$ rpki-client -vvf repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft File: AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft (raw, json) Hash identifier: 6lTgE0I1C1XzwnO1QbudZWxJL8ZiDw9Tka+CJ4rmTD8= Subject key identifier: BA:6D:56:C2:57:A8:6C:D9:DC:D8:D6:16:BE:1C:0B:F1:98:29:DA:06 Authority key identifier: AC:0E:9A:C4:2F:52:F2:15:8C:3E:C5:FD:3E:87:9B:2B:B2:A9:DF:85 Certificate issuer: /CN=AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85 Certificate serial: 2A43562B77CE87D2FF5E2CE43EC2CCD1E2CCF2A5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft Manifest number: 0419 Signing time: Fri 17 Apr 2026 18:42:33 +0000 Manifest this update: Fri 17 Apr 2026 18:37:33 +0000 Manifest next update: Mon 20 Apr 2026 19:46:33 +0000 Files and hashes: 1: 3130332e38332e3137322e302f32322d3234203d3e20313332363431.roa (hash: 6n0zbkjlvbHceH0p62I2wThs9xuZUKLnW06pWcnuIOM=) 2: AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.crl (hash: KWmecNHD7k+HhGttPdzWTPQSS4rShw0RFlywVcnw/vw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.crl rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 19:46:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:43:56:2b:77:ce:87:d2:ff:5e:2c:e4:3e:c2:cc:d1:e2:cc:f2:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85 Validity Not Before: Apr 17 18:37:33 2026 GMT Not After : Apr 20 19:46:33 2026 GMT Subject: CN=BA6D56C257A86CD9DCD8D616BE1C0BF19829DA06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:5d:ff:6d:eb:51:1e:e5:d7:62:18:ce:7c:67: dc:4b:67:a4:2c:94:f0:fe:a9:63:bd:41:59:09:f0: f4:ab:d2:aa:6e:7c:bc:7f:33:4d:2c:05:65:2c:96: 8f:36:d5:25:10:3a:66:f9:37:ca:26:b8:77:1f:5d: b1:4f:b5:6d:c1:54:ec:8b:6a:36:46:f8:f6:45:b8: 24:ac:84:8f:cc:10:2d:ce:e8:f9:12:6e:9d:43:a7: 32:55:e3:50:32:41:1f:7c:c8:6f:78:e8:ad:16:8e: 87:19:5e:8a:62:3c:0c:60:3c:64:93:f5:53:ac:25: 8b:ec:5e:b1:ad:5d:1a:11:d0:2c:9f:a0:6c:6e:55: d4:a6:3f:51:37:6f:64:1d:62:ff:10:14:0f:58:3b: 5d:70:fa:7d:ef:0a:d1:d7:3d:6c:10:f7:1b:4f:45: f3:4f:1c:8b:14:21:71:eb:23:a0:eb:2a:f9:40:fa: 02:27:ef:f3:9d:f1:24:3f:c2:e4:bd:bc:64:5a:4a: ee:1d:9b:fb:36:bf:b4:16:c8:fc:55:5c:88:5b:eb: 17:f7:7e:39:cd:0c:91:00:9d:43:2e:46:7b:89:bd: 7f:a9:86:f6:ef:e6:ea:e4:38:28:be:ab:70:9a:a8: 76:d5:40:e5:a4:fb:b1:eb:61:74:49:0c:e9:8e:32: 3e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:6D:56:C2:57:A8:6C:D9:DC:D8:D6:16:BE:1C:0B:F1:98:29:DA:06 X509v3 Authority Key Identifier: keyid:AC:0E:9A:C4:2F:52:F2:15:8C:3E:C5:FD:3E:87:9B:2B:B2:A9:DF:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:c7:46:03:22:fe:e2:9c:66:db:37:4e:20:0f:22:ff:6a:87: ad:e2:99:6d:fe:fd:46:e2:e0:1a:b9:5b:80:b2:63:b8:1c:8f: 96:e9:98:7f:32:8b:8e:71:5f:e5:5e:7a:10:f7:72:e7:bb:cf: 5d:bf:c1:67:99:b8:d5:28:08:ac:76:d2:4a:2b:4a:d6:d4:63: 87:ab:85:f5:5e:ec:92:7a:af:e1:38:14:07:62:14:23:8f:a3: 81:95:16:58:ec:2b:92:60:34:13:26:3d:03:50:df:7f:b4:7a: f2:8f:cc:04:75:77:c3:26:a8:00:3e:a4:a4:b2:64:a3:98:f4: 69:3a:c5:5a:80:de:1f:d4:96:c8:cf:86:e4:7e:34:a0:dd:44: 0d:85:f2:66:b4:6d:fa:89:9b:98:d6:37:ec:59:bd:2f:05:e5: 3f:5c:01:3a:5b:82:99:53:6a:66:c2:03:59:70:15:98:b4:3b: ad:16:94:b7:03:17:9b:b2:2f:09:50:6b:89:33:43:1c:15:cd: ac:2d:16:b5:91:75:e9:b5:c1:10:c7:a6:7c:df:73:1a:84:0b: 77:81:d1:11:15:d6:a5:e2:57:ad:5d:3d:72:65:8d:a6:bf:a6: 46:0c:83:1a:84:08:5c:fc:9b:69:69:c0:97:51:4f:8c:bb:77: 15:e9:c4:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKkNWK3fOh9L/XizkPsLM0eLM8qUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUMwRTlBQzQyRjUyRjIxNThDM0VDNUZEM0U4NzlCMkJC MkE5REY4NTAeFw0yNjA0MTcxODM3MzNaFw0yNjA0MjAxOTQ2MzNaMDMxMTAvBgNV BAMTKEJBNkQ1NkMyNTdBODZDRDlEQ0Q4RDYxNkJFMUMwQkYxOTgyOURBMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxXf9t61Ee5ddiGM58Z9xLZ6Qs lPD+qWO9QVkJ8PSr0qpufLx/M00sBWUslo821SUQOmb5N8omuHcfXbFPtW3BVOyL ajZG+PZFuCSshI/MEC3O6PkSbp1DpzJV41AyQR98yG946K0WjocZXopiPAxgPGST 9VOsJYvsXrGtXRoR0CyfoGxuVdSmP1E3b2QdYv8QFA9YO11w+n3vCtHXPWwQ9xtP RfNPHIsUIXHrI6DrKvlA+gIn7/Od8SQ/wuS9vGRaSu4dm/s2v7QWyPxVXIhb6xf3 fjnNDJEAnUMuRnuJvX+phvbv5urkOCi+q3CaqHbVQOWk+7HrYXRJDOmOMj4/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUum1WwleobNnc2NYWvhwL8Zgp2gYwHwYDVR0j BBgwFoAUrA6axC9S8hWMPsX9PoebK7Kp34UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NmY2NWRjMy00YTJiLTQyMDctYmNjYi1iMGQxNGRkOTM0MDMvMC9BQzBFOUFDNDJG NTJGMjE1OEMzRUM1RkQzRTg3OUIyQkIyQTlERjg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUMwRTlBQzQyRjUyRjIxNThDM0VDNUZEM0U4NzlCMkJCMkE5 REY4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjZmNjVkYzMtNGEyYi00MjA3LWJj Y2ItYjBkMTRkZDkzNDAzLzAvQUMwRTlBQzQyRjUyRjIxNThDM0VDNUZEM0U4NzlC MkJCMkE5REY4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFnHRgMi/uKcZts3TiAPIv9qh63imW3+/Ubi 4Bq5W4CyY7gcj5bpmH8yi45xX+VeehD3cue7z12/wWeZuNUoCKx20korStbUY4er hfVe7JJ6r+E4FAdiFCOPo4GVFljsK5JgNBMmPQNQ33+0evKPzAR1d8MmqAA+pKSy ZKOY9Gk6xVqA3h/UlsjPhuR+NKDdRA2F8ma0bfqJm5jWN+xZvS8F5T9cATpbgplT ambCA1lwFZi0O60WlLcDF5uyLwlQa4kzQxwVzawtFrWRdem1wRDHpnzfcxqEC3eB 0REV1qXiV61dPXJljaa/pkYMgxqECFz8m2lpwJdRT4y7dxXpxJM= -----END CERTIFICATE-----Generated at Fri Apr 17 22:39:18 2026 by rpki-client