$ rpki-client -vvf repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft File: 4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft (raw, json) Hash identifier: ZYGtzaJ1YHBXe85OqOfgQq7h8/LXEzKWty5PGtmg+FI= Subject key identifier: E1:74:3A:77:D9:35:3B:BA:DF:E4:14:89:E9:70:E9:02:B5:A9:E5:C9 Authority key identifier: 4A:C7:DC:D8:EB:12:34:AD:C4:27:AE:BE:39:49:E8:69:16:38:A7:07 Certificate issuer: /CN=4AC7DCD8EB1234ADC427AEBE3949E8691638A707 Certificate serial: 5480E202EE780EC026612D73CB479B671117936C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer Subject info access: rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft Manifest number: 025D Signing time: Sat 28 Feb 2026 23:10:51 +0000 Manifest this update: Sat 28 Feb 2026 23:05:51 +0000 Manifest next update: Tue 03 Mar 2026 23:27:51 +0000 Files and hashes: 1: 323030313a6466363a366630303a3a2f34382d3438203d3e20313331373034.roa (hash: 1IuZ+1sb5CuVWfx/fjE2EJ1GmWjRaqNz5VL2CGRsg+c=) 2: 3130332e382e39362e302f32322d3234203d3e203137343530.roa (hash: 3PeI4c1+04C9ghzq6F40f5013YnnignJ8PNDhSKl9BY=) 3: 4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl (hash: oT2GxCGMM9poF0+H2MfNm4fTxo+um/Iun0/N7DTQN30=) 4: 3131392e322e36342e302f31392d3234203d3e203137343530.roa (hash: Uce528/KV3oCstaRCZguiOogFuox/yiwX1g2nJn55uk=) 5: 3230322e362e3230382e302f32302d3234203d3e203137343530.roa (hash: UrGzpQyb4OcG13ECSRKSWIFvQeDrPkoBtijveesvtFQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 23:27:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:80:e2:02:ee:78:0e:c0:26:61:2d:73:cb:47:9b:67:11:17:93:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AC7DCD8EB1234ADC427AEBE3949E8691638A707 Validity Not Before: Feb 28 23:05:51 2026 GMT Not After : Mar 3 23:27:51 2026 GMT Subject: CN=E1743A77D9353BBADFE41489E970E902B5A9E5C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b6:7f:28:bd:59:d2:8b:89:8a:02:c1:77:ee: 54:4f:f6:c7:2a:e9:6b:f8:a7:32:7d:85:df:3c:88: 1e:fc:a5:59:7f:59:48:a0:48:4b:15:ed:52:52:59: 5f:fa:4f:f4:42:da:2b:9d:1a:bc:4c:fd:ed:78:63: 42:d5:f4:0a:60:e9:a9:4e:f5:96:4f:72:f4:29:82: 20:87:c8:4b:89:3c:d8:41:94:15:b8:4c:68:c3:46: 59:91:f6:2b:d4:fe:17:b9:b2:eb:94:ac:83:d6:19: 9a:83:75:40:df:6b:88:9b:b5:43:e8:6b:96:9e:f0: a8:06:53:68:60:42:7d:12:61:8d:bc:31:23:54:b7: 04:fb:07:8e:4e:c2:ff:34:ac:26:5d:4d:78:e0:c5: 06:4c:c9:59:e7:8e:5f:be:3a:17:87:4d:bd:89:de: 57:95:59:06:e5:eb:0b:21:55:97:bb:be:b9:18:48: cc:a1:78:0e:49:79:23:6b:cb:05:a0:e2:09:4c:17: 93:bd:5d:ad:94:1a:0e:2c:43:d4:2d:40:75:aa:69: d3:c1:55:4b:72:15:ed:5f:e6:53:8c:c3:4a:8b:e0: a6:af:b3:86:a6:69:a0:76:98:b7:12:c4:d5:6a:35: 42:37:0f:73:b8:90:c3:11:86:50:45:9b:71:e5:e0: 5f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:74:3A:77:D9:35:3B:BA:DF:E4:14:89:E9:70:E9:02:B5:A9:E5:C9 X509v3 Authority Key Identifier: keyid:4A:C7:DC:D8:EB:12:34:AD:C4:27:AE:BE:39:49:E8:69:16:38:A7:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:7d:a5:4c:98:be:0e:2d:5f:a6:0b:2b:11:eb:e1:c9:d1:cd: 00:2f:0a:b2:58:e9:b1:28:5c:a3:9c:25:7b:25:31:e0:7b:86: ce:08:66:5f:ac:96:b7:ea:85:75:5f:b9:e3:8e:d2:4c:04:a8: a3:3f:4f:e6:32:03:e8:61:5f:6f:51:dc:d3:ad:e9:40:ce:0e: b8:b1:3a:b8:ff:c2:b0:57:6e:5a:e9:72:f7:d1:d7:dd:38:91: 42:2f:d9:c6:86:2d:f2:11:51:68:1f:ac:a4:45:b9:f8:aa:37: 68:53:77:b5:ed:67:1d:ce:c3:98:35:94:e0:3c:af:fe:ed:57: 71:a4:f0:8b:c1:3b:2d:df:14:15:06:89:8d:6d:97:56:52:ed: 27:8d:57:54:4e:e6:97:21:a9:d3:18:1b:b0:d0:c9:18:37:06: 30:fb:f1:1a:b6:97:9f:d1:6a:1b:42:28:1d:d7:57:aa:83:fe: cc:e7:9b:34:34:2a:89:51:ea:ae:3a:7a:8e:4e:6e:75:04:55: 2c:9c:d6:97:4d:51:08:48:b3:17:16:a1:7d:71:3f:20:52:f4: 3a:58:3d:78:d4:03:7d:3f:42:cb:c9:73:a2:a5:95:3b:25:44: 3f:25:c5:65:89:a1:c7:b6:09:65:9c:2b:fd:12:d4:3d:4a:d6: ab:d6:22:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVIDiAu54DsAmYS1zy0ebZxEXk2wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFDN0RDRDhFQjEyMzRBREM0MjdBRUJFMzk0OUU4Njkx NjM4QTcwNzAeFw0yNjAyMjgyMzA1NTFaFw0yNjAzMDMyMzI3NTFaMDMxMTAvBgNV BAMTKEUxNzQzQTc3RDkzNTNCQkFERkU0MTQ4OUU5NzBFOTAyQjVBOUU1QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWtn8ovVnSi4mKAsF37lRP9scq 6Wv4pzJ9hd88iB78pVl/WUigSEsV7VJSWV/6T/RC2iudGrxM/e14Y0LV9Apg6alO 9ZZPcvQpgiCHyEuJPNhBlBW4TGjDRlmR9ivU/he5suuUrIPWGZqDdUDfa4ibtUPo a5ae8KgGU2hgQn0SYY28MSNUtwT7B45Owv80rCZdTXjgxQZMyVnnjl++OheHTb2J 3leVWQbl6wshVZe7vrkYSMyheA5JeSNrywWg4glMF5O9Xa2UGg4sQ9QtQHWqadPB VUtyFe1f5lOMw0qL4Kavs4amaaB2mLcSxNVqNUI3D3O4kMMRhlBFm3Hl4F8ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4XQ6d9k1O7rf5BSJ6XDpArWp5ckwHwYDVR0j BBgwFoAUSsfc2OsSNK3EJ66+OUnoaRY4pwcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MzgwNjFmMS1mYTMwLTRiZDYtODFhMC0yZWM2NzA4MzZjNDIvMC80QUM3RENEOEVC MTIzNEFEQzQyN0FFQkUzOTQ5RTg2OTE2MzhBNzA3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEFDN0RDRDhFQjEyMzRBREM0MjdBRUJFMzk0OUU4NjkxNjM4 QTcwNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDM4MDYxZjEtZmEzMC00YmQ2LTgx YTAtMmVjNjcwODM2YzQyLzAvNEFDN0RDRDhFQjEyMzRBREM0MjdBRUJFMzk0OUU4 NjkxNjM4QTcwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE99pUyYvg4tX6YLKxHr4cnRzQAvCrJY6bEo XKOcJXslMeB7hs4IZl+slrfqhXVfueOO0kwEqKM/T+YyA+hhX29R3NOt6UDODrix Orj/wrBXblrpcvfR1904kUIv2caGLfIRUWgfrKRFufiqN2hTd7XtZx3Ow5g1lOA8 r/7tV3Gk8IvBOy3fFBUGiY1tl1ZS7SeNV1RO5pchqdMYG7DQyRg3BjD78Rq2l5/R ahtCKB3XV6qD/sznmzQ0KolR6q46eo5ObnUEVSyc1pdNUQhIsxcWoX1xPyBS9DpY PXjUA30/QsvJc6KllTslRD8lxWWJoce2CWWcK/0S1D1K1qvWIvE= -----END CERTIFICATE-----Generated at Mon Mar 2 10:24:59 2026 by rpki-client