$ rpki-client -vvf repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft File: 405E466852C38FD4CD20BA6115840947D5D24F5D.mft (raw, json) Hash identifier: /h9dxUWebIU2bPzp46Rl7RUyckFGIOlTPMwJ6NKQ7t8= Subject key identifier: E3:C2:0D:C1:DE:C3:2D:AD:9C:F2:D3:BC:6D:E8:82:20:F5:42:2E:BB Authority key identifier: 40:5E:46:68:52:C3:8F:D4:CD:20:BA:61:15:84:09:47:D5:D2:4F:5D Certificate issuer: /CN=405E466852C38FD4CD20BA6115840947D5D24F5D Certificate serial: 4B86EB0FAE3DA4A182C3327AB94AE19A3CE7517E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/405E466852C38FD4CD20BA6115840947D5D24F5D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft Manifest number: 0107 Signing time: Tue 24 Mar 2026 21:31:18 +0000 Manifest this update: Tue 24 Mar 2026 21:26:18 +0000 Manifest next update: Sat 28 Mar 2026 04:24:18 +0000 Files and hashes: 1: 405E466852C38FD4CD20BA6115840947D5D24F5D.crl (hash: swPplIeDOCh9AJAhePJTh/FTj1oVpMDpklgftuqux9c=) 2: 3136302e32352e3230332e302f32342d3234203d3e20313533313038.roa (hash: jF9/a6Jp1M+je5Rsp2up/n4DNy0dv/N5PQgKJQwfemc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.crl rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/405E466852C38FD4CD20BA6115840947D5D24F5D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 04:24:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:86:eb:0f:ae:3d:a4:a1:82:c3:32:7a:b9:4a:e1:9a:3c:e7:51:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=405E466852C38FD4CD20BA6115840947D5D24F5D Validity Not Before: Mar 24 21:26:18 2026 GMT Not After : Mar 28 04:24:18 2026 GMT Subject: CN=E3C20DC1DEC32DAD9CF2D3BC6DE88220F5422EBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:1f:3a:ee:42:f9:c3:1c:69:96:32:42:34:ea: 36:09:7e:e3:2b:fb:e3:6c:ca:e5:b3:cf:5c:46:7e: 6d:fb:35:f2:02:95:0e:dd:48:9f:1a:e4:61:1b:f3: df:e5:31:d8:06:b9:b0:61:65:04:89:ab:53:9a:3d: e1:5f:2b:b9:f6:3d:bd:cb:7a:a1:6b:13:31:ca:44: 31:74:f7:f0:2d:cf:92:ce:4f:ca:c6:8a:e1:62:3f: 56:4d:05:ba:c4:01:13:9b:6f:9e:2e:4d:0a:4e:b7: ac:c4:74:3f:ad:3d:c7:31:17:83:bb:3b:59:cf:44: 6a:fb:4b:89:2f:4d:bf:f9:ae:4c:e5:58:16:34:13: de:57:8e:b2:f8:8f:cf:64:02:92:e9:fa:a9:d6:45: bd:f2:4e:82:2d:ef:3b:c7:9a:ad:66:34:da:13:e5: fd:57:c7:44:b8:76:3b:3a:56:86:7c:08:e5:cd:45: 44:07:1e:61:59:c5:f2:31:22:bd:25:cd:a2:c3:c5: 8c:78:95:98:89:94:4b:c6:88:76:46:87:ce:46:d6: 23:16:d8:64:d4:42:fd:b2:81:c9:74:0f:d5:82:6d: 25:a0:46:92:1e:17:c0:fc:2c:2a:e3:b4:6b:9a:6f: e5:15:2e:2e:1a:b6:62:1e:48:96:74:b1:f5:2e:66: e0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:C2:0D:C1:DE:C3:2D:AD:9C:F2:D3:BC:6D:E8:82:20:F5:42:2E:BB X509v3 Authority Key Identifier: keyid:40:5E:46:68:52:C3:8F:D4:CD:20:BA:61:15:84:09:47:D5:D2:4F:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/405E466852C38FD4CD20BA6115840947D5D24F5D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:87:10:f8:e1:96:3e:65:94:14:5b:bf:5e:66:8b:df:df:15: 7a:0c:84:5b:d8:57:90:9e:41:27:e0:c2:99:94:00:7b:64:e8: 01:3b:f7:e7:ef:fe:20:f8:7a:e2:6d:2b:de:d4:f4:a7:9e:5e: 4e:7c:a3:9e:e8:17:84:10:d2:fd:11:9a:8a:df:14:dc:8f:53: 3f:b7:b0:84:39:00:39:bd:c9:3b:e0:d4:1f:ee:69:5d:bb:1b: e2:d9:30:c2:43:7c:9a:a4:4c:1c:4a:4a:a0:54:b3:f7:2d:bc: b4:e6:65:2e:bc:e8:42:5e:3b:56:33:dd:f4:e3:ba:f7:10:a5: 3f:68:98:31:77:5b:34:e9:da:7d:6d:83:60:e4:8f:da:4e:82: 32:4f:0e:59:ed:c2:6d:33:74:88:db:ad:35:4a:14:50:8f:18: 7e:17:d3:26:01:82:7a:53:7c:61:72:db:66:47:c3:89:ed:05: 77:12:d6:83:8e:98:56:22:95:55:c5:5e:db:5b:cf:75:61:29: c7:b8:49:e1:ca:01:6b:dc:f2:a4:9b:91:e3:0a:24:ca:ac:43: 53:23:98:3e:bf:14:c7:d7:1f:34:86:7b:b6:32:63:b4:25:37: d8:62:b1:ee:77:65:58:15:50:e7:56:44:89:90:79:bf:7f:81: 78:f4:4a:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS4brD649pKGCwzJ6uUrhmjznUX4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA1RTQ2Njg1MkMzOEZENENEMjBCQTYxMTU4NDA5NDdE NUQyNEY1RDAeFw0yNjAzMjQyMTI2MThaFw0yNjAzMjgwNDI0MThaMDMxMTAvBgNV BAMTKEUzQzIwREMxREVDMzJEQUQ5Q0YyRDNCQzZERTg4MjIwRjU0MjJFQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvHzruQvnDHGmWMkI06jYJfuMr ++NsyuWzz1xGfm37NfIClQ7dSJ8a5GEb89/lMdgGubBhZQSJq1OaPeFfK7n2Pb3L eqFrEzHKRDF09/Atz5LOT8rGiuFiP1ZNBbrEARObb54uTQpOt6zEdD+tPccxF4O7 O1nPRGr7S4kvTb/5rkzlWBY0E95XjrL4j89kApLp+qnWRb3yToIt7zvHmq1mNNoT 5f1Xx0S4djs6VoZ8COXNRUQHHmFZxfIxIr0lzaLDxYx4lZiJlEvGiHZGh85G1iMW 2GTUQv2ygcl0D9WCbSWgRpIeF8D8LCrjtGuab+UVLi4atmIeSJZ0sfUuZuCjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU48INwd7DLa2c8tO8beiCIPVCLrswHwYDVR0j BBgwFoAUQF5GaFLDj9TNILphFYQJR9XST10wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YWM2MTU1ZS0yZDJmLTRmOWUtYjIxOC1lYjUyNWIzYTExMTkvMC80MDVFNDY2ODUy QzM4RkQ0Q0QyMEJBNjExNTg0MDk0N0Q1RDI0RjVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDA1RTQ2Njg1MkMzOEZENENEMjBCQTYxMTU4NDA5NDdENUQy NEY1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWFjNjE1NWUtMmQyZi00ZjllLWIy MTgtZWI1MjViM2ExMTE5LzAvNDA1RTQ2Njg1MkMzOEZENENEMjBCQTYxMTU4NDA5 NDdENUQyNEY1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIaHEPjhlj5llBRbv15mi9/fFXoMhFvYV5Ce QSfgwpmUAHtk6AE79+fv/iD4euJtK97U9KeeXk58o57oF4QQ0v0RmorfFNyPUz+3 sIQ5ADm9yTvg1B/uaV27G+LZMMJDfJqkTBxKSqBUs/ctvLTmZS686EJeO1Yz3fTj uvcQpT9omDF3WzTp2n1tg2Dkj9pOgjJPDlntwm0zdIjbrTVKFFCPGH4X0yYBgnpT fGFy22ZHw4ntBXcS1oOOmFYilVXFXttbz3VhKce4SeHKAWvc8qSbkeMKJMqsQ1Mj mD6/FMfXHzSGe7YyY7QlN9hise53ZVgVUOdWRImQeb9/gXj0SnQ= -----END CERTIFICATE-----Generated at Thu Mar 26 13:51:14 2026 by rpki-client