YTAtMmVjNjcwODM2YzQyLzAvNEFDN0RDRDhFQjEyMzRBREM0MjdBRUJFMzk0OUU4 NjkxNjM4QTcwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKEJrH5MVuzD3IXt2mfcKFJQaw7KJZ8Shidx /pP/2XgEuJ0Qlmx4JlnlCchCaKevErF+55l8xk4bpdSXw6tg7tPtBICDrfBHlCv+ rV8yS5NVlIU3jCQk34VaI4jYbK/UB/1Rp1wCkb0S9SgT84Jk85nElxKHPlhdaOpl 4jYF+GcLo3Tw6mLWlwzpjgRFjk0x4jE5lt2bA6uCd1aWIN3BNlRE5g5XkLFdwcR4 0Q+Y4l14n4fEI30KTxPMFNEsZDLHFZsQpZhx5/MzLfDZORAxCJh9uwi7KkcILKqC pSxp5yereOhglRhyvjuBmfDww6ikCmjtkZM28e5kD3jgvCqHzHM= -----END CERTIFICATE-----Generated at Sat Apr 18 01:42:03 2026 by rpki-client