$ rpki-client -vvf repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft File: 402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft (raw, json) Hash identifier: su1ZEqlZKINkeHhGGvS3pL38spTZEWVoqcXMsmQIjz4= Subject key identifier: 85:43:91:83:5B:81:CC:83:59:27:51:B5:ED:FB:2D:3D:3B:09:CC:12 Authority key identifier: 40:2D:9F:1E:05:A2:6B:41:16:4E:25:B7:3A:5B:07:C8:8E:32:AB:43 Certificate issuer: /CN=402D9F1E05A26B41164E25B73A5B07C88E32AB43 Certificate serial: 019E0AF6A837C25D6D04D34470E92379E2F70670 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/402D9F1E05A26B41164E25B73A5B07C88E32AB43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft Manifest number: 02E8 Signing time: Wed 15 Apr 2026 20:50:49 +0000 Manifest this update: Wed 15 Apr 2026 20:45:49 +0000 Manifest next update: Sat 18 Apr 2026 22:31:49 +0000 Files and hashes: 1: 402D9F1E05A26B41164E25B73A5B07C88E32AB43.crl (hash: ESCT6qk4uqCdDwxulyYY/Gub9rJzlcdF4uVhyD0pOTE=) 2: 3130332e3137392e3133342e302f32332d3234203d3e20313531303030.roa (hash: uB6a447DP0BVfo+AyQQCYTW9WembPSjbDetzWb0LqT4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.crl rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/402D9F1E05A26B41164E25B73A5B07C88E32AB43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 22:31:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:0a:f6:a8:37:c2:5d:6d:04:d3:44:70:e9:23:79:e2:f7:06:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=402D9F1E05A26B41164E25B73A5B07C88E32AB43 Validity Not Before: Apr 15 20:45:49 2026 GMT Not After : Apr 18 22:31:49 2026 GMT Subject: CN=854391835B81CC83592751B5EDFB2D3D3B09CC12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b1:51:d8:7c:ca:db:f1:b5:6b:02:e5:c7:17: 9d:1e:91:7a:ff:9d:9e:c2:03:30:c9:ce:31:91:cd: 58:9b:ff:b9:de:d1:c7:b5:b6:62:dd:f5:c6:02:c5: 1b:5a:97:b7:87:b6:2e:4b:f8:ab:20:fe:c9:09:c6: b8:cd:c0:05:38:f4:b9:bd:e9:e1:d3:22:7c:4e:63: 14:b1:38:9f:dd:82:01:1e:b1:e6:06:59:5c:1d:1f: 0b:61:16:d5:a9:dc:03:e9:81:18:af:a9:6e:2f:60: 88:0a:a0:e7:16:d0:ab:19:f6:cf:e2:b7:dd:98:bf: 2a:62:f1:d5:41:f9:95:62:e0:36:58:9d:30:7a:c8: c1:b2:a7:59:8c:a0:45:53:fa:5b:a8:1e:95:41:0a: 97:9f:94:f9:f1:19:f9:52:21:83:df:48:bf:62:98: 0f:2e:e8:ed:97:fb:de:d0:a4:14:34:19:65:bc:c1: 9c:0d:68:07:29:41:48:97:8d:3c:15:90:37:c8:ec: 6a:2c:9c:5c:8c:7a:80:40:81:e6:67:84:61:36:36: 46:f4:21:72:a0:68:4d:b4:c0:80:5a:bf:8c:4e:b9: 99:94:db:dc:f5:ec:f8:7c:d7:fe:60:f0:b2:45:fd: 3f:3f:83:ed:ec:a4:9d:e2:85:bc:15:63:97:98:dc: 5d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:43:91:83:5B:81:CC:83:59:27:51:B5:ED:FB:2D:3D:3B:09:CC:12 X509v3 Authority Key Identifier: keyid:40:2D:9F:1E:05:A2:6B:41:16:4E:25:B7:3A:5B:07:C8:8E:32:AB:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/402D9F1E05A26B41164E25B73A5B07C88E32AB43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:b2:15:9d:54:76:58:e3:2e:10:2a:4b:e1:24:5d:27:a4:0e: c9:e5:a7:da:b2:97:42:49:b5:1e:00:4a:89:c3:21:ab:78:ce: fe:30:5d:2f:21:bd:5b:00:27:b5:6a:7c:9b:39:f6:fe:5d:f5: 1f:a9:74:26:90:98:6d:9d:e4:cc:7a:96:4c:c2:39:99:6f:2f: 22:a0:9b:34:80:fa:98:f2:b3:16:2a:ff:28:1a:7f:15:0b:e1: f8:1d:ac:28:bd:d5:58:5e:99:a6:9f:21:63:d1:42:c3:53:b5: 50:7d:de:d7:01:c1:b5:36:59:67:ba:6d:6e:9f:be:69:58:58: b5:bc:9d:f1:22:de:11:26:20:89:5f:e8:b6:3c:d1:78:9d:16: c5:85:6d:df:f4:b8:d6:f6:51:df:94:83:1c:e8:12:90:bd:07: e4:29:7e:49:ab:a0:74:9a:4c:4e:d1:18:45:2c:91:6d:f0:0e: 68:8b:07:fe:5c:3b:9f:98:5f:e9:83:7c:84:da:18:20:df:1e: 45:b9:02:79:89:a1:6c:cc:67:3b:b6:1d:22:50:84:10:04:4a: c1:b8:8c:c5:fc:62:cf:79:96:52:d7:9f:4e:0f:30:88:93:cb: bb:18:29:5b:08:1a:32:d9:6e:45:fe:68:f6:1b:06:fd:85:c5: 8f:46:6d:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAZ4K9qg3wl1tBNNEcOkjeeL3BnAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDAyRDlGMUUwNUEyNkI0MTE2NEUyNUI3M0E1QjA3Qzg4 RTMyQUI0MzAeFw0yNjA0MTUyMDQ1NDlaFw0yNjA0MTgyMjMxNDlaMDMxMTAvBgNV BAMTKDg1NDM5MTgzNUI4MUNDODM1OTI3NTFCNUVERkIyRDNEM0IwOUNDMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEsVHYfMrb8bVrAuXHF50ekXr/ nZ7CAzDJzjGRzVib/7ne0ce1tmLd9cYCxRtal7eHti5L+Ksg/skJxrjNwAU49Lm9 6eHTInxOYxSxOJ/dggEeseYGWVwdHwthFtWp3APpgRivqW4vYIgKoOcW0KsZ9s/i t92Yvypi8dVB+ZVi4DZYnTB6yMGyp1mMoEVT+luoHpVBCpeflPnxGflSIYPfSL9i mA8u6O2X+97QpBQ0GWW8wZwNaAcpQUiXjTwVkDfI7GosnFyMeoBAgeZnhGE2Nkb0 IXKgaE20wIBav4xOuZmU29z17Ph81/5g8LJF/T8/g+3spJ3ihbwVY5eY3F3RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhUORg1uBzINZJ1G17fstPTsJzBIwHwYDVR0j BBgwFoAUQC2fHgWia0EWTiW3OlsHyI4yq0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YjNkZjZhZi1kOWVlLTQwNzYtODFhNC0yNjQ4NzI3NDg5NzAvMC80MDJEOUYxRTA1 QTI2QjQxMTY0RTI1QjczQTVCMDdDODhFMzJBQjQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDAyRDlGMUUwNUEyNkI0MTE2NEUyNUI3M0E1QjA3Qzg4RTMy QUI0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2IzZGY2YWYtZDllZS00MDc2LTgx YTQtMjY0ODcyNzQ4OTcwLzAvNDAyRDlGMUUwNUEyNkI0MTE2NEUyNUI3M0E1QjA3 Qzg4RTMyQUI0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHmyFZ1UdljjLhAqS+EkXSekDsnlp9qyl0JJ tR4ASonDIat4zv4wXS8hvVsAJ7VqfJs59v5d9R+pdCaQmG2d5Mx6lkzCOZlvLyKg mzSA+pjysxYq/ygafxUL4fgdrCi91VhemaafIWPRQsNTtVB93tcBwbU2WWe6bW6f vmlYWLW8nfEi3hEmIIlf6LY80XidFsWFbd/0uNb2Ud+UgxzoEpC9B+QpfkmroHSa TE7RGEUskW3wDmiLB/5cO5+YX+mDfITaGCDfHkW5AnmJoWzMZzu2HSJQhBAESsG4 jMX8Ys95llLXn04PMIiTy7sYKVsIGjLZbkX+aPYbBv2FxY9GbYg= -----END CERTIFICATE-----Generated at Fri Apr 17 20:59:28 2026 by rpki-client