$ rpki-client -vvf repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft File: ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft (raw, json) Hash identifier: s2ZgG3X1y5lOWSWiajyB4s51SDuCNLmwcTG1rQp3QBo= Subject key identifier: D7:85:F2:BC:2F:83:E2:7A:47:10:60:36:8F:81:FA:4C:A2:7D:0F:FF Authority key identifier: AC:E2:DA:BA:A2:49:D5:6A:D9:68:AD:7D:60:A0:96:42:B6:26:CA:4D Certificate issuer: /CN=ACE2DABAA249D56AD968AD7D60A09642B626CA4D Certificate serial: 03C9F7D21E1C5B662AFD7546E3E0ED147E2D7316 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft Manifest number: 0196 Signing time: Sat 18 Apr 2026 16:11:15 +0000 Manifest this update: Sat 18 Apr 2026 16:06:15 +0000 Manifest next update: Wed 22 Apr 2026 03:58:15 +0000 Files and hashes: 1: 3230332e332e39302e302f32342d3234203d3e20313531353938.roa (hash: qxf//YzvZquiMhJd5iJXlsIhTKmJQsFvO/D1AKj+2BM=) 2: ACE2DABAA249D56AD968AD7D60A09642B626CA4D.crl (hash: Vq3Z9J+zLdfghCTBimAPTBsWcLeiQFhiHQw+tBqS1VU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.crl rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 03:58:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:c9:f7:d2:1e:1c:5b:66:2a:fd:75:46:e3:e0:ed:14:7e:2d:73:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ACE2DABAA249D56AD968AD7D60A09642B626CA4D Validity Not Before: Apr 18 16:06:15 2026 GMT Not After : Apr 22 03:58:15 2026 GMT Subject: CN=D785F2BC2F83E27A471060368F81FA4CA27D0FFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9a:26:58:d6:56:25:a9:e2:7b:c3:a1:8c:18: 6c:53:d1:0e:48:4f:d1:91:3c:a7:37:48:74:20:72: 62:70:d8:ae:aa:17:8a:46:ff:82:33:f6:a7:bb:31: f7:1d:42:ed:4f:27:f8:93:f9:93:0f:7c:02:e1:55: 30:86:00:f6:75:9e:28:a0:67:2e:a1:6c:32:9a:5d: 0d:80:0e:9a:b0:a3:4e:6d:93:bf:d6:3b:a6:ee:36: 64:c1:38:f5:6c:93:aa:fc:5f:10:d0:49:49:78:42: 82:5b:f2:9c:7f:71:d7:40:72:e6:b6:9f:92:7f:5d: c7:9d:9b:94:77:8a:0d:21:ec:19:93:12:be:2e:bb: c8:a4:40:17:93:fe:f3:bb:b6:84:b2:e7:e1:b7:09: 67:3e:c1:a3:ef:bb:8f:c5:c9:e2:59:96:93:0a:39: 6a:59:31:ae:c1:76:31:a8:74:97:0f:6b:d2:a8:c8: 71:60:15:f2:c2:70:c7:a9:85:69:86:63:9e:fb:70: ed:ba:ec:7e:d7:ea:42:bf:c7:9c:3a:65:b5:05:50: 3d:13:90:09:c9:31:3d:05:fe:b7:cc:31:8c:2c:7b: 39:bc:01:48:be:a0:ce:c5:b5:f9:ba:c6:7e:4f:49: a8:76:e6:1f:40:86:32:35:51:3b:b1:3a:4f:56:cf: d3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:85:F2:BC:2F:83:E2:7A:47:10:60:36:8F:81:FA:4C:A2:7D:0F:FF X509v3 Authority Key Identifier: keyid:AC:E2:DA:BA:A2:49:D5:6A:D9:68:AD:7D:60:A0:96:42:B6:26:CA:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:4a:a3:42:72:c4:bc:cd:2a:59:91:65:38:d0:0c:3d:0a:3b: 99:33:cf:db:8c:aa:77:af:55:b3:04:f0:53:0a:54:4b:c5:ce: 70:29:b2:f1:63:b4:7e:3b:b6:62:16:ba:a2:4a:5f:eb:55:50: ac:4b:30:4d:18:f4:93:8b:96:50:0c:e8:56:88:67:a5:4c:c0: c4:47:5f:7b:44:bd:2e:1a:38:44:d8:e7:13:7d:cf:71:3f:f0: 3d:31:eb:69:8e:0b:3d:71:ae:95:8f:4f:53:83:57:11:0a:53: d0:f9:2a:5e:b3:0e:c9:86:4f:ef:4a:3f:75:cb:c5:d5:b0:2f: 66:60:cb:b5:e6:b5:93:d5:ff:41:8d:7e:53:b1:82:6a:84:8a: a0:e5:92:d3:2d:c2:a7:96:76:ea:12:65:b6:d9:ea:f5:0e:2c: 78:56:67:1e:ad:87:d3:9a:86:18:6b:ec:52:3d:83:1a:b6:a2: 88:33:5d:a5:a6:db:6c:c1:3d:87:40:20:d1:9a:08:04:f0:3b: ad:6f:86:87:40:27:e5:64:34:31:69:9e:7b:01:a9:cb:ee:a5: b5:ac:6d:a8:2d:f9:86:be:34:24:76:96:3d:d6:d3:1b:f6:34: 5e:f1:64:05:4b:ac:5e:a0:86:f7:19:15:d9:30:5f:91:33:4d: 1b:e6:90:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA8n30h4cW2Yq/XVG4+DtFH4tcxYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUNFMkRBQkFBMjQ5RDU2QUQ5NjhBRDdENjBBMDk2NDJC NjI2Q0E0RDAeFw0yNjA0MTgxNjA2MTVaFw0yNjA0MjIwMzU4MTVaMDMxMTAvBgNV BAMTKEQ3ODVGMkJDMkY4M0UyN0E0NzEwNjAzNjhGODFGQTRDQTI3RDBGRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCumiZY1lYlqeJ7w6GMGGxT0Q5I T9GRPKc3SHQgcmJw2K6qF4pG/4Iz9qe7MfcdQu1PJ/iT+ZMPfALhVTCGAPZ1niig Zy6hbDKaXQ2ADpqwo05tk7/WO6buNmTBOPVsk6r8XxDQSUl4QoJb8px/cddAcua2 n5J/Xcedm5R3ig0h7BmTEr4uu8ikQBeT/vO7toSy5+G3CWc+waPvu4/FyeJZlpMK OWpZMa7BdjGodJcPa9KoyHFgFfLCcMephWmGY577cO267H7X6kK/x5w6ZbUFUD0T kAnJMT0F/rfMMYwsezm8AUi+oM7Ftfm6xn5PSah25h9AhjI1UTuxOk9Wz9PPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU14XyvC+D4npHEGA2j4H6TKJ9D/8wHwYDVR0j BBgwFoAUrOLauqJJ1WrZaK19YKCWQrYmyk0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDg3MTMwMy0wMjFhLTRhMGItOWVmYi1hZTJkYjZjOTBkODQvMC9BQ0UyREFCQUEy NDlENTZBRDk2OEFEN0Q2MEEwOTY0MkI2MjZDQTRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUNFMkRBQkFBMjQ5RDU2QUQ5NjhBRDdENjBBMDk2NDJCNjI2 Q0E0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQ4NzEzMDMtMDIxYS00YTBiLTll ZmItYWUyZGI2YzkwZDg0LzAvQUNFMkRBQkFBMjQ5RDU2QUQ5NjhBRDdENjBBMDk2 NDJCNjI2Q0E0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHBKo0JyxLzNKlmRZTjQDD0KO5kzz9uMqnev VbME8FMKVEvFznApsvFjtH47tmIWuqJKX+tVUKxLME0Y9JOLllAM6FaIZ6VMwMRH X3tEvS4aOETY5xN9z3E/8D0x62mOCz1xrpWPT1ODVxEKU9D5Kl6zDsmGT+9KP3XL xdWwL2Zgy7XmtZPV/0GNflOxgmqEiqDlktMtwqeWduoSZbbZ6vUOLHhWZx6th9Oa hhhr7FI9gxq2oogzXaWm22zBPYdAINGaCATwO61vhodAJ+VkNDFpnnsBqcvupbWs bagt+Ya+NCR2lj3W0xv2NF7xZAVLrF6ghvcZFdkwX5EzTRvmkN4= -----END CERTIFICATE-----Generated at Sun Apr 19 12:44:25 2026 by rpki-client