$ rpki-client -vvf repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft File: 40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft (raw, json) Hash identifier: kr19H6pvdNFb6lLw0wdiJorPa+JxvT5RF7yYq1uG/yE= Subject key identifier: 7C:7F:E3:EC:F2:C1:E8:0B:BC:7F:15:C8:62:42:88:71:67:10:8C:43 Authority key identifier: 40:94:9C:7C:9D:D0:D3:F8:99:68:1F:F2:EB:53:E4:9C:8F:85:2B:AA Certificate issuer: /CN=40949C7C9DD0D3F899681FF2EB53E49C8F852BAA Certificate serial: 0CE922CAD183D8C71981C16FAB045A4A4AA4F65F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft Manifest number: 0133 Signing time: Thu 16 Apr 2026 05:52:18 +0000 Manifest this update: Thu 16 Apr 2026 05:47:18 +0000 Manifest next update: Sun 19 Apr 2026 12:49:18 +0000 Files and hashes: 1: 40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.crl (hash: fa75BkH+LrOqKGgdZeUKrp2xeRzRaBrSLQ/lEy9kmzo=) 2: 3135372e36362e302e302f32332d3234203d3e20313430343737.roa (hash: yBju0MDFhL8uMJfmhps7SGNhOm4xqJV+hqct3Jk+rrI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.crl rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 12:49:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:e9:22:ca:d1:83:d8:c7:19:81:c1:6f:ab:04:5a:4a:4a:a4:f6:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40949C7C9DD0D3F899681FF2EB53E49C8F852BAA Validity Not Before: Apr 16 05:47:18 2026 GMT Not After : Apr 19 12:49:18 2026 GMT Subject: CN=7C7FE3ECF2C1E80BBC7F15C86242887167108C43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e8:ae:94:f6:93:6e:bf:9e:cc:46:dc:09:67: 9b:96:19:a3:c1:1f:1e:35:29:1c:04:42:ca:0d:94: a1:09:46:3e:e3:ba:c4:00:3f:42:ad:8c:40:cb:be: b0:0e:93:21:e4:15:4c:aa:be:d3:d6:0f:3c:28:ce: 54:55:d2:c6:6d:16:9d:d9:47:e6:a0:a8:e0:d2:51: 25:04:eb:ca:96:05:75:ac:8a:b8:bf:1a:cd:00:a1: 35:d2:05:80:2e:86:25:5a:03:fc:d8:c6:38:b5:7d: 18:be:e6:fb:5c:a4:34:f9:32:75:30:99:db:6e:f1: f6:47:fa:0b:ac:7c:95:a7:ca:3a:9a:ce:e0:f5:94: 05:72:73:3f:21:98:d5:60:46:ba:73:f7:4a:86:62: 27:22:4e:28:b4:4b:6d:28:5f:c0:dc:bc:40:ca:c6: fe:92:e9:6c:15:6f:62:31:1c:04:08:7a:6e:ef:2e: 43:38:d8:ad:ce:48:a0:2d:0e:1b:4c:2e:b8:ca:cb: b9:90:ac:5d:b3:13:80:fa:07:70:a3:73:e9:17:90: 92:17:3f:4e:d3:c0:9a:c3:9b:1b:92:85:3e:e5:cf: 3c:2a:09:13:35:3c:63:b5:af:78:26:6a:fa:6e:63: e8:04:80:74:fb:31:33:67:b3:5c:52:36:59:d3:99: 93:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:7F:E3:EC:F2:C1:E8:0B:BC:7F:15:C8:62:42:88:71:67:10:8C:43 X509v3 Authority Key Identifier: keyid:40:94:9C:7C:9D:D0:D3:F8:99:68:1F:F2:EB:53:E4:9C:8F:85:2B:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:29:09:1b:4d:97:a3:0b:18:3a:4e:6a:2f:df:dd:fd:f3:89: c3:e6:5c:90:70:d0:e3:16:b5:dd:3b:c4:32:d5:36:fd:9e:a3: 71:dd:fb:82:3c:19:f4:d8:e1:5d:62:4c:c2:0e:a9:a9:bf:f2: 48:42:21:4e:b8:9d:d6:35:34:5a:17:76:fa:97:0d:36:97:1a: cb:51:99:9b:fb:1f:fc:b7:2c:86:f1:12:34:1c:37:79:b6:d4: 68:72:d9:66:91:6c:6b:40:37:03:1a:e5:7e:2b:e8:6b:6a:49: b4:ad:b6:cc:08:02:cc:cb:8e:44:d0:b0:fe:f6:0e:83:89:29: b5:1a:2f:2b:5a:3a:1a:09:55:47:94:d9:77:d9:da:1a:e3:79: 4a:56:64:42:6d:01:88:6e:ac:e5:50:0c:8c:aa:ae:21:c6:39: 65:9a:31:d6:d9:24:6d:2c:c1:33:b9:fd:af:b9:40:74:45:26: ff:ab:1f:1d:ff:0a:f3:b9:4b:c5:8f:63:2a:d6:61:de:e8:20: 15:1d:76:88:81:46:25:91:6e:2e:0f:d2:58:0d:45:30:95:3a: cf:4e:92:64:f8:41:fa:2f:4e:0b:f7:ac:ae:85:9d:d0:44:e6: 83:da:27:ac:78:8a:f2:f5:ec:12:8f:53:b1:48:3d:f1:90:e6: a1:d7:37:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDOkiytGD2McZgcFvqwRaSkqk9l8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA5NDlDN0M5REQwRDNGODk5NjgxRkYyRUI1M0U0OUM4 Rjg1MkJBQTAeFw0yNjA0MTYwNTQ3MThaFw0yNjA0MTkxMjQ5MThaMDMxMTAvBgNV BAMTKDdDN0ZFM0VDRjJDMUU4MEJCQzdGMTVDODYyNDI4ODcxNjcxMDhDNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS6K6U9pNuv57MRtwJZ5uWGaPB Hx41KRwEQsoNlKEJRj7jusQAP0KtjEDLvrAOkyHkFUyqvtPWDzwozlRV0sZtFp3Z R+agqODSUSUE68qWBXWsiri/Gs0AoTXSBYAuhiVaA/zYxji1fRi+5vtcpDT5MnUw mdtu8fZH+gusfJWnyjqazuD1lAVycz8hmNVgRrpz90qGYiciTii0S20oX8DcvEDK xv6S6WwVb2IxHAQIem7vLkM42K3OSKAtDhtMLrjKy7mQrF2zE4D6B3Cjc+kXkJIX P07TwJrDmxuShT7lzzwqCRM1PGO1r3gmavpuY+gEgHT7MTNns1xSNlnTmZMRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfH/j7PLB6Au8fxXIYkKIcWcQjEMwHwYDVR0j BBgwFoAUQJScfJ3Q0/iZaB/y61PknI+FK6owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWRhZTk3Zi0xYWQxLTRiMzQtOGZlOS0xYmM2NWIwOTA4ZjMvMC80MDk0OUM3QzlE RDBEM0Y4OTk2ODFGRjJFQjUzRTQ5QzhGODUyQkFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDA5NDlDN0M5REQwRDNGODk5NjgxRkYyRUI1M0U0OUM4Rjg1 MkJBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODlkYWU5N2YtMWFkMS00YjM0LThm ZTktMWJjNjViMDkwOGYzLzAvNDA5NDlDN0M5REQwRDNGODk5NjgxRkYyRUI1M0U0 OUM4Rjg1MkJBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD0pCRtNl6MLGDpOai/f3f3zicPmXJBw0OMW td07xDLVNv2eo3Hd+4I8GfTY4V1iTMIOqam/8khCIU64ndY1NFoXdvqXDTaXGstR mZv7H/y3LIbxEjQcN3m21Ghy2WaRbGtANwMa5X4r6GtqSbSttswIAszLjkTQsP72 DoOJKbUaLytaOhoJVUeU2XfZ2hrjeUpWZEJtAYhurOVQDIyqriHGOWWaMdbZJG0s wTO5/a+5QHRFJv+rHx3/CvO5S8WPYyrWYd7oIBUddoiBRiWRbi4P0lgNRTCVOs9O kmT4QfovTgv3rK6FndBE5oPaJ6x4ivL17BKPU7FIPfGQ5qHXNzQ= -----END CERTIFICATE-----Generated at Sat Apr 18 01:05:57 2026 by rpki-client