$ rpki-client -vvf repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft File: ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft (raw, json) Hash identifier: fQGs4k0mV/QzBEIi5TF1BbMQ8UBKfUkh24MkAjhGM1U= Subject key identifier: D8:CB:D2:2E:0C:07:EC:34:5C:5A:D6:A1:A4:16:77:ED:A2:4E:95:A7 Authority key identifier: AC:FB:1A:5D:99:38:A6:4B:3B:54:A8:32:D5:B7:9C:03:24:86:A7:59 Certificate issuer: /CN=ACFB1A5D9938A64B3B54A832D5B79C032486A759 Certificate serial: 6B12666B4029FC4E0E741F54CF4AF89849C8A1EB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ACFB1A5D9938A64B3B54A832D5B79C032486A759.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft Manifest number: FE Signing time: Sun 01 Mar 2026 23:20:01 +0000 Manifest this update: Sun 01 Mar 2026 23:15:01 +0000 Manifest next update: Thu 05 Mar 2026 02:30:01 +0000 Files and hashes: 1: 3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa (hash: EWnjtErVMnBbrrbwTFVBXyhULkzmfdybYpW9vhB6Px8=) 2: ACFB1A5D9938A64B3B54A832D5B79C032486A759.crl (hash: Js/QJ51MLTHExLnAVK5gUhEI6C3QqTxXxQ3WeOUBjOc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.crl rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ACFB1A5D9938A64B3B54A832D5B79C032486A759.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:12:66:6b:40:29:fc:4e:0e:74:1f:54:cf:4a:f8:98:49:c8:a1:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ACFB1A5D9938A64B3B54A832D5B79C032486A759 Validity Not Before: Mar 1 23:15:01 2026 GMT Not After : Mar 5 02:30:01 2026 GMT Subject: CN=D8CBD22E0C07EC345C5AD6A1A41677EDA24E95A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d9:48:af:2b:f1:cb:bf:5b:61:1a:4b:1f:6c: 58:4d:8d:1f:4e:b1:d5:c4:cb:f5:75:a0:56:f8:92: ec:38:c5:6a:b6:26:5a:25:2a:bb:41:fa:e7:5b:df: 4f:96:fc:c3:ca:05:28:e0:71:b5:b2:6c:48:16:49: 73:d8:92:70:7f:d3:44:17:4d:08:19:40:89:c6:21: 2c:2b:8d:a4:9e:ce:d4:0e:52:c2:92:69:0c:22:b4: f7:e1:0d:5a:a8:df:7c:01:ee:30:b7:7a:c2:aa:9e: 8b:7d:95:ac:1f:b9:3f:a2:82:e3:96:c1:50:7e:fd: e6:76:1e:2b:01:0f:9d:f4:a5:72:fe:31:99:ec:36: f1:88:13:d9:3f:31:31:da:f4:be:dc:72:1a:a7:cc: 9b:5d:1e:1e:6e:05:6c:ca:2d:59:4a:8d:b3:8e:0b: 8c:1f:a7:8d:8b:80:ed:d7:aa:cb:09:1d:06:3d:32: 1e:25:a9:c5:ec:3c:14:7f:6a:5f:57:a0:5c:3e:b1: 83:ca:72:6e:fd:08:47:5b:f9:1c:d9:49:a1:2b:16: c6:23:f1:1c:13:5c:e0:5c:46:62:40:4b:4e:88:46: de:67:db:7b:80:28:9e:bd:21:64:f4:93:a3:03:51: 36:2a:ea:e6:cc:ea:d8:29:2e:83:ed:4e:96:60:99: 5a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:CB:D2:2E:0C:07:EC:34:5C:5A:D6:A1:A4:16:77:ED:A2:4E:95:A7 X509v3 Authority Key Identifier: keyid:AC:FB:1A:5D:99:38:A6:4B:3B:54:A8:32:D5:B7:9C:03:24:86:A7:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ACFB1A5D9938A64B3B54A832D5B79C032486A759.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:63:16:e9:88:50:e7:f0:58:21:bd:7a:4d:eb:d5:47:e8:ca: b2:39:b0:ba:21:65:3a:dc:ae:9d:a2:66:45:08:b4:08:d3:86: 89:76:b0:b3:45:79:02:3c:b9:05:ad:a1:13:72:64:d1:93:49: 12:1d:a8:5f:40:a9:51:3b:7e:3c:a2:72:62:3b:95:b7:02:9e: 3f:1d:9b:d8:e7:ca:49:c0:c2:7a:b9:d1:43:25:9d:84:bb:1d: 73:8f:e5:65:09:48:54:0d:5b:9a:61:87:40:15:53:a6:f0:17: e9:5d:64:c3:2e:d8:14:76:f9:a6:0d:90:fc:e1:ed:5e:85:dc: f1:55:9b:9c:82:b5:d3:9e:c4:09:79:53:26:d9:0d:17:5a:e9: 10:5d:5d:ff:d2:a9:ca:b6:ce:89:57:24:54:db:29:a1:e4:35: 5a:de:f3:ad:b1:98:7d:2b:bf:3a:fc:4d:1f:5c:1e:50:a0:b5: 27:a5:b1:05:d9:84:f3:55:06:a1:05:bd:06:d9:d6:30:a5:a3: 4e:ea:f3:86:4f:4b:26:49:10:c0:4b:8a:b2:f3:89:88:38:45: 01:7f:89:5d:b0:e5:ab:81:e5:c4:4b:24:f8:d3:89:3a:21:fd: fc:22:f7:9f:c4:5b:5b:47:95:65:09:bc:73:5e:ee:97:66:e5: 09:6e:17:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaxJma0Ap/E4OdB9Uz0r4mEnIoeswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUNGQjFBNUQ5OTM4QTY0QjNCNTRBODMyRDVCNzlDMDMy NDg2QTc1OTAeFw0yNjAzMDEyMzE1MDFaFw0yNjAzMDUwMjMwMDFaMDMxMTAvBgNV BAMTKEQ4Q0JEMjJFMEMwN0VDMzQ1QzVBRDZBMUE0MTY3N0VEQTI0RTk1QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc2UivK/HLv1thGksfbFhNjR9O sdXEy/V1oFb4kuw4xWq2JlolKrtB+udb30+W/MPKBSjgcbWybEgWSXPYknB/00QX TQgZQInGISwrjaSeztQOUsKSaQwitPfhDVqo33wB7jC3esKqnot9lawfuT+iguOW wVB+/eZ2HisBD530pXL+MZnsNvGIE9k/MTHa9L7cchqnzJtdHh5uBWzKLVlKjbOO C4wfp42LgO3XqssJHQY9Mh4lqcXsPBR/al9XoFw+sYPKcm79CEdb+RzZSaErFsYj 8RwTXOBcRmJAS06IRt5n23uAKJ69IWT0k6MDUTYq6ubM6tgpLoPtTpZgmVqPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2MvSLgwH7DRcWtahpBZ37aJOlacwHwYDVR0j BBgwFoAUrPsaXZk4pks7VKgy1becAySGp1kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTk1NGY0Mi05NDUyLTQyNDctOTlhNS0zMWE1M2U1NmE5ZjgvMC9BQ0ZCMUE1RDk5 MzhBNjRCM0I1NEE4MzJENUI3OUMwMzI0ODZBNzU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUNGQjFBNUQ5OTM4QTY0QjNCNTRBODMyRDVCNzlDMDMyNDg2 QTc1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmU5NTRmNDItOTQ1Mi00MjQ3LTk5 YTUtMzFhNTNlNTZhOWY4LzAvQUNGQjFBNUQ5OTM4QTY0QjNCNTRBODMyRDVCNzlD MDMyNDg2QTc1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIJjFumIUOfwWCG9ek3r1UfoyrI5sLohZTrc rp2iZkUItAjThol2sLNFeQI8uQWtoRNyZNGTSRIdqF9AqVE7fjyicmI7lbcCnj8d m9jnyknAwnq50UMlnYS7HXOP5WUJSFQNW5phh0AVU6bwF+ldZMMu2BR2+aYNkPzh 7V6F3PFVm5yCtdOexAl5UybZDRda6RBdXf/Sqcq2zolXJFTbKaHkNVre862xmH0r vzr8TR9cHlCgtSelsQXZhPNVBqEFvQbZ1jClo07q84ZPSyZJEMBLirLziYg4RQF/ iV2w5auB5cRLJPjTiToh/fwi95/EW1tHlWUJvHNe7pdm5QluF/0= -----END CERTIFICATE-----Generated at Mon Mar 2 16:34:30 2026 by rpki-client