$ rpki-client -vvf repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft File: 405E466852C38FD4CD20BA6115840947D5D24F5D.mft (raw, json) Hash identifier: Dusld040RLxCcmmjElf7LRPlyRNeaAXqKBd7ctRB97c= Subject key identifier: 8D:3B:B6:48:36:8E:4F:8F:95:33:B6:F4:F3:C7:D5:EE:32:C6:56:E2 Authority key identifier: 40:5E:46:68:52:C3:8F:D4:CD:20:BA:61:15:84:09:47:D5:D2:4F:5D Certificate issuer: /CN=405E466852C38FD4CD20BA6115840947D5D24F5D Certificate serial: 77B29BE3EC894CB5ED1FDFA05536B8F22FC96D33 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/405E466852C38FD4CD20BA6115840947D5D24F5D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft Manifest number: 0111 Signing time: Wed 15 Apr 2026 14:11:16 +0000 Manifest this update: Wed 15 Apr 2026 14:06:16 +0000 Manifest next update: Sat 18 Apr 2026 17:45:16 +0000 Files and hashes: 1: 3136302e32352e3230332e302f32342d3234203d3e20313533313038.roa (hash: jF9/a6Jp1M+je5Rsp2up/n4DNy0dv/N5PQgKJQwfemc=) 2: 405E466852C38FD4CD20BA6115840947D5D24F5D.crl (hash: WHvglxHxH8OQT5FUzqoxMzC2jPLfn21SzlZcN+BtihQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.crl rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/405E466852C38FD4CD20BA6115840947D5D24F5D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:b2:9b:e3:ec:89:4c:b5:ed:1f:df:a0:55:36:b8:f2:2f:c9:6d:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=405E466852C38FD4CD20BA6115840947D5D24F5D Validity Not Before: Apr 15 14:06:16 2026 GMT Not After : Apr 18 17:45:16 2026 GMT Subject: CN=8D3BB648368E4F8F9533B6F4F3C7D5EE32C656E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ab:e3:26:52:55:d5:ec:5d:e0:6e:50:ba:a5: 25:d2:cc:36:f5:ae:f0:54:1f:e2:d1:9a:94:da:66: 8f:0f:54:b4:81:0f:4a:1e:5b:90:ea:e0:3b:7c:a9: c4:15:75:bc:9f:22:68:ff:6b:d2:24:62:0f:63:38: 43:cb:8e:a9:5d:86:6b:0f:f7:b4:24:53:8a:96:6a: b9:44:86:cb:07:a7:f6:5f:59:42:27:bb:f6:a4:37: 39:41:50:2a:3c:ef:df:0a:c3:66:65:6b:23:6f:4a: d0:c7:10:79:25:2d:95:80:2b:6e:b9:92:6a:76:73: c7:c5:b6:ca:d5:37:e1:19:f4:1b:f0:9d:08:a4:23: c7:0a:86:45:ae:09:54:bb:63:f1:e4:76:37:cd:f8: 40:3f:5a:03:fc:ee:ba:64:21:95:f4:43:e6:87:58: 01:ec:44:1b:fc:87:99:f2:cf:06:6d:79:91:61:c5: 59:96:76:d1:ca:e4:1c:b8:92:13:0d:c7:22:76:08: 6c:bb:cd:78:e6:44:49:8c:77:21:af:15:21:23:b6: 1f:b2:72:cd:8b:1b:b0:3d:81:36:40:c6:1a:d6:54: c2:e1:29:8a:82:b5:6d:e2:18:f9:41:a2:11:aa:b0: a2:98:71:c6:13:5b:8d:e8:99:2a:08:1d:ff:7e:55: b5:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:3B:B6:48:36:8E:4F:8F:95:33:B6:F4:F3:C7:D5:EE:32:C6:56:E2 X509v3 Authority Key Identifier: keyid:40:5E:46:68:52:C3:8F:D4:CD:20:BA:61:15:84:09:47:D5:D2:4F:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/405E466852C38FD4CD20BA6115840947D5D24F5D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:00:17:b1:33:3e:ad:b3:40:9e:b0:46:f3:3d:56:99:85:8c: dd:c3:be:6d:b5:9c:62:6c:fd:e0:2e:30:75:17:98:ce:ec:4f: bc:cf:2d:6d:0a:49:a2:74:fe:25:db:40:b2:70:2d:8b:07:5e: 7b:d8:07:a1:bb:67:28:2a:9f:8b:c2:0f:fd:d4:8d:bd:14:2b: 62:14:14:f0:a1:30:54:06:46:ba:11:39:33:ea:d3:c0:34:e4: 48:fb:4f:90:65:db:96:cb:e8:a1:fe:41:b2:94:d9:cb:ce:17: c7:63:38:50:34:fc:32:ec:d2:60:3b:f5:b4:4e:3c:7b:2a:1a: fa:c8:1a:43:c3:75:93:64:37:81:74:64:a7:96:bb:9b:d5:8c: aa:06:17:e7:26:46:e2:fd:db:0b:21:1a:65:99:8e:87:71:84: 08:21:c5:8d:8c:b5:47:7e:11:fb:bf:08:74:1b:36:26:ce:d9: f1:ef:4b:4c:03:fa:0d:d5:41:b1:b3:ac:d2:7d:e2:ce:ba:6a: ae:4a:a7:1e:28:31:d0:2e:43:80:bb:84:40:04:90:ce:65:36: ec:f1:d7:23:2a:85:08:9d:f8:c1:33:e3:47:0a:ab:bb:f8:57: e2:45:ec:be:24:5b:d6:0e:68:f9:77:b2:48:ea:b3:a7:11:17: a0:7f:ff:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd7Kb4+yJTLXtH9+gVTa48i/JbTMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA1RTQ2Njg1MkMzOEZENENEMjBCQTYxMTU4NDA5NDdE NUQyNEY1RDAeFw0yNjA0MTUxNDA2MTZaFw0yNjA0MTgxNzQ1MTZaMDMxMTAvBgNV BAMTKDhEM0JCNjQ4MzY4RTRGOEY5NTMzQjZGNEYzQzdENUVFMzJDNjU2RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7q+MmUlXV7F3gblC6pSXSzDb1 rvBUH+LRmpTaZo8PVLSBD0oeW5Dq4Dt8qcQVdbyfImj/a9IkYg9jOEPLjqldhmsP 97QkU4qWarlEhssHp/ZfWUInu/akNzlBUCo8798Kw2ZlayNvStDHEHklLZWAK265 kmp2c8fFtsrVN+EZ9BvwnQikI8cKhkWuCVS7Y/HkdjfN+EA/WgP87rpkIZX0Q+aH WAHsRBv8h5nyzwZteZFhxVmWdtHK5By4khMNxyJ2CGy7zXjmREmMdyGvFSEjth+y cs2LG7A9gTZAxhrWVMLhKYqCtW3iGPlBohGqsKKYccYTW43omSoIHf9+VbX7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjTu2SDaOT4+VM7b088fV7jLGVuIwHwYDVR0j BBgwFoAUQF5GaFLDj9TNILphFYQJR9XST10wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YWM2MTU1ZS0yZDJmLTRmOWUtYjIxOC1lYjUyNWIzYTExMTkvMC80MDVFNDY2ODUy QzM4RkQ0Q0QyMEJBNjExNTg0MDk0N0Q1RDI0RjVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDA1RTQ2Njg1MkMzOEZENENEMjBCQTYxMTU4NDA5NDdENUQy NEY1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWFjNjE1NWUtMmQyZi00ZjllLWIy MTgtZWI1MjViM2ExMTE5LzAvNDA1RTQ2Njg1MkMzOEZENENEMjBCQTYxMTU4NDA5 NDdENUQyNEY1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFgAF7EzPq2zQJ6wRvM9VpmFjN3Dvm21nGJs /eAuMHUXmM7sT7zPLW0KSaJ0/iXbQLJwLYsHXnvYB6G7Zygqn4vCD/3Ujb0UK2IU FPChMFQGRroROTPq08A05Ej7T5Bl25bL6KH+QbKU2cvOF8djOFA0/DLs0mA79bRO PHsqGvrIGkPDdZNkN4F0ZKeWu5vVjKoGF+cmRuL92wshGmWZjodxhAghxY2MtUd+ Efu/CHQbNibO2fHvS0wD+g3VQbGzrNJ94s66aq5Kpx4oMdAuQ4C7hEAEkM5lNuzx 1yMqhQid+MEz40cKq7v4V+JF7L4kW9YOaPl3skjqs6cRF6B//10= -----END CERTIFICATE-----Generated at Fri Apr 17 12:36:18 2026 by rpki-client