$ rpki-client -vvf repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft File: 407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft (raw, json) Hash identifier: HMufGeAuk5Tm8zGNWhKHL5L8a102QYJkiOw7r6SEsw8= Subject key identifier: C2:04:F9:59:F6:0D:30:15:3F:25:83:9B:02:B2:2D:C3:DB:98:F4:EF Authority key identifier: 40:7B:7C:7E:E0:9E:DB:AA:0A:35:25:E2:09:FF:8E:93:E4:86:53:C8 Certificate issuer: /CN=407B7C7EE09EDBAA0A3525E209FF8E93E48653C8 Certificate serial: 442F720912CF6EAE46C0BC833A827F23CBD14CE6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft Manifest number: 0104 Signing time: Sun 01 Mar 2026 02:52:42 +0000 Manifest this update: Sun 01 Mar 2026 02:47:42 +0000 Manifest next update: Wed 04 Mar 2026 10:01:42 +0000 Files and hashes: 1: 407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.crl (hash: D/XKkCmUXPj8YjvgBew2u3KBHie+HA6Jhx2oZQPqMo4=) 2: 3130332e3136302e3230332e302f32342d3234203d3e20313431363036.roa (hash: gOnGfuRTcZIR+30ZYAMikHYwYT1lMfTYagdIRfIVS+c=) 3: 3130332e3136302e3230322e302f32342d3234203d3e20313431363036.roa (hash: NqmMORtYspcubuoIhO/lJNy3KlFyaaaNEdp/IXvq0Ng=) 4: 323030313a6466313a366263303a3a2f34382d3438203d3e20313431363036.roa (hash: LnoUiVTC+YkZ5Y/4/Q1S1mXaeabC5U6lsaInD923/gY=) 5: 3130332e3136302e3230322e302f32332d3233203d3e20313431363036.roa (hash: viIMDthrb71zqv1fZqfsi9l1jzw0Csy97g9EKJWFEFg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.crl rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 10:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:2f:72:09:12:cf:6e:ae:46:c0:bc:83:3a:82:7f:23:cb:d1:4c:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=407B7C7EE09EDBAA0A3525E209FF8E93E48653C8 Validity Not Before: Mar 1 02:47:42 2026 GMT Not After : Mar 4 10:01:42 2026 GMT Subject: CN=C204F959F60D30153F25839B02B22DC3DB98F4EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f8:55:5d:86:0b:b7:dc:2f:29:15:68:19:39: b4:32:9b:58:f1:19:c0:3e:14:50:b9:3d:4c:78:50: 94:e5:9a:8d:f3:cc:5c:95:53:9c:79:60:c5:a0:d2: 87:c0:45:27:61:39:c4:b4:53:66:9e:6e:e5:e5:68: 3c:3e:e1:15:5e:c7:13:93:73:12:13:2b:75:96:bb: 65:b5:09:23:85:0b:d8:58:7d:4d:ea:a8:0a:fa:4d: ec:e4:7c:10:83:d8:07:58:20:71:a9:e8:e6:3e:7b: 9e:bd:c6:1b:c4:4d:fd:8b:61:0e:a5:ac:57:f9:70: 08:ed:b6:96:d6:06:91:e0:a2:3c:94:7c:82:f4:15: 12:f7:dd:e6:a5:5d:d3:5b:bb:cf:95:af:8e:10:ae: 56:6a:ed:24:78:8a:04:5e:fb:c2:08:97:28:a2:28: a2:6a:39:1a:a5:b8:9f:e2:3d:5f:12:fe:b3:60:55: df:48:ad:fa:50:29:84:55:db:d1:ec:c5:a6:e7:17: 1d:8b:69:4c:ec:0c:44:66:26:a1:53:1a:28:8c:65: 27:d2:7b:e9:37:61:de:11:5b:5d:20:ac:12:d3:87: 90:5f:69:e6:8c:29:df:28:14:ba:53:3a:d4:b5:5a: 34:46:8e:3a:4b:c0:ab:18:4b:8c:ae:b6:a0:a0:36: 70:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:04:F9:59:F6:0D:30:15:3F:25:83:9B:02:B2:2D:C3:DB:98:F4:EF X509v3 Authority Key Identifier: keyid:40:7B:7C:7E:E0:9E:DB:AA:0A:35:25:E2:09:FF:8E:93:E4:86:53:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:c4:1c:45:7a:87:22:1b:7b:8a:a5:e9:99:0e:63:9c:0c:62: 2b:80:ba:3a:16:b7:5d:f3:72:69:af:01:1e:c5:9d:4a:a3:ce: 3e:c7:11:0f:4c:9d:39:b8:30:58:dc:3c:2c:db:25:6e:83:52: 4b:a4:f0:4c:fa:52:88:8f:59:62:b8:ff:c9:86:95:c9:c3:90: dc:97:13:4e:16:a4:3c:bb:45:a5:6a:bf:8e:fc:ec:cf:48:c4: c7:25:b0:e8:c3:21:c2:91:8d:93:c7:23:4e:45:04:6b:68:30: 84:60:7d:4e:7e:3d:c0:ab:3e:c6:fc:ec:57:a9:4d:e5:b1:fa: 3c:c8:20:b9:ff:bf:e6:ad:3e:9f:f8:94:8a:97:30:e2:2a:6b: f7:c9:99:66:21:ca:0d:43:01:d2:34:a9:4a:00:b2:97:a3:ac: 81:8e:83:03:e9:cf:86:81:a1:fc:d2:47:e7:b6:de:5d:aa:0b: 07:88:6f:a7:13:37:70:c0:2a:ab:66:8c:4c:a9:65:15:95:9a: ad:d9:4c:ec:b5:78:53:a2:bb:7c:7d:be:73:39:08:d0:4c:dc: 8b:70:98:1a:5c:b0:6b:b1:cb:55:a9:db:52:df:c6:2a:88:4c: 86:33:f9:4b:94:6d:ef:de:fc:d5:78:33:58:c9:38:86:72:7e: 0f:76:b3:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURC9yCRLPbq5GwLyDOoJ/I8vRTOYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA3QjdDN0VFMDlFREJBQTBBMzUyNUUyMDlGRjhFOTNF NDg2NTNDODAeFw0yNjAzMDEwMjQ3NDJaFw0yNjAzMDQxMDAxNDJaMDMxMTAvBgNV BAMTKEMyMDRGOTU5RjYwRDMwMTUzRjI1ODM5QjAyQjIyREMzREI5OEY0RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT+FVdhgu33C8pFWgZObQym1jx GcA+FFC5PUx4UJTlmo3zzFyVU5x5YMWg0ofARSdhOcS0U2aebuXlaDw+4RVexxOT cxITK3WWu2W1CSOFC9hYfU3qqAr6TezkfBCD2AdYIHGp6OY+e569xhvETf2LYQ6l rFf5cAjttpbWBpHgojyUfIL0FRL33ealXdNbu8+Vr44QrlZq7SR4igRe+8IIlyii KKJqORqluJ/iPV8S/rNgVd9IrfpQKYRV29HsxabnFx2LaUzsDERmJqFTGiiMZSfS e+k3Yd4RW10grBLTh5BfaeaMKd8oFLpTOtS1WjRGjjpLwKsYS4yutqCgNnAVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwgT5WfYNMBU/JYObArItw9uY9O8wHwYDVR0j BBgwFoAUQHt8fuCe26oKNSXiCf+Ok+SGU8gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDY0YmY2YS00MzAyLTQ2MGYtOTY2OS0wOWE1MGE3M2FmMWEvMC80MDdCN0M3RUUw OUVEQkFBMEEzNTI1RTIwOUZGOEU5M0U0ODY1M0M4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDA3QjdDN0VFMDlFREJBQTBBMzUyNUUyMDlGRjhFOTNFNDg2 NTNDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ2NGJmNmEtNDMwMi00NjBmLTk2 NjktMDlhNTBhNzNhZjFhLzAvNDA3QjdDN0VFMDlFREJBQTBBMzUyNUUyMDlGRjhF OTNFNDg2NTNDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFrEHEV6hyIbe4ql6ZkOY5wMYiuAujoWt13z cmmvAR7FnUqjzj7HEQ9MnTm4MFjcPCzbJW6DUkuk8Ez6UoiPWWK4/8mGlcnDkNyX E04WpDy7RaVqv4787M9IxMclsOjDIcKRjZPHI05FBGtoMIRgfU5+PcCrPsb87Fep TeWx+jzIILn/v+atPp/4lIqXMOIqa/fJmWYhyg1DAdI0qUoAspejrIGOgwPpz4aB ofzSR+e23l2qCweIb6cTN3DAKqtmjEypZRWVmq3ZTOy1eFOiu3x9vnM5CNBM3Itw mBpcsGuxy1Wp21LfxiqITIYz+UuUbe/e/NV4M1jJOIZyfg92sxI= -----END CERTIFICATE-----Generated at Mon Mar 2 12:43:29 2026 by rpki-client