$ rpki-client -vvf repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft File: 405E466852C38FD4CD20BA6115840947D5D24F5D.mft (raw, json) Hash identifier: W+5YM7nX5gpPnTXTB3GCQknT5Eo4OozZG3eX9mt4wpA= Subject key identifier: 7A:A2:1D:37:49:1F:3A:4B:C1:40:89:34:07:58:B7:9F:E4:EA:E4:99 Authority key identifier: 40:5E:46:68:52:C3:8F:D4:CD:20:BA:61:15:84:09:47:D5:D2:4F:5D Certificate issuer: /CN=405E466852C38FD4CD20BA6115840947D5D24F5D Certificate serial: 1D52A84FDDEBC4E52E9B6667AD0AFD9B7F620E9D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/405E466852C38FD4CD20BA6115840947D5D24F5D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft Manifest number: FC Signing time: Sat 28 Feb 2026 11:11:16 +0000 Manifest this update: Sat 28 Feb 2026 11:06:16 +0000 Manifest next update: Tue 03 Mar 2026 18:07:16 +0000 Files and hashes: 1: 405E466852C38FD4CD20BA6115840947D5D24F5D.crl (hash: wlrfxc+N+09Y1HitLBGt5t7d6WsZme9oVFyyv7yGOyA=) 2: 3136302e32352e3230332e302f32342d3234203d3e20313533313038.roa (hash: jF9/a6Jp1M+je5Rsp2up/n4DNy0dv/N5PQgKJQwfemc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.crl rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/405E466852C38FD4CD20BA6115840947D5D24F5D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 18:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:52:a8:4f:dd:eb:c4:e5:2e:9b:66:67:ad:0a:fd:9b:7f:62:0e:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=405E466852C38FD4CD20BA6115840947D5D24F5D Validity Not Before: Feb 28 11:06:16 2026 GMT Not After : Mar 3 18:07:16 2026 GMT Subject: CN=7AA21D37491F3A4BC14089340758B79FE4EAE499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:28:84:2a:a7:4d:03:18:56:6f:c9:0d:dd:b7: ef:73:ec:80:b5:23:1d:26:da:cf:90:f7:6f:7a:6a: a4:fc:d6:4a:ee:fb:60:b1:8a:07:ed:9d:49:83:14: 83:bd:92:1b:47:ae:2f:e9:05:ae:81:25:b7:3b:62: a4:e4:0c:31:86:75:90:2e:95:4d:80:25:a5:2b:d7: ef:88:dd:46:68:b8:8e:aa:ec:13:3b:cc:0e:53:aa: af:78:de:87:58:7c:c3:d9:87:02:d8:73:1a:b2:3f: d4:b0:7b:8a:a4:e9:2b:ec:bf:09:1c:28:d2:7e:56: 68:71:96:73:96:0b:9f:2c:0e:b1:8b:c1:64:33:90: 51:b5:40:3d:f0:eb:00:e9:8c:8c:b1:c6:05:47:4e: 73:09:3b:f8:15:19:a6:46:cc:3d:3b:6d:e0:6d:5e: 72:06:3a:73:56:a8:d1:bb:0c:d7:37:16:b1:24:db: 55:5c:db:20:8a:3c:56:0c:c5:96:56:f1:74:e4:49: f5:45:e0:f1:ed:1c:ce:ab:72:18:bd:a1:62:d4:63: 95:b1:9f:49:73:4b:4b:dd:5b:ce:84:1d:d0:92:31: ea:e0:06:d3:86:36:0f:0e:d4:65:fe:39:68:b6:f8: 47:06:5e:63:7b:72:9c:d0:58:bc:5e:a6:b1:b5:17: 0b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:A2:1D:37:49:1F:3A:4B:C1:40:89:34:07:58:B7:9F:E4:EA:E4:99 X509v3 Authority Key Identifier: keyid:40:5E:46:68:52:C3:8F:D4:CD:20:BA:61:15:84:09:47:D5:D2:4F:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/405E466852C38FD4CD20BA6115840947D5D24F5D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:35:c6:d7:d6:b4:d6:d1:a4:3a:3a:7a:24:3d:0f:c6:c7:3f: 66:ed:58:ea:61:d9:f3:f2:68:2c:6c:9a:13:62:15:64:e7:29: 97:bc:4f:e8:25:1a:01:14:a3:10:cf:c1:34:b8:1c:3d:21:7b: 42:5e:95:fd:bd:ac:b0:37:07:af:6f:70:a0:39:74:9b:a6:3d: 42:51:d8:8c:92:b0:3d:e6:8c:dd:c7:5f:bd:e4:d8:cf:51:35: 6d:e3:32:f3:49:d5:9f:aa:7b:1c:40:da:df:33:75:f4:78:7d: b8:0f:fd:6c:40:c2:e3:6a:df:d9:97:4c:0f:e2:12:b5:65:c5: a8:08:22:f9:bc:7b:1d:95:5a:7d:cc:09:5d:f7:54:63:b3:30: 64:c5:01:03:6d:9b:b7:5a:71:e5:94:5b:f4:9f:6d:87:49:c4: 4a:d6:52:61:2c:b7:47:46:7e:04:e3:6c:66:2b:a5:b5:bb:12: 22:4f:3a:c9:c8:90:37:2d:f0:ce:29:23:0e:d2:d2:7c:15:52: f1:08:1d:3e:5b:1f:03:da:cf:81:b8:f6:c0:e7:25:cb:9e:67: 79:57:75:50:a6:8a:af:b9:a3:df:bb:5f:00:80:e4:f9:75:ee: 09:45:cc:c1:aa:07:f3:ee:55:cd:22:95:c3:e1:51:eb:c9:6a: 7a:a3:79:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHVKoT93rxOUum2ZnrQr9m39iDp0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA1RTQ2Njg1MkMzOEZENENEMjBCQTYxMTU4NDA5NDdE NUQyNEY1RDAeFw0yNjAyMjgxMTA2MTZaFw0yNjAzMDMxODA3MTZaMDMxMTAvBgNV BAMTKDdBQTIxRDM3NDkxRjNBNEJDMTQwODkzNDA3NThCNzlGRTRFQUU0OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxKIQqp00DGFZvyQ3dt+9z7IC1 Ix0m2s+Q9296aqT81kru+2CxigftnUmDFIO9khtHri/pBa6BJbc7YqTkDDGGdZAu lU2AJaUr1++I3UZouI6q7BM7zA5Tqq943odYfMPZhwLYcxqyP9Swe4qk6Svsvwkc KNJ+VmhxlnOWC58sDrGLwWQzkFG1QD3w6wDpjIyxxgVHTnMJO/gVGaZGzD07beBt XnIGOnNWqNG7DNc3FrEk21Vc2yCKPFYMxZZW8XTkSfVF4PHtHM6rchi9oWLUY5Wx n0lzS0vdW86EHdCSMergBtOGNg8O1GX+OWi2+EcGXmN7cpzQWLxeprG1FwvvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeqIdN0kfOkvBQIk0B1i3n+Tq5JkwHwYDVR0j BBgwFoAUQF5GaFLDj9TNILphFYQJR9XST10wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YWM2MTU1ZS0yZDJmLTRmOWUtYjIxOC1lYjUyNWIzYTExMTkvMC80MDVFNDY2ODUy QzM4RkQ0Q0QyMEJBNjExNTg0MDk0N0Q1RDI0RjVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDA1RTQ2Njg1MkMzOEZENENEMjBCQTYxMTU4NDA5NDdENUQy NEY1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWFjNjE1NWUtMmQyZi00ZjllLWIy MTgtZWI1MjViM2ExMTE5LzAvNDA1RTQ2Njg1MkMzOEZENENEMjBCQTYxMTU4NDA5 NDdENUQyNEY1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALY1xtfWtNbRpDo6eiQ9D8bHP2btWOph2fPy aCxsmhNiFWTnKZe8T+glGgEUoxDPwTS4HD0he0Jelf29rLA3B69vcKA5dJumPUJR 2IySsD3mjN3HX73k2M9RNW3jMvNJ1Z+qexxA2t8zdfR4fbgP/WxAwuNq39mXTA/i ErVlxagIIvm8ex2VWn3MCV33VGOzMGTFAQNtm7daceWUW/SfbYdJxErWUmEst0dG fgTjbGYrpbW7EiJPOsnIkDct8M4pIw7S0nwVUvEIHT5bHwPaz4G49sDnJcueZ3lX dVCmiq+5o9+7XwCA5Pl17glFzMGqB/PuVc0ilcPhUevJanqjecI= -----END CERTIFICATE-----Generated at Mon Mar 2 14:58:50 2026 by rpki-client