$ rpki-client -vvf repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft File: 402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft (raw, json) Hash identifier: GuD2E6AurMrImaAxvExmbi3wor5+DT0/gztOabsLvsY= Subject key identifier: F4:7B:41:11:A6:5C:1F:08:09:01:45:FC:B9:E1:1C:A2:10:05:EE:10 Authority key identifier: 40:2D:9F:1E:05:A2:6B:41:16:4E:25:B7:3A:5B:07:C8:8E:32:AB:43 Certificate issuer: /CN=402D9F1E05A26B41164E25B73A5B07C88E32AB43 Certificate serial: 3F38E10EA298BA241536ED8F42645110314FEE18 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/402D9F1E05A26B41164E25B73A5B07C88E32AB43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft Manifest number: 02DE Signing time: Tue 24 Mar 2026 16:40:48 +0000 Manifest this update: Tue 24 Mar 2026 16:35:48 +0000 Manifest next update: Sat 28 Mar 2026 01:14:48 +0000 Files and hashes: 1: 402D9F1E05A26B41164E25B73A5B07C88E32AB43.crl (hash: c7nN+3/p6OuZq/Dr0IsK1prBbFQBpbJPH/BBFr+yRA8=) 2: 3130332e3137392e3133342e302f32332d3234203d3e20313531303030.roa (hash: uB6a447DP0BVfo+AyQQCYTW9WembPSjbDetzWb0LqT4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.crl rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/402D9F1E05A26B41164E25B73A5B07C88E32AB43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 01:14:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:38:e1:0e:a2:98:ba:24:15:36:ed:8f:42:64:51:10:31:4f:ee:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=402D9F1E05A26B41164E25B73A5B07C88E32AB43 Validity Not Before: Mar 24 16:35:48 2026 GMT Not After : Mar 28 01:14:48 2026 GMT Subject: CN=F47B4111A65C1F08090145FCB9E11CA21005EE10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:3e:26:cd:47:12:0f:41:81:a6:73:90:8d:a2: fe:f5:e7:a4:cf:15:a2:38:af:fe:b9:31:fc:7b:f7: 9f:16:66:01:c8:8c:dc:90:5b:e5:6f:1c:08:13:bc: f4:2a:c4:e0:62:62:12:a9:b8:d4:d3:85:79:c1:ad: b9:23:5d:bd:86:19:c8:73:04:f1:0e:00:54:1c:1d: 21:2c:95:a7:67:5b:a0:1a:41:ab:4c:8c:0c:8f:b0: d9:e4:27:3d:05:8c:85:1c:60:de:b5:ee:0b:dd:ed: 84:b5:32:7a:ab:d9:5f:c4:1c:05:bc:80:3c:05:5f: 62:ae:e5:04:f6:63:0b:58:7d:ef:b0:70:a2:e4:fb: 80:93:44:b8:1d:df:b5:83:3c:00:81:df:c0:d8:de: ca:b4:9f:e3:84:9a:8a:7c:16:4c:dd:53:ad:1f:33: 44:c6:b3:93:4b:85:a9:aa:98:f8:81:b9:bb:83:17: e3:bf:40:6d:fc:a9:a7:aa:9f:1f:e0:80:fa:52:32: 54:66:8a:87:11:84:ac:b1:60:18:d5:81:79:0c:85: a6:f3:c0:25:95:9f:cc:fe:db:af:50:68:59:25:d6: 48:ff:fe:1d:16:f3:3f:a5:ce:c8:56:12:d1:87:75: ae:13:b1:5a:2a:2f:ef:25:6f:6b:b8:36:91:a7:cb: 24:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:7B:41:11:A6:5C:1F:08:09:01:45:FC:B9:E1:1C:A2:10:05:EE:10 X509v3 Authority Key Identifier: keyid:40:2D:9F:1E:05:A2:6B:41:16:4E:25:B7:3A:5B:07:C8:8E:32:AB:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/402D9F1E05A26B41164E25B73A5B07C88E32AB43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:1e:a1:9d:05:5d:2a:91:45:54:cb:a0:28:22:85:ac:c8:44: 47:f2:a9:4e:1b:01:37:d5:68:5a:f5:c1:1f:97:37:5f:eb:6e: 89:66:ac:9c:d6:ff:7d:0e:fd:5a:07:29:04:18:f5:02:40:20: 5a:d2:16:81:fc:c3:e4:84:68:85:d3:94:f3:16:e3:53:94:dd: db:51:4b:b7:75:9e:12:c8:95:4b:15:b9:21:22:e5:76:a2:cb: d0:78:09:e9:c6:f5:ae:ba:ca:e7:e3:8d:3e:ed:86:df:85:f3: 7b:08:92:b6:76:8d:ee:e8:92:44:12:e0:a6:a5:6c:45:31:e1: f9:7c:56:96:1c:e2:66:f5:2a:45:f6:6f:cf:de:00:7a:f0:c6: 88:3c:fa:ee:68:b8:b5:9b:56:8b:e8:e2:0a:30:f9:2e:b1:8e: a6:51:cf:6d:21:7c:cd:e3:21:45:00:e1:d7:ad:19:ee:04:03: 20:23:cd:6e:00:ee:71:e5:32:4c:a3:b6:84:38:d6:26:7b:86: dc:db:19:f8:00:62:44:8d:46:27:62:56:f2:b2:4a:f9:4b:84: 97:33:da:7d:c5:e7:76:e1:21:ce:d2:8c:e7:0c:4c:c6:af:9b: a0:00:f2:4e:17:1e:2f:03:83:ad:f6:71:1c:cf:e6:35:09:c0: 41:d9:4e:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPzjhDqKYuiQVNu2PQmRREDFP7hgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDAyRDlGMUUwNUEyNkI0MTE2NEUyNUI3M0E1QjA3Qzg4 RTMyQUI0MzAeFw0yNjAzMjQxNjM1NDhaFw0yNjAzMjgwMTE0NDhaMDMxMTAvBgNV BAMTKEY0N0I0MTExQTY1QzFGMDgwOTAxNDVGQ0I5RTExQ0EyMTAwNUVFMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSPibNRxIPQYGmc5CNov7156TP FaI4r/65Mfx7958WZgHIjNyQW+VvHAgTvPQqxOBiYhKpuNTThXnBrbkjXb2GGchz BPEOAFQcHSEsladnW6AaQatMjAyPsNnkJz0FjIUcYN617gvd7YS1Mnqr2V/EHAW8 gDwFX2Ku5QT2YwtYfe+wcKLk+4CTRLgd37WDPACB38DY3sq0n+OEmop8FkzdU60f M0TGs5NLhamqmPiBubuDF+O/QG38qaeqnx/ggPpSMlRmiocRhKyxYBjVgXkMhabz wCWVn8z+269QaFkl1kj//h0W8z+lzshWEtGHda4TsVoqL+8lb2u4NpGnyyT3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9HtBEaZcHwgJAUX8ueEcohAF7hAwHwYDVR0j BBgwFoAUQC2fHgWia0EWTiW3OlsHyI4yq0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YjNkZjZhZi1kOWVlLTQwNzYtODFhNC0yNjQ4NzI3NDg5NzAvMC80MDJEOUYxRTA1 QTI2QjQxMTY0RTI1QjczQTVCMDdDODhFMzJBQjQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDAyRDlGMUUwNUEyNkI0MTE2NEUyNUI3M0E1QjA3Qzg4RTMy QUI0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2IzZGY2YWYtZDllZS00MDc2LTgx YTQtMjY0ODcyNzQ4OTcwLzAvNDAyRDlGMUUwNUEyNkI0MTE2NEUyNUI3M0E1QjA3 Qzg4RTMyQUI0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA0eoZ0FXSqRRVTLoCgihazIREfyqU4bATfV aFr1wR+XN1/rbolmrJzW/30O/VoHKQQY9QJAIFrSFoH8w+SEaIXTlPMW41OU3dtR S7d1nhLIlUsVuSEi5Xaiy9B4CenG9a66yufjjT7tht+F83sIkrZ2je7okkQS4Kal bEUx4fl8VpYc4mb1KkX2b8/eAHrwxog8+u5ouLWbVovo4gow+S6xjqZRz20hfM3j IUUA4detGe4EAyAjzW4A7nHlMkyjtoQ41iZ7htzbGfgAYkSNRidiVvKySvlLhJcz 2n3F53bhIc7SjOcMTMavm6AA8k4XHi8Dg632cRzP5jUJwEHZTnw= -----END CERTIFICATE-----Generated at Thu Mar 26 20:51:07 2026 by rpki-client