$ rpki-client -vvf repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft File: 4F40845626DE4E373F550B654EA4E833B6EB4D27.mft (raw, json) Hash identifier: S+M9ZpNnKhLlGxIfSddzve2M5fES4g6Rb1Kxz7zpbls= Subject key identifier: A8:07:33:C8:05:23:46:E0:64:55:0C:E9:79:AC:47:EA:95:DD:E0:70 Authority key identifier: 4F:40:84:56:26:DE:4E:37:3F:55:0B:65:4E:A4:E8:33:B6:EB:4D:27 Certificate issuer: /CN=4F40845626DE4E373F550B654EA4E833B6EB4D27 Certificate serial: 47F7D6C6B7C3A636EFE5EABA0EF1E60B37C9EAC2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft Manifest number: 0405 Signing time: Wed 25 Mar 2026 19:10:02 +0000 Manifest this update: Wed 25 Mar 2026 19:05:02 +0000 Manifest next update: Sun 29 Mar 2026 03:05:02 +0000 Files and hashes: 1: 4F40845626DE4E373F550B654EA4E833B6EB4D27.crl (hash: Pos5QkpNhhPgOIi1YH8nr5D1yeAQyOdraTqyHI9GvRk=) 2: 3130332e3136382e3134362e302f32342d3234203d3e20313430343433.roa (hash: 6CnrGX1LrXJO/2xiSh7/WQeAAu4zVMBvJoPd9Ck/Xbs=) 3: 3130332e3136382e3134372e302f32342d3234203d3e20313430343433.roa (hash: 8U1YdeabpMcYCkPujQ3tfYK2Gg3om+TR67FcBFNrj1s=) 4: 3130332e3136382e3134362e302f32332d3233203d3e20313430343433.roa (hash: qE8KSOdMtc/r9rxeBM2pwg3ZFTLF2GFJiqstVLHlsTo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.crl rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 03:05:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:f7:d6:c6:b7:c3:a6:36:ef:e5:ea:ba:0e:f1:e6:0b:37:c9:ea:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F40845626DE4E373F550B654EA4E833B6EB4D27 Validity Not Before: Mar 25 19:05:02 2026 GMT Not After : Mar 29 03:05:02 2026 GMT Subject: CN=A80733C8052346E064550CE979AC47EA95DDE070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8b:b1:a6:ff:79:b7:f8:39:94:ad:87:d0:bd: 21:c0:1d:18:7f:5c:d9:72:ba:f8:f3:1d:0a:8b:03: 90:01:ea:74:bb:60:af:25:0a:e0:c4:34:e1:ef:ac: 07:72:fe:88:fb:3e:a0:69:66:50:3d:f8:b8:0d:cd: af:ba:6e:89:d0:6d:28:d3:98:cd:d3:f3:48:e4:c3: 74:13:1d:4b:ef:c4:f1:14:b2:70:39:95:66:50:9a: c2:f2:7a:0b:fd:e4:e2:99:5d:4d:9c:f0:cd:3d:20: a3:36:61:3b:d7:1e:cd:77:10:37:22:72:e6:55:40: fe:87:bc:bf:68:ea:70:7f:d0:ec:e6:9e:c9:78:a9: d6:e7:4e:de:2a:53:5e:88:24:f1:9e:87:51:9a:85: 15:50:22:6e:d8:c1:d2:2e:df:24:9b:9a:92:22:ef: 57:a8:d1:d2:b2:f2:e9:6e:d0:8a:04:d3:d0:93:ca: 01:5d:37:6c:f2:6c:f4:3a:ed:51:a4:80:b7:38:b8: f9:75:31:b5:93:9a:0f:f0:32:2a:d1:2f:cc:e2:9f: 68:8e:b3:04:84:14:1e:3b:38:16:7b:a4:41:a0:d3: 2c:b8:aa:5e:d4:49:a3:ce:f0:26:1c:65:82:ec:46: 9e:4d:57:3b:30:a6:1d:d8:9e:89:cd:d6:34:21:9e: 33:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:07:33:C8:05:23:46:E0:64:55:0C:E9:79:AC:47:EA:95:DD:E0:70 X509v3 Authority Key Identifier: keyid:4F:40:84:56:26:DE:4E:37:3F:55:0B:65:4E:A4:E8:33:B6:EB:4D:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:fe:86:22:24:d0:17:ec:f4:11:2d:38:b1:1d:e3:bf:a6:3a: 5b:0d:8e:fe:81:ee:69:ec:45:21:c2:82:8a:33:22:b5:e1:d7: d8:3e:b3:f1:17:91:da:5f:9b:95:85:49:c5:c5:93:1f:c4:57: 3a:5c:29:7b:0e:99:e2:39:ad:68:f3:bb:64:01:bc:ea:94:3d: 9a:05:d5:ff:66:35:69:48:ae:9b:44:8a:84:c9:e5:ea:46:bc: a8:f4:be:b7:c6:91:37:70:14:0c:64:91:41:94:39:f7:a3:90: ac:48:e7:68:f5:c5:ad:98:64:28:28:d0:fc:42:14:32:51:93: 4a:58:91:c5:2d:4e:36:b5:95:6e:05:aa:b1:a0:cc:d2:64:c4: a3:fe:2c:13:34:5e:bc:87:c1:c1:50:ee:0e:8e:a8:3c:bf:29: 17:68:68:50:b1:49:8c:6e:1f:08:02:aa:1f:27:df:7f:ba:49: e2:88:45:44:75:e1:8d:48:2e:dd:55:2f:bc:1f:f9:fc:f6:a7: 8f:a2:05:ca:08:dd:7a:9e:e5:17:b2:bf:c5:29:5c:78:53:3b: 3f:46:c3:51:0f:8d:b8:69:1b:b6:8c:c0:a2:47:d1:cd:a9:b5: e5:a0:c4:05:0e:d8:60:b9:05:ac:90:a1:7e:ef:16:d9:2d:01: a2:ad:ed:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR/fWxrfDpjbv5eq6DvHmCzfJ6sIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEY0MDg0NTYyNkRFNEUzNzNGNTUwQjY1NEVBNEU4MzNC NkVCNEQyNzAeFw0yNjAzMjUxOTA1MDJaFw0yNjAzMjkwMzA1MDJaMDMxMTAvBgNV BAMTKEE4MDczM0M4MDUyMzQ2RTA2NDU1MENFOTc5QUM0N0VBOTVEREUwNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCti7Gm/3m3+DmUrYfQvSHAHRh/ XNlyuvjzHQqLA5AB6nS7YK8lCuDENOHvrAdy/oj7PqBpZlA9+LgNza+6bonQbSjT mM3T80jkw3QTHUvvxPEUsnA5lWZQmsLyegv95OKZXU2c8M09IKM2YTvXHs13EDci cuZVQP6HvL9o6nB/0Ozmnsl4qdbnTt4qU16IJPGeh1GahRVQIm7YwdIu3ySbmpIi 71eo0dKy8ulu0IoE09CTygFdN2zybPQ67VGkgLc4uPl1MbWTmg/wMirRL8zin2iO swSEFB47OBZ7pEGg0yy4ql7USaPO8CYcZYLsRp5NVzswph3YnonN1jQhnjNvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqAczyAUjRuBkVQzpeaxH6pXd4HAwHwYDVR0j BBgwFoAUT0CEVibeTjc/VQtlTqToM7brTScwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTQ2MzYwZC02NjJiLTRmN2QtYmIxNy1kODYwODIxNTI0NzEvMC80RjQwODQ1NjI2 REU0RTM3M0Y1NTBCNjU0RUE0RTgzM0I2RUI0RDI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEY0MDg0NTYyNkRFNEUzNzNGNTUwQjY1NEVBNEU4MzNCNkVC NEQyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2E0NjM2MGQtNjYyYi00ZjdkLWJi MTctZDg2MDgyMTUyNDcxLzAvNEY0MDg0NTYyNkRFNEUzNzNGNTUwQjY1NEVBNEU4 MzNCNkVCNEQyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADP+hiIk0Bfs9BEtOLEd47+mOlsNjv6B7mns RSHCgoozIrXh19g+s/EXkdpfm5WFScXFkx/EVzpcKXsOmeI5rWjzu2QBvOqUPZoF 1f9mNWlIrptEioTJ5epGvKj0vrfGkTdwFAxkkUGUOfejkKxI52j1xa2YZCgo0PxC FDJRk0pYkcUtTja1lW4FqrGgzNJkxKP+LBM0XryHwcFQ7g6OqDy/KRdoaFCxSYxu HwgCqh8n33+6SeKIRUR14Y1ILt1VL7wf+fz2p4+iBcoI3Xqe5Reyv8UpXHhTOz9G w1EPjbhpG7aMwKJH0c2pteWgxAUO2GC5BayQoX7vFtktAaKt7fc= -----END CERTIFICATE-----Generated at Thu Mar 26 22:50:39 2026 by rpki-client