$ rpki-client -vvf repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.mft File: 40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.mft (raw, json) Hash identifier: B2QKIKMQ3gZ+oXY2Y8Xk4lYnRBXEJkyw26JvJOaMtsI= Subject key identifier: C8:61:60:7C:10:02:32:65:38:6E:C5:71:28:BB:0D:DB:21:C6:67:C8 Authority key identifier: 40:70:6A:5C:CF:A8:96:C8:EE:0C:1F:9A:5B:6D:CD:A1:91:5A:C7:6D Certificate issuer: /CN=40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D Certificate serial: 443BDFAAC5F09D7E4D0A585BFB263E34056CABBA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.mft Manifest number: 0243 Signing time: Sun 01 Mar 2026 02:21:38 +0000 Manifest this update: Sun 01 Mar 2026 02:16:38 +0000 Manifest next update: Wed 04 Mar 2026 04:23:38 +0000 Files and hashes: 1: 3130332e31342e3233312e302f32342d3234203d3e20313439393435.roa (hash: hy+/jpVeqW5ZdBPpsEQxih0c4zQVAJjPaRw4KAPp/Ro=) 2: 40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.crl (hash: S0o7ZMR4XVdtXYh3Ip4iARzb7aKiyTHC9jyuPO3iyWY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.crl rsync://repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 04:23:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:3b:df:aa:c5:f0:9d:7e:4d:0a:58:5b:fb:26:3e:34:05:6c:ab:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D Validity Not Before: Mar 1 02:16:38 2026 GMT Not After : Mar 4 04:23:38 2026 GMT Subject: CN=C861607C10023265386EC57128BB0DDB21C667C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:60:32:e5:ff:f4:1a:1b:d9:80:7c:96:bf:71: 00:d6:af:d9:1b:d5:9e:fe:2d:d3:d5:17:2c:e8:d5: b9:01:1a:f2:b0:c7:c5:2b:6c:cd:50:bd:15:ce:8d: e3:e9:1c:64:88:42:31:74:e9:da:65:7d:c0:f2:59: a2:3c:79:32:89:76:b8:0e:d8:ac:10:fe:e7:84:ef: 0e:85:d0:3e:51:3a:f8:37:7c:a4:e6:d1:17:58:fc: 92:ac:22:c1:6b:21:c1:ff:70:82:8e:5a:6b:40:07: 9b:01:02:fc:f9:65:5f:f8:56:e8:3b:66:f1:d8:f9: 57:20:af:a4:d8:e5:9d:95:e8:84:bd:5f:fa:28:8d: 85:79:6c:b3:87:c1:5b:34:85:3a:fe:05:4d:08:4a: d5:36:9e:08:e4:aa:ed:60:e1:a6:6b:f2:3b:01:91: 15:94:0d:50:44:dc:70:78:a1:57:85:42:de:a5:16: 42:61:10:d2:36:67:85:09:6f:90:cb:05:df:8f:83: fc:8a:f2:63:68:6b:28:a4:17:cc:e2:fd:0c:11:bc: ef:1b:80:4a:4d:47:f1:ca:e3:a4:f4:69:f0:c2:43: 31:1a:86:0c:72:da:29:8b:01:11:38:eb:29:48:a2: df:e8:7e:21:86:cc:e1:ab:31:51:72:9c:a1:bb:d3: 88:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:61:60:7C:10:02:32:65:38:6E:C5:71:28:BB:0D:DB:21:C6:67:C8 X509v3 Authority Key Identifier: keyid:40:70:6A:5C:CF:A8:96:C8:EE:0C:1F:9A:5B:6D:CD:A1:91:5A:C7:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:56:a5:3a:6c:87:7a:4a:6c:f5:47:0a:db:90:bc:ea:96:91: 91:15:f5:0f:9c:72:98:56:64:81:c1:77:8d:7d:ec:c7:92:c8: e5:61:23:dc:0d:29:ca:36:ac:00:b3:42:da:e7:80:f5:04:ab: 38:48:19:4d:82:dd:1d:79:79:18:4a:7b:8a:50:88:08:80:d9: 4d:c0:0f:f3:c3:26:24:cd:06:c4:a9:43:d2:53:54:ac:37:c0: 1e:36:f2:33:c2:7a:9e:ff:df:9a:60:39:87:9c:6c:56:12:a5: cd:57:82:4e:4a:33:35:60:3c:49:3e:49:34:4e:45:fa:ca:43: fa:fc:98:93:49:76:99:da:61:a4:75:61:67:ec:61:54:2c:28: 1c:86:07:50:e8:7b:5a:d9:ab:3f:7c:83:d8:82:86:55:50:46: 47:ec:a5:7b:47:ce:00:d3:f1:c8:88:33:dd:45:12:e8:15:32: 01:84:44:1b:db:f7:fd:b8:d5:f0:8b:61:9f:b4:7b:df:d3:02: bb:d1:a4:2b:e7:14:f7:ad:f4:b8:af:44:2a:cf:c6:d0:a4:5d: b4:95:fc:64:12:4e:e7:36:66:1a:35:25:de:75:8a:cf:a2:f6: 84:17:c1:9e:a4:a7:d0:ac:e8:62:a3:06:33:10:49:07:72:87: b0:27:a7:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURDvfqsXwnX5NClhb+yY+NAVsq7owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA3MDZBNUNDRkE4OTZDOEVFMEMxRjlBNUI2RENEQTE5 MTVBQzc2RDAeFw0yNjAzMDEwMjE2MzhaFw0yNjAzMDQwNDIzMzhaMDMxMTAvBgNV BAMTKEM4NjE2MDdDMTAwMjMyNjUzODZFQzU3MTI4QkIwRERCMjFDNjY3QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCYDLl//QaG9mAfJa/cQDWr9kb 1Z7+LdPVFyzo1bkBGvKwx8UrbM1QvRXOjePpHGSIQjF06dplfcDyWaI8eTKJdrgO 2KwQ/ueE7w6F0D5ROvg3fKTm0RdY/JKsIsFrIcH/cIKOWmtAB5sBAvz5ZV/4Vug7 ZvHY+Vcgr6TY5Z2V6IS9X/oojYV5bLOHwVs0hTr+BU0IStU2ngjkqu1g4aZr8jsB kRWUDVBE3HB4oVeFQt6lFkJhENI2Z4UJb5DLBd+Pg/yK8mNoayikF8zi/QwRvO8b gEpNR/HK46T0afDCQzEahgxy2imLARE46ylIot/ofiGGzOGrMVFynKG704hpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyGFgfBACMmU4bsVxKLsN2yHGZ8gwHwYDVR0j BBgwFoAUQHBqXM+olsjuDB+aW23NoZFax20wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZGY0Mjk2Zi0xY2E5LTQ1ZmMtYmIwOC04NDEzNWViMDBmYTcvMC80MDcwNkE1Q0NG QTg5NkM4RUUwQzFGOUE1QjZEQ0RBMTkxNUFDNzZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDA3MDZBNUNDRkE4OTZDOEVFMEMxRjlBNUI2RENEQTE5MTVB Qzc2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGRmNDI5NmYtMWNhOS00NWZjLWJi MDgtODQxMzVlYjAwZmE3LzAvNDA3MDZBNUNDRkE4OTZDOEVFMEMxRjlBNUI2RENE QTE5MTVBQzc2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEpWpTpsh3pKbPVHCtuQvOqWkZEV9Q+ccphW ZIHBd4197MeSyOVhI9wNKco2rACzQtrngPUEqzhIGU2C3R15eRhKe4pQiAiA2U3A D/PDJiTNBsSpQ9JTVKw3wB428jPCep7/35pgOYecbFYSpc1Xgk5KMzVgPEk+STRO RfrKQ/r8mJNJdpnaYaR1YWfsYVQsKByGB1Doe1rZqz98g9iChlVQRkfspXtHzgDT 8ciIM91FEugVMgGERBvb9/241fCLYZ+0e9/TArvRpCvnFPet9LivRCrPxtCkXbSV /GQSTuc2Zho1Jd51is+i9oQXwZ6kp9Cs6GKjBjMQSQdyh7Anp2k= -----END CERTIFICATE-----Generated at Mon Mar 2 12:37:28 2026 by rpki-client