$ rpki-client -vvf repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft File: 4F40845626DE4E373F550B654EA4E833B6EB4D27.mft (raw, json) Hash identifier: i3WhsO9yoF7ENMO2rr9Z3bWcZSSoKQy+8AO3WDWje4A= Subject key identifier: 4A:E9:CB:38:51:FC:24:C8:DA:BB:F9:84:4B:88:F9:30:A1:7C:41:E4 Authority key identifier: 4F:40:84:56:26:DE:4E:37:3F:55:0B:65:4E:A4:E8:33:B6:EB:4D:27 Certificate issuer: /CN=4F40845626DE4E373F550B654EA4E833B6EB4D27 Certificate serial: 5EDAAA0CE894FA4DEFFFBC9DDE98B645D8119F3F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft Manifest number: 03FA Signing time: Sun 01 Mar 2026 00:40:02 +0000 Manifest this update: Sun 01 Mar 2026 00:35:02 +0000 Manifest next update: Wed 04 Mar 2026 06:44:02 +0000 Files and hashes: 1: 3130332e3136382e3134372e302f32342d3234203d3e20313430343433.roa (hash: 8U1YdeabpMcYCkPujQ3tfYK2Gg3om+TR67FcBFNrj1s=) 2: 4F40845626DE4E373F550B654EA4E833B6EB4D27.crl (hash: ruXFJZ8naOgqjBQPWdEfUtbBWda7zdvI3fFpf045WD4=) 3: 3130332e3136382e3134362e302f32342d3234203d3e20313430343433.roa (hash: 6CnrGX1LrXJO/2xiSh7/WQeAAu4zVMBvJoPd9Ck/Xbs=) 4: 3130332e3136382e3134362e302f32332d3233203d3e20313430343433.roa (hash: qE8KSOdMtc/r9rxeBM2pwg3ZFTLF2GFJiqstVLHlsTo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.crl rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 06:44:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:da:aa:0c:e8:94:fa:4d:ef:ff:bc:9d:de:98:b6:45:d8:11:9f:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F40845626DE4E373F550B654EA4E833B6EB4D27 Validity Not Before: Mar 1 00:35:02 2026 GMT Not After : Mar 4 06:44:02 2026 GMT Subject: CN=4AE9CB3851FC24C8DABBF9844B88F930A17C41E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:2e:92:e0:42:4c:f8:6d:39:5e:c1:2c:90:74: 22:ed:a2:1c:d1:b9:e4:e0:bb:b7:5f:99:7d:72:b4: 18:ae:70:9a:0b:f8:99:49:5f:f0:e8:69:32:0d:0e: 5e:c1:f8:de:ed:e7:fb:47:8c:ad:09:c1:94:79:8d: df:64:2b:87:f7:ca:6e:c6:ea:75:f9:d7:b4:b4:3a: 08:02:22:75:a1:75:f5:21:e6:d4:70:b2:be:56:bb: b2:d6:8a:6e:2a:5d:bc:11:a0:b7:94:c4:f9:9e:a8: a5:89:e9:b6:8f:d9:4d:e3:5f:2a:0a:d9:df:e8:c2: d2:66:be:39:14:20:8c:ee:d4:3e:9f:85:06:6a:08: 3c:0e:a4:5f:9f:eb:41:ad:09:ab:c7:5a:51:4e:19: 4e:43:d8:36:f1:d4:f5:a1:77:e4:35:f5:56:12:5b: 8d:15:89:00:8d:51:9d:ba:ab:dd:76:c4:63:4c:5b: 48:5b:2f:2b:0d:00:c9:88:a8:02:a9:66:f7:89:1c: 7a:f7:55:14:31:a1:26:46:54:5b:1c:19:fd:0e:8c: 51:f9:7b:bf:bf:9b:d3:0e:f5:a5:90:52:fd:92:35: 22:5e:10:75:34:e3:3f:d6:6c:8f:53:51:05:d3:f4: 70:2a:ae:ff:23:7d:ed:a2:d4:82:f2:cf:6f:85:fe: f4:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:E9:CB:38:51:FC:24:C8:DA:BB:F9:84:4B:88:F9:30:A1:7C:41:E4 X509v3 Authority Key Identifier: keyid:4F:40:84:56:26:DE:4E:37:3F:55:0B:65:4E:A4:E8:33:B6:EB:4D:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:72:28:f3:0d:a5:26:b1:da:5a:fe:56:c4:76:ed:ba:5b:1b: ef:38:4d:9a:cd:03:83:31:c8:83:a6:72:36:29:ec:74:55:70: d1:1f:ff:48:e8:92:74:e9:fd:28:70:82:50:4d:1a:b7:16:e1: 04:ef:bc:2d:10:91:fd:26:7b:56:da:4d:07:7d:d6:77:37:90: 6f:26:1d:5a:2a:f7:95:92:8e:25:d5:45:6c:61:66:e8:57:30: 62:53:c2:fd:78:06:46:23:28:38:39:b2:e2:5e:d1:d7:a1:e7: f6:29:72:1f:25:df:89:0c:bd:0b:c1:e0:f0:3b:ef:c1:e2:0d: 7f:2d:1c:19:60:38:c1:5b:4e:94:48:7d:cf:33:bc:01:86:8b: c3:9a:ae:9f:66:45:6c:b3:25:46:cb:06:6b:17:13:ba:ee:a4: 60:85:b5:b9:44:7b:06:02:5a:b7:b9:e9:3c:b4:ca:99:ea:6a: f9:37:8c:56:0f:db:14:8b:84:43:f5:ad:db:ae:7a:07:cf:8f: f7:75:ff:69:df:61:1b:ff:99:b2:86:24:76:df:d2:da:cd:ed: d7:62:28:f7:c1:20:2c:fa:26:d2:6c:b9:5a:e6:f8:ef:ba:a9: 9c:71:eb:b3:13:d3:3f:1e:7a:93:2e:b7:60:e9:3a:f0:e5:fa: 7d:61:a5:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXtqqDOiU+k3v/7yd3pi2RdgRnz8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEY0MDg0NTYyNkRFNEUzNzNGNTUwQjY1NEVBNEU4MzNC NkVCNEQyNzAeFw0yNjAzMDEwMDM1MDJaFw0yNjAzMDQwNjQ0MDJaMDMxMTAvBgNV BAMTKDRBRTlDQjM4NTFGQzI0QzhEQUJCRjk4NDRCODhGOTMwQTE3QzQxRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwLpLgQkz4bTlewSyQdCLtohzR ueTgu7dfmX1ytBiucJoL+JlJX/DoaTINDl7B+N7t5/tHjK0JwZR5jd9kK4f3ym7G 6nX517S0OggCInWhdfUh5tRwsr5Wu7LWim4qXbwRoLeUxPmeqKWJ6baP2U3jXyoK 2d/owtJmvjkUIIzu1D6fhQZqCDwOpF+f60GtCavHWlFOGU5D2Dbx1PWhd+Q19VYS W40ViQCNUZ26q912xGNMW0hbLysNAMmIqAKpZveJHHr3VRQxoSZGVFscGf0OjFH5 e7+/m9MO9aWQUv2SNSJeEHU04z/WbI9TUQXT9HAqrv8jfe2i1ILyz2+F/vRVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSunLOFH8JMjau/mES4j5MKF8QeQwHwYDVR0j BBgwFoAUT0CEVibeTjc/VQtlTqToM7brTScwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTQ2MzYwZC02NjJiLTRmN2QtYmIxNy1kODYwODIxNTI0NzEvMC80RjQwODQ1NjI2 REU0RTM3M0Y1NTBCNjU0RUE0RTgzM0I2RUI0RDI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEY0MDg0NTYyNkRFNEUzNzNGNTUwQjY1NEVBNEU4MzNCNkVC NEQyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2E0NjM2MGQtNjYyYi00ZjdkLWJi MTctZDg2MDgyMTUyNDcxLzAvNEY0MDg0NTYyNkRFNEUzNzNGNTUwQjY1NEVBNEU4 MzNCNkVCNEQyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFpyKPMNpSax2lr+VsR27bpbG+84TZrNA4Mx yIOmcjYp7HRVcNEf/0joknTp/ShwglBNGrcW4QTvvC0Qkf0me1baTQd91nc3kG8m HVoq95WSjiXVRWxhZuhXMGJTwv14BkYjKDg5suJe0deh5/Ypch8l34kMvQvB4PA7 78HiDX8tHBlgOMFbTpRIfc8zvAGGi8Oarp9mRWyzJUbLBmsXE7rupGCFtblEewYC Wre56Ty0ypnqavk3jFYP2xSLhEP1rduuegfPj/d1/2nfYRv/mbKGJHbf0trN7ddi KPfBICz6JtJsuVrm+O+6qZxx67MT0z8eepMut2DpOvDl+n1hpbE= -----END CERTIFICATE-----Generated at Mon Mar 2 15:44:05 2026 by rpki-client