$ rpki-client -vvf repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft File: 408585C1D62A4F618C0424E9BEDC3B91411C2276.mft (raw, json) Hash identifier: qY5Rd79ie87bgrBN8uz7iyH0dOp3fdaVY8Lg0IpoFRM= Subject key identifier: DE:B9:0B:37:D5:88:66:9E:DE:C8:AD:38:2F:16:CC:FB:DE:BE:83:D1 Authority key identifier: 40:85:85:C1:D6:2A:4F:61:8C:04:24:E9:BE:DC:3B:91:41:1C:22:76 Certificate issuer: /CN=408585C1D62A4F618C0424E9BEDC3B91411C2276 Certificate serial: 3F32BCE7E58BC3F27AFBEA30E0D94F14CFEA3085 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft Manifest number: 0270 Signing time: Wed 25 Mar 2026 21:52:20 +0000 Manifest this update: Wed 25 Mar 2026 21:47:20 +0000 Manifest next update: Sun 29 Mar 2026 07:02:20 +0000 Files and hashes: 1: 3130332e3132322e3132312e302f32342d3234203d3e20313338303836.roa (hash: 6JuDjem+v2RDSrt72WPISRVSPIrkM2UMhH/D+O2lhYE=) 2: 323030313a6466363a616630303a3a2f34382d3438203d3e20313338303836.roa (hash: pJzBSpecNdGxtRhriNjcTDwpDG6NNdRtxmQUp3nGEzE=) 3: 408585C1D62A4F618C0424E9BEDC3B91411C2276.crl (hash: 6NbMCk7dOp+V9lx35/+4RZModa5PiTCZdDCcAgxON4M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.crl rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 07:02:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:32:bc:e7:e5:8b:c3:f2:7a:fb:ea:30:e0:d9:4f:14:cf:ea:30:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408585C1D62A4F618C0424E9BEDC3B91411C2276 Validity Not Before: Mar 25 21:47:20 2026 GMT Not After : Mar 29 07:02:20 2026 GMT Subject: CN=DEB90B37D588669EDEC8AD382F16CCFBDEBE83D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:11:67:c6:20:56:eb:5e:54:42:dc:45:03:f0: 47:d1:35:a4:16:93:56:ef:90:5b:57:35:ac:2b:d1: 94:f4:aa:bb:ee:25:8a:9e:97:3a:a2:69:79:4b:56: b5:83:b2:4d:bd:dc:38:7a:9b:76:c1:46:1c:af:50: 92:b3:5d:60:94:c3:cf:89:f0:3a:91:1a:e7:71:05: 4c:92:4f:b5:3c:8a:47:47:c9:35:ed:76:d2:f5:42: cc:94:04:c1:83:bc:6a:96:ca:03:19:82:45:12:ee: 60:3b:50:0a:65:99:c8:45:91:67:57:8a:2d:58:bb: 74:d4:56:5b:64:38:20:c0:31:ed:fb:21:f1:50:51: d9:a3:ea:2a:b5:d5:76:d3:df:88:2a:9d:d0:8e:31: 78:8d:7c:21:cd:08:88:ef:43:c1:75:2d:0c:9f:40: f5:c2:0f:33:b4:56:8f:a3:78:df:58:fb:07:d6:dd: 71:80:ce:00:91:38:ce:df:32:04:93:a9:61:cf:2d: 3e:ff:73:46:48:39:a1:13:31:b8:12:ac:7a:bf:cc: c8:52:19:42:d7:29:88:3a:f7:f0:5f:0b:3d:cc:d1: 36:d0:ea:5a:04:e8:c3:26:fd:b2:cd:7b:04:84:4e: 10:b4:70:9a:a5:06:c0:6f:a9:52:d4:d8:d5:85:fa: 85:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:B9:0B:37:D5:88:66:9E:DE:C8:AD:38:2F:16:CC:FB:DE:BE:83:D1 X509v3 Authority Key Identifier: keyid:40:85:85:C1:D6:2A:4F:61:8C:04:24:E9:BE:DC:3B:91:41:1C:22:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:64:73:f2:a8:ec:3c:d7:e7:a9:c9:80:04:6d:0c:2e:e0:b6: 86:d4:50:d0:8b:e0:33:9d:28:1f:5f:08:2c:6a:c3:e1:57:86: 1d:6e:b2:ac:2a:cb:ba:05:4c:59:4e:e1:f6:78:17:69:45:69: 56:09:96:01:91:47:5a:5e:ed:de:46:f1:4c:f7:57:55:72:99: dd:b7:14:28:98:74:5e:38:d8:e3:b5:af:f9:af:49:49:d7:84: 19:24:76:93:ac:b7:8f:aa:9b:b1:ad:a5:18:2a:eb:d9:80:7a: 71:8c:6b:5c:0e:6a:e4:cf:79:75:31:9a:f0:10:8c:fb:e4:3b: 3d:97:8a:ba:6e:08:04:8e:b9:9e:13:91:c3:16:4c:d5:61:a0: e4:8e:ba:e6:a5:cb:75:4f:b0:6f:06:c4:f0:3f:93:e8:34:ec: d1:fa:63:b9:c7:3c:b3:e1:06:11:a4:12:f6:61:37:6d:e0:3b: 02:bc:88:a9:a8:9f:49:4e:3c:74:c4:02:dc:08:d0:88:20:92: d4:2c:a8:94:85:01:fa:0a:14:c8:d0:51:42:03:a7:a1:5f:1c: a0:15:14:3a:7e:ea:e3:37:c0:35:b0:02:13:2f:60:6a:0d:59: 3e:69:87:fe:cd:cd:af:a1:02:d3:e1:45:86:b8:22:c9:f5:d7: 9d:30:dc:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPzK85+WLw/J6++ow4NlPFM/qMIUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA4NTg1QzFENjJBNEY2MThDMDQyNEU5QkVEQzNCOTE0 MTFDMjI3NjAeFw0yNjAzMjUyMTQ3MjBaFw0yNjAzMjkwNzAyMjBaMDMxMTAvBgNV BAMTKERFQjkwQjM3RDU4ODY2OUVERUM4QUQzODJGMTZDQ0ZCREVCRTgzRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdEWfGIFbrXlRC3EUD8EfRNaQW k1bvkFtXNawr0ZT0qrvuJYqelzqiaXlLVrWDsk293Dh6m3bBRhyvUJKzXWCUw8+J 8DqRGudxBUyST7U8ikdHyTXtdtL1QsyUBMGDvGqWygMZgkUS7mA7UAplmchFkWdX ii1Yu3TUVltkOCDAMe37IfFQUdmj6iq11XbT34gqndCOMXiNfCHNCIjvQ8F1LQyf QPXCDzO0Vo+jeN9Y+wfW3XGAzgCROM7fMgSTqWHPLT7/c0ZIOaETMbgSrHq/zMhS GULXKYg69/BfCz3M0TbQ6loE6MMm/bLNewSEThC0cJqlBsBvqVLU2NWF+oXPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3rkLN9WIZp7eyK04LxbM+96+g9EwHwYDVR0j BBgwFoAUQIWFwdYqT2GMBCTpvtw7kUEcInYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i N2UyNmM4My01ZWQyLTRjOGItOGEwMy02Y2IwMGQxZWQzMzgvMC80MDg1ODVDMUQ2 MkE0RjYxOEMwNDI0RTlCRURDM0I5MTQxMUMyMjc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDA4NTg1QzFENjJBNEY2MThDMDQyNEU5QkVEQzNCOTE0MTFD MjI3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjdlMjZjODMtNWVkMi00YzhiLThh MDMtNmNiMDBkMWVkMzM4LzAvNDA4NTg1QzFENjJBNEY2MThDMDQyNEU5QkVEQzNC OTE0MTFDMjI3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK5kc/Ko7DzX56nJgARtDC7gtobUUNCL4DOd KB9fCCxqw+FXhh1usqwqy7oFTFlO4fZ4F2lFaVYJlgGRR1pe7d5G8Uz3V1Vymd23 FCiYdF442OO1r/mvSUnXhBkkdpOst4+qm7GtpRgq69mAenGMa1wOauTPeXUxmvAQ jPvkOz2XirpuCASOuZ4TkcMWTNVhoOSOuualy3VPsG8GxPA/k+g07NH6Y7nHPLPh BhGkEvZhN23gOwK8iKmon0lOPHTEAtwI0IggktQsqJSFAfoKFMjQUUIDp6FfHKAV FDp+6uM3wDWwAhMvYGoNWT5ph/7Nza+hAtPhRYa4Isn1150w3Gk= -----END CERTIFICATE-----Generated at Thu Mar 26 08:57:19 2026 by rpki-client