$ rpki-client -vvf repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft File: A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft (raw, json) Hash identifier: ZHF1i0CMCoLKVbYoGVc/A+Bm2FZoWLdF22HTJE5dw98= Subject key identifier: 13:9D:A9:8B:6B:1D:39:A4:53:C1:04:2B:01:5B:14:92:33:AE:D5:D2 Authority key identifier: A4:AC:49:C4:F5:5B:F5:D4:AF:3D:42:10:4A:8A:5E:C1:F2:12:3E:6F Certificate issuer: /CN=A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F Certificate serial: 77A4808A5BB1413BDEC85A327EA6CC3662D59F9F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft Manifest number: 01E3 Signing time: Sat 28 Feb 2026 16:10:45 +0000 Manifest this update: Sat 28 Feb 2026 16:05:45 +0000 Manifest next update: Tue 03 Mar 2026 17:05:45 +0000 Files and hashes: 1: A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.crl (hash: HqCd9aGn3GpdTtMxV9JJYWFqY36b+uL+Kt8aOXtOYkU=) 2: 3130332e38312e36362e302f32342d3234203d3e20313336303535.roa (hash: ATuxXOYK3e/3Ld+KeMllvgXdJfLA5B6FogxB4ZqIC5o=) 3: 3130332e38312e36352e302f32342d3234203d3e20313336303535.roa (hash: u8jL1wvQ3N2/+7j20g3WIVxFeVvx0q2WU+pz5MDhyKI=) 4: 3130332e38312e36372e302f32342d3234203d3e20313336303535.roa (hash: sMqZuUQ3TUwiAl7c3vFGsavhFRoJNzCv4yEgkQl+sQs=) 5: 3130332e38312e36342e302f32322d3234203d3e20313336303535.roa (hash: G2lV5U9+p39d6xSgHB2TJ310g1uTGGU7EbB7g2ly4zQ=) 6: 323430303a363463303a3a2f33322d3438203d3e20313336303535.roa (hash: lkJMOSpD6CK+vqFIQ+W4fJTKxjWnPx2rZSDGiMaIa7Q=) 7: 3130332e38312e36342e302f32342d3234203d3e20313336303535.roa (hash: ELk6/6IWDK4cOkAhqxagMF7RU6tMeOE1ofhJAKCHKqk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.crl rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 17:05:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:a4:80:8a:5b:b1:41:3b:de:c8:5a:32:7e:a6:cc:36:62:d5:9f:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F Validity Not Before: Feb 28 16:05:45 2026 GMT Not After : Mar 3 17:05:45 2026 GMT Subject: CN=139DA98B6B1D39A453C1042B015B149233AED5D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:08:b0:52:43:44:7b:bb:d6:26:36:51:0e:67: 0a:f1:5d:6b:cb:a2:24:a5:d8:59:95:bb:3b:98:83: c6:b0:69:e7:8b:ce:52:dc:4e:51:95:31:71:aa:d8: a8:58:e3:d0:81:fc:61:b5:a6:5b:9b:7d:4a:7a:40: b9:2a:6b:d0:1d:34:64:95:8e:1e:32:c9:02:85:ca: b7:ce:66:a0:75:de:23:20:c6:80:ab:3f:a2:62:db: 18:a0:77:7b:88:79:54:02:4f:80:09:72:bd:5d:19: e1:1e:bf:7e:fe:93:d2:76:3f:a4:52:4f:4e:cb:0c: f4:59:b1:0d:34:55:5e:b0:89:47:06:34:c9:64:90: 02:9d:df:c4:a9:f2:b6:de:d0:40:f5:8e:ee:d3:99: ce:10:66:8c:56:35:24:cb:1b:64:2c:4b:f7:25:58: ce:7d:ab:65:8c:47:a2:42:93:cb:57:dc:30:3e:20: c5:1a:64:75:6f:d6:6a:6d:e2:94:6c:ab:a1:d7:c1: 05:7a:b0:d4:73:84:9b:0d:10:f7:a3:35:20:67:67: 0e:b4:49:cf:21:f5:d5:df:63:86:dd:d7:11:0e:38: 83:17:52:b3:5a:27:5c:5b:5a:db:d8:51:58:2a:48: 72:83:b3:c6:ce:c5:5c:3f:06:c9:a1:87:9d:9b:80: a7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:9D:A9:8B:6B:1D:39:A4:53:C1:04:2B:01:5B:14:92:33:AE:D5:D2 X509v3 Authority Key Identifier: keyid:A4:AC:49:C4:F5:5B:F5:D4:AF:3D:42:10:4A:8A:5E:C1:F2:12:3E:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:cd:86:25:fa:10:d7:95:9c:ce:cb:14:18:1d:8b:1d:f8:14: ad:8f:8c:22:b3:fa:c1:ee:7f:72:11:7c:79:6b:a6:c7:f0:20: 26:ed:3e:f5:2e:19:dd:c6:79:1d:d3:ee:05:87:8f:ef:26:45: d1:47:0f:a2:5c:c8:50:dd:5e:e8:50:4f:2d:21:1d:eb:d0:f5: 08:1b:04:1d:21:91:a2:f6:96:ae:05:ee:74:19:79:0c:b4:11: 6e:14:25:ab:18:3a:59:e8:68:28:9e:88:e0:c6:21:44:a6:dc: 40:9d:97:06:10:e7:27:b9:11:56:c6:47:dd:e0:43:d1:89:c6: e7:47:a1:04:8b:24:1e:04:d7:1e:ea:5e:fd:cf:c5:2a:8e:af: c9:05:5f:a4:94:11:26:73:9c:32:66:53:59:9d:4c:4a:de:d2: 1c:36:cc:30:8f:dc:cd:16:bc:d5:7c:68:b3:8b:4a:0e:e2:fd: d4:b5:58:f9:bd:71:ca:af:d3:07:39:2c:f2:7e:fe:0c:b4:bb: 50:5d:0e:70:a5:08:1b:f4:66:26:c7:de:39:e4:8d:40:64:18: 46:37:f8:25:d7:e0:85:d8:0e:ab:7c:f3:39:42:c0:1b:69:4d: d5:53:01:0b:33:27:7d:29:8e:59:9a:bc:97:30:3f:db:16:25: d4:5f:be:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd6SAiluxQTveyFoyfqbMNmLVn58wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRBQzQ5QzRGNTVCRjVENEFGM0Q0MjEwNEE4QTVFQzFG MjEyM0U2RjAeFw0yNjAyMjgxNjA1NDVaFw0yNjAzMDMxNzA1NDVaMDMxMTAvBgNV BAMTKDEzOURBOThCNkIxRDM5QTQ1M0MxMDQyQjAxNUIxNDkyMzNBRUQ1RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvCLBSQ0R7u9YmNlEOZwrxXWvL oiSl2FmVuzuYg8awaeeLzlLcTlGVMXGq2KhY49CB/GG1plubfUp6QLkqa9AdNGSV jh4yyQKFyrfOZqB13iMgxoCrP6Ji2xigd3uIeVQCT4AJcr1dGeEev37+k9J2P6RS T07LDPRZsQ00VV6wiUcGNMlkkAKd38Sp8rbe0ED1ju7Tmc4QZoxWNSTLG2QsS/cl WM59q2WMR6JCk8tX3DA+IMUaZHVv1mpt4pRsq6HXwQV6sNRzhJsNEPejNSBnZw60 Sc8h9dXfY4bd1xEOOIMXUrNaJ1xbWtvYUVgqSHKDs8bOxVw/Bsmhh52bgKezAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE52pi2sdOaRTwQQrAVsUkjOu1dIwHwYDVR0j BBgwFoAUpKxJxPVb9dSvPUIQSopewfISPm8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NzI4MDQwMC05NjU0LTRkNDUtODg4Yi05MDY3YmFkYTE5MGIvMC9BNEFDNDlDNEY1 NUJGNUQ0QUYzRDQyMTA0QThBNUVDMUYyMTIzRTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTRBQzQ5QzRGNTVCRjVENEFGM0Q0MjEwNEE4QTVFQzFGMjEy M0U2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTcyODA0MDAtOTY1NC00ZDQ1LTg4 OGItOTA2N2JhZGExOTBiLzAvQTRBQzQ5QzRGNTVCRjVENEFGM0Q0MjEwNEE4QTVF QzFGMjEyM0U2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEzNhiX6ENeVnM7LFBgdix34FK2PjCKz+sHu f3IRfHlrpsfwICbtPvUuGd3GeR3T7gWHj+8mRdFHD6JcyFDdXuhQTy0hHevQ9Qgb BB0hkaL2lq4F7nQZeQy0EW4UJasYOlnoaCieiODGIUSm3ECdlwYQ5ye5EVbGR93g Q9GJxudHoQSLJB4E1x7qXv3PxSqOr8kFX6SUESZznDJmU1mdTEre0hw2zDCP3M0W vNV8aLOLSg7i/dS1WPm9ccqv0wc5LPJ+/gy0u1BdDnClCBv0ZibH3jnkjUBkGEY3 +CXX4IXYDqt88zlCwBtpTdVTAQszJ30pjlmavJcwP9sWJdRfvjk= -----END CERTIFICATE-----Generated at Mon Mar 2 10:01:49 2026 by rpki-client