$ rpki-client -vvf repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft File: 5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft (raw, json) Hash identifier: mqQuCqEft2FjG2f9+TMXA3bhNZvfcZOq16UQKawIdKM= Subject key identifier: 42:8B:C7:FB:39:74:19:83:39:DA:96:C0:AA:BF:0D:98:FF:77:49:B6 Authority key identifier: 5A:40:FD:19:E2:DD:53:80:CB:6E:50:2F:16:DB:22:2F:90:89:55:2B Certificate issuer: /CN=5A40FD19E2DD5380CB6E502F16DB222F9089552B Certificate serial: 4DDB33AD4ABD237E535A2A0C9916A6867B8F718E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft Manifest number: 0293 Signing time: Wed 15 Apr 2026 22:02:41 +0000 Manifest this update: Wed 15 Apr 2026 21:57:41 +0000 Manifest next update: Sun 19 Apr 2026 00:28:41 +0000 Files and hashes: 1: 3130332e3138342e31392e302f32342d3234203d3e20313439363735.roa (hash: rC9zDsuuHrRHxm490P5sveoMq6dVJ3UnsdtYS7hgs/E=) 2: 3130332e3138342e31382e302f32342d3234203d3e203438343635.roa (hash: 0IGopCvXSRXbCg3kz6wjCn1/1Kczl4zkhji2/R4GIz4=) 3: 3130332e3138342e31382e302f32332d3233203d3e20313439363735.roa (hash: LeeGwZNg1xeTEHyLpyP7xbBZEKxpkxbvCL0BfojuuRU=) 4: 3130332e3138342e31382e302f32342d3234203d3e20313439363735.roa (hash: oPdKvuSaVZv8alsSE2ACZ+vyXVDRBNBm8/f/QuNBFZU=) 5: 5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl (hash: cKfbYhOWiBkedsZacW/KfTDxu6atI0aqsItSKIEeYSA=) 6: 3130332e3138342e31392e302f32342d3234203d3e203438343635.roa (hash: QzihEc5MkFa7NqybYwRpohd7XvTO9rPruJzvUalzVM8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 00:28:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:db:33:ad:4a:bd:23:7e:53:5a:2a:0c:99:16:a6:86:7b:8f:71:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A40FD19E2DD5380CB6E502F16DB222F9089552B Validity Not Before: Apr 15 21:57:41 2026 GMT Not After : Apr 19 00:28:41 2026 GMT Subject: CN=428BC7FB3974198339DA96C0AABF0D98FF7749B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cd:b5:96:17:fa:d0:a3:c8:50:f9:b6:da:53: 26:ce:d5:8c:2a:da:69:a7:16:51:04:13:e0:3a:32: 6e:ce:fd:f8:20:43:17:3e:35:1b:e9:b2:53:aa:77: 6d:ba:81:ab:98:a4:0a:18:5b:ed:a3:e9:8e:94:53: 61:c6:d4:9f:06:c5:ff:68:f0:6f:2d:15:27:78:b7: 89:69:9c:fe:6b:be:cb:5d:7b:2d:20:1a:ac:96:cb: 81:4b:1c:05:b3:23:a0:46:83:c8:4a:b1:7e:9e:f2: 55:20:27:a0:68:9e:4a:84:82:33:69:74:73:d6:23: 2a:9b:59:6d:19:be:b7:01:59:c0:00:e3:b1:5b:c9: 76:ad:be:bb:45:41:fb:43:b5:8e:38:75:3d:76:d4: d0:ad:51:e2:6b:7c:54:25:ec:50:9c:14:a0:fd:7f: f0:db:9b:a4:e1:5d:30:17:ba:0b:fd:97:dc:56:07: 7c:59:d4:29:56:ef:e0:bd:b0:d0:57:98:33:f4:52: a2:47:af:ff:22:86:ad:14:3c:4a:18:f6:5b:52:37: 40:b6:fd:ea:9d:8f:77:48:f0:98:c7:63:28:ab:17: e1:4e:49:6f:51:aa:b9:a4:65:0a:79:38:69:22:84: 6a:29:25:e9:7c:d4:0c:a4:fe:85:af:aa:a9:0f:e1: cc:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:8B:C7:FB:39:74:19:83:39:DA:96:C0:AA:BF:0D:98:FF:77:49:B6 X509v3 Authority Key Identifier: keyid:5A:40:FD:19:E2:DD:53:80:CB:6E:50:2F:16:DB:22:2F:90:89:55:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:f1:85:27:85:40:8c:03:94:76:df:5f:ae:66:3a:17:39:54: e0:a3:21:0b:b3:e8:7d:dd:87:c5:6b:71:ce:8c:e1:52:45:1e: ca:54:43:a7:a7:fc:ad:74:3d:11:a2:7f:63:43:e5:27:6f:a9: e5:5e:ec:7d:93:e1:2a:21:aa:a4:33:76:d4:30:27:8c:90:e4: 94:49:42:cf:f7:7e:cb:be:f3:5b:76:08:09:9d:91:46:65:16: c6:10:fe:81:b2:74:c1:ba:22:1e:29:89:d6:8d:02:35:b5:11: 98:5a:30:1d:9d:ae:12:90:19:f0:8b:f3:21:60:1c:56:1e:ea: 42:c0:9d:45:97:65:23:c5:31:d9:28:7d:ec:a0:1d:31:91:51: 76:c5:b0:44:14:cb:a1:89:a2:02:6e:f4:16:05:5d:d0:ce:60: f6:62:a1:68:08:a2:e0:7c:83:8e:9f:9f:13:6d:38:12:ec:6a: 68:d3:cb:7e:ac:26:f2:5b:42:e4:7f:0d:61:25:0b:5e:6c:06: ea:5a:f9:d5:6f:85:16:c7:17:79:b6:74:b6:fb:f8:cd:d6:79: 08:8d:b8:8a:4b:49:8b:09:d4:56:b8:d3:52:94:fa:2e:bb:94: dd:01:b2:96:48:f0:b2:36:b3:0d:5d:2d:58:96:35:2f:d1:f8: 50:55:71:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTdszrUq9I35TWioMmRamhnuPcY4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE0MEZEMTlFMkRENTM4MENCNkU1MDJGMTZEQjIyMkY5 MDg5NTUyQjAeFw0yNjA0MTUyMTU3NDFaFw0yNjA0MTkwMDI4NDFaMDMxMTAvBgNV BAMTKDQyOEJDN0ZCMzk3NDE5ODMzOURBOTZDMEFBQkYwRDk4RkY3NzQ5QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0zbWWF/rQo8hQ+bbaUybO1Ywq 2mmnFlEEE+A6Mm7O/fggQxc+NRvpslOqd226gauYpAoYW+2j6Y6UU2HG1J8Gxf9o 8G8tFSd4t4lpnP5rvstdey0gGqyWy4FLHAWzI6BGg8hKsX6e8lUgJ6BonkqEgjNp dHPWIyqbWW0ZvrcBWcAA47FbyXatvrtFQftDtY44dT121NCtUeJrfFQl7FCcFKD9 f/Dbm6ThXTAXugv9l9xWB3xZ1ClW7+C9sNBXmDP0UqJHr/8ihq0UPEoY9ltSN0C2 /eqdj3dI8JjHYyirF+FOSW9RqrmkZQp5OGkihGopJel81Ayk/oWvqqkP4czhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQovH+zl0GYM52pbAqr8NmP93SbYwHwYDVR0j BBgwFoAUWkD9GeLdU4DLblAvFtsiL5CJVSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MGQ5MTRlZi0wYjFmLTQ5MGItODA4ZC1hMjdiODNmZjlhM2UvMC81QTQwRkQxOUUy REQ1MzgwQ0I2RTUwMkYxNkRCMjIyRjkwODk1NTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUE0MEZEMTlFMkRENTM4MENCNkU1MDJGMTZEQjIyMkY5MDg5 NTUyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjBkOTE0ZWYtMGIxZi00OTBiLTgw OGQtYTI3YjgzZmY5YTNlLzAvNUE0MEZEMTlFMkRENTM4MENCNkU1MDJGMTZEQjIy MkY5MDg5NTUyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE/xhSeFQIwDlHbfX65mOhc5VOCjIQuz6H3d h8Vrcc6M4VJFHspUQ6en/K10PRGif2ND5SdvqeVe7H2T4SohqqQzdtQwJ4yQ5JRJ Qs/3fsu+81t2CAmdkUZlFsYQ/oGydMG6Ih4pidaNAjW1EZhaMB2drhKQGfCL8yFg HFYe6kLAnUWXZSPFMdkofeygHTGRUXbFsEQUy6GJogJu9BYFXdDOYPZioWgIouB8 g46fnxNtOBLsamjTy36sJvJbQuR/DWElC15sBupa+dVvhRbHF3m2dLb7+M3WeQiN uIpLSYsJ1Fa401KU+i67lN0BspZI8LI2sw1dLViWNS/R+FBVcUM= -----END CERTIFICATE-----Generated at Fri Apr 17 13:34:54 2026 by rpki-client