$ rpki-client -vvf repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft File: 40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft (raw, json) Hash identifier: pFLcXjqw44Ih8FS6b0hgOXfMwoBtuu1ZU/nVbFrHI80= Subject key identifier: AB:5B:2C:22:D9:CD:F2:B6:36:AF:88:68:C7:D8:C4:46:99:E5:49:1E Authority key identifier: 40:94:9C:7C:9D:D0:D3:F8:99:68:1F:F2:EB:53:E4:9C:8F:85:2B:AA Certificate issuer: /CN=40949C7C9DD0D3F899681FF2EB53E49C8F852BAA Certificate serial: 41C257E4F6CA6EF70B4B30820166DCD6DB719B1D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft Manifest number: 011E Signing time: Mon 02 Mar 2026 02:02:17 +0000 Manifest this update: Mon 02 Mar 2026 01:57:17 +0000 Manifest next update: Thu 05 Mar 2026 05:42:17 +0000 Files and hashes: 1: 40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.crl (hash: oGKmOpqPrfZTosY34wCdSxW8RdQ36go2t18xF3iySZM=) 2: 3135372e36362e302e302f32332d3234203d3e20313430343737.roa (hash: VPuK+1+6ePV1CKusC5qXhYaOQr6/W2sAl7gu8K+R3ug=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.crl rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:c2:57:e4:f6:ca:6e:f7:0b:4b:30:82:01:66:dc:d6:db:71:9b:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40949C7C9DD0D3F899681FF2EB53E49C8F852BAA Validity Not Before: Mar 2 01:57:17 2026 GMT Not After : Mar 5 05:42:17 2026 GMT Subject: CN=AB5B2C22D9CDF2B636AF8868C7D8C44699E5491E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:19:c9:06:b1:e0:09:23:94:74:5d:21:7e:27: c2:28:d8:6d:70:ea:10:49:de:10:57:80:a5:33:ca: d3:93:e9:d5:d7:08:7c:36:58:7a:26:df:35:09:5d: c6:0f:c6:5a:1f:ae:a5:9e:bd:c3:c4:f0:61:9c:95: 80:41:49:0f:ab:70:d8:4c:3d:e0:57:e7:84:f8:17: aa:9d:14:57:17:ef:28:68:00:37:aa:76:53:c1:9b: 05:b2:17:e8:cb:f0:2d:3b:69:82:5d:a1:34:6c:ce: 69:3e:b7:4e:01:f5:0d:3b:05:c1:28:04:e0:60:ad: 00:65:27:6d:47:8c:06:1b:35:a8:8d:27:cd:2b:b4: 82:a7:a3:f0:c4:fb:36:6d:0d:99:21:75:16:99:b4: 2d:9c:2a:d0:b4:34:98:87:b0:74:2d:02:25:50:e2: 6d:27:0b:b0:b1:07:a3:e9:e1:6f:b9:4f:30:89:ba: 12:9a:28:52:f0:bd:86:ae:79:71:a6:5f:e9:fe:b8: 8f:a9:42:32:3c:81:64:3f:bc:a7:d0:7a:c5:64:ad: 67:cb:a0:1e:87:b3:84:c9:41:69:0e:f9:ea:54:41: fe:3b:da:f9:10:26:c1:d8:81:8a:b9:98:ec:be:c8: 7a:5f:a1:2e:3d:4b:24:c4:b6:53:d1:eb:1f:f2:ae: ad:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:5B:2C:22:D9:CD:F2:B6:36:AF:88:68:C7:D8:C4:46:99:E5:49:1E X509v3 Authority Key Identifier: keyid:40:94:9C:7C:9D:D0:D3:F8:99:68:1F:F2:EB:53:E4:9C:8F:85:2B:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:ca:4f:7b:bd:14:7f:64:e4:31:cd:4a:02:4c:8b:46:13:33: 2b:ee:76:3d:da:e6:19:2e:66:39:aa:2b:c9:69:fb:27:e8:ce: c8:fa:3e:eb:d6:e0:f8:1a:d9:80:30:95:ad:f9:16:84:d3:81: 73:98:a6:75:aa:63:01:90:91:c3:06:b8:d5:61:32:2c:85:ad: 0d:44:23:79:ab:73:a5:a1:d3:83:6e:66:c8:c5:ce:36:e9:5d: 64:d5:94:15:c1:82:ac:bd:bd:39:73:6b:d5:f9:7a:76:c7:0b: 49:b7:98:2c:ce:43:e1:13:f8:f0:4f:42:7b:f2:7a:29:1e:55: 18:01:2b:6c:01:4e:ae:e7:b8:fc:f1:57:9d:f8:3e:a4:4a:75: 5b:39:08:c0:07:cb:f3:f9:31:b6:1b:f1:ff:59:fb:b5:c0:3c: 41:2b:5f:75:41:7b:ab:47:a1:ee:e4:69:71:d0:90:af:63:73: 34:17:5f:c3:fd:8b:8c:cd:f6:10:98:e9:8e:34:70:90:74:6c: 75:b0:9e:af:ef:f4:5c:73:2e:45:85:81:ef:cb:9e:46:97:d5: 84:e6:2f:58:ed:a1:99:c3:ab:4d:40:f2:ed:99:01:4d:6a:1c: 06:d0:91:de:18:ef:dd:c4:2e:2d:0d:03:28:36:eb:24:52:3f: 6f:7d:93:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQcJX5PbKbvcLSzCCAWbc1ttxmx0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA5NDlDN0M5REQwRDNGODk5NjgxRkYyRUI1M0U0OUM4 Rjg1MkJBQTAeFw0yNjAzMDIwMTU3MTdaFw0yNjAzMDUwNTQyMTdaMDMxMTAvBgNV BAMTKEFCNUIyQzIyRDlDREYyQjYzNkFGODg2OEM3RDhDNDQ2OTlFNTQ5MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOGckGseAJI5R0XSF+J8Io2G1w 6hBJ3hBXgKUzytOT6dXXCHw2WHom3zUJXcYPxlofrqWevcPE8GGclYBBSQ+rcNhM PeBX54T4F6qdFFcX7yhoADeqdlPBmwWyF+jL8C07aYJdoTRszmk+t04B9Q07BcEo BOBgrQBlJ21HjAYbNaiNJ80rtIKno/DE+zZtDZkhdRaZtC2cKtC0NJiHsHQtAiVQ 4m0nC7CxB6Pp4W+5TzCJuhKaKFLwvYaueXGmX+n+uI+pQjI8gWQ/vKfQesVkrWfL oB6Hs4TJQWkO+epUQf472vkQJsHYgYq5mOy+yHpfoS49SyTEtlPR6x/yrq2rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq1ssItnN8rY2r4hox9jERpnlSR4wHwYDVR0j BBgwFoAUQJScfJ3Q0/iZaB/y61PknI+FK6owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWRhZTk3Zi0xYWQxLTRiMzQtOGZlOS0xYmM2NWIwOTA4ZjMvMC80MDk0OUM3QzlE RDBEM0Y4OTk2ODFGRjJFQjUzRTQ5QzhGODUyQkFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDA5NDlDN0M5REQwRDNGODk5NjgxRkYyRUI1M0U0OUM4Rjg1 MkJBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODlkYWU5N2YtMWFkMS00YjM0LThm ZTktMWJjNjViMDkwOGYzLzAvNDA5NDlDN0M5REQwRDNGODk5NjgxRkYyRUI1M0U0 OUM4Rjg1MkJBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGXKT3u9FH9k5DHNSgJMi0YTMyvudj3a5hku ZjmqK8lp+yfozsj6PuvW4Pga2YAwla35FoTTgXOYpnWqYwGQkcMGuNVhMiyFrQ1E I3mrc6Wh04NuZsjFzjbpXWTVlBXBgqy9vTlza9X5enbHC0m3mCzOQ+ET+PBPQnvy eikeVRgBK2wBTq7nuPzxV534PqRKdVs5CMAHy/P5MbYb8f9Z+7XAPEErX3VBe6tH oe7kaXHQkK9jczQXX8P9i4zN9hCY6Y40cJB0bHWwnq/v9FxzLkWFge/LnkaX1YTm L1jtoZnDq01A8u2ZAU1qHAbQkd4Y793ELi0NAyg26yRSP299k20= -----END CERTIFICATE-----Generated at Mon Mar 2 13:20:31 2026 by rpki-client