$ rpki-client -vvf repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.mft File: ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.mft (raw, json) Hash identifier: CjCOVmCA2SATlQ+BpLNiPKzRfQm3gIqL4ZfyuoLitqs= Subject key identifier: E0:1F:65:2A:C6:41:A3:12:92:C8:9C:D2:D3:16:96:AE:95:B5:3F:D4 Authority key identifier: AC:DA:02:2F:7F:3E:28:A6:E1:31:DA:80:D4:C4:18:E8:3C:D0:7C:73 Certificate issuer: /CN=ACDA022F7F3E28A6E131DA80D4C418E83CD07C73 Certificate serial: 3D90BCEF4E2840D3F5F2B6F796DD26340EE2F992 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.mft Manifest number: 0433 Signing time: Fri 17 Apr 2026 11:10:03 +0000 Manifest this update: Fri 17 Apr 2026 11:05:03 +0000 Manifest next update: Mon 20 Apr 2026 19:00:03 +0000 Files and hashes: 1: 3131362e35382e3139342e302f32342d3234203d3e203338313534.roa (hash: zWM0xGqqaOdxz1Hu9SQE3wCPcPGJcY2qyq+pULXMUKw=) 2: ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.crl (hash: YvGHMxCdfzZs4OtAEe30YXJkLIZY1EQbnUyhn72GZUs=) 3: 3131362e35382e3139322e302f32312d3234203d3e203338313534.roa (hash: shSt6RZ1MwvIPYyETnN1BneHslb44OdrCSOCCLJ7w9E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.crl rsync://repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 19:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:90:bc:ef:4e:28:40:d3:f5:f2:b6:f7:96:dd:26:34:0e:e2:f9:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ACDA022F7F3E28A6E131DA80D4C418E83CD07C73 Validity Not Before: Apr 17 11:05:03 2026 GMT Not After : Apr 20 19:00:03 2026 GMT Subject: CN=E01F652AC641A31292C89CD2D31696AE95B53FD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:18:62:1e:fe:08:06:b4:85:35:83:3a:01:a3: 49:29:aa:c1:39:3a:68:44:1c:f5:fd:32:30:ea:eb: 4e:4f:17:be:81:e0:57:27:25:0a:97:46:0d:37:bd: b0:fa:5f:9c:91:80:6c:d8:9d:47:ad:75:9f:7e:9c: 2a:4a:83:a7:3d:eb:06:76:8d:21:1a:09:eb:05:07: 6d:68:72:9c:15:47:ad:50:22:ce:5c:34:f2:e2:cf: 30:da:bf:8a:43:11:41:b2:b1:32:94:1f:f1:82:a7: ff:14:2f:d3:b1:96:3f:07:18:59:c6:bf:78:f1:63: c0:14:df:11:0b:a7:13:fa:25:35:2a:8c:00:c5:d2: 8b:e2:07:c5:ef:23:ff:dc:8d:70:3e:44:8c:a4:d7: 65:97:9d:4e:44:af:ec:cc:63:df:4b:33:ab:e2:0f: 22:e3:a4:e7:4d:c1:4f:c0:47:e9:13:71:bf:cb:fa: 25:78:0b:9a:a2:27:0c:36:74:d8:34:59:34:47:ac: df:33:29:d3:69:94:84:e9:10:d5:4e:71:cc:84:80: 82:ef:da:f9:cb:08:2f:26:dd:30:45:f3:db:7e:43: d5:49:cd:b8:72:85:b4:ee:17:41:6e:74:58:b0:fe: f8:9f:2f:79:00:0c:2a:3f:37:45:d8:e8:60:d5:f1: bb:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:1F:65:2A:C6:41:A3:12:92:C8:9C:D2:D3:16:96:AE:95:B5:3F:D4 X509v3 Authority Key Identifier: keyid:AC:DA:02:2F:7F:3E:28:A6:E1:31:DA:80:D4:C4:18:E8:3C:D0:7C:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:d8:17:36:e8:46:22:70:e5:c6:89:f8:85:23:4c:ee:8d:5a: 8b:67:e3:c4:e2:70:9b:76:14:67:cf:f0:92:82:7b:7d:c9:71: 72:6a:d1:2e:8c:c9:88:03:42:aa:0d:73:b8:32:10:53:1f:94: 2d:d5:4d:d1:a3:69:d9:81:25:10:c6:85:b5:3e:6f:95:a8:8f: c2:01:ed:d6:99:f4:7f:97:28:44:8b:0a:4c:ce:c2:54:a3:25: 5a:4a:f4:98:53:4b:e1:50:54:ef:81:a5:95:f4:d4:7f:d1:a7: 8c:90:2d:bd:ce:c8:72:13:92:fe:77:0f:14:99:99:12:bf:85: 73:b3:b0:52:4a:b4:c4:c6:0f:a7:17:ee:31:ad:08:f1:0c:6e: 4a:2b:70:9c:89:c3:30:06:ff:d2:cb:32:0d:70:10:e7:1e:82: 4b:8f:48:79:11:77:25:c8:28:7b:11:ba:0c:ef:7f:97:67:16: 48:03:46:51:7f:04:2b:53:2a:75:26:c0:74:5d:97:20:b1:b4: 8b:59:db:c1:6b:69:05:98:5c:eb:8a:27:34:f5:54:00:6f:16: f8:e2:88:f7:7c:8f:1f:80:9e:60:51:1e:37:f8:77:22:d7:e9: 90:1c:f1:2c:91:31:0a:72:38:58:14:0b:b8:5e:10:d0:64:02: dd:ee:5c:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPZC8704oQNP18rb3lt0mNA7i+ZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUNEQTAyMkY3RjNFMjhBNkUxMzFEQTgwRDRDNDE4RTgz Q0QwN0M3MzAeFw0yNjA0MTcxMTA1MDNaFw0yNjA0MjAxOTAwMDNaMDMxMTAvBgNV BAMTKEUwMUY2NTJBQzY0MUEzMTI5MkM4OUNEMkQzMTY5NkFFOTVCNTNGRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfGGIe/ggGtIU1gzoBo0kpqsE5 OmhEHPX9MjDq605PF76B4FcnJQqXRg03vbD6X5yRgGzYnUetdZ9+nCpKg6c96wZ2 jSEaCesFB21ocpwVR61QIs5cNPLizzDav4pDEUGysTKUH/GCp/8UL9Oxlj8HGFnG v3jxY8AU3xELpxP6JTUqjADF0oviB8XvI//cjXA+RIyk12WXnU5Er+zMY99LM6vi DyLjpOdNwU/AR+kTcb/L+iV4C5qiJww2dNg0WTRHrN8zKdNplITpENVOccyEgILv 2vnLCC8m3TBF89t+Q9VJzbhyhbTuF0FudFiw/vifL3kADCo/N0XY6GDV8bujAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4B9lKsZBoxKSyJzS0xaWrpW1P9QwHwYDVR0j BBgwFoAUrNoCL38+KKbhMdqA1MQY6DzQfHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZmViYjY4YS04YTVkLTQxMWMtOGJiMy04MzM0MjMxMDBiNmUvMC9BQ0RBMDIyRjdG M0UyOEE2RTEzMURBODBENEM0MThFODNDRDA3QzczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUNEQTAyMkY3RjNFMjhBNkUxMzFEQTgwRDRDNDE4RTgzQ0Qw N0M3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmZlYmI2OGEtOGE1ZC00MTFjLThi YjMtODMzNDIzMTAwYjZlLzAvQUNEQTAyMkY3RjNFMjhBNkUxMzFEQTgwRDRDNDE4 RTgzQ0QwN0M3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKzYFzboRiJw5caJ+IUjTO6NWotn48TicJt2 FGfP8JKCe33JcXJq0S6MyYgDQqoNc7gyEFMflC3VTdGjadmBJRDGhbU+b5Woj8IB 7daZ9H+XKESLCkzOwlSjJVpK9JhTS+FQVO+BpZX01H/Rp4yQLb3OyHITkv53DxSZ mRK/hXOzsFJKtMTGD6cX7jGtCPEMbkorcJyJwzAG/9LLMg1wEOcegkuPSHkRdyXI KHsRugzvf5dnFkgDRlF/BCtTKnUmwHRdlyCxtItZ28FraQWYXOuKJzT1VABvFvji iPd8jx+AnmBRHjf4dyLX6ZAc8SyRMQpyOFgUC7heENBkAt3uXKI= -----END CERTIFICATE-----Generated at Fri Apr 17 22:43:02 2026 by rpki-client