$ rpki-client -vvf repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft File: 408585C1D62A4F618C0424E9BEDC3B91411C2276.mft (raw, json) Hash identifier: kfsz6S2O2vNfoup3groqbQ2CiM/wtSZFczCM7gg2N0Q= Subject key identifier: E2:37:12:6A:5B:2B:62:71:D2:6F:EF:0A:57:42:A6:F4:38:0C:70:AE Authority key identifier: 40:85:85:C1:D6:2A:4F:61:8C:04:24:E9:BE:DC:3B:91:41:1C:22:76 Certificate issuer: /CN=408585C1D62A4F618C0424E9BEDC3B91411C2276 Certificate serial: 0AD8651604D463DC48061A9D4C6E6FB0D6CA728E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft Manifest number: 027A Signing time: Fri 17 Apr 2026 19:32:20 +0000 Manifest this update: Fri 17 Apr 2026 19:27:20 +0000 Manifest next update: Mon 20 Apr 2026 19:32:20 +0000 Files and hashes: 1: 323030313a6466363a616630303a3a2f34382d3438203d3e20313338303836.roa (hash: pJzBSpecNdGxtRhriNjcTDwpDG6NNdRtxmQUp3nGEzE=) 2: 3130332e3132322e3132312e302f32342d3234203d3e20313338303836.roa (hash: 6JuDjem+v2RDSrt72WPISRVSPIrkM2UMhH/D+O2lhYE=) 3: 408585C1D62A4F618C0424E9BEDC3B91411C2276.crl (hash: sd2IXaxL+CZEFKl8WySfou4OWg5gHp2YQfaXrpnKt8I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.crl rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 19:32:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:d8:65:16:04:d4:63:dc:48:06:1a:9d:4c:6e:6f:b0:d6:ca:72:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408585C1D62A4F618C0424E9BEDC3B91411C2276 Validity Not Before: Apr 17 19:27:20 2026 GMT Not After : Apr 20 19:32:20 2026 GMT Subject: CN=E237126A5B2B6271D26FEF0A5742A6F4380C70AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b0:a4:80:8d:76:1f:f5:aa:30:76:6f:6d:5f: 84:a0:9b:81:53:eb:de:cc:c2:53:63:fe:a7:62:56: 21:3a:d6:a1:6d:ae:9c:a3:5a:b6:e8:8b:ef:05:73: 49:dc:93:6b:5b:b0:b3:b9:81:ee:9b:87:ef:a4:ec: 5c:2f:89:29:a0:2e:76:3d:81:dc:4e:70:a9:0e:f9: 0e:8c:0c:bf:84:24:ca:0e:3e:a9:bf:f7:1d:85:a1: b1:78:91:0c:ae:e3:5a:32:69:2b:6a:68:7d:08:fc: 7a:78:24:f9:e0:80:72:69:8d:b9:5b:7c:08:5d:9d: cb:11:d5:47:9a:b4:d2:72:d2:21:77:bd:28:91:47: 8e:4d:a0:4b:64:8f:c2:93:d0:3c:13:92:f3:e6:51: 87:e7:a7:2a:1f:60:c7:a0:fa:5f:b3:92:38:e8:b4: 81:82:ea:85:d6:68:81:e0:b4:c8:4c:8f:e4:46:96: 27:87:82:fb:7d:02:30:f3:51:90:0b:be:78:e3:d2: b4:7c:aa:20:42:b7:ec:7a:23:32:78:74:13:31:97: f9:66:5d:8e:80:46:d8:63:85:34:c6:c4:df:3c:ba: f4:1f:72:c9:2b:73:e8:49:37:e5:52:fb:0a:f8:49: e7:d0:12:23:50:ed:df:11:4d:58:f3:35:e1:e6:f4: cb:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:37:12:6A:5B:2B:62:71:D2:6F:EF:0A:57:42:A6:F4:38:0C:70:AE X509v3 Authority Key Identifier: keyid:40:85:85:C1:D6:2A:4F:61:8C:04:24:E9:BE:DC:3B:91:41:1C:22:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:45:e7:04:43:fe:3e:4f:74:b5:15:b3:69:03:b2:9f:2b:6a: 3c:4f:32:64:d6:db:4b:c7:60:d1:5c:79:cb:4f:b2:d2:27:d6: 91:99:f9:17:04:7c:13:85:c5:2a:47:2c:a2:29:2c:b6:81:58: 76:cd:02:ec:5f:eb:f3:00:6c:dc:c5:87:23:33:a2:60:32:f6: 16:74:a8:7e:2a:5f:68:99:af:74:49:a9:83:a5:03:e4:c0:64: af:30:6e:73:f9:6f:95:d3:1e:72:ad:49:35:92:77:ca:cf:2c: cd:5f:4c:4c:51:c9:6d:14:fc:93:a7:0e:3b:9b:12:c5:48:58: 1e:0b:7c:ec:7f:74:7e:7d:b9:d3:1a:bd:38:3b:0e:9b:f5:e5: c0:37:95:b6:d4:93:3b:a4:99:c1:dd:35:db:6f:ef:99:be:72: 1d:be:b9:80:86:71:f6:a4:33:94:87:e8:d6:c6:74:2f:ae:9a: a0:16:73:4f:03:50:16:a8:d2:02:57:a9:54:b0:06:69:c0:53: 22:af:9f:7a:d4:68:a1:1c:99:a9:87:5f:81:ed:59:a2:07:89: f8:35:2f:d2:67:db:9a:f6:1c:12:32:c4:e7:7b:4b:48:2a:bc: e1:1c:4c:80:43:fa:2b:aa:8e:7b:50:ab:5c:b6:b6:48:06:11: 86:69:aa:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCthlFgTUY9xIBhqdTG5vsNbKco4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA4NTg1QzFENjJBNEY2MThDMDQyNEU5QkVEQzNCOTE0 MTFDMjI3NjAeFw0yNjA0MTcxOTI3MjBaFw0yNjA0MjAxOTMyMjBaMDMxMTAvBgNV BAMTKEUyMzcxMjZBNUIyQjYyNzFEMjZGRUYwQTU3NDJBNkY0MzgwQzcwQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpsKSAjXYf9aowdm9tX4Sgm4FT 697MwlNj/qdiViE61qFtrpyjWrboi+8Fc0nck2tbsLO5ge6bh++k7FwviSmgLnY9 gdxOcKkO+Q6MDL+EJMoOPqm/9x2FobF4kQyu41oyaStqaH0I/Hp4JPnggHJpjblb fAhdncsR1UeatNJy0iF3vSiRR45NoEtkj8KT0DwTkvPmUYfnpyofYMeg+l+zkjjo tIGC6oXWaIHgtMhMj+RGlieHgvt9AjDzUZALvnjj0rR8qiBCt+x6IzJ4dBMxl/lm XY6ARthjhTTGxN88uvQfcskrc+hJN+VS+wr4SefQEiNQ7d8RTVjzNeHm9MuVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4jcSalsrYnHSb+8KV0Km9DgMcK4wHwYDVR0j BBgwFoAUQIWFwdYqT2GMBCTpvtw7kUEcInYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i N2UyNmM4My01ZWQyLTRjOGItOGEwMy02Y2IwMGQxZWQzMzgvMC80MDg1ODVDMUQ2 MkE0RjYxOEMwNDI0RTlCRURDM0I5MTQxMUMyMjc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDA4NTg1QzFENjJBNEY2MThDMDQyNEU5QkVEQzNCOTE0MTFD MjI3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjdlMjZjODMtNWVkMi00YzhiLThh MDMtNmNiMDBkMWVkMzM4LzAvNDA4NTg1QzFENjJBNEY2MThDMDQyNEU5QkVEQzNC OTE0MTFDMjI3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAChF5wRD/j5PdLUVs2kDsp8rajxPMmTW20vH YNFcectPstIn1pGZ+RcEfBOFxSpHLKIpLLaBWHbNAuxf6/MAbNzFhyMzomAy9hZ0 qH4qX2iZr3RJqYOlA+TAZK8wbnP5b5XTHnKtSTWSd8rPLM1fTExRyW0U/JOnDjub EsVIWB4LfOx/dH59udMavTg7Dpv15cA3lbbUkzukmcHdNdtv75m+ch2+uYCGcfak M5SH6NbGdC+umqAWc08DUBao0gJXqVSwBmnAUyKvn3rUaKEcmamHX4HtWaIHifg1 L9Jn25r2HBIyxOd7S0gqvOEcTIBD+iuqjntQq1y2tkgGEYZpqkE= -----END CERTIFICATE-----Generated at Sat Apr 18 02:47:27 2026 by rpki-client