$ rpki-client -vvf repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft File: 940E05E54E6B685EFBC6114D1E913804318364AB.mft (raw, json) Hash identifier: UGm5vCbTsoqQZ8NT1cDQOUPzc8EPfdoRdLtNz1S2pTc= Subject key identifier: C0:79:84:BC:BA:7E:AA:F2:F4:95:8F:5D:00:A1:2C:64:E3:8F:20:87 Authority key identifier: 94:0E:05:E5:4E:6B:68:5E:FB:C6:11:4D:1E:91:38:04:31:83:64:AB Certificate issuer: /CN=940E05E54E6B685EFBC6114D1E913804318364AB Certificate serial: 4F4A1FA63DE96DA23D716FAA376B8F53F8B45E11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft Manifest number: 01E8 Signing time: Sun 01 Mar 2026 22:40:50 +0000 Manifest this update: Sun 01 Mar 2026 22:35:50 +0000 Manifest next update: Thu 05 Mar 2026 05:19:50 +0000 Files and hashes: 1: 3130332e3136362e3136302e302f32342d3234203d3e20313431393532.roa (hash: rsfEnPVSsycki+njgiCyWYWgAdgVcyumzNfOTNHS8n4=) 2: 940E05E54E6B685EFBC6114D1E913804318364AB.crl (hash: pDsvrt0Jumnzfh5wN7+aJQE2eBaxO75g2sHY+bnlNrI=) 3: 3130332e3136362e3136312e302f32342d3234203d3e20313431393532.roa (hash: NqLs/FneIiTV/W/DgkmvwBtBvCh5S71ZEnAkqfC2LTI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.crl rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 05:19:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:4a:1f:a6:3d:e9:6d:a2:3d:71:6f:aa:37:6b:8f:53:f8:b4:5e:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=940E05E54E6B685EFBC6114D1E913804318364AB Validity Not Before: Mar 1 22:35:50 2026 GMT Not After : Mar 5 05:19:50 2026 GMT Subject: CN=C07984BCBA7EAAF2F4958F5D00A12C64E38F2087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:62:b6:7f:7d:6f:07:03:e3:d5:87:d5:5a:93: 5d:74:61:e0:55:3b:4f:50:f8:82:bb:88:34:fd:6a: eb:2e:7d:9b:4f:1c:01:e6:2b:44:a9:08:4b:93:9b: df:79:08:1d:26:87:40:b4:3d:78:e0:86:21:2c:72: 52:3e:61:16:42:a5:a3:94:1b:04:40:91:7b:df:6d: b0:46:92:b3:0c:80:14:79:ed:8b:33:fd:d1:fa:16: e8:4d:8e:1e:e6:b5:1b:b3:b5:1c:39:76:a0:9f:d8: 6d:7b:a1:f0:5e:16:79:ae:0a:16:ea:9b:7c:9b:d1: 42:8f:c7:9d:4d:11:59:78:5a:80:84:d5:fe:61:ce: fc:fb:82:52:0c:4d:a1:ff:41:53:92:3a:94:88:45: 3c:f2:15:3b:43:4b:8c:47:83:83:14:15:bf:dc:9a: 13:18:70:2b:f9:ba:46:b2:00:e0:e6:27:32:2c:58: 0f:9f:27:84:86:43:b8:8d:23:33:33:39:52:d9:55: b6:5b:e1:01:84:38:41:49:30:30:f3:93:07:7c:57: 54:32:99:2a:33:3d:a1:a0:d1:39:53:9a:fe:b5:c4: 43:fa:7f:b0:6c:dc:4e:53:08:30:29:9e:d7:fc:6d: a0:5e:a1:21:b0:86:6e:66:b1:fb:34:9d:ca:be:6e: 88:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:79:84:BC:BA:7E:AA:F2:F4:95:8F:5D:00:A1:2C:64:E3:8F:20:87 X509v3 Authority Key Identifier: keyid:94:0E:05:E5:4E:6B:68:5E:FB:C6:11:4D:1E:91:38:04:31:83:64:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:10:83:2e:ba:d8:41:39:49:d6:70:79:10:a9:33:67:64:d5: 48:20:e1:77:87:e1:e5:19:cf:75:00:9d:24:0f:7c:8f:72:e8: f9:0f:4c:0e:dc:a2:c5:ce:7c:a3:29:e9:7c:41:ee:23:dd:4c: 69:20:eb:b0:f1:79:13:1a:3d:98:72:a0:e4:f5:9e:8f:02:5d: 63:5c:31:4e:9e:bc:bd:4e:9b:5a:3d:29:09:4b:b0:82:5f:ec: 7b:92:02:3d:7c:d8:c3:4c:57:10:25:c0:23:51:6c:bc:d1:11: 52:ab:c9:7e:a1:a8:f5:39:12:aa:12:83:78:c5:e2:a5:dd:5c: 9b:0a:2f:f3:cb:83:8f:44:04:ee:2f:40:88:65:78:47:1a:74: 1c:44:e9:14:eb:bb:9a:25:90:45:fc:3a:5e:2b:12:e6:f8:54: 31:83:d3:ee:96:b4:37:67:30:18:20:e5:69:84:fc:e4:f4:de: 3c:14:30:8b:00:62:5c:7a:b6:a2:18:b5:85:76:af:7e:71:73: 5b:5f:f8:d0:a4:9d:31:57:f3:0a:96:2e:fc:63:72:5b:8f:c1: 54:d3:3f:e1:f1:08:1e:02:d9:33:de:39:50:a3:9f:2b:7b:fe: 9c:61:39:73:78:3a:73:59:f6:e2:e6:09:1c:50:b6:50:7e:ce: 33:98:49:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT0ofpj3pbaI9cW+qN2uPU/i0XhEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQwRTA1RTU0RTZCNjg1RUZCQzYxMTREMUU5MTM4MDQz MTgzNjRBQjAeFw0yNjAzMDEyMjM1NTBaFw0yNjAzMDUwNTE5NTBaMDMxMTAvBgNV BAMTKEMwNzk4NEJDQkE3RUFBRjJGNDk1OEY1RDAwQTEyQzY0RTM4RjIwODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBYrZ/fW8HA+PVh9Vak110YeBV O09Q+IK7iDT9ausufZtPHAHmK0SpCEuTm995CB0mh0C0PXjghiEsclI+YRZCpaOU GwRAkXvfbbBGkrMMgBR57Ysz/dH6FuhNjh7mtRuztRw5dqCf2G17ofBeFnmuChbq m3yb0UKPx51NEVl4WoCE1f5hzvz7glIMTaH/QVOSOpSIRTzyFTtDS4xHg4MUFb/c mhMYcCv5ukayAODmJzIsWA+fJ4SGQ7iNIzMzOVLZVbZb4QGEOEFJMDDzkwd8V1Qy mSozPaGg0TlTmv61xEP6f7Bs3E5TCDApntf8baBeoSGwhm5msfs0ncq+bojrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwHmEvLp+qvL0lY9dAKEsZOOPIIcwHwYDVR0j BBgwFoAUlA4F5U5raF77xhFNHpE4BDGDZKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YjIwNDFmMS00Y2U2LTQ5YjQtODNhNS0zMTVmMjBlNGUyYzMvMC85NDBFMDVFNTRF NkI2ODVFRkJDNjExNEQxRTkxMzgwNDMxODM2NEFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTQwRTA1RTU0RTZCNjg1RUZCQzYxMTREMUU5MTM4MDQzMTgz NjRBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmIyMDQxZjEtNGNlNi00OWI0LTgz YTUtMzE1ZjIwZTRlMmMzLzAvOTQwRTA1RTU0RTZCNjg1RUZCQzYxMTREMUU5MTM4 MDQzMTgzNjRBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKQQgy662EE5SdZweRCpM2dk1Ugg4XeH4eUZ z3UAnSQPfI9y6PkPTA7cosXOfKMp6XxB7iPdTGkg67DxeRMaPZhyoOT1no8CXWNc MU6evL1Om1o9KQlLsIJf7HuSAj182MNMVxAlwCNRbLzREVKryX6hqPU5EqoSg3jF 4qXdXJsKL/PLg49EBO4vQIhleEcadBxE6RTru5olkEX8Ol4rEub4VDGD0+6WtDdn MBgg5WmE/OT03jwUMIsAYlx6tqIYtYV2r35xc1tf+NCknTFX8wqWLvxjcluPwVTT P+HxCB4C2TPeOVCjnyt7/pxhOXN4OnNZ9uLmCRxQtlB+zjOYSdI= -----END CERTIFICATE-----Generated at Mon Mar 2 07:50:31 2026 by rpki-client