$ rpki-client -vvf repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft File: AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft (raw, json) Hash identifier: Zznw8vxBNwTgWNf9Iw1EjPbkQMyyUDypJXdj0YvKZnE= Subject key identifier: DD:DB:BF:5D:47:72:74:C6:C4:96:DE:6C:F8:A7:54:92:66:2C:B7:D8 Authority key identifier: AC:0E:9A:C4:2F:52:F2:15:8C:3E:C5:FD:3E:87:9B:2B:B2:A9:DF:85 Certificate issuer: /CN=AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85 Certificate serial: 456A4EE30C0A056CDA017198AD8E23E8B03BD489 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft Manifest number: 0404 Signing time: Sat 28 Feb 2026 18:12:29 +0000 Manifest this update: Sat 28 Feb 2026 18:07:29 +0000 Manifest next update: Tue 03 Mar 2026 22:25:29 +0000 Files and hashes: 1: 3130332e38332e3137322e302f32322d3234203d3e20313332363431.roa (hash: 6n0zbkjlvbHceH0p62I2wThs9xuZUKLnW06pWcnuIOM=) 2: AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.crl (hash: 4mS3rebbUyXsSnqGMZUcyQukp2JmeYZzEWTDc21mWG8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.crl rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 22:25:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:6a:4e:e3:0c:0a:05:6c:da:01:71:98:ad:8e:23:e8:b0:3b:d4:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85 Validity Not Before: Feb 28 18:07:29 2026 GMT Not After : Mar 3 22:25:29 2026 GMT Subject: CN=DDDBBF5D477274C6C496DE6CF8A75492662CB7D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c7:69:0f:5e:49:9a:7a:dc:7a:a7:4e:e7:b0: ad:2a:f8:83:a1:89:4c:a7:8d:a7:92:ac:cf:72:eb: 3f:4a:ef:13:4e:7c:1e:a8:c5:af:f6:c4:35:91:77: ba:ec:37:e4:ee:43:47:aa:99:b7:b8:f7:b4:1e:d2: 1f:c3:86:37:6e:53:56:65:75:6d:8d:7e:66:42:99: 4a:e7:ff:b8:16:36:e7:ce:4c:3b:d8:be:5c:f6:65: 58:b6:4b:05:5a:ac:2e:90:80:da:d2:9e:5c:8a:81: 87:1b:ab:79:97:fa:cc:8e:ec:b5:a2:43:23:e0:5e: 6c:5b:ef:79:9a:27:fe:52:17:33:d3:83:45:65:be: 87:2b:05:1b:02:36:35:5e:69:40:13:38:dc:7b:19: 06:02:c7:ac:b1:1b:4b:7e:d0:1c:de:63:61:36:22: 76:2c:b2:39:04:a8:58:b3:d8:bc:c0:f0:f3:da:56: d8:96:24:e6:6c:b3:38:4d:27:c5:b4:08:12:6b:4d: 52:98:49:17:84:4f:7c:a9:71:31:1d:e5:7f:97:ce: 92:ac:19:e2:3c:6e:7f:d6:cb:d7:d8:97:f9:f2:b2: 4b:2c:5b:b8:22:6e:df:6f:58:04:37:2d:09:1d:06: 6f:18:a9:0e:bc:00:6e:bd:12:63:fb:70:76:c8:ae: b9:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:DB:BF:5D:47:72:74:C6:C4:96:DE:6C:F8:A7:54:92:66:2C:B7:D8 X509v3 Authority Key Identifier: keyid:AC:0E:9A:C4:2F:52:F2:15:8C:3E:C5:FD:3E:87:9B:2B:B2:A9:DF:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:d1:63:eb:06:b2:87:96:e7:9a:40:41:05:d9:9f:e6:dc:b2: 43:d7:e5:4a:95:1c:0a:b8:bd:b6:54:e2:6c:b7:63:28:0e:af: 29:80:7c:c6:09:b5:53:d0:db:a0:99:05:3b:a9:c0:cf:14:0c: b3:16:ce:da:20:96:17:e5:97:a1:7d:e6:ab:8e:ff:7b:57:d0: bc:e4:7d:28:98:f7:f0:4e:33:c5:88:95:8c:68:15:92:8e:e6: 67:ef:dd:51:a3:1b:fd:e1:de:ee:4d:6a:35:da:fb:7b:ec:b1: c0:68:40:f4:9e:8e:af:b6:41:07:cc:56:9b:ad:56:79:07:e7: 54:6b:d3:ba:96:86:f5:0f:9b:3e:ba:6e:5e:81:27:6d:64:10: bf:47:91:21:cd:b0:64:eb:bc:48:c8:cd:2e:02:5c:86:ef:90: 45:85:a1:a6:21:a4:6f:8c:19:ef:d6:6f:9f:32:e3:92:9a:9e: 2b:22:e9:34:b9:55:69:6a:73:12:d3:ab:f2:ad:52:49:7e:f1: 4d:af:f6:b7:41:2a:ec:66:df:53:32:a6:e1:ed:80:02:a8:55: 8d:b8:07:9f:b9:78:62:8d:14:e1:71:f6:61:c3:02:1d:c1:d4: 11:92:04:22:c2:56:30:d9:29:f2:47:ad:82:a9:8f:06:59:4f: 77:cf:a5:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURWpO4wwKBWzaAXGYrY4j6LA71IkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUMwRTlBQzQyRjUyRjIxNThDM0VDNUZEM0U4NzlCMkJC MkE5REY4NTAeFw0yNjAyMjgxODA3MjlaFw0yNjAzMDMyMjI1MjlaMDMxMTAvBgNV BAMTKEREREJCRjVENDc3Mjc0QzZDNDk2REU2Q0Y4QTc1NDkyNjYyQ0I3RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNx2kPXkmaetx6p07nsK0q+IOh iUynjaeSrM9y6z9K7xNOfB6oxa/2xDWRd7rsN+TuQ0eqmbe497Qe0h/DhjduU1Zl dW2NfmZCmUrn/7gWNufOTDvYvlz2ZVi2SwVarC6QgNrSnlyKgYcbq3mX+syO7LWi QyPgXmxb73maJ/5SFzPTg0VlvocrBRsCNjVeaUATONx7GQYCx6yxG0t+0BzeY2E2 InYssjkEqFiz2LzA8PPaVtiWJOZsszhNJ8W0CBJrTVKYSReET3ypcTEd5X+XzpKs GeI8bn/Wy9fYl/nyskssW7gibt9vWAQ3LQkdBm8YqQ68AG69EmP7cHbIrrnrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3du/XUdydMbElt5s+KdUkmYst9gwHwYDVR0j BBgwFoAUrA6axC9S8hWMPsX9PoebK7Kp34UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NmY2NWRjMy00YTJiLTQyMDctYmNjYi1iMGQxNGRkOTM0MDMvMC9BQzBFOUFDNDJG NTJGMjE1OEMzRUM1RkQzRTg3OUIyQkIyQTlERjg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUMwRTlBQzQyRjUyRjIxNThDM0VDNUZEM0U4NzlCMkJCMkE5 REY4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjZmNjVkYzMtNGEyYi00MjA3LWJj Y2ItYjBkMTRkZDkzNDAzLzAvQUMwRTlBQzQyRjUyRjIxNThDM0VDNUZEM0U4NzlC MkJCMkE5REY4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABTRY+sGsoeW55pAQQXZn+bcskPX5UqVHAq4 vbZU4my3YygOrymAfMYJtVPQ26CZBTupwM8UDLMWztoglhfll6F95quO/3tX0Lzk fSiY9/BOM8WIlYxoFZKO5mfv3VGjG/3h3u5NajXa+3vsscBoQPSejq+2QQfMVput VnkH51Rr07qWhvUPmz66bl6BJ21kEL9HkSHNsGTrvEjIzS4CXIbvkEWFoaYhpG+M Ge/Wb58y45Kanisi6TS5VWlqcxLTq/KtUkl+8U2v9rdBKuxm31MypuHtgAKoVY24 B5+5eGKNFOFx9mHDAh3B1BGSBCLCVjDZKfJHrYKpjwZZT3fPpbM= -----END CERTIFICATE-----Generated at Mon Mar 2 04:04:44 2026 by rpki-client