$ rpki-client -vvf repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft File: 402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft (raw, json) Hash identifier: hk49XzITMfmdfwtun5RtfJBOdKov88344xi5O4OOsb4= Subject key identifier: 03:02:9A:F2:B4:35:F7:01:F7:6F:6B:1B:D7:7D:FE:91:0F:CD:2F:5A Authority key identifier: 40:2D:9F:1E:05:A2:6B:41:16:4E:25:B7:3A:5B:07:C8:8E:32:AB:43 Certificate issuer: /CN=402D9F1E05A26B41164E25B73A5B07C88E32AB43 Certificate serial: 1D8AB418E5BA59F4F6586E2413AB16A6B36995A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/402D9F1E05A26B41164E25B73A5B07C88E32AB43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft Manifest number: 02D3 Signing time: Sat 28 Feb 2026 13:00:47 +0000 Manifest this update: Sat 28 Feb 2026 12:55:47 +0000 Manifest next update: Tue 03 Mar 2026 17:30:47 +0000 Files and hashes: 1: 402D9F1E05A26B41164E25B73A5B07C88E32AB43.crl (hash: nXSqIdnCZxpYGUIyeD7neHsE58rf7vRCAPXjj3e4Nh8=) 2: 3130332e3137392e3133342e302f32332d3234203d3e20313531303030.roa (hash: uB6a447DP0BVfo+AyQQCYTW9WembPSjbDetzWb0LqT4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.crl rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/402D9F1E05A26B41164E25B73A5B07C88E32AB43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 17:30:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:8a:b4:18:e5:ba:59:f4:f6:58:6e:24:13:ab:16:a6:b3:69:95:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=402D9F1E05A26B41164E25B73A5B07C88E32AB43 Validity Not Before: Feb 28 12:55:47 2026 GMT Not After : Mar 3 17:30:47 2026 GMT Subject: CN=03029AF2B435F701F76F6B1BD77DFE910FCD2F5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9d:56:3f:ac:8e:2d:d3:eb:7c:e2:22:df:62: d0:69:18:38:85:5c:63:e2:1b:7c:d2:bf:ca:eb:02: fe:02:d6:b2:cc:2c:22:38:bb:3b:52:16:2c:23:a2: f5:0d:82:e6:5b:92:3a:01:95:0e:13:56:3a:7a:f6: fc:81:65:1a:b2:22:24:c7:f8:d6:40:78:c2:d2:34: 5d:41:dd:fe:9d:0b:04:96:f7:7a:cd:c7:26:eb:db: e2:09:b5:e2:82:04:b2:1c:d5:fe:45:e7:1b:de:e7: 65:8c:28:df:df:17:c4:ad:3a:b0:2b:b9:96:4f:da: 78:f0:d5:6e:76:ed:51:b3:a3:ac:23:8f:07:91:c3: 80:86:a6:9d:af:9b:fd:fa:a8:b7:dd:9e:d0:21:a7: 0d:ae:52:b5:24:5e:0b:10:92:8a:20:1a:ed:f6:36: 8b:4f:1b:70:a2:a0:e3:5d:15:d9:6b:a9:39:cf:21: 65:1c:7e:f8:34:7b:b3:67:30:d1:fe:5e:20:6d:47: 8c:20:7e:17:fe:d6:f6:10:09:3c:45:b2:a9:d3:c1: 44:67:d4:68:f6:12:96:4a:9a:5d:0d:57:0b:e5:eb: f9:13:76:d7:c6:48:23:d0:df:71:0f:30:d4:10:fc: 7c:db:0f:db:50:a2:e6:75:24:97:ec:44:8d:c8:56: 29:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:02:9A:F2:B4:35:F7:01:F7:6F:6B:1B:D7:7D:FE:91:0F:CD:2F:5A X509v3 Authority Key Identifier: keyid:40:2D:9F:1E:05:A2:6B:41:16:4E:25:B7:3A:5B:07:C8:8E:32:AB:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/402D9F1E05A26B41164E25B73A5B07C88E32AB43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:d2:1f:5c:74:f7:9b:84:79:2e:b3:e2:a8:f8:07:2b:35:5a: bf:3b:98:b4:3a:dd:06:80:b8:b6:d6:62:a8:6b:76:16:70:e3: b9:12:58:22:9a:85:a0:a1:2c:83:3a:bf:d6:4c:ae:81:a4:1a: b1:97:74:f6:f6:ef:69:56:93:96:83:2f:0b:4f:61:8e:c3:49: b1:7e:f2:62:6d:0e:a9:46:84:42:ca:66:df:4e:be:4b:32:1a: 0f:d7:b7:cc:66:1a:ea:e2:e7:a2:5f:43:39:95:7e:bb:f2:9b: 43:95:92:29:14:17:c9:0d:bf:bf:6d:01:8b:84:2d:92:c7:8c: e0:50:4a:b7:d2:41:d3:ab:59:41:90:07:4b:1d:b7:76:02:ef: 9f:cf:ba:f6:f6:ef:76:2d:b2:0a:fb:e0:7d:22:0b:d7:b9:18: 98:b4:0c:a2:6c:e5:5f:85:70:ec:52:cc:7b:0e:5b:13:fa:db: 6e:c5:86:7b:d6:07:00:26:b9:99:57:b4:5c:22:a7:02:99:35: be:58:fd:93:85:cb:8e:63:4a:0c:22:b9:99:3f:c3:60:2d:2c: de:7c:7f:12:db:39:31:99:42:16:47:62:fe:30:c4:5e:a3:92: a6:d9:de:b6:49:18:88:b6:bf:30:ff:b0:56:cb:52:c0:9b:f3: fe:34:98:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHYq0GOW6WfT2WG4kE6sWprNplacwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDAyRDlGMUUwNUEyNkI0MTE2NEUyNUI3M0E1QjA3Qzg4 RTMyQUI0MzAeFw0yNjAyMjgxMjU1NDdaFw0yNjAzMDMxNzMwNDdaMDMxMTAvBgNV BAMTKDAzMDI5QUYyQjQzNUY3MDFGNzZGNkIxQkQ3N0RGRTkxMEZDRDJGNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAnVY/rI4t0+t84iLfYtBpGDiF XGPiG3zSv8rrAv4C1rLMLCI4uztSFiwjovUNguZbkjoBlQ4TVjp69vyBZRqyIiTH +NZAeMLSNF1B3f6dCwSW93rNxybr2+IJteKCBLIc1f5F5xve52WMKN/fF8StOrAr uZZP2njw1W527VGzo6wjjweRw4CGpp2vm/36qLfdntAhpw2uUrUkXgsQkoogGu32 NotPG3CioONdFdlrqTnPIWUcfvg0e7NnMNH+XiBtR4wgfhf+1vYQCTxFsqnTwURn 1Gj2EpZKml0NVwvl6/kTdtfGSCPQ33EPMNQQ/HzbD9tQouZ1JJfsRI3IVinrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAwKa8rQ19wH3b2sb133+kQ/NL1owHwYDVR0j BBgwFoAUQC2fHgWia0EWTiW3OlsHyI4yq0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YjNkZjZhZi1kOWVlLTQwNzYtODFhNC0yNjQ4NzI3NDg5NzAvMC80MDJEOUYxRTA1 QTI2QjQxMTY0RTI1QjczQTVCMDdDODhFMzJBQjQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDAyRDlGMUUwNUEyNkI0MTE2NEUyNUI3M0E1QjA3Qzg4RTMy QUI0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2IzZGY2YWYtZDllZS00MDc2LTgx YTQtMjY0ODcyNzQ4OTcwLzAvNDAyRDlGMUUwNUEyNkI0MTE2NEUyNUI3M0E1QjA3 Qzg4RTMyQUI0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABDSH1x095uEeS6z4qj4Bys1Wr87mLQ63QaA uLbWYqhrdhZw47kSWCKahaChLIM6v9ZMroGkGrGXdPb272lWk5aDLwtPYY7DSbF+ 8mJtDqlGhELKZt9OvksyGg/Xt8xmGuri56JfQzmVfrvym0OVkikUF8kNv79tAYuE LZLHjOBQSrfSQdOrWUGQB0sdt3YC75/Puvb273Ytsgr74H0iC9e5GJi0DKJs5V+F cOxSzHsOWxP6227FhnvWBwAmuZlXtFwipwKZNb5Y/ZOFy45jSgwiuZk/w2AtLN58 fxLbOTGZQhZHYv4wxF6jkqbZ3rZJGIi2vzD/sFbLUsCb8/40mFc= -----END CERTIFICATE-----Generated at Mon Mar 2 17:33:29 2026 by rpki-client