$ rpki-client -vvf repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft File: 4F40845626DE4E373F550B654EA4E833B6EB4D27.mft (raw, json) Hash identifier: y/clU0C1YR04STj4xNUCrWMc5dJOu0bUa4DM5UuPGCQ= Subject key identifier: E7:6D:D3:CE:90:1B:90:C0:3A:BC:F7:09:D3:8C:E7:A9:90:F1:76:34 Authority key identifier: 4F:40:84:56:26:DE:4E:37:3F:55:0B:65:4E:A4:E8:33:B6:EB:4D:27 Certificate issuer: /CN=4F40845626DE4E373F550B654EA4E833B6EB4D27 Certificate serial: 6A7BD843A9EC667DAE8A33E36E77FAF0E7760699 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft Manifest number: 040F Signing time: Fri 17 Apr 2026 16:10:02 +0000 Manifest this update: Fri 17 Apr 2026 16:05:02 +0000 Manifest next update: Tue 21 Apr 2026 03:29:02 +0000 Files and hashes: 1: 3130332e3136382e3134362e302f32342d3234203d3e20313430343433.roa (hash: 6CnrGX1LrXJO/2xiSh7/WQeAAu4zVMBvJoPd9Ck/Xbs=) 2: 3130332e3136382e3134372e302f32342d3234203d3e20313430343433.roa (hash: 8U1YdeabpMcYCkPujQ3tfYK2Gg3om+TR67FcBFNrj1s=) 3: 4F40845626DE4E373F550B654EA4E833B6EB4D27.crl (hash: QssRB91SmFL14GtmaODPfe0DTxeKpmKUIGdzsPl6ruU=) 4: 3130332e3136382e3134362e302f32332d3233203d3e20313430343433.roa (hash: qE8KSOdMtc/r9rxeBM2pwg3ZFTLF2GFJiqstVLHlsTo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.crl rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 20:07:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:7b:d8:43:a9:ec:66:7d:ae:8a:33:e3:6e:77:fa:f0:e7:76:06:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F40845626DE4E373F550B654EA4E833B6EB4D27 Validity Not Before: Apr 17 16:05:02 2026 GMT Not After : Apr 21 03:29:02 2026 GMT Subject: CN=E76DD3CE901B90C03ABCF709D38CE7A990F17634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:7b:a1:21:90:61:e1:e4:2b:bd:05:fd:a6:3d: f6:93:3b:14:e9:09:b6:86:7d:c4:cf:45:9d:35:8f: 2e:5b:34:50:bd:09:d6:e0:b4:80:1d:e7:ac:94:8a: fc:f3:13:6c:f1:ea:db:a6:a6:4e:09:f8:eb:1a:a2: 34:65:b1:06:b4:59:07:51:1b:b3:44:52:5e:11:5a: b5:66:f2:7f:fb:26:91:9f:bc:73:4a:86:b0:a5:a4: 7a:11:af:9a:79:26:da:5d:5f:dd:f1:ea:d9:dd:74: 40:35:c7:f6:38:a8:c2:cd:8b:3e:fb:57:e6:c9:ac: 39:68:99:b8:f1:57:a8:5b:89:3f:3e:9f:6c:a6:8c: 54:ac:69:2b:5a:28:1e:b6:84:18:df:f9:28:50:f6: fa:6b:dc:b2:77:a4:de:1f:83:04:de:79:7a:98:2a: e6:1f:b9:e5:e8:9a:1f:cc:4c:f5:be:4b:4c:54:37: 8d:e2:b6:53:91:16:2f:e6:5c:2e:87:2b:0d:3e:25: f1:0a:86:ac:68:a2:6d:38:7d:42:35:0f:b5:ab:fb: 6f:ee:c7:83:26:02:c3:56:ff:e4:d6:5d:fa:b7:59: 5a:02:81:a4:3f:11:ec:09:77:b4:69:c1:50:04:7e: 4f:0b:f0:0d:a5:be:79:81:79:4d:65:8d:2c:9b:78: b4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:6D:D3:CE:90:1B:90:C0:3A:BC:F7:09:D3:8C:E7:A9:90:F1:76:34 X509v3 Authority Key Identifier: keyid:4F:40:84:56:26:DE:4E:37:3F:55:0B:65:4E:A4:E8:33:B6:EB:4D:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:f7:82:3a:0f:68:1b:de:67:d7:8d:86:9f:7c:3a:39:bc:95: fc:6b:0f:e2:22:35:d7:0d:b1:59:d2:c0:be:bd:88:2f:78:cd: 32:ca:01:ef:20:2e:9d:15:f7:dd:47:e0:62:a0:de:75:41:9e: b0:b9:e1:d0:4e:1f:3f:db:9e:11:67:9b:f4:fb:39:b7:f6:5a: ef:74:76:36:fd:d0:f3:8a:34:81:8c:62:58:44:a1:92:75:37: 85:8a:e6:73:c2:e9:99:1e:60:ac:33:81:97:d5:75:ab:5e:d0: 26:16:e3:23:ac:d6:7c:6e:46:f9:36:d6:de:16:37:c3:02:6e: 62:fb:9b:98:1b:51:03:c5:80:32:de:0c:c8:46:50:6b:36:bd: b2:38:01:b7:66:e8:6d:08:bf:2b:a5:8b:75:2f:72:a2:29:e2: ce:dc:ec:ee:ee:f2:6f:d5:d0:6f:35:6d:77:88:95:06:c4:68: 02:3d:57:fb:cf:24:b9:8a:75:29:55:3b:44:cb:39:8a:bd:90: 2f:17:90:54:1d:18:97:df:d6:ab:82:11:20:96:90:27:9e:0f: 1d:70:da:1c:a1:da:07:97:b2:57:99:65:cf:00:58:6e:9f:28: ca:6e:04:b2:99:e4:f3:8e:cc:15:d9:3b:fc:73:c7:9f:29:c4: 4b:cf:a0:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUanvYQ6nsZn2uijPjbnf68Od2BpkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEY0MDg0NTYyNkRFNEUzNzNGNTUwQjY1NEVBNEU4MzNC NkVCNEQyNzAeFw0yNjA0MTcxNjA1MDJaFw0yNjA0MjEwMzI5MDJaMDMxMTAvBgNV BAMTKEU3NkREM0NFOTAxQjkwQzAzQUJDRjcwOUQzOENFN0E5OTBGMTc2MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDde6EhkGHh5Cu9Bf2mPfaTOxTp CbaGfcTPRZ01jy5bNFC9CdbgtIAd56yUivzzE2zx6tumpk4J+OsaojRlsQa0WQdR G7NEUl4RWrVm8n/7JpGfvHNKhrClpHoRr5p5JtpdX93x6tnddEA1x/Y4qMLNiz77 V+bJrDlombjxV6hbiT8+n2ymjFSsaStaKB62hBjf+ShQ9vpr3LJ3pN4fgwTeeXqY KuYfueXomh/MTPW+S0xUN43itlORFi/mXC6HKw0+JfEKhqxoom04fUI1D7Wr+2/u x4MmAsNW/+TWXfq3WVoCgaQ/EewJd7RpwVAEfk8L8A2lvnmBeU1ljSybeLT1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU523TzpAbkMA6vPcJ04znqZDxdjQwHwYDVR0j BBgwFoAUT0CEVibeTjc/VQtlTqToM7brTScwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTQ2MzYwZC02NjJiLTRmN2QtYmIxNy1kODYwODIxNTI0NzEvMC80RjQwODQ1NjI2 REU0RTM3M0Y1NTBCNjU0RUE0RTgzM0I2RUI0RDI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEY0MDg0NTYyNkRFNEUzNzNGNTUwQjY1NEVBNEU4MzNCNkVC NEQyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2E0NjM2MGQtNjYyYi00ZjdkLWJi MTctZDg2MDgyMTUyNDcxLzAvNEY0MDg0NTYyNkRFNEUzNzNGNTUwQjY1NEVBNEU4 MzNCNkVCNEQyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAn3gjoPaBveZ9eNhp98Ojm8lfxrD+IiNdcN sVnSwL69iC94zTLKAe8gLp0V991H4GKg3nVBnrC54dBOHz/bnhFnm/T7Obf2Wu90 djb90POKNIGMYlhEoZJ1N4WK5nPC6ZkeYKwzgZfVdate0CYW4yOs1nxuRvk21t4W N8MCbmL7m5gbUQPFgDLeDMhGUGs2vbI4Abdm6G0Ivyuli3UvcqIp4s7c7O7u8m/V 0G81bXeIlQbEaAI9V/vPJLmKdSlVO0TLOYq9kC8XkFQdGJff1quCESCWkCeeDx1w 2hyh2geXsleZZc8AWG6fKMpuBLKZ5POOzBXZO/xzx58pxEvPoM4= -----END CERTIFICATE-----Generated at Fri Apr 17 20:44:02 2026 by rpki-client