$ rpki-client -vvf repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.mft File: 4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.mft (raw, json) Hash identifier: FVurYXVnoGwbj6dP9M2BpLtXYnglPnvGBfLq95cqUaU= Subject key identifier: A6:3F:50:D2:C3:DE:64:0A:0D:DF:C7:2E:47:F2:29:CC:AE:22:D5:65 Authority key identifier: 4A:CE:0A:DD:BB:5B:F3:B4:9B:1C:DA:5A:23:10:CF:06:B3:34:A6:59 Certificate issuer: /CN=4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659 Certificate serial: 37E309479163F6F47BC0A01136E8C7EAB145A112 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.mft Manifest number: DF Signing time: Sat 28 Feb 2026 23:30:49 +0000 Manifest this update: Sat 28 Feb 2026 23:25:49 +0000 Manifest next update: Wed 04 Mar 2026 00:06:49 +0000 Files and hashes: 1: 4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.crl (hash: G0pbq9wOTJO92GotF4E3JGBohwMuviSpu9FY2ejf2A0=) 2: 3136302e32352e3139362e302f32342d3234203d3e20313533313037.roa (hash: WXQWW4Wi6xrEbWBjUR+QMjICoHgwf/HhAfAnKsJzlws=) 3: 3136302e32352e3139372e302f32342d3234203d3e20313533313037.roa (hash: xdI7HWpC7S6F3YsdhXQZOI+Bb5mAqBVyTqf6Y1GJCkg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.crl rsync://repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 00:06:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:e3:09:47:91:63:f6:f4:7b:c0:a0:11:36:e8:c7:ea:b1:45:a1:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659 Validity Not Before: Feb 28 23:25:49 2026 GMT Not After : Mar 4 00:06:49 2026 GMT Subject: CN=A63F50D2C3DE640A0DDFC72E47F229CCAE22D565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0e:9d:78:43:bd:76:c5:90:cf:d1:a7:e0:48: 0e:f3:8a:f8:c3:0a:9a:1d:c5:0c:38:7e:ae:91:0d: cd:e0:f4:a7:ae:03:77:5a:0b:75:4a:d2:26:ee:89: 80:85:0b:b2:08:a1:19:1b:ac:24:92:dd:90:9b:65: bf:cc:0e:0c:6c:8f:87:73:d7:ee:c6:55:5e:bc:1e: 8d:57:49:d2:19:54:09:fd:99:fb:d4:a5:4f:80:3b: 2a:84:06:39:05:83:ee:af:69:6c:5b:38:ed:62:8e: 36:f8:4a:c9:8c:89:aa:bf:f4:a7:ff:d3:21:c3:2f: e9:88:d9:53:9a:65:b8:46:a1:37:68:24:e1:cd:e1: a7:7c:11:31:7f:39:89:ef:c2:18:df:bf:cb:cb:a0: 9e:b3:ac:1a:c3:60:73:13:74:72:65:6b:7a:4c:ca: e8:db:5a:7b:0c:7d:0f:8b:87:ea:96:f6:3f:67:6b: 3d:0a:36:c6:1c:99:b8:95:aa:66:30:bc:7d:4b:d2: 3b:be:aa:0c:51:08:3d:51:2f:4d:21:ff:31:47:ba: bd:0b:4c:af:71:f9:36:66:6c:71:ea:09:96:bb:dc: 82:ee:d4:7f:07:ae:59:9f:51:81:f8:69:15:f0:d8: 44:e9:d4:eb:a5:84:8c:cf:37:c8:8a:d3:1d:fb:85: 43:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:3F:50:D2:C3:DE:64:0A:0D:DF:C7:2E:47:F2:29:CC:AE:22:D5:65 X509v3 Authority Key Identifier: keyid:4A:CE:0A:DD:BB:5B:F3:B4:9B:1C:DA:5A:23:10:CF:06:B3:34:A6:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:62:11:6f:9d:d0:b7:99:95:d2:43:0c:16:37:be:c1:ee:a3: 0c:01:30:33:78:54:e0:b9:b9:1c:4d:15:0e:a2:42:2d:3f:75: 78:46:f6:68:de:36:bc:0b:38:23:dc:af:21:9e:c8:8b:ff:35: 4d:36:3c:95:bb:bd:26:a6:ca:b2:ae:0a:33:23:bd:e4:16:02: 5c:c5:e1:52:ea:bf:07:ef:06:74:01:81:02:a7:ab:41:0a:3e: ef:da:b1:fa:64:f8:d1:2d:7c:11:e3:95:0b:61:f0:b4:e3:8f: 2a:e1:6e:c8:7c:dc:c4:be:71:fc:df:5b:4a:5e:f2:ed:53:08: 5e:eb:d8:c0:b2:22:57:82:c5:bd:0a:81:c7:0a:bb:61:d9:5a: 07:50:a4:4a:d9:e7:19:09:9f:cf:c4:fa:f8:73:57:5c:fc:39: 23:db:13:65:08:8d:b3:ec:68:7e:fe:10:c1:90:8c:06:76:6e: a5:1b:20:85:eb:91:09:92:b8:8b:cc:93:2d:25:96:ed:06:4c: 89:dc:9c:1f:00:2c:be:03:5c:01:2b:c2:be:75:e2:4c:74:a3: dd:72:16:8e:c0:72:29:dc:b4:da:0f:0e:52:1b:15:d9:dc:26: f0:ad:57:65:d2:3c:2a:42:b9:8e:80:f6:aa:78:97:1e:af:2e: 95:6b:f2:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN+MJR5Fj9vR7wKARNujH6rFFoRIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFDRTBBRERCQjVCRjNCNDlCMUNEQTVBMjMxMENGMDZC MzM0QTY1OTAeFw0yNjAyMjgyMzI1NDlaFw0yNjAzMDQwMDA2NDlaMDMxMTAvBgNV BAMTKEE2M0Y1MEQyQzNERTY0MEEwRERGQzcyRTQ3RjIyOUNDQUUyMkQ1NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyDp14Q712xZDP0afgSA7zivjD CpodxQw4fq6RDc3g9KeuA3daC3VK0ibuiYCFC7IIoRkbrCSS3ZCbZb/MDgxsj4dz 1+7GVV68Ho1XSdIZVAn9mfvUpU+AOyqEBjkFg+6vaWxbOO1ijjb4SsmMiaq/9Kf/ 0yHDL+mI2VOaZbhGoTdoJOHN4ad8ETF/OYnvwhjfv8vLoJ6zrBrDYHMTdHJla3pM yujbWnsMfQ+Lh+qW9j9naz0KNsYcmbiVqmYwvH1L0ju+qgxRCD1RL00h/zFHur0L TK9x+TZmbHHqCZa73ILu1H8HrlmfUYH4aRXw2ETp1OulhIzPN8iK0x37hUPFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpj9Q0sPeZAoN38cuR/IpzK4i1WUwHwYDVR0j BBgwFoAUSs4K3btb87SbHNpaIxDPBrM0plkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YjY5ZDY2Ny0xN2E0LTRmZGQtOWM1Ny0xMTIyMDMzZWY5OTkvMC80QUNFMEFEREJC NUJGM0I0OUIxQ0RBNUEyMzEwQ0YwNkIzMzRBNjU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNEFDRTBBRERCQjVCRjNCNDlCMUNEQTVBMjMxMENGMDZCMzM0 QTY1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmI2OWQ2NjctMTdhNC00ZmRkLTlj NTctMTEyMjAzM2VmOTk5LzAvNEFDRTBBRERCQjVCRjNCNDlCMUNEQTVBMjMxMENG MDZCMzM0QTY1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHRiEW+d0LeZldJDDBY3vsHuowwBMDN4VOC5 uRxNFQ6iQi0/dXhG9mjeNrwLOCPcryGeyIv/NU02PJW7vSamyrKuCjMjveQWAlzF 4VLqvwfvBnQBgQKnq0EKPu/asfpk+NEtfBHjlQth8LTjjyrhbsh83MS+cfzfW0pe 8u1TCF7r2MCyIleCxb0KgccKu2HZWgdQpErZ5xkJn8/E+vhzV1z8OSPbE2UIjbPs aH7+EMGQjAZ2bqUbIIXrkQmSuIvMky0llu0GTIncnB8ALL4DXAErwr514kx0o91y Fo7AcinctNoPDlIbFdncJvCtV2XSPCpCuY6A9qp4lx6vLpVr8uk= -----END CERTIFICATE-----Generated at Mon Mar 2 11:17:51 2026 by rpki-client