$ rpki-client -vvf repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft File: 4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft (raw, json) Hash identifier: enH/FZ8uQ58tP4HU8UiatvDKtTPyhHbJqZ4rW3P7lqE= Subject key identifier: FC:3E:3A:87:4B:EC:1F:69:FC:47:14:13:44:C3:9C:A7:62:27:A5:47 Authority key identifier: 4A:C7:DC:D8:EB:12:34:AD:C4:27:AE:BE:39:49:E8:69:16:38:A7:07 Certificate issuer: /CN=4AC7DCD8EB1234ADC427AEBE3949E8691638A707 Certificate serial: 2A28F4D7A15F3B7B6E84D9E08703AC41F7D9CB05 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer Subject info access: rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft Manifest number: 0271 Signing time: Wed 15 Apr 2026 15:30:53 +0000 Manifest this update: Wed 15 Apr 2026 15:25:53 +0000 Manifest next update: Sat 18 Apr 2026 19:27:53 +0000 Files and hashes: 1: 4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl (hash: QmRrPjQ0xVbY1QIAn/qlxlwffRs6uD+5DEnIMrgzvIU=) 2: 323030313a6466363a366630303a3a2f34382d3438203d3e20313331373034.roa (hash: 1IuZ+1sb5CuVWfx/fjE2EJ1GmWjRaqNz5VL2CGRsg+c=) 3: 3130332e382e39362e302f32322d3234203d3e203137343530.roa (hash: 3PeI4c1+04C9ghzq6F40f5013YnnignJ8PNDhSKl9BY=) 4: 3230322e362e3230382e302f32302d3234203d3e203137343530.roa (hash: UrGzpQyb4OcG13ECSRKSWIFvQeDrPkoBtijveesvtFQ=) 5: 3131392e322e36342e302f31392d3234203d3e203137343530.roa (hash: Uce528/KV3oCstaRCZguiOogFuox/yiwX1g2nJn55uk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 19:27:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:28:f4:d7:a1:5f:3b:7b:6e:84:d9:e0:87:03:ac:41:f7:d9:cb:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AC7DCD8EB1234ADC427AEBE3949E8691638A707 Validity Not Before: Apr 15 15:25:53 2026 GMT Not After : Apr 18 19:27:53 2026 GMT Subject: CN=FC3E3A874BEC1F69FC47141344C39CA76227A547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:57:c4:06:c4:41:07:ce:4c:b4:20:de:d8:be: 3b:6f:f4:20:3d:cb:61:ba:0d:9e:f9:8a:69:19:06: 67:a8:8f:9e:61:a1:95:63:62:e1:05:6c:76:90:6c: e7:c8:4b:7f:0a:87:02:76:dd:2b:68:4e:c2:4e:ac: fc:d2:24:e2:ce:63:8f:f4:e1:8a:98:41:91:bb:00: 51:7f:28:9f:7b:0c:ea:2e:99:1b:33:e7:41:37:b5: bc:0d:8b:54:95:14:53:20:28:83:5e:7b:4b:cd:78: d4:e1:e2:e4:3f:7b:ab:f8:2a:65:2b:05:2d:67:28: 56:e9:23:b3:35:bd:47:dd:fc:16:9c:05:fd:b3:40: f1:05:f4:64:75:d2:3b:c8:74:16:dd:cf:ac:29:4d: f5:6f:62:e6:b6:1c:df:d9:0e:83:3d:a5:c0:da:12: 25:47:d3:33:ba:e2:d3:3c:64:b9:b5:11:bf:b4:c6: 8b:18:26:6a:31:31:2d:f9:4e:c3:9b:8e:78:6c:e3: 00:04:5b:29:1c:1d:ff:a1:74:76:57:de:62:23:ac: 82:bb:7b:6b:d9:b1:f7:00:98:ba:b0:fa:80:4e:50: 3d:a7:7d:e9:14:d8:11:a6:e8:9c:22:d1:4d:ef:95: 46:74:45:32:7b:ff:e3:d1:e7:37:f8:48:db:a4:cd: cb:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:3E:3A:87:4B:EC:1F:69:FC:47:14:13:44:C3:9C:A7:62:27:A5:47 X509v3 Authority Key Identifier: keyid:4A:C7:DC:D8:EB:12:34:AD:C4:27:AE:BE:39:49:E8:69:16:38:A7:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:8a:0f:c6:47:68:98:96:b1:3d:59:f6:32:31:77:6b:88:c3: e3:a0:4f:1e:a4:4e:3c:1e:0e:16:a4:66:f6:f0:db:2a:d2:0e: a5:80:9d:c0:0b:87:68:9d:cf:1b:30:03:fe:39:f0:fd:1f:15: 32:73:53:0e:c7:90:38:3f:80:0f:d5:7c:94:aa:8d:01:69:f0: a6:d2:33:17:aa:44:28:c4:57:3f:94:1f:16:13:7d:5d:c3:32: 01:96:44:37:f1:e7:8e:52:c0:b2:ed:7d:f8:e4:d9:ae:9c:78: d5:0d:97:81:e8:ed:ef:ba:18:b4:66:2d:77:56:52:d9:a2:b6: b5:da:b9:2c:25:2c:13:a6:d6:91:59:5a:8e:24:32:a9:6a:95: 40:f0:a4:30:fa:0a:f8:3d:83:1e:c3:12:2a:82:5c:86:0b:ec: a4:c9:05:42:5b:58:6c:ae:34:d3:bc:3e:00:19:94:bc:f7:0a: a9:75:11:35:6d:6b:39:da:d7:67:ef:fe:7a:7b:07:ab:27:59: 60:1d:20:77:c3:1e:c7:22:3c:10:47:68:01:c6:92:61:5c:7e: 9d:74:a1:bd:d7:24:36:80:39:14:7e:02:cd:03:02:9a:6b:98: b0:3e:ba:54:0e:b6:da:73:a0:2e:fa:41:c1:4d:41:c2:85:aa: 75:da:25:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKij016FfO3tuhNnghwOsQffZywUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFDN0RDRDhFQjEyMzRBREM0MjdBRUJFMzk0OUU4Njkx NjM4QTcwNzAeFw0yNjA0MTUxNTI1NTNaFw0yNjA0MTgxOTI3NTNaMDMxMTAvBgNV BAMTKEZDM0UzQTg3NEJFQzFGNjlGQzQ3MTQxMzQ0QzM5Q0E3NjIyN0E1NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeV8QGxEEHzky0IN7Yvjtv9CA9 y2G6DZ75imkZBmeoj55hoZVjYuEFbHaQbOfIS38KhwJ23StoTsJOrPzSJOLOY4/0 4YqYQZG7AFF/KJ97DOoumRsz50E3tbwNi1SVFFMgKINee0vNeNTh4uQ/e6v4KmUr BS1nKFbpI7M1vUfd/BacBf2zQPEF9GR10jvIdBbdz6wpTfVvYua2HN/ZDoM9pcDa EiVH0zO64tM8ZLm1Eb+0xosYJmoxMS35TsObjnhs4wAEWykcHf+hdHZX3mIjrIK7 e2vZsfcAmLqw+oBOUD2nfekU2BGm6Jwi0U3vlUZ0RTJ7/+PR5zf4SNukzctjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/D46h0vsH2n8RxQTRMOcp2InpUcwHwYDVR0j BBgwFoAUSsfc2OsSNK3EJ66+OUnoaRY4pwcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MzgwNjFmMS1mYTMwLTRiZDYtODFhMC0yZWM2NzA4MzZjNDIvMC80QUM3RENEOEVC MTIzNEFEQzQyN0FFQkUzOTQ5RTg2OTE2MzhBNzA3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEFDN0RDRDhFQjEyMzRBREM0MjdBRUJFMzk0OUU4NjkxNjM4 QTcwNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDM4MDYxZjEtZmEzMC00YmQ2LTgx YTAtMmVjNjcwODM2YzQyLzAvNEFDN0RDRDhFQjEyMzRBREM0MjdBRUJFMzk0OUU4 NjkxNjM4QTcwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAImKD8ZHaJiWsT1Z9jIxd2uIw+OgTx6kTjwe DhakZvbw2yrSDqWAncALh2idzxswA/458P0fFTJzUw7HkDg/gA/VfJSqjQFp8KbS MxeqRCjEVz+UHxYTfV3DMgGWRDfx545SwLLtffjk2a6ceNUNl4Ho7e+6GLRmLXdW UtmitrXauSwlLBOm1pFZWo4kMqlqlUDwpDD6Cvg9gx7DEiqCXIYL7KTJBUJbWGyu NNO8PgAZlLz3Cql1ETVtazna12fv/np7B6snWWAdIHfDHsciPBBHaAHGkmFcfp10 ob3XJDaAORR+As0DApprmLA+ulQOttpzoC76QcFNQcKFqnXaJUU= -----END CERTIFICATE-----Generated at Fri Apr 17 21:30:00 2026 by rpki-client