$ rpki-client -vvf repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft File: 402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft (raw, json) Hash identifier: Tzxg/W2LhTeo3C8W91TGyemW4SFLe4tEfdCuWYl8li4= Subject key identifier: ED:BE:EF:5E:C3:BA:8D:BD:9B:B6:2B:FD:BF:91:4B:31:B6:96:61:B3 Authority key identifier: 40:2D:9F:1E:05:A2:6B:41:16:4E:25:B7:3A:5B:07:C8:8E:32:AB:43 Certificate issuer: /CN=402D9F1E05A26B41164E25B73A5B07C88E32AB43 Certificate serial: 4FAA7C100102D3F060C09B6137B116067C99ACE0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/402D9F1E05A26B41164E25B73A5B07C88E32AB43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft Manifest number: 02D4 Signing time: Mon 02 Mar 2026 17:30:48 +0000 Manifest this update: Mon 02 Mar 2026 17:25:48 +0000 Manifest next update: Thu 05 Mar 2026 20:49:48 +0000 Files and hashes: 1: 3130332e3137392e3133342e302f32332d3234203d3e20313531303030.roa (hash: uB6a447DP0BVfo+AyQQCYTW9WembPSjbDetzWb0LqT4=) 2: 402D9F1E05A26B41164E25B73A5B07C88E32AB43.crl (hash: JZODgPfzVqRYRvz8u6FJARdKbIHWX1jZHf72ZOlI6+I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.crl rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/402D9F1E05A26B41164E25B73A5B07C88E32AB43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:aa:7c:10:01:02:d3:f0:60:c0:9b:61:37:b1:16:06:7c:99:ac:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=402D9F1E05A26B41164E25B73A5B07C88E32AB43 Validity Not Before: Mar 2 17:25:48 2026 GMT Not After : Mar 5 20:49:48 2026 GMT Subject: CN=EDBEEF5EC3BA8DBD9BB62BFDBF914B31B69661B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f5:37:86:a2:4b:fb:03:01:93:90:23:4e:de: df:16:97:8c:f6:2d:6d:2c:26:d0:69:8a:fa:ec:c4: c0:41:fe:18:8b:4b:60:cf:06:4e:25:c0:52:75:d2: 3b:cf:89:9a:3b:5b:c2:d9:be:63:33:a1:73:51:07: 58:af:7f:44:5d:2f:36:01:28:2a:70:a5:b4:91:6f: 17:ff:40:95:2f:cd:f8:2f:ef:81:3f:27:6d:df:65: 1b:fa:75:c6:ab:e8:33:20:30:d4:9a:7e:f4:e1:1e: 02:b9:53:f0:b3:d1:f7:43:95:26:16:21:84:a5:4a: 0e:d5:a0:aa:f9:2d:ab:a3:40:81:74:62:87:69:de: da:b5:32:1a:7d:6f:5f:dd:f6:37:5b:af:70:0f:08: 8a:e5:83:5d:93:ba:d1:c9:4e:08:2a:cb:eb:37:0f: 88:4b:db:dd:1b:9e:cb:52:ad:76:3b:e4:67:b1:07: 1d:79:47:b6:f6:ae:76:22:bc:7a:9d:9b:39:1e:6d: aa:ba:c2:38:bf:76:87:06:f0:04:ca:80:fa:8d:80: c2:af:bf:f5:27:ce:88:2a:27:f4:50:d3:a3:4f:57: c7:86:ab:af:0d:8d:4d:20:31:d1:ca:ae:d7:4c:d9: cc:ab:b5:32:f6:c4:4b:7f:21:93:1e:58:59:c3:a4: a6:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:BE:EF:5E:C3:BA:8D:BD:9B:B6:2B:FD:BF:91:4B:31:B6:96:61:B3 X509v3 Authority Key Identifier: keyid:40:2D:9F:1E:05:A2:6B:41:16:4E:25:B7:3A:5B:07:C8:8E:32:AB:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/402D9F1E05A26B41164E25B73A5B07C88E32AB43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:e8:e8:81:6a:4b:4f:42:ac:6d:28:b1:46:13:dc:5c:33:a1: 26:b8:4f:b3:25:f8:2b:f0:4b:d7:25:a7:92:fd:8a:4f:f6:65: ba:1f:c8:e4:68:2d:58:e9:ac:92:ec:e9:89:0a:05:28:f3:45: c8:e3:38:22:01:8f:da:e4:1b:a5:bd:22:66:5b:26:b7:ff:a5: db:e2:b9:af:73:1c:a6:7a:f3:1a:8c:d3:ed:3f:6e:6d:72:75: e1:f4:b8:05:6c:39:e8:48:6b:6f:1f:3d:13:15:cb:8c:5a:a4: a7:e6:f6:a2:43:30:34:c7:4a:b3:2c:d3:f6:fa:bc:dc:84:c8: db:3d:78:6a:9f:a8:91:c8:bc:bb:f9:cf:fc:5a:b6:f9:19:a3: 4b:7f:a7:73:0c:9c:37:7a:1d:b2:b1:3e:6f:b1:a0:31:5a:10: 31:b1:83:9f:a2:70:7d:1b:c4:70:8d:d8:6b:71:36:59:d5:c9: 99:62:b3:30:51:78:db:37:fd:d5:c8:80:c0:cf:44:72:fd:f4: ca:e0:ec:7a:df:d5:69:cf:6e:d0:a2:85:6e:2e:40:b4:32:e2: 80:15:6f:6f:ac:09:80:7c:63:57:99:39:2d:71:46:12:21:a5: 7f:5a:0e:cc:bb:79:8f:53:93:62:a1:93:bb:e1:26:83:95:66: e4:c5:55:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT6p8EAEC0/BgwJthN7EWBnyZrOAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDAyRDlGMUUwNUEyNkI0MTE2NEUyNUI3M0E1QjA3Qzg4 RTMyQUI0MzAeFw0yNjAzMDIxNzI1NDhaFw0yNjAzMDUyMDQ5NDhaMDMxMTAvBgNV BAMTKEVEQkVFRjVFQzNCQThEQkQ5QkI2MkJGREJGOTE0QjMxQjY5NjYxQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc9TeGokv7AwGTkCNO3t8Wl4z2 LW0sJtBpivrsxMBB/hiLS2DPBk4lwFJ10jvPiZo7W8LZvmMzoXNRB1ivf0RdLzYB KCpwpbSRbxf/QJUvzfgv74E/J23fZRv6dcar6DMgMNSafvThHgK5U/Cz0fdDlSYW IYSlSg7VoKr5LaujQIF0Yodp3tq1Mhp9b1/d9jdbr3APCIrlg12TutHJTggqy+s3 D4hL290bnstSrXY75GexBx15R7b2rnYivHqdmzkebaq6wji/docG8ATKgPqNgMKv v/UnzogqJ/RQ06NPV8eGq68NjU0gMdHKrtdM2cyrtTL2xEt/IZMeWFnDpKY/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7b7vXsO6jb2btiv9v5FLMbaWYbMwHwYDVR0j BBgwFoAUQC2fHgWia0EWTiW3OlsHyI4yq0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YjNkZjZhZi1kOWVlLTQwNzYtODFhNC0yNjQ4NzI3NDg5NzAvMC80MDJEOUYxRTA1 QTI2QjQxMTY0RTI1QjczQTVCMDdDODhFMzJBQjQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDAyRDlGMUUwNUEyNkI0MTE2NEUyNUI3M0E1QjA3Qzg4RTMy QUI0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2IzZGY2YWYtZDllZS00MDc2LTgx YTQtMjY0ODcyNzQ4OTcwLzAvNDAyRDlGMUUwNUEyNkI0MTE2NEUyNUI3M0E1QjA3 Qzg4RTMyQUI0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADjo6IFqS09CrG0osUYT3FwzoSa4T7Ml+Cvw S9clp5L9ik/2ZbofyORoLVjprJLs6YkKBSjzRcjjOCIBj9rkG6W9ImZbJrf/pdvi ua9zHKZ68xqM0+0/bm1ydeH0uAVsOehIa28fPRMVy4xapKfm9qJDMDTHSrMs0/b6 vNyEyNs9eGqfqJHIvLv5z/xatvkZo0t/p3MMnDd6HbKxPm+xoDFaEDGxg5+icH0b xHCN2GtxNlnVyZliszBReNs3/dXIgMDPRHL99Mrg7Hrf1WnPbtCihW4uQLQy4oAV b2+sCYB8Y1eZOS1xRhIhpX9aDsy7eY9Tk2Khk7vhJoOVZuTFVbw= -----END CERTIFICATE-----Generated at Tue Mar 3 00:43:38 2026 by rpki-client