$ rpki-client -vvf repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft File: ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft (raw, json) Hash identifier: Nr66n4NUJ/sOVxrwD6xsP4RWeLhwQDa4BYeUWJJsttY= Subject key identifier: B2:8D:30:F1:25:56:CC:5D:58:0E:3C:CC:F2:BF:60:97:7B:C6:1A:67 Authority key identifier: AC:E2:DA:BA:A2:49:D5:6A:D9:68:AD:7D:60:A0:96:42:B6:26:CA:4D Certificate issuer: /CN=ACE2DABAA249D56AD968AD7D60A09642B626CA4D Certificate serial: 1D03F7A324254795BD4C241F335A89CA8E1B120C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft Manifest number: 0181 Signing time: Mon 02 Mar 2026 03:21:13 +0000 Manifest this update: Mon 02 Mar 2026 03:16:13 +0000 Manifest next update: Thu 05 Mar 2026 13:52:13 +0000 Files and hashes: 1: 3230332e332e39302e302f32342d3234203d3e20313531353938.roa (hash: qxf//YzvZquiMhJd5iJXlsIhTKmJQsFvO/D1AKj+2BM=) 2: ACE2DABAA249D56AD968AD7D60A09642B626CA4D.crl (hash: zv/SbSqbozqYxwcVfj1jjqIoMIOrcAeXtIw6IXcYcCg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.crl rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:03:f7:a3:24:25:47:95:bd:4c:24:1f:33:5a:89:ca:8e:1b:12:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ACE2DABAA249D56AD968AD7D60A09642B626CA4D Validity Not Before: Mar 2 03:16:13 2026 GMT Not After : Mar 5 13:52:13 2026 GMT Subject: CN=B28D30F12556CC5D580E3CCCF2BF60977BC61A67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ba:79:0b:5c:3e:89:77:e0:59:64:4c:c2:c9: a6:c0:00:79:a1:81:69:f4:ec:68:d5:c8:82:08:17: 78:61:8c:a1:85:64:6a:b5:e9:73:b4:cf:9d:2c:a3: 89:ca:c8:1f:9d:96:d7:fd:12:da:d3:a2:4d:dc:42: 7c:e7:6f:13:6c:9e:36:0a:3b:f8:e9:58:12:cf:0e: b6:9b:92:43:25:3b:03:6f:b6:e4:60:5b:83:18:8f: 65:cc:33:f7:29:88:c7:24:ae:b2:19:5c:94:03:a3: d5:04:77:5c:5d:9d:9f:c9:d7:f1:8f:c6:9d:a1:c3: 56:ea:69:5d:54:2a:99:ec:bd:ec:26:76:1f:1c:4f: 3f:08:ed:6a:7f:d8:cb:f2:30:2e:e6:65:0d:c0:41: 98:ac:7a:4d:83:a6:df:01:7a:84:cb:19:9e:b2:2f: 9f:52:91:f3:1f:bd:17:56:f0:f8:38:f6:43:47:f2: 37:5f:e6:5c:bd:d6:7b:e6:bc:d1:76:1a:f8:a1:4b: c2:85:93:9c:0e:da:b2:65:3f:3b:b1:af:b4:1a:42: 84:ee:6a:a6:69:ef:c5:0e:fc:aa:01:5d:64:19:35: 2d:f9:e1:34:47:0c:78:83:3c:32:83:b2:a8:5a:c0: a5:d6:93:c6:f2:16:2f:40:f1:26:f5:13:b1:c7:76: 76:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:8D:30:F1:25:56:CC:5D:58:0E:3C:CC:F2:BF:60:97:7B:C6:1A:67 X509v3 Authority Key Identifier: keyid:AC:E2:DA:BA:A2:49:D5:6A:D9:68:AD:7D:60:A0:96:42:B6:26:CA:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:7f:93:18:0f:bd:87:dc:ab:3d:2d:f8:8b:ad:ab:51:05:bf: 15:be:ea:11:d8:34:a3:5c:95:ae:74:04:4d:27:13:50:fa:b9: 06:53:33:b5:96:09:bd:f8:bf:12:27:82:5e:63:2d:b5:72:b4: 60:bc:b5:86:73:28:ed:e9:cf:a9:c4:d3:72:91:d2:f3:5e:f2: e6:08:fe:2d:18:dc:91:a8:d8:0c:8d:c7:2e:ac:27:00:f9:dc: c0:9c:fe:04:01:c6:a4:83:d7:b8:68:a5:71:36:ef:74:4b:04: 92:d2:dd:1a:76:c1:93:9e:6b:3a:a3:b8:4b:84:8c:e0:5c:cd: 29:6f:a0:c3:f5:2f:3c:e4:00:6c:f3:7d:06:7d:7a:9d:19:34: e3:dd:ce:d6:b1:3d:af:c4:0b:07:e7:6f:df:11:9d:8f:bd:24: d4:38:0d:4a:59:31:3d:b6:49:15:88:97:9d:90:42:6e:19:84: 1a:59:99:3c:03:a0:36:69:4a:64:d6:60:f3:ad:b0:2a:65:4f: fb:a8:00:e3:9d:d3:b4:81:97:02:6c:4b:8b:a5:94:f4:37:4f: d0:64:43:f1:a3:ea:84:84:55:6e:1a:09:83:53:b8:d4:b6:3a: c9:2a:d1:f6:f5:4d:d6:34:7a:6c:fe:5e:e3:c9:e3:6a:11:71: dc:a5:5e:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHQP3oyQlR5W9TCQfM1qJyo4bEgwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUNFMkRBQkFBMjQ5RDU2QUQ5NjhBRDdENjBBMDk2NDJC NjI2Q0E0RDAeFw0yNjAzMDIwMzE2MTNaFw0yNjAzMDUxMzUyMTNaMDMxMTAvBgNV BAMTKEIyOEQzMEYxMjU1NkNDNUQ1ODBFM0NDQ0YyQkY2MDk3N0JDNjFBNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCounkLXD6Jd+BZZEzCyabAAHmh gWn07GjVyIIIF3hhjKGFZGq16XO0z50so4nKyB+dltf9EtrTok3cQnznbxNsnjYK O/jpWBLPDrabkkMlOwNvtuRgW4MYj2XMM/cpiMckrrIZXJQDo9UEd1xdnZ/J1/GP xp2hw1bqaV1UKpnsvewmdh8cTz8I7Wp/2MvyMC7mZQ3AQZisek2Dpt8BeoTLGZ6y L59SkfMfvRdW8Pg49kNH8jdf5ly91nvmvNF2GvihS8KFk5wO2rJlPzuxr7QaQoTu aqZp78UO/KoBXWQZNS354TRHDHiDPDKDsqhawKXWk8byFi9A8Sb1E7HHdnY7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUso0w8SVWzF1YDjzM8r9gl3vGGmcwHwYDVR0j BBgwFoAUrOLauqJJ1WrZaK19YKCWQrYmyk0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDg3MTMwMy0wMjFhLTRhMGItOWVmYi1hZTJkYjZjOTBkODQvMC9BQ0UyREFCQUEy NDlENTZBRDk2OEFEN0Q2MEEwOTY0MkI2MjZDQTRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUNFMkRBQkFBMjQ5RDU2QUQ5NjhBRDdENjBBMDk2NDJCNjI2 Q0E0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQ4NzEzMDMtMDIxYS00YTBiLTll ZmItYWUyZGI2YzkwZDg0LzAvQUNFMkRBQkFBMjQ5RDU2QUQ5NjhBRDdENjBBMDk2 NDJCNjI2Q0E0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADZ/kxgPvYfcqz0t+Iutq1EFvxW+6hHYNKNc la50BE0nE1D6uQZTM7WWCb34vxIngl5jLbVytGC8tYZzKO3pz6nE03KR0vNe8uYI /i0Y3JGo2AyNxy6sJwD53MCc/gQBxqSD17hopXE273RLBJLS3Rp2wZOeazqjuEuE jOBczSlvoMP1LzzkAGzzfQZ9ep0ZNOPdztaxPa/ECwfnb98RnY+9JNQ4DUpZMT22 SRWIl52QQm4ZhBpZmTwDoDZpSmTWYPOtsCplT/uoAOOd07SBlwJsS4ullPQ3T9Bk Q/Gj6oSEVW4aCYNTuNS2Oskq0fb1TdY0emz+XuPJ42oRcdylXto= -----END CERTIFICATE-----Generated at Mon Mar 2 05:44:22 2026 by rpki-client