$ rpki-client -vvf repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft File: 401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft (raw, json) Hash identifier: yfIShKltDCfArbrBKrPYfXW+MZzeYdd9QpJAn04E10I= Subject key identifier: 07:85:AD:0A:07:40:B5:A3:42:27:4F:32:5E:04:D9:DC:9C:EA:D6:E4 Authority key identifier: 40:1A:A5:6A:F5:99:CC:A2:CD:71:A6:84:FF:CF:53:FF:F9:DD:E3:DD Certificate issuer: /CN=401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD Certificate serial: 22B6A72FE559DFA6CAAF8957DACE36821FE65E70 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft Manifest number: 0239 Signing time: Mon 02 Mar 2026 00:02:06 +0000 Manifest this update: Sun 01 Mar 2026 23:57:06 +0000 Manifest next update: Thu 05 Mar 2026 08:43:06 +0000 Files and hashes: 1: 3130332e3136302e36382e302f32342d3234203d3e203438343635.roa (hash: s3cZDsm3eCD/zirL0oonykymWlAaugzxDIFPlg5sAUQ=) 2: 401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.crl (hash: FP0Tz6AXL6kN2lyPGNMU/+gm9e2zBBl/43RZQkeqXrk=) 3: 3130332e3136302e36392e302f32342d3234203d3e20313431363037.roa (hash: HLjZFq4/Jnmag82Gv7W9QKBRIGp+gW90e9wOgTOi2PE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.crl rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:b6:a7:2f:e5:59:df:a6:ca:af:89:57:da:ce:36:82:1f:e6:5e:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD Validity Not Before: Mar 1 23:57:06 2026 GMT Not After : Mar 5 08:43:06 2026 GMT Subject: CN=0785AD0A0740B5A342274F325E04D9DC9CEAD6E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:35:3f:8f:23:1a:f1:d3:4e:15:e5:0c:81:3a: 00:c4:f6:13:a4:f5:03:3f:0d:6c:eb:15:de:d4:3a: 11:a8:ad:d4:16:17:71:bc:00:a5:cb:5b:cd:0a:f0: 0a:9a:38:18:72:00:4d:e6:b4:e4:12:23:21:6e:cf: f8:d5:79:d9:c4:f6:cb:b5:5b:34:9f:9e:16:d1:ce: 07:a4:4d:07:cd:d3:68:27:a2:ce:f5:26:ec:b1:ac: a3:ce:b5:3f:ff:f5:ce:e9:e4:9e:91:10:14:d7:61: 48:c9:5c:6c:1b:d1:ee:19:b4:19:bf:d0:37:b6:db: 71:0e:18:65:19:49:13:e8:ba:07:1a:13:24:67:e0: 9a:ee:9e:ac:32:90:39:84:a9:e0:16:8e:0e:10:21: a7:33:54:2f:20:19:dd:60:ae:a7:23:5b:ba:3c:0a: dd:a6:ac:40:25:c6:3b:37:b0:15:4b:54:c7:2f:56: 6f:01:c1:1e:95:36:b3:0b:61:46:38:20:64:d8:18: 98:58:5b:56:87:b2:07:20:b2:6b:dc:48:a7:0c:0f: 76:c9:42:e1:ee:af:ec:1f:8d:33:5d:52:f7:25:73: 8a:d0:c0:13:b1:62:bc:ac:3a:21:28:9b:2d:88:28: d1:7e:4f:73:b9:cb:1b:42:ca:8c:c4:f4:86:fb:15: b0:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:85:AD:0A:07:40:B5:A3:42:27:4F:32:5E:04:D9:DC:9C:EA:D6:E4 X509v3 Authority Key Identifier: keyid:40:1A:A5:6A:F5:99:CC:A2:CD:71:A6:84:FF:CF:53:FF:F9:DD:E3:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:14:53:cb:c2:a6:9d:c1:e9:1a:84:09:be:09:87:bb:ad:9e: 0b:30:5a:c0:92:9c:a9:79:71:8e:78:bf:7c:2d:17:b9:21:55: 8f:6d:4b:a5:d4:4c:b2:7d:d7:f7:23:9c:9e:4e:59:78:16:55: 8e:1a:31:0b:91:d6:da:ad:69:99:8e:f6:3f:54:52:32:ba:4d: 28:a9:cc:20:2c:17:97:41:22:b3:2a:56:cf:d2:36:51:34:02: 77:38:5b:ca:f8:2a:ab:f4:58:d0:1e:bb:31:7d:86:2f:04:a0: 3e:33:29:a2:e6:c5:27:f6:97:c8:4e:e2:b7:ef:d4:04:2e:55: 23:9a:c6:2f:9e:86:a8:2f:8d:f0:04:99:0d:45:90:79:4a:0e: 1d:cb:91:63:4d:b1:79:7d:be:d6:64:0c:6d:a2:cc:06:5e:e4: d9:8d:f4:ef:4a:aa:02:d8:f0:82:40:0d:92:9b:6d:f1:6e:59: 71:41:f5:96:2a:29:6f:a4:df:ac:13:61:86:38:29:10:01:2f: f0:d5:3b:31:00:8a:75:1e:07:ab:d7:61:32:fc:33:22:9c:fd: f6:d5:bf:d8:f3:53:b2:75:03:62:1d:22:5f:7b:30:bc:1b:a8: f8:3b:86:e7:ca:0f:dc:7d:78:45:09:2f:c5:0c:9d:ed:d2:91: 5c:43:39:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIranL+VZ36bKr4lX2s42gh/mXnAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDAxQUE1NkFGNTk5Q0NBMkNENzFBNjg0RkZDRjUzRkZG OURERTNERDAeFw0yNjAzMDEyMzU3MDZaFw0yNjAzMDUwODQzMDZaMDMxMTAvBgNV BAMTKDA3ODVBRDBBMDc0MEI1QTM0MjI3NEYzMjVFMDREOURDOUNFQUQ2RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYNT+PIxrx004V5QyBOgDE9hOk 9QM/DWzrFd7UOhGordQWF3G8AKXLW80K8AqaOBhyAE3mtOQSIyFuz/jVednE9su1 WzSfnhbRzgekTQfN02gnos71JuyxrKPOtT//9c7p5J6REBTXYUjJXGwb0e4ZtBm/ 0De223EOGGUZSRPougcaEyRn4JrunqwykDmEqeAWjg4QIaczVC8gGd1grqcjW7o8 Ct2mrEAlxjs3sBVLVMcvVm8BwR6VNrMLYUY4IGTYGJhYW1aHsgcgsmvcSKcMD3bJ QuHur+wfjTNdUvclc4rQwBOxYrysOiEomy2IKNF+T3O5yxtCyozE9Ib7FbCPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB4WtCgdAtaNCJ08yXgTZ3Jzq1uQwHwYDVR0j BBgwFoAUQBqlavWZzKLNcaaE/89T//nd490wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWM3OWZiZS00NzkwLTQ2YmUtYjliMi0wMzU5YjFhMThlMzMvMC80MDFBQTU2QUY1 OTlDQ0EyQ0Q3MUE2ODRGRkNGNTNGRkY5RERFM0RELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDAxQUE1NkFGNTk5Q0NBMkNENzFBNjg0RkZDRjUzRkZGOURE RTNERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFjNzlmYmUtNDc5MC00NmJlLWI5 YjItMDM1OWIxYTE4ZTMzLzAvNDAxQUE1NkFGNTk5Q0NBMkNENzFBNjg0RkZDRjUz RkZGOURERTNERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJIUU8vCpp3B6RqECb4Jh7utngswWsCSnKl5 cY54v3wtF7khVY9tS6XUTLJ91/cjnJ5OWXgWVY4aMQuR1tqtaZmO9j9UUjK6TSip zCAsF5dBIrMqVs/SNlE0Anc4W8r4Kqv0WNAeuzF9hi8EoD4zKaLmxSf2l8hO4rfv 1AQuVSOaxi+ehqgvjfAEmQ1FkHlKDh3LkWNNsXl9vtZkDG2izAZe5NmN9O9KqgLY 8IJADZKbbfFuWXFB9ZYqKW+k36wTYYY4KRABL/DVOzEAinUeB6vXYTL8MyKc/fbV v9jzU7J1A2IdIl97MLwbqPg7hufKD9x9eEUJL8UMne3SkVxDOac= -----END CERTIFICATE-----Generated at Mon Mar 2 12:39:40 2026 by rpki-client