$ rpki-client -vvf repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft File: 40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft (raw, json) Hash identifier: 7yagZD+DcGY5RowwiZ496qLxmCbbjdn2e/rhtnp5qMY= Subject key identifier: 48:70:0F:18:50:4E:EB:49:97:E8:E5:95:C5:C8:3F:11:6A:DC:5C:91 Authority key identifier: 40:94:9C:7C:9D:D0:D3:F8:99:68:1F:F2:EB:53:E4:9C:8F:85:2B:AA Certificate issuer: /CN=40949C7C9DD0D3F899681FF2EB53E49C8F852BAA Certificate serial: 2C51E438C6CE477C27D5F3C2F31741472A3DE5A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft Manifest number: 0128 Signing time: Tue 24 Mar 2026 17:42:18 +0000 Manifest this update: Tue 24 Mar 2026 17:37:18 +0000 Manifest next update: Fri 27 Mar 2026 17:44:18 +0000 Files and hashes: 1: 3135372e36362e302e302f32332d3234203d3e20313430343737.roa (hash: VPuK+1+6ePV1CKusC5qXhYaOQr6/W2sAl7gu8K+R3ug=) 2: 40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.crl (hash: i7l2sG2hcHZlYoGzL6d9/Q7ZThDGCVCYXlE8X8cZP0g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.crl rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 17:44:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:51:e4:38:c6:ce:47:7c:27:d5:f3:c2:f3:17:41:47:2a:3d:e5:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40949C7C9DD0D3F899681FF2EB53E49C8F852BAA Validity Not Before: Mar 24 17:37:18 2026 GMT Not After : Mar 27 17:44:18 2026 GMT Subject: CN=48700F18504EEB4997E8E595C5C83F116ADC5C91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7d:f5:a5:79:90:11:d4:2e:42:5f:cc:a0:8c: f3:7e:6d:f5:7d:b3:16:3e:62:47:f6:d2:a6:32:78: 36:15:ab:a9:69:82:43:1a:96:2b:9e:c1:a1:41:cb: 0c:2e:4e:fc:65:38:d8:2e:34:98:87:8d:58:cb:9b: e7:ef:10:29:c6:a1:93:1c:5c:f4:d5:61:b2:98:19: 06:e1:92:ec:6e:d3:0a:06:d2:87:00:1a:d2:21:7d: 4d:b0:2a:b4:7c:3e:2c:8d:6e:94:bf:5b:02:ef:a3: 84:55:62:2e:3f:db:1f:00:17:fa:6f:7f:c9:83:b5: f7:7a:12:89:bc:cf:84:89:95:94:c9:5b:d8:16:df: 32:67:08:61:29:79:99:ac:2a:30:a7:ca:3d:c5:fc: 50:82:ce:56:a5:a9:91:61:6d:30:26:23:dd:c8:64: 3f:0d:10:87:b2:a1:9f:3d:c7:a8:d6:97:d7:49:ef: 0b:48:31:95:3c:d8:26:25:35:83:18:f0:3b:55:51: 94:33:95:7f:f9:45:b6:9c:44:a6:7a:f7:00:24:08: 2a:8a:2a:16:26:ff:ad:54:2b:40:0e:65:6e:08:92: 5f:56:5e:28:2f:ff:51:5c:21:66:82:15:54:ce:68: ab:8a:3a:aa:bb:f0:84:62:07:f0:d2:29:01:44:b7: 29:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:70:0F:18:50:4E:EB:49:97:E8:E5:95:C5:C8:3F:11:6A:DC:5C:91 X509v3 Authority Key Identifier: keyid:40:94:9C:7C:9D:D0:D3:F8:99:68:1F:F2:EB:53:E4:9C:8F:85:2B:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:85:17:56:29:f5:fe:0d:18:c0:bd:dd:ab:d9:97:b2:5e:51: 88:68:a8:0c:b1:0f:6f:8c:3f:38:56:b9:0f:78:5e:c5:51:4d: 97:d3:4d:29:ca:35:ba:66:9b:d6:0b:2f:50:3c:e4:e5:e2:f7: de:0b:09:3c:2b:a0:72:3d:fd:91:ba:ba:d7:90:f4:5d:81:4e: b2:c9:3c:cc:0b:7b:25:8c:6e:3c:13:24:03:85:5f:31:eb:91: d5:32:a5:2b:ff:fd:c7:26:96:23:c9:23:28:a3:a0:59:7a:f3: 59:9b:37:1a:90:e9:7e:f8:7e:a4:1a:b6:db:a9:3a:e7:12:7b: 8b:a9:71:bc:0b:1b:23:36:7d:cd:84:34:ff:1b:1d:05:1e:a5: b2:5a:43:d4:03:b3:d7:79:d5:10:9c:a4:3f:a1:7c:0d:bb:3a: 25:a6:76:90:68:02:0b:69:a0:d7:57:90:24:49:b6:37:0d:d6: af:1f:a9:97:6f:ea:1e:84:ad:3f:9b:93:ea:52:6a:ca:6f:73: 7e:25:6c:e1:65:fb:2b:d8:30:b1:43:aa:53:31:98:cc:4d:d4: 98:39:79:df:fe:ec:29:95:aa:c6:d9:b5:7f:0b:3a:c6:24:96: c7:ba:3b:fc:eb:61:51:88:1e:1d:3f:79:93:88:16:28:a8:03: e4:6f:a7:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULFHkOMbOR3wn1fPC8xdBRyo95akwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA5NDlDN0M5REQwRDNGODk5NjgxRkYyRUI1M0U0OUM4 Rjg1MkJBQTAeFw0yNjAzMjQxNzM3MThaFw0yNjAzMjcxNzQ0MThaMDMxMTAvBgNV BAMTKDQ4NzAwRjE4NTA0RUVCNDk5N0U4RTU5NUM1QzgzRjExNkFEQzVDOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDffWleZAR1C5CX8ygjPN+bfV9 sxY+Ykf20qYyeDYVq6lpgkMaliuewaFBywwuTvxlONguNJiHjVjLm+fvECnGoZMc XPTVYbKYGQbhkuxu0woG0ocAGtIhfU2wKrR8PiyNbpS/WwLvo4RVYi4/2x8AF/pv f8mDtfd6Eom8z4SJlZTJW9gW3zJnCGEpeZmsKjCnyj3F/FCCzlalqZFhbTAmI93I ZD8NEIeyoZ89x6jWl9dJ7wtIMZU82CYlNYMY8DtVUZQzlX/5RbacRKZ69wAkCCqK KhYm/61UK0AOZW4Ikl9WXigv/1FcIWaCFVTOaKuKOqq78IRiB/DSKQFEtymdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSHAPGFBO60mX6OWVxcg/EWrcXJEwHwYDVR0j BBgwFoAUQJScfJ3Q0/iZaB/y61PknI+FK6owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWRhZTk3Zi0xYWQxLTRiMzQtOGZlOS0xYmM2NWIwOTA4ZjMvMC80MDk0OUM3QzlE RDBEM0Y4OTk2ODFGRjJFQjUzRTQ5QzhGODUyQkFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDA5NDlDN0M5REQwRDNGODk5NjgxRkYyRUI1M0U0OUM4Rjg1 MkJBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODlkYWU5N2YtMWFkMS00YjM0LThm ZTktMWJjNjViMDkwOGYzLzAvNDA5NDlDN0M5REQwRDNGODk5NjgxRkYyRUI1M0U0 OUM4Rjg1MkJBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGCFF1Yp9f4NGMC93avZl7JeUYhoqAyxD2+M PzhWuQ94XsVRTZfTTSnKNbpmm9YLL1A85OXi994LCTwroHI9/ZG6uteQ9F2BTrLJ PMwLeyWMbjwTJAOFXzHrkdUypSv//ccmliPJIyijoFl681mbNxqQ6X74fqQattup OucSe4upcbwLGyM2fc2ENP8bHQUepbJaQ9QDs9d51RCcpD+hfA27OiWmdpBoAgtp oNdXkCRJtjcN1q8fqZdv6h6ErT+bk+pSaspvc34lbOFl+yvYMLFDqlMxmMxN1Jg5 ed/+7CmVqsbZtX8LOsYklse6O/zrYVGIHh0/eZOIFiioA+Rvp2s= -----END CERTIFICATE-----Generated at Thu Mar 26 13:52:59 2026 by rpki-client