$ rpki-client -vvf repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft File: 940E05E54E6B685EFBC6114D1E913804318364AB.mft (raw, json) Hash identifier: f6yoEcfL1oOMpIwGuUEy+6Y3HVgQMYbeZAs/AaUuAyE= Subject key identifier: E4:E1:E5:3C:38:49:E8:4C:A3:C9:05:31:77:1C:AB:C4:4C:1A:62:FB Authority key identifier: 94:0E:05:E5:4E:6B:68:5E:FB:C6:11:4D:1E:91:38:04:31:83:64:AB Certificate issuer: /CN=940E05E54E6B685EFBC6114D1E913804318364AB Certificate serial: 20108825A7D92537914FCB20F131AF0EA6741A31 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft Manifest number: 01F2 Signing time: Tue 24 Mar 2026 20:50:51 +0000 Manifest this update: Tue 24 Mar 2026 20:45:51 +0000 Manifest next update: Fri 27 Mar 2026 23:59:51 +0000 Files and hashes: 1: 3130332e3136362e3136302e302f32342d3234203d3e20313431393532.roa (hash: rsfEnPVSsycki+njgiCyWYWgAdgVcyumzNfOTNHS8n4=) 2: 3130332e3136362e3136312e302f32342d3234203d3e20313431393532.roa (hash: NqLs/FneIiTV/W/DgkmvwBtBvCh5S71ZEnAkqfC2LTI=) 3: 940E05E54E6B685EFBC6114D1E913804318364AB.crl (hash: i+K7DfA7hvB29kb4ACULEIu+zw6bihsRI+4qNwt/gkg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.crl rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 23:59:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:10:88:25:a7:d9:25:37:91:4f:cb:20:f1:31:af:0e:a6:74:1a:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=940E05E54E6B685EFBC6114D1E913804318364AB Validity Not Before: Mar 24 20:45:51 2026 GMT Not After : Mar 27 23:59:51 2026 GMT Subject: CN=E4E1E53C3849E84CA3C90531771CABC44C1A62FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:16:a7:49:7d:72:04:68:28:77:02:bc:e7:98: 17:83:cf:e2:db:7e:86:5b:cf:98:ec:fb:c9:89:2d: f4:72:d4:a4:f0:f1:ef:fb:71:72:52:60:5b:a9:33: 2f:bf:80:e5:04:e3:a1:e1:3a:6d:65:bf:bc:82:6b: dd:23:0c:91:71:88:e0:d6:bf:6d:ab:f0:31:f2:ef: 98:92:76:97:3f:8d:1b:d4:da:f0:91:8f:61:66:94: aa:aa:2a:d3:a1:c9:0b:41:ac:a8:03:e3:a0:bf:5e: f7:11:42:09:c0:25:a4:61:25:18:83:9e:15:62:96: 41:b1:2d:f2:88:94:8b:1c:7e:3e:19:a7:95:5f:d7: c2:00:e7:b1:bd:11:6a:c9:ea:3f:5f:e2:02:dc:52: c6:50:46:67:b6:76:ff:c4:7d:50:5a:1a:61:39:69: 4d:bd:b2:38:5f:28:31:c2:fe:c3:47:9b:cf:70:1a: b7:66:06:75:95:b5:f5:e1:76:1b:28:2d:62:e4:c8: a2:4e:f0:c4:8c:47:c6:26:9b:0a:15:72:96:e4:88: 51:15:53:a6:59:bc:b4:b1:10:da:a8:fb:fa:49:ab: 02:b3:a0:ac:5f:46:a3:6b:a9:6c:a1:d3:73:00:a1: 72:59:ab:48:fc:f8:dd:2a:1a:64:34:c5:a2:65:24: c1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:E1:E5:3C:38:49:E8:4C:A3:C9:05:31:77:1C:AB:C4:4C:1A:62:FB X509v3 Authority Key Identifier: keyid:94:0E:05:E5:4E:6B:68:5E:FB:C6:11:4D:1E:91:38:04:31:83:64:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:7e:6d:b1:c1:4b:c8:b7:70:6e:4f:48:3b:27:37:bb:5f:c2: 53:09:ce:e9:c7:d5:7a:96:c4:f4:59:dc:e7:4c:ca:3e:fd:81: 2c:21:51:3b:a8:54:c9:af:de:4a:ff:90:f6:9d:e6:f2:e2:6d: cd:83:68:6e:01:71:18:17:a5:6e:41:48:0c:bb:22:ae:57:3b: 8c:17:ae:7f:d4:b3:37:21:2b:0a:bc:b2:e1:38:be:67:81:2e: 7d:e5:63:72:9e:ca:f4:3d:1b:56:b3:b1:ad:a6:a6:24:f4:f0: b6:39:61:09:5d:70:a9:f1:06:0f:13:fd:bf:e1:c9:27:3a:bf: d1:13:72:9e:b5:e9:95:63:64:c7:ba:48:34:23:5f:0a:8d:06: 9d:6c:6b:d0:bb:af:a7:35:d9:d2:45:7b:38:8a:e0:50:6f:bd: 5a:cd:1f:aa:4d:6b:c4:91:24:a6:bf:85:e7:e7:34:ad:01:af: 88:f9:64:c2:c3:36:fe:64:8e:9b:28:ac:79:58:cb:37:ff:3b: 47:49:c1:7e:ea:75:cc:54:0f:05:35:11:ed:b6:00:87:60:46: b1:ce:c1:0c:85:f5:a4:a8:1e:96:36:cf:69:8c:a5:10:c3:56: bc:d0:37:2b:f7:c3:40:fb:5c:32:a2:7f:e6:e2:61:91:ae:07: 3b:e5:c6:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIBCIJafZJTeRT8sg8TGvDqZ0GjEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQwRTA1RTU0RTZCNjg1RUZCQzYxMTREMUU5MTM4MDQz MTgzNjRBQjAeFw0yNjAzMjQyMDQ1NTFaFw0yNjAzMjcyMzU5NTFaMDMxMTAvBgNV BAMTKEU0RTFFNTNDMzg0OUU4NENBM0M5MDUzMTc3MUNBQkM0NEMxQTYyRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3FqdJfXIEaCh3ArznmBeDz+Lb foZbz5js+8mJLfRy1KTw8e/7cXJSYFupMy+/gOUE46HhOm1lv7yCa90jDJFxiODW v22r8DHy75iSdpc/jRvU2vCRj2FmlKqqKtOhyQtBrKgD46C/XvcRQgnAJaRhJRiD nhVilkGxLfKIlIscfj4Zp5Vf18IA57G9EWrJ6j9f4gLcUsZQRme2dv/EfVBaGmE5 aU29sjhfKDHC/sNHm89wGrdmBnWVtfXhdhsoLWLkyKJO8MSMR8YmmwoVcpbkiFEV U6ZZvLSxENqo+/pJqwKzoKxfRqNrqWyh03MAoXJZq0j8+N0qGmQ0xaJlJMEJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5OHlPDhJ6EyjyQUxdxyrxEwaYvswHwYDVR0j BBgwFoAUlA4F5U5raF77xhFNHpE4BDGDZKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YjIwNDFmMS00Y2U2LTQ5YjQtODNhNS0zMTVmMjBlNGUyYzMvMC85NDBFMDVFNTRF NkI2ODVFRkJDNjExNEQxRTkxMzgwNDMxODM2NEFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTQwRTA1RTU0RTZCNjg1RUZCQzYxMTREMUU5MTM4MDQzMTgz NjRBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmIyMDQxZjEtNGNlNi00OWI0LTgz YTUtMzE1ZjIwZTRlMmMzLzAvOTQwRTA1RTU0RTZCNjg1RUZCQzYxMTREMUU5MTM4 MDQzMTgzNjRBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE9+bbHBS8i3cG5PSDsnN7tfwlMJzunH1XqW xPRZ3OdMyj79gSwhUTuoVMmv3kr/kPad5vLibc2DaG4BcRgXpW5BSAy7Iq5XO4wX rn/UszchKwq8suE4vmeBLn3lY3KeyvQ9G1azsa2mpiT08LY5YQldcKnxBg8T/b/h ySc6v9ETcp616ZVjZMe6SDQjXwqNBp1sa9C7r6c12dJFeziK4FBvvVrNH6pNa8SR JKa/hefnNK0Br4j5ZMLDNv5kjpsorHlYyzf/O0dJwX7qdcxUDwU1Ee22AIdgRrHO wQyF9aSoHpY2z2mMpRDDVrzQNyv3w0D7XDKif+biYZGuBzvlxvY= -----END CERTIFICATE-----Generated at Thu Mar 26 12:42:33 2026 by rpki-client