$ rpki-client -vvf repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft File: 408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft (raw, json) Hash identifier: ZtGY0KRMqXSyk/bFL5NcV6WdSFwiuY1yEtr91z+1630= Subject key identifier: 8F:2E:04:86:FD:10:8E:6D:98:BF:02:80:56:84:4A:E1:C2:3F:EB:78 Authority key identifier: 40:83:95:91:4A:1A:74:FF:4E:6A:B1:DE:06:3F:82:C6:1E:08:01:F2 Certificate issuer: /CN=408395914A1A74FF4E6AB1DE063F82C61E0801F2 Certificate serial: 3773BBF8BBBFF6249DE534DC33E67464FB9D866D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408395914A1A74FF4E6AB1DE063F82C61E0801F2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft Manifest number: 04E0 Signing time: Sun 01 Mar 2026 17:41:11 +0000 Manifest this update: Sun 01 Mar 2026 17:36:11 +0000 Manifest next update: Wed 04 Mar 2026 18:18:11 +0000 Files and hashes: 1: 408395914A1A74FF4E6AB1DE063F82C61E0801F2.crl (hash: MagBfABJcYYveUhZpbvo1jY4ibxO923j5rnfF6c8EtU=) 2: 3130332e3134332e32302e302f32342d3234203d3e20313339343035.roa (hash: KCTbEne5sAEJgzltW4gEKsISpQ0m8wEifogPI/+bnQs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.crl rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408395914A1A74FF4E6AB1DE063F82C61E0801F2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 18:18:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:73:bb:f8:bb:bf:f6:24:9d:e5:34:dc:33:e6:74:64:fb:9d:86:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408395914A1A74FF4E6AB1DE063F82C61E0801F2 Validity Not Before: Mar 1 17:36:11 2026 GMT Not After : Mar 4 18:18:11 2026 GMT Subject: CN=8F2E0486FD108E6D98BF028056844AE1C23FEB78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:57:a9:45:d9:b3:f7:89:65:e6:d0:ad:fe:c5: 09:c2:ac:5c:e9:72:8f:42:2c:31:9f:0b:24:4a:ff: d6:16:0a:fe:bc:e1:18:f5:6e:2c:a7:cf:0d:72:fe: 3f:67:54:fc:94:45:1c:d6:3c:5a:33:33:23:48:88: ba:d9:c3:97:08:fd:df:c0:62:4a:e0:c2:0b:b4:1f: 5d:e6:26:6b:7a:7f:87:d3:b3:c1:c0:a2:b5:71:3f: 60:3f:2f:9c:6f:6b:85:c3:7e:4a:37:69:cf:5c:c3: c5:a2:37:0e:ba:b5:7a:78:bc:e7:cb:32:6d:78:1c: 5e:d6:28:0c:04:fa:59:9c:78:ea:f9:87:5d:38:4d: a6:69:15:be:ee:11:4d:88:1b:43:16:65:e8:9f:63: 4f:12:67:1b:6e:f8:8a:21:c1:4e:e7:74:d2:1c:ed: 61:55:f6:46:ce:7b:18:1f:f3:3c:33:4c:76:a9:e3: c9:1b:7d:18:e8:13:6b:24:f3:2c:f5:30:21:b0:c7: 66:4b:2e:59:52:d5:6c:16:26:53:13:3e:87:3a:6c: 14:28:62:67:36:2f:41:97:89:ab:86:31:84:21:48: e2:bf:36:16:71:85:5e:cf:39:5c:d3:24:10:cc:03: 94:12:7e:c9:86:25:39:49:75:ad:8c:62:9c:97:2f: 11:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:2E:04:86:FD:10:8E:6D:98:BF:02:80:56:84:4A:E1:C2:3F:EB:78 X509v3 Authority Key Identifier: keyid:40:83:95:91:4A:1A:74:FF:4E:6A:B1:DE:06:3F:82:C6:1E:08:01:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408395914A1A74FF4E6AB1DE063F82C61E0801F2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:01:a4:57:b8:f1:5d:34:62:38:ef:18:fd:5b:22:bf:34:42: 1a:5a:f7:43:0e:2b:69:21:63:6d:6a:f2:a6:c6:fa:69:4b:71: bc:7a:3b:dd:50:8c:92:08:75:61:ad:23:62:fa:e6:8a:63:de: 22:5a:57:1e:3c:50:c7:3c:2e:c6:e0:5f:6d:f8:8a:60:03:ad: df:5b:1c:f1:25:68:46:f3:0b:45:dd:a3:34:36:8d:a6:56:79: 29:28:79:65:fd:77:38:5b:d8:43:0f:b4:16:9f:c2:f7:f2:2a: 16:70:94:61:7c:6c:fc:d9:3a:72:88:59:bb:cd:ad:60:84:81: f3:ce:fe:f5:00:b4:b7:c5:b8:b8:85:43:15:57:f9:4d:d6:23: 3e:a6:19:8c:c8:f2:90:0c:f6:d9:e8:4a:11:1c:40:76:d5:88: a3:3a:dc:00:59:49:9f:45:73:fc:2f:17:76:7b:9c:f7:d2:32: c5:56:6d:38:4b:95:de:58:07:68:c9:87:94:d1:ef:6a:e3:c1: bc:4f:69:0b:c7:42:a8:7b:3e:f4:ec:22:4a:94:52:0c:c9:c6: e7:97:dd:b0:9a:d1:15:31:a9:cd:d9:bc:eb:15:3c:f9:1c:b3: 8c:f5:7a:53:9a:ba:f6:ac:13:9d:b9:c1:6e:c7:69:f3:a0:c9: af:4c:43:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN3O7+Lu/9iSd5TTcM+Z0ZPudhm0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA4Mzk1OTE0QTFBNzRGRjRFNkFCMURFMDYzRjgyQzYx RTA4MDFGMjAeFw0yNjAzMDExNzM2MTFaFw0yNjAzMDQxODE4MTFaMDMxMTAvBgNV BAMTKDhGMkUwNDg2RkQxMDhFNkQ5OEJGMDI4MDU2ODQ0QUUxQzIzRkVCNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoV6lF2bP3iWXm0K3+xQnCrFzp co9CLDGfCyRK/9YWCv684Rj1biynzw1y/j9nVPyURRzWPFozMyNIiLrZw5cI/d/A Ykrgwgu0H13mJmt6f4fTs8HAorVxP2A/L5xva4XDfko3ac9cw8WiNw66tXp4vOfL Mm14HF7WKAwE+lmceOr5h104TaZpFb7uEU2IG0MWZeifY08SZxtu+IohwU7ndNIc 7WFV9kbOexgf8zwzTHap48kbfRjoE2sk8yz1MCGwx2ZLLllS1WwWJlMTPoc6bBQo Ymc2L0GXiauGMYQhSOK/NhZxhV7POVzTJBDMA5QSfsmGJTlJda2MYpyXLxHdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjy4Ehv0Qjm2YvwKAVoRK4cI/63gwHwYDVR0j BBgwFoAUQIOVkUoadP9OarHeBj+Cxh4IAfIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzhjM2M2OS0zNmQwLTRhZTgtYThkZi02M2QzZjQ0Y2NkOGQvMC80MDgzOTU5MTRB MUE3NEZGNEU2QUIxREUwNjNGODJDNjFFMDgwMUYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDA4Mzk1OTE0QTFBNzRGRjRFNkFCMURFMDYzRjgyQzYxRTA4 MDFGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzc4YzNjNjktMzZkMC00YWU4LWE4 ZGYtNjNkM2Y0NGNjZDhkLzAvNDA4Mzk1OTE0QTFBNzRGRjRFNkFCMURFMDYzRjgy QzYxRTA4MDFGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADkBpFe48V00YjjvGP1bIr80Qhpa90MOK2kh Y21q8qbG+mlLcbx6O91QjJIIdWGtI2L65opj3iJaVx48UMc8LsbgX234imADrd9b HPElaEbzC0XdozQ2jaZWeSkoeWX9dzhb2EMPtBafwvfyKhZwlGF8bPzZOnKIWbvN rWCEgfPO/vUAtLfFuLiFQxVX+U3WIz6mGYzI8pAM9tnoShEcQHbViKM63ABZSZ9F c/wvF3Z7nPfSMsVWbThLld5YB2jJh5TR72rjwbxPaQvHQqh7PvTsIkqUUgzJxueX 3bCa0RUxqc3ZvOsVPPkcs4z1elOauvasE525wW7HafOgya9MQwU= -----END CERTIFICATE-----Generated at Mon Mar 2 06:23:03 2026 by rpki-client