$ rpki-client -vvf repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft File: A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft (raw, json) Hash identifier: Gq01l9q9VvkZWWecKn6KVtMb63zAxDpcaT7yswkd2Vs= Subject key identifier: 72:46:E1:31:F6:21:80:2C:43:7C:F1:AB:E6:68:BE:8D:72:6D:2B:A7 Authority key identifier: A4:AC:49:C4:F5:5B:F5:D4:AF:3D:42:10:4A:8A:5E:C1:F2:12:3E:6F Certificate issuer: /CN=A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F Certificate serial: 44FF0D3D739EEA1C0B5B7434AA97546095E20405 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft Manifest number: 01F9 Signing time: Sat 18 Apr 2026 20:00:48 +0000 Manifest this update: Sat 18 Apr 2026 19:55:48 +0000 Manifest next update: Wed 22 Apr 2026 03:50:48 +0000 Files and hashes: 1: 323430303a363463303a3a2f33322d3438203d3e20313336303535.roa (hash: lkJMOSpD6CK+vqFIQ+W4fJTKxjWnPx2rZSDGiMaIa7Q=) 2: 3130332e38312e36362e302f32342d3234203d3e20313336303535.roa (hash: ATuxXOYK3e/3Ld+KeMllvgXdJfLA5B6FogxB4ZqIC5o=) 3: 3130332e38312e36342e302f32322d3234203d3e20313336303535.roa (hash: G2lV5U9+p39d6xSgHB2TJ310g1uTGGU7EbB7g2ly4zQ=) 4: A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.crl (hash: 6oUbgaGhUoInI3SGaVrypjSazZ5Blbhqw5ut7OI/+Lo=) 5: 3130332e38312e36352e302f32342d3234203d3e20313336303535.roa (hash: u8jL1wvQ3N2/+7j20g3WIVxFeVvx0q2WU+pz5MDhyKI=) 6: 3130332e38312e36372e302f32342d3234203d3e20313336303535.roa (hash: sMqZuUQ3TUwiAl7c3vFGsavhFRoJNzCv4yEgkQl+sQs=) 7: 3130332e38312e36342e302f32342d3234203d3e20313336303535.roa (hash: ELk6/6IWDK4cOkAhqxagMF7RU6tMeOE1ofhJAKCHKqk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.crl rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 20:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:ff:0d:3d:73:9e:ea:1c:0b:5b:74:34:aa:97:54:60:95:e2:04:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F Validity Not Before: Apr 18 19:55:48 2026 GMT Not After : Apr 22 03:50:48 2026 GMT Subject: CN=7246E131F621802C437CF1ABE668BE8D726D2BA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:d2:1d:32:79:77:d6:13:e7:c9:3c:5f:47:ef: 7f:f6:aa:5b:1c:56:e8:86:98:c5:1b:9f:da:4f:58: b9:7a:c7:3e:d2:ba:65:71:df:3a:1c:f7:eb:ef:e3: f9:45:c7:5e:c6:ae:35:c4:e8:ef:44:20:a2:3d:2f: 70:97:d3:35:17:1d:80:17:63:24:68:6e:a1:e0:3b: 6c:91:ec:55:e1:ad:76:2d:d2:98:67:ab:4a:97:d9: 16:10:90:ef:71:ca:bb:35:a5:f2:c2:9c:f2:d5:3a: 24:4f:59:74:8f:7c:d3:2c:ed:e4:52:32:77:4a:09: fb:8a:c7:6a:f1:2e:59:b8:d7:d8:09:71:e9:ee:fd: 54:5b:08:0a:32:0c:99:14:c8:e9:10:ee:f7:13:ed: 84:62:50:02:c9:89:d3:60:cc:b7:c6:15:96:62:a6: e3:57:da:e6:e8:6c:36:b2:3a:e8:c9:bc:fe:04:32: 0d:48:e4:47:e1:8e:47:4d:e8:61:ae:02:11:9a:67: 1e:fa:2a:a6:37:27:79:6b:98:07:fe:4c:c6:49:ef: 94:08:64:08:e7:ec:cb:ee:d8:de:e1:91:1b:57:f9: e2:6a:7c:d1:6a:b5:b8:5e:59:6e:69:25:30:54:b4: 67:b2:0c:d6:8b:85:4f:be:85:08:64:cf:e9:18:97: 44:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:46:E1:31:F6:21:80:2C:43:7C:F1:AB:E6:68:BE:8D:72:6D:2B:A7 X509v3 Authority Key Identifier: keyid:A4:AC:49:C4:F5:5B:F5:D4:AF:3D:42:10:4A:8A:5E:C1:F2:12:3E:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:f8:3c:ec:76:8f:f6:a9:08:71:93:39:5b:33:9f:00:c8:13: 85:ec:12:21:9f:99:e1:16:fa:4a:82:cc:f2:a8:ec:93:a9:8a: 48:a5:52:4a:14:81:c6:54:65:6b:4e:ef:b2:d0:05:0b:6e:64: 2a:c4:22:88:a4:fd:6b:1b:3e:cf:a1:34:8f:03:e3:93:88:c8: 4e:4a:b7:16:01:1a:10:36:a3:d8:40:a8:e9:9e:33:e8:58:fe: 90:31:ce:ed:19:37:9e:00:85:6b:69:81:f7:7d:7f:e5:eb:5d: 40:61:3e:37:36:09:7b:99:00:9b:40:67:51:8e:15:a7:ad:c4: 6b:ad:71:12:b9:c8:8f:d8:be:42:57:f6:23:5e:13:cd:33:09: e7:90:91:0e:2d:04:8d:33:45:6c:4e:28:df:51:f6:e8:0c:d5: df:04:0d:1e:1e:91:1d:cd:e0:cf:60:12:c1:fc:a9:31:e9:b3: e0:ce:90:0e:a7:55:29:55:47:20:63:7c:f2:57:8e:1d:bc:90: 2e:7c:8d:fc:b9:5a:3a:94:fa:ba:18:45:b2:71:b6:46:00:2e: ba:63:f1:d9:c4:a4:fc:76:ec:02:aa:d2:f9:9f:1f:7c:b1:e2: 17:16:cb:fa:a3:16:0f:16:22:24:ca:8f:1b:4b:67:8a:4d:45: ce:f1:3b:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURP8NPXOe6hwLW3Q0qpdUYJXiBAUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRBQzQ5QzRGNTVCRjVENEFGM0Q0MjEwNEE4QTVFQzFG MjEyM0U2RjAeFw0yNjA0MTgxOTU1NDhaFw0yNjA0MjIwMzUwNDhaMDMxMTAvBgNV BAMTKDcyNDZFMTMxRjYyMTgwMkM0MzdDRjFBQkU2NjhCRThENzI2RDJCQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD20h0yeXfWE+fJPF9H73/2qlsc VuiGmMUbn9pPWLl6xz7SumVx3zoc9+vv4/lFx17GrjXE6O9EIKI9L3CX0zUXHYAX YyRobqHgO2yR7FXhrXYt0phnq0qX2RYQkO9xyrs1pfLCnPLVOiRPWXSPfNMs7eRS MndKCfuKx2rxLlm419gJcenu/VRbCAoyDJkUyOkQ7vcT7YRiUALJidNgzLfGFZZi puNX2ubobDayOujJvP4EMg1I5EfhjkdN6GGuAhGaZx76KqY3J3lrmAf+TMZJ75QI ZAjn7Mvu2N7hkRtX+eJqfNFqtbheWW5pJTBUtGeyDNaLhU++hQhkz+kYl0R9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUckbhMfYhgCxDfPGr5mi+jXJtK6cwHwYDVR0j BBgwFoAUpKxJxPVb9dSvPUIQSopewfISPm8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NzI4MDQwMC05NjU0LTRkNDUtODg4Yi05MDY3YmFkYTE5MGIvMC9BNEFDNDlDNEY1 NUJGNUQ0QUYzRDQyMTA0QThBNUVDMUYyMTIzRTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTRBQzQ5QzRGNTVCRjVENEFGM0Q0MjEwNEE4QTVFQzFGMjEy M0U2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTcyODA0MDAtOTY1NC00ZDQ1LTg4 OGItOTA2N2JhZGExOTBiLzAvQTRBQzQ5QzRGNTVCRjVENEFGM0Q0MjEwNEE4QTVF QzFGMjEyM0U2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADr4POx2j/apCHGTOVsznwDIE4XsEiGfmeEW +kqCzPKo7JOpikilUkoUgcZUZWtO77LQBQtuZCrEIoik/WsbPs+hNI8D45OIyE5K txYBGhA2o9hAqOmeM+hY/pAxzu0ZN54AhWtpgfd9f+XrXUBhPjc2CXuZAJtAZ1GO FaetxGutcRK5yI/YvkJX9iNeE80zCeeQkQ4tBI0zRWxOKN9R9ugM1d8EDR4ekR3N 4M9gEsH8qTHps+DOkA6nVSlVRyBjfPJXjh28kC58jfy5WjqU+roYRbJxtkYALrpj 8dnEpPx27AKq0vmfH3yx4hcWy/qjFg8WIiTKjxtLZ4pNRc7xOzM= -----END CERTIFICATE-----Generated at Sun Apr 19 10:22:26 2026 by rpki-client