$ rpki-client -vvf repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.mft File: F40A3B698C292462E4AF862C69FB242F66E56191.mft (raw, json) Hash identifier: 2Xel5g6rdDaKxC4zUNWH3H5vte7OQ/KlI2d89yFSiBc= Subject key identifier: 0D:10:AA:1F:D9:EA:B0:D2:23:55:F7:24:46:59:2F:4C:9F:7C:59:D8 Authority key identifier: F4:0A:3B:69:8C:29:24:62:E4:AF:86:2C:69:FB:24:2F:66:E5:61:91 Certificate issuer: /CN=F40A3B698C292462E4AF862C69FB242F66E56191 Certificate serial: 2B1320B6C19A84B8FA923B51DC7E53DB31000CC7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F40A3B698C292462E4AF862C69FB242F66E56191.cer Subject info access: rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.mft Manifest number: 0352 Signing time: Sat 28 Feb 2026 07:40:56 +0000 Manifest this update: Sat 28 Feb 2026 07:35:56 +0000 Manifest next update: Tue 03 Mar 2026 12:26:56 +0000 Files and hashes: 1: F40A3B698C292462E4AF862C69FB242F66E56191.crl (hash: TqhMgp6qi1zNJ89rsu+OOoLqUMAAD3onr133R8WeK+c=) 2: 3130332e3137342e33362e302f32332d3234203d3e20313331313131.roa (hash: gIT/zHc/1K0b1PiVmUPHw03fHkctz7eSoTHWuLp5tjo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.crl rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F40A3B698C292462E4AF862C69FB242F66E56191.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 12:26:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:13:20:b6:c1:9a:84:b8:fa:92:3b:51:dc:7e:53:db:31:00:0c:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F40A3B698C292462E4AF862C69FB242F66E56191 Validity Not Before: Feb 28 07:35:56 2026 GMT Not After : Mar 3 12:26:56 2026 GMT Subject: CN=0D10AA1FD9EAB0D22355F72446592F4C9F7C59D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:de:ef:e7:17:ae:b1:37:38:8d:20:8b:67:cc: ca:52:19:d7:b6:bd:38:64:a4:f5:50:f0:1b:d1:9b: 9d:98:b5:07:63:5a:de:7d:b9:05:b6:d4:b0:97:e8: 42:b4:74:4a:7b:0d:eb:7f:19:e3:c6:58:ad:62:57: 9a:4d:30:6a:b6:c0:53:59:69:4f:04:58:c2:a6:c5: 86:1c:34:5b:3c:2a:d2:cd:85:16:de:0f:7e:92:ca: 0b:74:6f:7c:56:21:f5:f7:20:20:c3:e1:ba:e9:1d: a9:40:90:af:4a:78:73:9a:62:39:74:44:43:37:ed: 4c:f1:c6:80:01:01:a5:12:11:2d:b2:0f:7c:44:47: e0:1a:b3:22:e2:e3:b9:c8:7a:97:e7:a8:22:8b:34: f3:65:4b:18:10:55:d7:a3:f7:2f:54:66:6e:44:dc: fa:05:9c:bb:7d:1e:b0:72:fe:7c:8c:4c:4f:be:57: f7:36:ed:44:a7:ec:b6:52:8c:44:2a:a7:48:af:0b: 7b:76:ba:1c:45:12:b2:70:63:87:e5:bb:1e:2e:29: b6:80:16:cb:ba:96:9e:65:52:60:c8:df:d5:4e:12: d0:4e:2f:d8:bf:5b:a9:cb:5f:e8:10:57:69:89:37: 60:8b:de:8e:4e:73:5d:e6:1d:28:31:07:34:39:61: 2c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:10:AA:1F:D9:EA:B0:D2:23:55:F7:24:46:59:2F:4C:9F:7C:59:D8 X509v3 Authority Key Identifier: keyid:F4:0A:3B:69:8C:29:24:62:E4:AF:86:2C:69:FB:24:2F:66:E5:61:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F40A3B698C292462E4AF862C69FB242F66E56191.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:bc:e8:35:77:69:2c:54:16:f8:54:de:58:ba:aa:d7:cc:5a: e2:3a:41:a7:4b:0d:05:5e:0b:4b:97:3e:dd:90:47:79:c1:14: 83:eb:a6:6c:a5:c9:8d:b6:cc:d7:d2:9a:4c:44:63:05:34:69: 10:d4:00:f5:43:51:7d:75:ec:a0:3f:e3:7b:8b:59:24:d2:4b: c0:eb:70:a0:82:7a:e3:be:8e:13:15:d6:a6:a2:62:79:11:41: b4:70:cb:9c:0e:a2:77:21:1d:f9:56:7d:01:78:f8:b6:87:00: 47:ce:86:7e:06:83:70:aa:8a:8b:1c:a5:4f:c3:0a:1d:ca:83: df:ba:f5:15:08:d7:79:a7:05:45:a9:4a:d8:57:3c:28:b1:78: 07:78:3b:bf:fb:42:54:8d:2d:af:71:fb:84:c9:77:6a:87:66: a2:0e:02:80:ec:0c:35:7f:5e:20:7d:a4:ca:85:c4:8a:f5:24: d7:1b:84:7f:a1:d3:a3:ec:8d:5b:f6:d0:d7:e1:2c:17:f1:f6: d9:6c:1c:7c:a5:ef:59:cc:a8:b3:57:14:a3:a1:f0:10:37:47: 55:a6:ce:6f:30:e0:5f:01:c5:37:ea:85:74:d2:2f:65:d8:74: 83:ee:b2:3b:fa:19:af:56:98:0e:0d:4e:e5:f2:b5:42:07:2f: b0:c9:62:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKxMgtsGahLj6kjtR3H5T2zEADMcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQwQTNCNjk4QzI5MjQ2MkU0QUY4NjJDNjlGQjI0MkY2 NkU1NjE5MTAeFw0yNjAyMjgwNzM1NTZaFw0yNjAzMDMxMjI2NTZaMDMxMTAvBgNV BAMTKDBEMTBBQTFGRDlFQUIwRDIyMzU1RjcyNDQ2NTkyRjRDOUY3QzU5RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD3u/nF66xNziNIItnzMpSGde2 vThkpPVQ8BvRm52YtQdjWt59uQW21LCX6EK0dEp7Det/GePGWK1iV5pNMGq2wFNZ aU8EWMKmxYYcNFs8KtLNhRbeD36Sygt0b3xWIfX3ICDD4brpHalAkK9KeHOaYjl0 REM37UzxxoABAaUSES2yD3xER+AasyLi47nIepfnqCKLNPNlSxgQVdej9y9UZm5E 3PoFnLt9HrBy/nyMTE++V/c27USn7LZSjEQqp0ivC3t2uhxFErJwY4flux4uKbaA Fsu6lp5lUmDI39VOEtBOL9i/W6nLX+gQV2mJN2CL3o5Oc13mHSgxBzQ5YSwbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDRCqH9nqsNIjVfckRlkvTJ98WdgwHwYDVR0j BBgwFoAU9Ao7aYwpJGLkr4YsafskL2blYZEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NGEyM2M0ZS0zOTMyLTQzYmQtODE3Ni1mNjI1MWRkZWE4NDIvMC9GNDBBM0I2OThD MjkyNDYyRTRBRjg2MkM2OUZCMjQyRjY2RTU2MTkxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjQwQTNCNjk4QzI5MjQ2MkU0QUY4NjJDNjlGQjI0MkY2NkU1 NjE5MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzRhMjNjNGUtMzkzMi00M2JkLTgx NzYtZjYyNTFkZGVhODQyLzAvRjQwQTNCNjk4QzI5MjQ2MkU0QUY4NjJDNjlGQjI0 MkY2NkU1NjE5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI286DV3aSxUFvhU3li6qtfMWuI6QadLDQVe C0uXPt2QR3nBFIPrpmylyY22zNfSmkxEYwU0aRDUAPVDUX117KA/43uLWSTSS8Dr cKCCeuO+jhMV1qaiYnkRQbRwy5wOonchHflWfQF4+LaHAEfOhn4Gg3CqioscpU/D Ch3Kg9+69RUI13mnBUWpSthXPCixeAd4O7/7QlSNLa9x+4TJd2qHZqIOAoDsDDV/ XiB9pMqFxIr1JNcbhH+h06PsjVv20NfhLBfx9tlsHHyl71nMqLNXFKOh8BA3R1Wm zm8w4F8BxTfqhXTSL2XYdIPusjv6Ga9WmA4NTuXytUIHL7DJYuE= -----END CERTIFICATE-----Generated at Mon Mar 2 08:08:19 2026 by rpki-client