$ rpki-client -vvf repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft File: 401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft (raw, json) Hash identifier: VXx7D6BTF8avVmJZzAKU2j5obKBIp7BfqVD/QsAMQ3k= Subject key identifier: 30:D1:00:D8:37:76:CB:85:69:6C:5F:33:8D:04:3B:1B:43:16:89:B2 Authority key identifier: 40:1A:A5:6A:F5:99:CC:A2:CD:71:A6:84:FF:CF:53:FF:F9:DD:E3:DD Certificate issuer: /CN=401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD Certificate serial: 6AEBD17617F6250392AED7A5FCFD96ADC0881B9E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft Manifest number: 024D Signing time: Thu 16 Apr 2026 08:22:12 +0000 Manifest this update: Thu 16 Apr 2026 08:17:12 +0000 Manifest next update: Sun 19 Apr 2026 15:24:12 +0000 Files and hashes: 1: 3130332e3136302e36392e302f32342d3234203d3e20313431363037.roa (hash: HLjZFq4/Jnmag82Gv7W9QKBRIGp+gW90e9wOgTOi2PE=) 2: 3130332e3136302e36382e302f32342d3234203d3e203438343635.roa (hash: s3cZDsm3eCD/zirL0oonykymWlAaugzxDIFPlg5sAUQ=) 3: 401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.crl (hash: 3RZWJ+lYVx1nvVokJc5HNfkeMLD7VROHxWSNl0nGZVY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.crl rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 15:24:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:eb:d1:76:17:f6:25:03:92:ae:d7:a5:fc:fd:96:ad:c0:88:1b:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD Validity Not Before: Apr 16 08:17:12 2026 GMT Not After : Apr 19 15:24:12 2026 GMT Subject: CN=30D100D83776CB85696C5F338D043B1B431689B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d5:66:7c:c6:85:1e:2a:ec:0e:50:d6:38:17: 79:40:cf:1d:a3:33:35:0a:3d:6d:6b:6d:33:cb:62: ce:c0:11:8e:a8:1b:56:2c:e8:a4:80:19:b2:86:2c: ad:e9:01:ed:ad:31:c5:29:7c:93:8e:9e:1f:b7:d1: ab:b4:15:f9:20:9d:a9:5c:85:5b:16:5f:ef:9a:86: a1:c5:10:5b:d1:10:7e:b5:ae:ed:a7:bb:0d:24:1f: 0d:0a:2e:05:e9:c7:69:ee:d8:2d:a7:f7:1d:d5:06: 19:85:fb:75:35:ce:b2:92:ea:54:5f:eb:f8:10:20: 73:7e:71:4a:e3:2b:40:eb:4e:ec:46:f0:ce:53:c6: 4f:cd:b6:33:20:d7:70:b8:37:e2:81:d0:4f:3d:e9: 01:73:91:a7:4c:4b:cb:53:0c:5a:17:d5:b2:8c:ca: ac:77:4a:39:3e:d9:25:ed:fd:be:d1:1c:ce:b3:94: 0d:9b:22:39:e9:7c:28:d5:c1:9e:ad:84:43:b2:73: 98:0b:fb:2e:bd:d6:2e:cd:01:f8:10:7f:e2:4f:d6: f4:34:a8:c4:a8:95:fd:f3:3e:c9:55:cf:54:fd:3d: 9a:b0:fb:b9:38:f9:70:19:5e:2d:ed:9c:97:31:90: 5d:0e:67:f5:25:90:b9:0c:03:b9:8b:f2:ca:1e:fb: bb:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D1:00:D8:37:76:CB:85:69:6C:5F:33:8D:04:3B:1B:43:16:89:B2 X509v3 Authority Key Identifier: keyid:40:1A:A5:6A:F5:99:CC:A2:CD:71:A6:84:FF:CF:53:FF:F9:DD:E3:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:3c:3b:bf:d3:63:1f:27:20:99:89:04:52:19:bb:f4:7d:de: b6:f1:0c:b0:10:39:ed:d7:6d:7a:b2:c4:80:95:51:76:ab:d7: ed:c8:26:79:5c:6f:bf:78:f9:2f:fa:d8:7c:dc:05:8d:90:52: 62:86:9a:21:3a:de:ba:1a:8f:70:f0:ab:2f:c1:4b:2f:39:90: a1:17:13:05:c1:30:b8:9a:33:e0:4a:dc:c0:35:e7:da:99:45: 45:1a:12:23:24:96:f6:6f:eb:f5:21:b9:73:3d:a0:4f:ad:0a: 88:8b:5a:67:7a:ac:87:04:c3:7a:4e:c5:bf:1f:b4:16:80:cb: 6b:fa:45:48:94:82:c7:e5:37:4e:86:9f:69:fa:98:d2:db:19: 08:bd:55:d8:a9:f1:d4:31:3d:41:de:5d:e2:21:1c:4f:75:ea: 9d:0f:34:cb:b7:25:a9:77:32:90:63:41:85:fe:4b:50:37:b9: ab:59:a0:82:91:ff:f1:63:a8:c9:19:fb:b9:44:08:60:aa:05: 7e:29:d6:d1:69:10:f8:a3:c9:27:3d:c6:35:34:07:3a:26:c6: 66:9d:22:2a:95:c0:be:61:3c:b1:56:a5:ec:6e:d5:84:d4:a5: cb:72:05:24:09:08:35:07:d1:77:ed:1f:ac:98:35:31:fc:5f: 51:39:a2:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUauvRdhf2JQOSrtel/P2WrcCIG54wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDAxQUE1NkFGNTk5Q0NBMkNENzFBNjg0RkZDRjUzRkZG OURERTNERDAeFw0yNjA0MTYwODE3MTJaFw0yNjA0MTkxNTI0MTJaMDMxMTAvBgNV BAMTKDMwRDEwMEQ4Mzc3NkNCODU2OTZDNUYzMzhEMDQzQjFCNDMxNjg5QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp1WZ8xoUeKuwOUNY4F3lAzx2j MzUKPW1rbTPLYs7AEY6oG1Ys6KSAGbKGLK3pAe2tMcUpfJOOnh+30au0Ffkgnalc hVsWX++ahqHFEFvREH61ru2nuw0kHw0KLgXpx2nu2C2n9x3VBhmF+3U1zrKS6lRf 6/gQIHN+cUrjK0DrTuxG8M5Txk/NtjMg13C4N+KB0E896QFzkadMS8tTDFoX1bKM yqx3Sjk+2SXt/b7RHM6zlA2bIjnpfCjVwZ6thEOyc5gL+y691i7NAfgQf+JP1vQ0 qMSolf3zPslVz1T9PZqw+7k4+XAZXi3tnJcxkF0OZ/UlkLkMA7mL8soe+7uFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMNEA2Dd2y4VpbF8zjQQ7G0MWibIwHwYDVR0j BBgwFoAUQBqlavWZzKLNcaaE/89T//nd490wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWM3OWZiZS00NzkwLTQ2YmUtYjliMi0wMzU5YjFhMThlMzMvMC80MDFBQTU2QUY1 OTlDQ0EyQ0Q3MUE2ODRGRkNGNTNGRkY5RERFM0RELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDAxQUE1NkFGNTk5Q0NBMkNENzFBNjg0RkZDRjUzRkZGOURE RTNERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFjNzlmYmUtNDc5MC00NmJlLWI5 YjItMDM1OWIxYTE4ZTMzLzAvNDAxQUE1NkFGNTk5Q0NBMkNENzFBNjg0RkZDRjUz RkZGOURERTNERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGk8O7/TYx8nIJmJBFIZu/R93rbxDLAQOe3X bXqyxICVUXar1+3IJnlcb794+S/62HzcBY2QUmKGmiE63roaj3Dwqy/BSy85kKEX EwXBMLiaM+BK3MA159qZRUUaEiMklvZv6/UhuXM9oE+tCoiLWmd6rIcEw3pOxb8f tBaAy2v6RUiUgsflN06Gn2n6mNLbGQi9Vdip8dQxPUHeXeIhHE916p0PNMu3Jal3 MpBjQYX+S1A3uatZoIKR//FjqMkZ+7lECGCqBX4p1tFpEPijySc9xjU0Bzomxmad IiqVwL5hPLFWpexu1YTUpctyBSQJCDUH0XftH6yYNTH8X1E5ot8= -----END CERTIFICATE-----Generated at Sat Apr 18 04:39:38 2026 by rpki-client